Sandhills Medical Foundation Data Breach

On May 2, 2025, Sandhills Medical Foundation, Inc. fell victim to a ransomware attack, compromising the personal information of 169,017 individuals. The breach, which was discovered on May 8, 2025, exposed certain sensitive personal health information. This article provides key details about the breach, what steps you can take to protect yourself, and how to explore your legal options through a class action lawsuit.

Sandhills Medical’s Data Breach Investigation

The breach was discovered on May 8, 2025, when Sandhills Medical became aware of a ransomware attack that had targeted its systems. The attack resulted in the unauthorized access of personal data, affecting individuals whose information was stored on Sandhills’ network.

Immediately upon discovery, Sandhills initiated an investigation with the help of cybersecurity experts, law enforcement, and an independent forensic firm. It wasn’t until the forensic review was completed that the full scope of the breach was understood. The investigation revealed that an unauthorized third party had gained access to Sandhills’ servers, obtaining personal information of select patients.

While no evidence of misuse has been found, Sandhills Medical is taking the situation very seriously and is actively working to notify impacted individuals. They have also implemented new security measures and protocols to prevent future attacks. Additionally, Sandhills is offering credit monitoring and fraud assistance to those affected by the breach.

The data affected by the breach varied by individual, and in some cases, it included personal health information as well as dates of birth.

When Did This Breach Occur?

The ransomware attack occurred on May 2, 2025, and was discovered six days later on May 8, 2025. This breach highlights the risks associated with cybersecurity threats, particularly in the healthcare sector, where sensitive patient data is often targeted.

What Information Was Breached?

The breached data varied by individual, but may have included:

• Personal health information
• Dates of birth

While Sandhills Medical has not found any evidence that the exposed data was misused, they are taking proactive steps to ensure individuals are informed and can take the necessary precautions.

What You Can Do

If you believe you were affected by the breach, here are the steps you should take to protect yourself:

• Enroll in credit monitoring services: Sandhills is offering complimentary access to credit monitoring for 12 months. Make sure to sign up to receive alerts about any changes to your credit file, including potential fraud.
• Monitor your credit: Regularly check your credit reports for any suspicious activity. You can request a free report annually from each of the three major credit reporting agencies.
• Take advantage of fraud assistance services: Sandhills is providing proactive fraud assistance via Cyberscout, a TransUnion company, to help if you become a victim of fraud.
• Place a fraud alert or credit freeze: Consider placing a fraud alert or credit freeze on your credit report to prevent new accounts from being opened in your name without your consent.

By taking these steps, you can better protect your information and minimize the risk of identity theft or fraud.

File a Data Breach Lawsuit Against Sandhills Medical

If you have received a notification or believe your personal information was compromised in this data breach, you may be eligible for compensation. At Class Action U, we can help connect you with an attorney who specializes in data breach lawsuits.

Don’t let this breach go unaddressed—contact us today for a free consultation to explore your legal options. Whether you are eligible for a class action lawsuit or other forms of compensation, we are here to help you take action and protect your rights.