Sandhills Medical Discloses Ransomware Breach Affecting Nearly 170,000
Summary
Sandhills Medical says it discovered a ransomware attack in May 2025 and disclosed that nearly 170,000 people were affected. Information included government IDs, financial details and personal health information.
Key points
- Sandhills Medical Foundation said it discovered the ransomware attack on May 8, 2025, and later notified affected individuals.
- The organization told the Maine Attorney General’s Office that nearly 170,000 people were affected.
- Sandhills said hackers obtained personal information, including names, dates of birth, Social Security numbers, identification documents, financial information and health information.
- The Inc Ransom group listed Sandhills Medical on its leak site in early June 2025 and later made files allegedly stolen from the organization available for download.
Article Details
- Victim Organization
- Sandhills Medical Foundation
- Incident Type
- Ransomware attack and data breach
- Incident Date
- 2025-05-08
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers
- Taxpayer Identification Numbers
- Driver's licenses
- Government-issued identification
- Passports
- Financial information
- Personal health information
- Affected Records
- Nearly 170,000 individuals
- Ransom Or Extortion
- Inc Ransom listed Sandhills Medical on its leak website in early June 2025 and later made files allegedly stolen from the organization available for download. The source does not report whether a ransom was demanded or paid.
- Claim Status
- confirmed