Tombigbee Healthcare Authority, operating as Whitfield Regional Hospital, disclosed a data breach that occurred between May 15, 2025, and June 8, 2025. The hospital detected unauthorized access to its network on June 8, 2025. Forensic review was completed on June 26, 2026, after which notifications were finalized and issued to affected individuals.
The breach involved personal and health information of an undisclosed number of patients. Specific categories of compromised data, such as Social Security Numbers or detailed medical records, were not itemized in the public notification. The hospital is offering credit monitoring to affected patients. While primarily affecting individuals in Alabama, notification was filed with the Massachusetts Attorney General’s Office, suggesting some affected patients reside in Massachusetts.
Details surrounding the exact number of individuals affected remain unknown. A class action lawsuit investigation has been initiated in connection with the incident, though court details and filing dates are not publicly available. This was a direct network intrusion and not a vendor-related breach.