Sandhills Medical Foundation, Inc., also known as Sandhills Medical, a federally qualified health center based in Mcbee, South Carolina, experienced a data breach in May 2025. The breach was the result of an external system compromise, specifically a ransomware attack by the Inc Ransom ransomware group. The company discovered the breach on May 8, 2025, and public announcements of the incident were made around May 3-4, 2026, with individual notifications beginning on or around April 28, 2026.
The breach affected approximately 169,017 individuals. The compromised data types include names, Social Security Numbers (SSN), Individual Taxpayer Identification Numbers (ITIN), dates of birth, driver's license numbers, government-issued identification numbers, passport information, financial information, and personal health information (PHI). The Maine Attorney General's Office was notified, indicating affected residents in that state, and the company is based in South Carolina. The extent of impact in other states is currently unclear. There is no evidence confirming that the company is publicly traded, nor is there information about its estimated revenue.
Details about data breaches can emerge over time, and notification processes may be delayed.