On May 13, 2024, Singing River Health System (SRHS) filed a notice of data breach with the Attorney General of Maine after learning that an August 2023 data breach impacted the personal information of nearly four times as many people as originally thought. In this notice, SRHS explains that the incident resulted in an unauthorized party being able to access sensitive information belonging to 895,204 people, including their names, dates of birth, addresses, Social Security numbers, medical information, and health insurance information. Upon completing its investigation, SRHS began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Singing River Health System, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Singing River Health System data breach. For more information, please see our recent piece on the topic here.

What Caused the Singing River Health System Data Breach?

The Singing River Health System data breach was only recently announced, and more information is expected in the near future. However, SRHS’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, on August 19, 2023, SRHS learned that it was the victim of a “malicious and sophisticated ransomware attack.”

Upon learning about the cyberattack, SRHS secured its systems and then began working with third-party forensic experts to conduct an investigation. Through this investigation, SRHS confirmed that an unauthorized party was able to access portions of the company’s computer network between August 16, 2023 and August 18, 2023. It was also determined that the unauthorized party was able to access certain files containing confidential patient information.

After learning that sensitive consumer data was accessible to an unauthorized party, Singing River Health System reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, address, Social Security number, medical information, and health insurance information.

On May 13, 2024, Singing River Health System sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Singing River Health System

Founded in 1931, Singing River Health System is a healthcare system headquartered in Pascagoula, Mississippi. Singing River Health System is made up of three hospitals: Pascagoula Hospital, Ocean Springs Hospital, and Gulfport Hospital. In addition, Singing River operates dozens of primary care medical clinics, community medical parks, and specialty medical centers in Mississippi. Singing River is a wholly owned subsidiary of Singing River Gulfport. Singing River employs more than 2,200 people and generates approximately $367 million in annual revenue.