7 August 2026: Liberty Healthcare Group, the North Carolina skilled-nursing and senior-living operator, found suspicious activity, isolated systems and confirmed unauthorised access. HHS currently lists 501 people, a portal floor while file review runs. See the Liberty Healthcare Group breach record.
HIPAA Journal on 13 November is the narrative source. Facilities in North Carolina, South Carolina, Virginia, Tennessee, Louisiana and Florida. Distinct from Liberty Healthcare Corporation, which has a separate unverified Storm leak-site row.
What happened at Liberty Healthcare Group?
Suspicious activity 7 August, systems isolated, third-party forensics retained. Unauthorised access confirmed. Number of affected people not finished at the 13 November report. Letters when the review completes. HHS 9 October lists 501.
501 on the HHS portal is often a placeholder until the covered entity finishes its count. Catalog it as a floor, not a finished census. Expect the number to move.
What data was exposed?
Likely full names, addresses, dates of birth, medical information and health insurance. Mix unpublished until letters go out. recordsAffected is 501 as the current HHS floor.
SNF files routinely include highly sensitive PHI. Freeze credit if a later letter lists an SSN, even if SSN is not in the 13 November summary.
The El Camino Health post is a finished 2026 health notice with SSNs. This Liberty row is still in review.
Who is affected?
Residents, patients and possibly staff at Liberty Healthcare Group communities, pending the review. Six-state footprint. People at Liberty Healthcare Corporation behavioural-health sites are a different company.
More on the operator is on the Liberty Healthcare Group company page.
What should families do?
- Wait for the letter. The company said notices go out when the review finishes.
- Ask the community administrator in writing whether a named resident is in the reached systems.
- Place a freeze if a later letter lists an SSN.
- Watch for fake 'Liberty records restore' portals.
- Do not confuse this with Liberty Mutual or Liberty Healthcare Corporation.
A 501-person HHS line is not a reason to assume a small incident. It is a reason to wait for the finished count.
Is this the Storm listing?
No. Storm listed Liberty Healthcare Corporation, a behavioural-health provider. That row stays unverified. This row is Liberty Healthcare Group, company-confirmed access, HHS 501 floor.
Similar names are a phishing gift. Read the state and the facility type on any letter.
Frequently asked questions
How many people were affected?
HHS lists 501 as of 9 October 2026. HIPAA Journal says the total will be updated when file review finishes. Treat 501 as a floor.
When was it found?
7 August 2026.
Which company?
Liberty Healthcare Group, NC skilled nursing and senior living. Not Liberty Healthcare Corporation.
Were Social Security numbers involved?
Not named in the 13 November summary. Medical information and insurance are.
When do letters go out?
When the data review is completed, according to HIPAA Journal.
Sourcing note: HIPAA Journal 13 November 2026, HHS OCR 9 October 501-person listing.
Do not download alleged Liberty Healthcare Group dumps. This catalog does not link them. A later leak-site post is still an unverified brand until Liberty Healthcare Group names it.
Compare later mail with libertyhealthcare.com. Liberty Healthcare Group will not ask for a card CVV or a one-time code through a new website to finish this investigation.
Do not merge this row with Liberty Healthcare Corporation or Liberty Mutual. They are separate catalog files even when they share a season or a vendor class.
If you did not receive a letter, you may still be in an unpublished state filing. Ask Liberty Healthcare Group in writing whether your identifier sits in the reached file.
US residents can place a free credit freeze at Equifax, Experian and TransUnion. Use the local freeze or watch process named in the notice if you live elsewhere.
Keep the paper letter if one arrives. A later amendment can add fields or a higher census. This catalog will move recordsAffected only when a named official source publishes a new figure. Do not treat a class-action advertisement as a census.
If two organisations share a similar name, read the company page before you enrol in monitoring. Wrong-firm sign-up pages are a common follow-on scam after a widely reported notice.
People who already froze credit last year should still read the new letter, because the field mix may differ this time. A freeze stays in place until you lift it.