2025 Lake Region Healthcare — unauthorized access May 19; patient file notices (Jul 2026)
Data compromised
Names plus one or more of DOB, SSN, MRN, account number, health insurance, contact info, medical/treatment info, government ID, financial info — total headcount unpublished (AG notices cite 294 TX + 20 MA residents among affected)
Technical writeup
Verified rural health-system disclosure — HIPAA Journal coverage July 2026. Lake Region Healthcare (Fergus Falls, MN) identified unauthorized network access May 19, 2025, notified law enforcement, and investigated. No evidence of unauthorized access to electronic medical records was found, but files containing patient information may have been viewed or acquired on or around May 19, 2025. Data review completed June 5, 2026: names plus one or more of date of birth, SSN, medical record number, patient account number, health insurance, contact information, medical/treatment information, government-issued ID, and/or financial information. Complimentary identity-theft protection offered. Total scale unpublished; state AG notices cited 294 Texas and 20 Massachusetts residents among those affected. recordsAffected 0 pending a full attested headcount.
Root cause
Unauthorized network access identified May 19, 2025; files may have been viewed or acquired (EMR not evidenced as accessed)