2026 Singing River Health System — network hacking (Dec 2025; patient data copied)
Data compromised
Patient PHI including identifiers and clinical/financial data per notification summaries
Technical writeup
Singing River Health System, a Mississippi Gulf Coast nonprofit health system operating three hospitals and more than 50 clinics, began notifying patients in May 2026 about a hacking incident identified around December 21, 2025. Forensics confirmed unauthorized network access between December 19–21, 2025, and on February 10, 2026 the organization confirmed files containing patient information were viewed and potentially copied. A nationwide victim count had not been posted on the HHS OCR breach portal in early summaries. Data categories described in HIPAA Journal reporting align with typical PHI exposure (names, contact information, SSNs, driver’s licenses, DOB, banking, and medical information depending on the individual).
Root cause
Hacking / unauthorized network access