2026 Southcoast Health — compromise of single user email account; PHI/SSNs possible
Data compromised
Potential names, Social Security numbers, and related sensitive personal data referenced in HIPAA Journal coverage
Technical writeup
The HIPAA Journal reported that Southcoast Health System blocked unauthorized activity in one user mailbox on February 16, 2026, detected the same day, and warned that names and Social Security numbers might have been viewed or stolen, offering complementary credit monitoring. Public reporting in early May 2026 did not yet publish a denominator of affected residents.
Root cause
Unauthorized access to hosted email/account context for a networked user