Loading story…
Nacogdoches Memorial Hospital, an independent health system in Texas, disclosed a cyberattack that exposed sensitive information belonging to 257,073 individuals. The hospital said staff identified an ongoing intrusion on January 31, while a filing to Maine indicated the incident date was January 15, creating some uncertainty around the precise timeline of the breach.
The compromised data may include names, contact information, Social Security numbers, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and in some cases full-face photographs. Reporting indicated the incident had not yet appeared on the U.S. Department of Health and Human Services public breach portal at the time of disclosure, and it remained unclear whether the total affected population included only patients or also employees.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Nacogdoches Memorial Hospital publicly disclosed a data breach affecting 257,073 individuals. Reporting said the total may include patients and possibly employees, though the incident had not yet appeared on the U.S. Department of Health and Human Services public breach tool at the time of coverage.
Nacogdoches Memorial Hospital said staff became aware of an ongoing cyberattack on 2026-01-31. The discovery indicated the attack was active at that time and prompted the hospital's response.
A notification filed with Maine indicates the data breach incident at Nacogdoches Memorial Hospital occurred on 2026-01-15. The exposure potentially involved names, contact details, Social Security numbers, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and possibly full-face photographs.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Nacogdoches Memorial Hospital in Texas disclosed that a January cyberattack exposed the personal and medical information of **257,073 patients** after attackers gained access to its network on **January 15** and remained undetected for roughly two weeks. Public reporting and breach notification materials indicate the stolen data included names, Social Security numbers, medical record numbers, health insurance and health plan beneficiary details, and other sensitive healthcare information; the hospital also said patient photos may have been affected. The regional medical center said it has not identified misuse of the stolen data so far, but the scale and sensitivity of the breach make it a significant healthcare privacy incident. In response, the hospital said it implemented additional network security measures and security awareness training, while reports noted it did **not** offer complimentary credit monitoring to affected individuals and did not provide further detail on the intrusion or whether employee and support staff data was also compromised.
Jun 29, 2026
**Central Maine Healthcare (CMH)** disclosed a data breach that exposed sensitive information for **145,381 individuals**, including patients and current/former employees. Attackers maintained unauthorized access to CMH systems for more than two months, from **March 19 to June 1** (discovered June 1), affecting an integrated healthcare delivery system serving roughly **400,000** people and operating facilities including **Central Maine Medical Center**, Bridgton Hospital, and Rumford Hospital. CMH reported that exposed data varied by individual but could include **full names, dates of birth, treatment information, dates of service, provider names, health insurance information, and Social Security numbers**. CMH’s investigation and impact analysis concluded on **November 6, 2025**, and the organization has been notifying affected individuals on a rolling basis while offering **free credit monitoring** and establishing a dedicated support line; CMH also warned of elevated risk of **phishing, impersonation, and fraud**, advising patients to review provider and insurance statements for suspicious activity.
Jun 29, 2026
Multiple healthcare organizations disclosed **data security incidents** involving potential exposure of patient and personal information. Jackson Hospital and Clinic (Montgomery, Alabama) notified **14,485** individuals about a breach at its former debt-collection vendor **Nationwide Recovery Services**, where suspicious activity was identified in July 2024 and an unauthorized party accessed the vendor’s network between **July 5–15, 2024**. Jackson Hospital stated its own IT systems were not affected, but data shared for collections work may have been compromised, including **names, contact details, dates of birth, Social Security numbers, account/insurance information, and dates of service**; affected individuals were offered credit monitoring and identity theft protection. Separately, **Community Health Action of Staten Island** reported a data security incident that may have involved unauthorized access to sensitive personal and medical information, and **Insight Hospital and Medical Center** (Chicago) reported a cyber incident involving unauthorized access to its network between **Aug. 22 and Sept. 11, 2025**, with potential exposure of patient and financial data. The disclosures underscore ongoing third-party and direct-network intrusion risks in the healthcare sector, with notification timing and scope varying by organization and investigation status.
Jun 29, 2026