Ascent Skilled Nursing Facilities Assure Breach Victims of “Credible Evidence” Stolen Data Was Deleted

Three affiliated North Carolina healthcare facilities reported that a threat actor accessed a trusted vendor’s systems in late November 2025 and acquired files containing residents’ personal and health information (including names, DOBs, addresses, driver’s licenses, SSNs, account numbers, and health data). The notifications, published in July, do not identify the vendor(s), provide limited detail about the attacker, and assert—without public technical evidence—that the stolen data were permanently deleted, raising questions about notification delay, vendor relationships, and the credibility of deletion claims.