Almost one year after discovery, Sandhills Medical Foundation notifies 169,017 people affected by a cyberattack

**Sandhills Medical Foundation** experienced a ransomware-related data breach beginning May 2, 2025; INC Ransom claimed responsibility and posted proof and then a full data tranche (PII and PHI) in June 2025, while Sandhills did not notify affected individuals (approximately 169,017 people) until April 28, 2026, raising questions about the delayed notification and whether the incident involved encryption or only data exfiltration; compromised data types reportedly include dates of birth, Social Security numbers, government IDs, financial information, and personal health information.