Cumberland County Hospital repports data breach exposing patient and employee data
Learn More
Cumberland County Hospital, a general hospital located in Burkesville, Kentucky, is reporting a data security incident that may have compromised the personal information of an undisclosed number of patients and current and former employees.
The incident involved unauthorized access to the hospital's computer system files containing personally identifiable information and health information. The hospital claims that the electronic medical records system the hospital and its partners use to record and bill for patient care was not involved in the breach.
The exposed data includes:
Patient Data:
- Names and dates of birth
- Home addresses and phone numbers
- Email addresses
- Race or ethnicity information
- Social Security numbers
- Medical information including medications and diagnoses
- Treatment notes and dates of service
- Other unspecified personal information
Employee Data (Current and Former):
- All patient data categories listed above
- Tax forms and tax-related information
- Banking information and financial details
- Additional personal information related to employment
The nature of the attack and number of affected individuals is not disclosed.
Update - as of 8th of June 2025, the incident has affected 36,659 individuals.
The hospital has advised anyone treated at or employed by the facility to follow recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or security freeze on a credit file.
For individuals seeking more information about the breach or believing their personal data might be affected, Cumberland County Hospital has established a dedicated helpline at 866-461-3127.
