Broad River Physicians Group, a South Carolina-based healthcare organization specializing in emergency medicine, suffered a data breach discovered on May 22, 2025. An unauthorized actor accessed its IT systems between May 22–23, 2025, compromising files containing personally identifiable information (PII) and protected health information (PHI). The exposed data included names, dates of birth, addresses, diagnosis/treatment details, provider names, service dates, and health insurance information. The breach was confirmed after a review concluded on September 11, 2025, with notifications sent to affected individuals (estimated in the thousands) starting September 18, 2025. The exposure of PII + PHI heightens risks of identity theft, insurance fraud, and financial exploitation. While the exact number of victims remains undisclosed, the incident underscores vulnerabilities in healthcare cybersecurity, particularly in safeguarding sensitive patient records. Broad River initiated an internal investigation, secured its systems, and complied with regulatory disclosure requirements, advising impacted individuals on protective measures against potential misuse of their data.