Dillon Family Medicine Data Breach Exposes Patient Information in South Carolina Dillon Family Medicine, a McLeod Health-affiliated medical practice in Dillon, South Carolina, disclosed a data breach involving unauthorized access to a server containing sensitive patient information. The incident occurred between October 17 and 18, 2025, when an unauthorized party infiltrated a server that was in the process of being decommissioned. The breach went undetected for nearly five months until April 14, 2026, when a suspicious file was discovered during the server’s decommissioning. An investigation confirmed the unauthorized access had taken place during the October 2025 window. McLeod Health stated the intrusion was isolated to the single server and did not affect other systems within its network. On April 25, 2026, the ransomware group Qilin claimed responsibility for the attack, posting on the dark web that it had exfiltrated the organization’s data. The exposed information may include personally identifiable details such as names, dates of birth, and Social Security numbers, as well as protected health information like diagnoses, medications, test results, imaging, health insurance details, and treatment records. McLeod Health began notifying affected patients on June 4, 2026, via mailed letters and a public notice on its website. The organization also set up a dedicated call center (888-504-8534) for patients seeking further information, available Monday through Friday from 9 a.m. to 9 p.m. ET, excluding major U.S. holidays. The total number of individuals impacted remains undisclosed.

McLeod Health said that they have handled a security incident involving emails that may have involved some of that information. The contents of an email account that was accessed by an uninvited actor are currently being examined by McLeod. The contents of the email account were automatically downloaded by the unauthorised actor, according to a thorough forensic assessment of the email environment. In order to help prevent a repeat of the occurrence, they also claimed to have protected the account and changed the account settings throughout their workplace. Additionally, they advised patients to routinely review the invoices they get from their medical professionals. We advise them to contact the provider right away if they notice any services they did not obtain.