Singing River Health System Suffers Data Breach Exposing Patient PII and PHI Singing River Health System, a Mississippi-based healthcare provider operating hospitals, clinics, and specialty centers, disclosed a data breach affecting patient information. The organization began notifying impacted individuals on May 19, 2026, following unauthorized access to its network between December 19 and 21, 2025. An investigation revealed that the intruder accessed files containing sensitive data, including personally identifiable information (PII) such as names, Social Security numbers, driver’s license details, dates of birth, and bank account information as well as protected health information (PHI), including health insurance details, provider names, treatment records, and medication data. The total number of affected patients remains undisclosed. In response, Singing River Health System initiated direct notifications to impacted individuals and advised them to monitor healthcare and insurance statements for suspicious activity. A dedicated incident response line (844-953-3015) was established for affected patients, operating Monday through Friday (8 a.m.–11 p.m. ET) and Saturday (9 a.m.–6 p.m. ET).

Singing River Health System experienced a significant data breach affecting 895,204 individuals, with a subsequent update indicating the number impacted was 252,890. This breach was part of a ransomware attack by the Rhysida group, which disrupted hospital systems and leaked a large volume of data. In response, SRHS offered credit monitoring and identity restoration services to those affected. Additionally, Change Healthcare, a payment processor for SRHS, experienced a cyberattack leading to severed ties with SRHS, causing further payment processing issues for the health system.

The Vermont Office of the Attorney General reported on January 12, 2024, that Singing River Health System experienced a ransomware attack on August 19, 2023. The attack potentially impacted personal information including names, dates of birth, addresses, Social Security numbers, medical information, and health information. The number of affected individuals is unknown, and no misuse of the data has been reported.

The SRHS suffered a data breach and ransomware attack in 2023, affecting 895,204 individuals. Initially reported in September and updated in December, the breach's impact was significant as personal information of patients was likely compromised. Rhysida ransomware group disrupted hospital systems and released a substantial amount of sensitive data online. Additionally, SRHS faced payment processing issues due to the cyberattack on Change Healthcare, which directly impacted their operations and services.