Kentucky Mountain Health Alliance Data Breach Exposes Sensitive Patient Information
Kentucky Mountain Health Alliance (KMHA), a nonprofit healthcare provider based in Hazard, Kentucky, has reported a data breach that compromised sensitive personal information. The incident was disclosed to the Massachusetts Attorney General on June 19, 2026, though details on the exact timeline of the breach remain undisclosed.
KMHA operates the Little Flower Clinic and manages the Perry County Health Care for the Homeless program, offering services including primary care, behavioral health, dental care, and substance use treatment. The exposed data includes driver’s licenses, medical records, and Social Security numbers, putting affected individuals at risk of identity theft and fraud.
Class action law firm Shamis & Gentile P.A. is investigating the breach and pursuing legal action on behalf of impacted patients. Those whose information was exposed may be eligible for compensation. The full scope of the breach, including the number of affected individuals, has not yet been publicly confirmed.
Source: https://www.claimdepot.com/investigations/kentucky-mountain-health-alliance-data-breach-2026
Perry County Memorial Hospital cybersecurity rating report: https://www.rankiteo.com/company/perry-county-memorial-hospital
Kentucky Primary Care Association cybersecurity rating report: https://www.rankiteo.com/company/ky-pca
"id": "PERKY-1782153831",
"linkid": "perry-county-memorial-hospital, ky-pca",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Hazard, Kentucky, USA',
'name': 'Kentucky Mountain Health Alliance (KMHA)',
'type': 'Nonprofit Healthcare Provider'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Driver’s licenses',
'Medical records',
'Social Security numbers']},
'date_publicly_disclosed': '2026-06-19',
'description': 'Kentucky Mountain Health Alliance (KMHA), a nonprofit '
'healthcare provider based in Hazard, Kentucky, has reported a '
'data breach that compromised sensitive personal information, '
'including driver’s licenses, medical records, and Social '
'Security numbers. The breach puts affected individuals at '
'risk of identity theft and fraud.',
'impact': {'data_compromised': 'Sensitive personal information, including '
'driver’s licenses, medical records, and '
'Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal action by affected '
'individuals'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Massachusetts Attorney General'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.',
'regulatory_notifications': 'Disclosed to the '
'Massachusetts Attorney '
'General'},
'response': {'third_party_assistance': 'Shamis & Gentile P.A. (class action '
'law firm investigating the breach)'},
'title': 'Kentucky Mountain Health Alliance Data Breach Exposes Sensitive '
'Patient Information',
'type': 'Data Breach'}