Singing River Health System: Singing River Data Breach Exposes PHI and PII

Singing River Health System Suffers Data Breach Exposing Patient PII and PHI

Singing River Health System, a Mississippi-based healthcare provider operating hospitals, clinics, and specialty centers, disclosed a data breach affecting patient information. The organization began notifying impacted individuals on May 19, 2026, following unauthorized access to its network between December 19 and 21, 2025.

An investigation revealed that the intruder accessed files containing sensitive data, including personally identifiable information (PII) such as names, Social Security numbers, driver’s license details, dates of birth, and bank account information as well as protected health information (PHI), including health insurance details, provider names, treatment records, and medication data. The total number of affected patients remains undisclosed.

In response, Singing River Health System initiated direct notifications to impacted individuals and advised them to monitor healthcare and insurance statements for suspicious activity. A dedicated incident response line (844-953-3015) was established for affected patients, operating Monday through Friday (8 a.m.–11 p.m. ET) and Saturday (9 a.m.–6 p.m. ET).

Source: https://www.claimdepot.com/data-breach/singing-river-health-system-2026

Singing River Health System cybersecurity rating report: https://www.rankiteo.com/company/singingriverhealthsystem

"id": "SIN1779316156",
"linkid": "singingriverhealthsystem",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Mississippi, USA',
                        'name': 'Singing River Health System',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Monitor healthcare and insurance statements for '
                        'suspicious activity; contact dedicated incident '
                        'response line for assistance.',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers',
                                                         'Driver’s license '
                                                         'details',
                                                         'Dates of birth',
                                                         'Bank account '
                                                         'information',
                                                         'Health insurance '
                                                         'details',
                                                         'Provider names',
                                                         'Treatment records',
                                                         'Medication data'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2025-12-21',
 'date_publicly_disclosed': '2026-05-19',
 'description': 'Singing River Health System, a Mississippi-based healthcare '
                'provider, disclosed a data breach affecting patient '
                'information after unauthorized access to its network. The '
                'breach exposed personally identifiable information (PII) and '
                'protected health information (PHI).',
 'impact': {'data_compromised': 'PII and PHI',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Singing River Health System Data Breach '
                           'Notification'}],
 'regulatory_compliance': {'regulations_violated': ['HIPAA']},
 'response': {'communication_strategy': 'Direct notifications to impacted '
                                        'individuals; dedicated incident '
                                        'response line established'},
 'title': 'Singing River Health System Data Breach',
 'type': 'Data Breach'}