ENKR

University of Mississippi Medical Center possible patient data breach

Add to my breach check

Made public · 912,898 people

What leaked9

Hard to replace

  • Driver's licence number
  • Health insurance or Medicare number
  • ID document number
  • Bank account number
  • Home or delivery address

Permanent

  • Health information
  • Social Security number
  • Date of birth
  • Full name
  • Health informationmedical information
  • Health insurance or Medicare numberhealth insurance information
  • ID document numbergovernment-issued ID number such as a passport or state ID card
  • Bank account numberfinancial information such as an account, credit or debit card number · the filing does not say which

To-dos7 · about 2 h in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name · Limits harm from: applications with your ID (opens in a new tab)
  2. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name, applications with your ID (opens in a new tab)
  3. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name, applications with your ID (opens in a new tab)
  4. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  5. Turn on instant transaction alertsabout 5 minHelps you notice: bank account fraud
  6. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)
  7. Check your health insurance statements for care you did not getabout 15 minHelps you notice: medical care in your name (opens in a new tab)

What happened next9 events

  1. Undetected 2 events8 days · show events
  2. Response 6 eventsNo individual notice on record · show events
  3. Remedy 1 eventOngoing · show events
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Breach report published by the Texas attorney general: 912,898 people in total; notice by mail, website and media
  2. Said in the letter that it has no evidence the information was used for financial fraud or identity theft · by the date of the California filing
  3. Offered free Kroll identity monitoring · by the date of the California filing
  4. Breach notice filed with the California attorney general
  5. Investigation found that files with personal or health information may have been in the data accessed between 11 and 19 February 2026
4 more
  1. Cancelled outpatient surgeries, procedures and imaging appointments; clinics statewide closed
  2. Confirmed a cyberattack; many IT systems, including electronic medical records, were down
  3. Became aware of unauthorized access to its computer network
  4. Intrusion began
Company
University of Mississippi Medical Center
When it happened
–
Company detected it
Made public
Notice
Possible leak
Affected
912,898 people · total in UMMC's filing with the Texas attorney general; possible leak

Sources