Cumberland County Hospital Data Breach
Last Updated on September 26, 2025
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the Cumberland County Hospital data breach as they investigate whether a class action lawsuit can be filed.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.
Cumberland County Hospital Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Cumberland County Hospital data breach.
As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.
Cumberland County Hospital Security Incident: What Happened?
Cumberland County Hospital, a 25-bed critical access hospital in Burkesville, Kentucky, has confirmed a significant data breach affecting the personal information of patients and employees. The hospital discovered on April 3, 2025 that a third party had gained unauthorized access to its computer systems. Access reportedly began on February 21, 2025 and ended on April 3, 2025. In response, Cumberland County Hospital shut down its systems, contacted law enforcement, and engaged cybersecurity experts to help investigate.
The Cumberland County Hospital data breach did not involve the hospital's electronic medical records system for patient care and billing. However, other files containing sensitive data were accessed, potentially compromising personally identifiable information, including names, dates of birth, addresses, phone numbers, email addresses, race or ethnicity, Social Security numbers, medications, diagnoses, treatment notes, dates of service, medical record numbers, health plan numbers, and claims and billing information. For current and former employees, additional data such as driver's licenses, birth certificates, background check details, W-4s, W-2s, and bank account numbers may have been affected.
Approximately 36,659 individuals may have been impacted by the incident, which involved approximately 700 GB of files.
Notifications were mailed on June 2, 2025 to individuals whose information was possibly exposed. Due to incomplete address information, the hospital also shared a public notice on its website.
What You Can Do
If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force Cumberland County Hospital to ensure it takes proper steps to protect the information it was entrusted with.
Cumberland County Hospital Data Breach Notice
Published: June 4, 2025
Before commenting, please review our comment policy.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
