<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Almost one year after discovery, Sandhills Medical Foundation notifies 169,017 people affected by a cyberattack]]></title><description><![CDATA[<p>Almost one year after discovery, Sandhills Medical Foundation notifies 169,017 people affected by a cyberattack</p><p>This was an attack by INC Ransom, who dumped the data in June 2025.  INC didn't tag it as an encryption invcident -- just as hack, exfil, ransom demand.  So I'm not sure why it took Sandhills about a year to make notifications </p><p><a href="https://databreaches.net/2026/04/29/almost-one-year-after-discovery-sandhills-medical-foundation-notifies-169017-people-affected-by-a-cyberattack/" rel="nofollow noopener"><span>https://</span><span>databreaches.net/2026/04/29/al</span><span>most-one-year-after-discovery-sandhills-medical-foundation-notifies-169017-people-affected-by-a-cyberattack/</span></a></p><p><a href="https://infosec.exchange/tags/databreach" rel="tag">#<span>databreach</span></a> <a href="https://infosec.exchange/tags/HIPAA" rel="tag">#<span>HIPAA</span></a> <a href="https://infosec.exchange/tags/incidentresponse" rel="tag">#<span>incidentresponse</span></a> <a href="https://infosec.exchange/tags/INCransom" rel="tag">#<span>INCransom</span></a> <a href="https://infosec.exchange/tags/healthsec" rel="tag">#<span>healthsec</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/76e1fb08-a262-4445-9851-de80f30ea50d/almost-one-year-after-discovery-sandhills-medical-foundation-notifies-169-017-people-affected-by-a-cyberattack</link><generator>RSS for Node</generator><lastBuildDate>Fri, 15 May 2026 02:10:52 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/76e1fb08-a262-4445-9851-de80f30ea50d.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 29 Apr 2026 16:23:25 GMT</pubDate><ttl>60</ttl></channel></rss>