Cumberland County Hospital Data Breach Investigation

Strauss Borrelli PLLC, a leading data breach law firm, is investigating Cumberland County Hospital Association, Inc., which does business as Cumberland County Hospital (“CCH”), regarding its recent data breach. The CCH data breach involved sensitive personal information and protected health information belonging to over 36,000 individuals.

ABOUT CUMBERLAND COUNTY HOSPITAL ASSOCIATION, INC. D/B/A CUMBERLAND COUNTY HOSPITAL:

CCH is a 25-bed, not-for-profit, critical access hospital based in Kentucky.3 Today, CCH provides a variety of inpatient, outpatient, in-home, and emergency healthcare services to area residents.3 These services include family and internal medicine, orthopedics, pulmonary medicine, radiology and diagnostic services, chronic care management, occupational therapy, and more.3 Located in Burkesville, Kentucky, CCH employs over 150 full-time and part-time staff members.3

WHAT HAPPENED?

Recently, CCH announced that the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on April 3, 2025, CCH discovered unauthorized access by a third party to its computer system.1 As a result, CCH launched an investigation to determine the nature of the incident.

Through its investigation, CCH confirmed that sensitive personal information in its systems belonging to patients and employees may have been accessed by an unauthorized third party between February 21, 2025, and April 3, 2025. As a result, CCH began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

  • Name
  • Social Security number
  • Address
  • Date of birth
  • Contact information (e.g., phone number, email address)
  • Driver’s license number
  • Medical information (e.g., medications, diagnoses, treatment notes, date of service, medical record number)
  • Health insurance information (e.g., health plan number, claims and billing information)
  • Birth certificate
  • Background check information
  • W-4s and W-2s
  • Bank account numbers

 

As a result of the data breach, CCH posted a notice of the incident on its website. Additionally, on June 2, 2025, CCH began sending breach notification letters to impacted individuals. Based on the website breach notice, CCH is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification that CCH posted to its website is below.

If you received a breach notification letter from Cumberland County Hospital Association, Inc. d/b/a Cumberland County Hospital:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.

Contact Us

Learn about your legal rights

Please enable JavaScript in your browser to complete this form.
Name
Terms & Conditions and Privacy Policy

What can you do if you were impacted by a data breach?

If you were impacted by a data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by the company;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Contact Us Now

Please enable JavaScript in your browser to complete this form.
Name
Terms & Conditions and Privacy Policy

What can you do if you were impacted by a data breach?

If you were impacted by a data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by the company;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

One Magnificent Mile
980 N Michigan Avenue, Suite 1610
Chicago, Illinois 60611

Phone: 872.263.1100
Toll Free: 866.748.6220

One Magnificent Mile
980 N Michigan Avenue, Suite 1610
Chicago, Illinois 60611

Phone: 872.263.1100
Toll Free: 866.748.6220

©2025 STRAUSS BORRELLI PLLC. ALL RIGHTS RESERVED. ATTORNEY ADVERTISING.
PRIVACY POLICY  |  TERMS & CONDITIONS  |  COOKIE POLICY

©2025 STRAUSS BORRELLI PLLC. ALL RIGHTS RESERVED. ATTORNEY ADVERTISING.

PRIVACY POLICY  |  TERMS & CONDITIONS  |  COOKIE POLICY