Strauss Borrelli PLLC, a leading data breach law firm, is investigating Cumberland County Hospital Association, Inc., which does business as Cumberland County Hospital (“CCH”), regarding its recent data breach. The CCH data breach involved sensitive personal information and protected health information belonging to over 36,000 individuals.
ABOUT CUMBERLAND COUNTY HOSPITAL ASSOCIATION, INC. D/B/A CUMBERLAND COUNTY HOSPITAL:
CCH is a 25-bed, not-for-profit, critical access hospital based in Kentucky.3 Today, CCH provides a variety of inpatient, outpatient, in-home, and emergency healthcare services to area residents.3 These services include family and internal medicine, orthopedics, pulmonary medicine, radiology and diagnostic services, chronic care management, occupational therapy, and more.3 Located in Burkesville, Kentucky, CCH employs over 150 full-time and part-time staff members.3
WHAT HAPPENED?
Recently, CCH announced that the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on April 3, 2025, CCH discovered unauthorized access by a third party to its computer system.1 As a result, CCH launched an investigation to determine the nature of the incident.
Through its investigation, CCH confirmed that sensitive personal information in its systems belonging to patients and employees may have been accessed by an unauthorized third party between February 21, 2025, and April 3, 2025. As a result, CCH began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Contact information (e.g., phone number, email address)
- Driver’s license number
- Medical information (e.g., medications, diagnoses, treatment notes, date of service, medical record number)
- Health insurance information (e.g., health plan number, claims and billing information)
- Birth certificate
- Background check information
- W-4s and W-2s
- Bank account numbers
As a result of the data breach, CCH posted a notice of the incident on its website. Additionally, on June 2, 2025, CCH began sending breach notification letters to impacted individuals. Based on the website breach notice, CCH is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification that CCH posted to its website is below.
If you received a breach notification letter from Cumberland County Hospital Association, Inc. d/b/a Cumberland County Hospital:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
