McLeod Health Data Breach Exposes 16K Patients' Personal and Health Information

McLeod Health reported a data breach affecting 16,788 patients from its Dillon Family Medicine location. The breach involved unauthorized access to a decommissioned server between October 17 and October 18, 2025, which went undetected until March 5, 2026. A ransomware group, Qilin, claimed responsibility for the attack on April 25, 2026. The compromised data includes names, dates of birth, Social Security numbers, and health-related information such as diagnoses and treatment details. Notification letters were sent to affected individuals on June 4, 2026, and attorneys are investigating potential class action lawsuits. The breach did not impact any active McLeod Health systems.

Key Points: • 16,788 patients' personal and health information compromised in the breach. • Unauthorized access occurred on a decommissioned server in October 2025. • Ransomware group Qilin claimed responsibility for the attack.