Skip to main content
photo of a Doctor

Cumberland County Hospital Data Breach Investigation

The data breach lawyers at The Lyon Firm are reviewing new class action data breach claims after Cumberland County Hospital Association (CCH) discovered that a major data breach may have compromised the personal data of thousands of individuals.

Contact an experienced attorney to discuss your case if you receive a data breach notification letter from any healthcare entity. We believe hospitals have a duty to protect all information they collect and store from patients and staff. Read about what you can do to mitigate the risks of fraud and identity theft following any data security incident. Our firm has settled numerous data breach lawsuits on behalf of plaintiffs nationwide. Call for a free consultation and case review. Compensation can be sought.

What Happened at Cumberland County Hospital?

According to a notice posted on the Cumberland website, an alleged cybersecurity incident began on February 21, 2025, and continued undetected until April 3, 2025. As many as 36,659 patients and staff have been impacted, according to a recent disclosure filed with the Department of Health and Human Services (HHS).

Files containing personally identifiable information (PII) and protected health information (PHI) may have been accessed and acquired. The types of information exposed for current and former patients and employees may include the following: name, date of birth, address, phone number, email address, race or ethnicity, Social Security number, medications, diagnoses, treatment notes, dates of service, medical record number, health plan number, and claims and billing information.

Current and former employees may have had driver’s license, birth certificate, background check details, W-4s and W-2s, and bank account numbers compromised.

It is important to understand the increased privacy  risks associated with data breach incidents and to take reasonable precautions following any known intrusion. Any patients and staff of Cumberland County Hospital should remain vigilant and review all financial and medical statements here into the future.