Sandhills Medical Foundation Inc.

Profile narrative

Sandhills Medical Foundation Inc., also known as Sandhills Medical, is a healthcare organization headquartered in the United States. The organization handles personal health information as evidenced by the ransomware incidents that exposed patient data. In May 2025 a ransomware attack compromised its servers and led to the exfiltration of names, dates of birth, Social Security numbers, taxpayer identification numbers, driver’s licenses, government‑issued identification, passports, financial details and personal health information of approximately 170,000 individuals. This incident shows that the foundation maintains extensive patient records and provides services that involve sensitive medical and financial data. The earlier breach in September 2020, which originated from a vendor storing electronic data, further indicates that the foundation relies on third‑party systems for data storage and management. Together these events highlight the organization’s role in collecting, storing and protecting a broad range of patient identifiers and health‑related information.

Sandhills Medical Foundation Inc. is structured as a foundation, as reflected in its official name, suggesting a nonprofit or charitable orientation within the healthcare sector. The organization’s headquarters are located in the United States of America, although the specific city or state is not disclosed in the supplied sources. No explicit information about parent companies, subsidiaries or ownership structures is provided in the available material. Consequently, the profile can only confirm its status as a foundation‑type entity operating in the U.S. healthcare arena, with a documented history of managing patient data that has been targeted by ransomware actors.

Incidents

2 incidents linked to this organisation.