Southcentral Foundation

Southcentral Foundation, also known as SCF, is an organization that handles protected health information, including medical records, treatment details, and personal identifiers such as Social Security numbers and tribal identification documents. The entity operates within the United States, with its headquarters located in the country. Its core functions involve the collection, storage, and management of health‑related data for the individuals it serves. The nature of the information it safeguards indicates that it is engaged in providing healthcare or health‑related services to a defined population. The organization’s activities are therefore centered on maintaining the confidentiality and integrity of patient health data.

In October 2016, Southcentral Foundation experienced a cybersecurity incident in which unauthorized access to two employee email accounts exposed the protected health information of nearly 15,000 individuals. The compromised data included names, Social Security numbers, medical records, treatment details, family member information, and tribal identification documents. Upon detection, the organization disabled the affected accounts and enlisted external consultants to conduct a thorough investigation. To mitigate potential harm, impacted individuals were offered complimentary credit monitoring and identity theft protection services. The incident underscores the organization’s responsibility to safeguard sensitive health information and highlights the scale of its data stewardship, given the number of people whose records were involved.