Bacon County Health Breach Potentially Exposes Protected Health Info

Bacon County Health Services Inc., a nonprofit health system based in Alma, Georgia, disclosed a data breach that occurred in July 2026.

On July 27, 2026, Bacon County Health Services became aware of unusual activity within its internal network.

The organization took action to secure its network and ensure that patient care was not disrupted. It then launched an investigation with the assistance of outside cybersecurity specialists to determine the nature and scope of the activity.

The investigation determined that an unknown actor had gained unauthorized access to the organization's network between July 10, 2026, and July 27, 2026. During this window, files were copied from the network and potentially viewed by the unauthorized party.

A comprehensive review of the contents of the potentially affected files remains underway at this time. As a result, the specific types of personal information and protected health information that may have been exposed have not yet been determined.

The breach was reported to the U.S. Department of Health and Human Services on Sept. 15, 2026. Additionally, Bacon County Health Services posted a notice of the security incident on its website.

Bacon County Health Services' response to the breach

The organization plans to mail a notice letter to each affected individual for whom it has a valid mailing address. Each letter will include details about the specific types of information at issue for that person.

Bacon County Health Services expressed its commitment to maintaining the trust of patients and the community and will continue to update the notice on its website as the investigation progresses.