Kentucky Mountain Health Breach Compromises SSNs and Medical Records

Kentucky Mountain Health Alliance Inc. (KMHA), a private nonprofit health center in Hazard, Kentucky, disclosed a data breach involving sensitive personal and medical information. A total number of 30,830 individuals were affected nationwide.

The company disclosed the incident to the Massachusetts Office of Consumer Affairs and Business Regulation, the New Hampshire Attorney General and the U.S. Department of Health and Human Services. Kentucky Mountain Health Alliance mailed notification letters to affected individuals.

On or around September 16, 2025, the company identified evidence of unauthorized access to its network. Kentucky Mountain Health Alliance took steps to contain the activity and launched an investigation into the scope of the incident. The investigation found that the authorized user accessed files that contained sensitive personal and health information of individuals.

The types of information exposed included driver's licenses, Social Security numbers, passport numbers, financial account information such as debit or credit card information, medical information such as diagnosis, mental/physical condition, prescription information, and provider’s name and location), and/or health insurance information such as beneficiary number, subscriber number, Medicaid/Medicare identification.

Kentucky Mountain Health Alliance's response to the breach

Kentucky Mountain Health Alliance has arranged for affected individuals to receive a free, two-year membership to identity monitoring services through Epiq's Privacy Solutions ID program.

Affected individuals can enroll by visiting Privacy Solutions ID and entering the unique activation code included in their notification letter. Each letter contains a specific enrollment deadline. Individuals who need help with enrollment or have questions about the monitoring services can call Epiq directly at 866-675-2006, Monday through Friday from 9:00 a.m. to 5:30 p.m. EST.

Kentucky Mountain Health Alliance can be reached at 606-487-9505 and is located at 279 East Main St., Hazard, KY 41701.