Kentucky Mountain Health Breach Compromises SSNs and Medical Records

Kentucky Mountain Health Alliance Inc., a private nonprofit health center in Hazard, Kentucky, disclosed a data breach involving sensitive personal and medical information.

The company disclosed the incident to the Massachusetts Office of Consumer Affairs and Business Regulation on June 19, 2026. The total number of individuals affected nationwide remains undisclosed.

Kentucky Mountain Health Alliance mailed notification letters to affected individuals. At this time. the details about the specific method of attack, the dates during which the incident took place or when it was discovered remains unknown.

The types of information exposed included driver's licenses, medical records and Social Security numbers.

Kentucky Mountain Health Alliance's response to the breach

Kentucky Mountain Health Alliance has arranged for affected individuals to receive a free, two-year membership to identity monitoring services through Epiq's Privacy Solutions ID program.

Affected individuals can enroll by visiting Privacy Solutions ID and entering the unique activation code included in their notification letter. Each letter contains a specific enrollment deadline. Individuals who need help with enrollment or have questions about the monitoring services can call Epiq directly at 866-675-2006, Monday through Friday from 9:00 a.m. to 5:30 p.m. EST.

The company also directed affected individuals to the Federal Trade Commission at 1-877-438-4338 and the Massachusetts Office of Consumer Affairs and Business Regulation at 888-283-3757 for additional guidance on identity theft prevention.

Kentucky Mountain Health Alliance can be reached at 606-487-9505 and is located at 279 East Main St., Hazard, KY 41701.