Shoshone Medical Center Data Breach Exposes Addresses and Medical Records

Shoshone Medical Center, a 25-bed critical access hospital in Kellogg, Idaho, disclosed a data breach that affected 553 individuals in the United States.

The breach involved unauthorized access to an employee email account at Shoshone Medical Center. The hospital became aware of the potential compromise on or around May 27, 2026.

A forensic investigation was launched to determine the full nature and scope of the event and to identify what personal information may have been affected. On July 29, 2026, the investigation determined that a limited amount of personal information maintained in the normal course of hospital operations may have been accessed by an unauthorized third party through the compromised email account.

The breach potentially exposed both personally identifiable information and protected health information including names, addresses, dates of birth, phone numbers, medical record numbers, patient identification numbers, Medicare and Medicaid numbers, health insurance information, admission and discharge dates, diagnosis and treatment information and treatment cost information.

Shoshone Medical Center posted a notice about the incident on its website on Aug. 25, 2026.

Shoshone Medical Center's response to the breach

Shoshone Medical Center is providing complimentary credit monitoring services to individuals who may have been impacted by the breach. Enrollment details for the credit monitoring program are being shared directly with affected individuals through the notification letters they receive.

Shoshone Medical Center has also established a dedicated hotline for anyone with questions or concerns related to the incident. Affected individuals can call 1-800-405-8080 to speak with a representative. Individuals who prefer written communication can contact the hospital by mail at 25 Jacobs Gulch Rd., Kellogg, ID 83837.