







George E. Weems Memorial Hospital experienced a major data breach. The hospital discovered that multiple internal employee accounts were accessed by an unauthorized actor. An investigation determined that emails containing sensitive information were compromised between May 6, 2025 and May 12, 2025.
A review was completed on Sept. 22, 2025 and revealed that both personally identifiable information (PII) and protected health information (PHI) was exposed due to the cyberattack. Compromised data included full names, Social Security numbers, addresses, email addresses, phone numbers, driver’s license numbers, account information, patient ID numbers, medical diagnoses and histories, provider names, health insurance information and dates of service.
The hospital published a Notice of Data Security Incident on its website on Oct. 20, 2025. Written notice went out to affected individuals on the same day.
The total number of impacted individuals has not been released, but may include several thousand patients. This type of cybersecurity incident puts people at risk for identity theft and medical fraud.
After discovering the breach, George E. Weems Memorial Hospital launched an investigation and partnered with cybersecurity experts to assess the scope of the incident. In addition to required state and federal disclosures, the healthcare organization is offering free credit monitoring services to individuals whose Social Security numbers were compromised in the data breach.
If you receive a notice from George E. Weems Memorial Hospital about this breach, you may want to:
The hospital has also set up a dedicated call center for patients with questions at 855-720-3010, available from 9 a.m. to 9 p.m. Eastern Time, Monday through Friday.
More information about the hospital can be found on the George E. Weems Memorial Hospital website.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)