Sturgis Hospital announced on its website Sept. 18 two security events where an “unauthorized third party” may had access to “name, contact information, government identification number (such as a Social Security number), financial account details (such as a bank account number), health insurance details, and clinical information—including prescriptions, treatment records, and similar medical details.”
Here’s what the hospital issued
“Sturgis Hospital is providing this notice about two events potentially involving an unauthorized third party accessing and/or acquiring a limited number of individuals’ personal information and protected health information. We are providing this notice to share information about what happened and what we are doing in response.
WHAT HAPPENED
“In December 2024, we detected unauthorized activity in a portion of our computer network. We promptly started collaborating with third-party cybersecurity experts to investigate and remediate. While that investigation was underway, we detected further unauthorized activity in our network in June 2025. We launched a separate investigation with third-party experts to review that activity and remediate it too. Based on both investigations, we determined that an unauthorized third party possibly accessed or acquired some of our files.
WHAT INFORMATION WAS INVOLVED
“We determined that the unauthorized third party potentially accessed or acquired a limited amount of personal information on our patients and employees. The impacted information included details such as name, contact information, government identification number (such as a Social Security number), financial account details (such as a bank account number), health insurance details, and clinical information—including prescriptions, treatment records, and similar medical details.
WHAT WE ARE DOING
“We worked with third-party experts to address these events, perform an investigation into the unauthorized activity, and further secure our systems to protect information. We also notified law enforcement, which did not delay this notice.
WHAT YOU CAN DO
“We encourage individuals to (1) remain vigilant for unauthorized financial activity by reviewing their account statements and free credit reports, (2) consider placing a fraud alert or security freeze on their credit file (which individuals can do for free), (3) report any suspicious activity to law enforcement, and (4) review any letter they received from us regarding this event.
FOR MORE INFORMATION
“Should you have any questions, you can contact us at SturgisEvent2025@sturgishospital.com, and one of our representatives will be happy to assist you. Thank you for your understanding and patience.”
This article originally appeared on Sturgis Journal: Sturgis Hospital reports ‘security’ events involving potential data breaches
Reporting by Liz Shepard, Sturgis Journal / Sturgis Journal
USA TODAY Network via Reuters Connect
