All Breaches
February 9, 2026 Verified Sensitive Record Healthcare

Good Samaritan Atlanta 2026 Data Breach

The 2026 Good Samaritan Atlanta data breach was a ransomware incident affecting an internal server used by Good Samaritan Health Center for administrative file storage. The organization says it identified the activity on February 9, 2026.

10 Thousand
Affected People
4
Data Types
Medium
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

1 sensitive4
  • Medical information
  • Names
  • Dates of birth
  • Postal codes

About This Breach

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/IT incident involving a network server and reported 10,000 affected individuals.

Verified Incident Timeline

Good Samaritan says it isolated the affected server on February 9 and began an investigation with information-security professionals. The server was contained and restored from secure backups the same day. The event was submitted to HHS on March 16, 2026.

What Information May Have Been Affected?

Files on the server contained names, dates of birth, ZIP codes, and limited clinical information. The organization says Social Security numbers and financial account information were not stored on that server. Because unauthorized access occurred, it could not completely rule out access to files containing protected health information.

How Good Samaritan Responded

The organization says it secured its systems and restored operations, reset passwords, enhanced monitoring systems used to detect malware, and continued security and privacy training. As of the notice date, it said there was no evidence that the information had been misused or publicly disclosed.

What Should Affected People Do?

Notice recipients should review statements from healthcare providers and insurers for services they did not receive or charges they do not recognize. Suspicious entries should be reported directly to the provider or insurer, and incident links should be verified through Good Samaritan's official website.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information