How do I know if I am affected by the Emanuel Medical Center data breach?

Emanuel Medical Center is mailing notification letters directly to affected individuals. If you have received care or services from Emanuel Medical Center in the period leading up to February 2026 and you have not received a letter, contact the entity directly. 28,963 individuals were confirmed affected in the HHS OCR filing.

Was Emanuel Medical Center attacked by a ransomware group?

No threat actor has publicly claimed responsibility for the Emanuel Medical Center breach. The incident is categorized in the HHS OCR portal as a hacking.

Should I file a lawsuit over the Emanuel Medical Center data breach?

1 plaintiffs' firms have publicly announced investigations or filed complaints related to the Emanuel Medical Center breach: Strauss Borrelli (publicly investigating). We are not a law firm and cannot give legal advice; consult your own attorney to evaluate your options.

What is HealthConsent and how does it help with the Emanuel Medical Center breach?

HealthConsent is an independent health-data privacy service. We help affected individuals stop the ongoing flow of their health information by filing HIPAA restriction requests, FTC Health Breach Notification Rule deletion requests, and state-law deletion requests across providers, insurers, Health Information Exchanges, prescription networks, and data brokers. Credit monitoring offered by Emanuel Medical Center addresses identity-theft risk; HealthConsent addresses the longer-tail problem of your exposed health data continuing to be sold and shared by other entities downstream.

Active breach tracker Swainsboro, GA Disclosed February 17, 2026

Emanuel Medical Center Data Breach 2026: 28,963 Georgia Hospital Patients Exposed. SSN + Driver's License + Diagnoses in Scope. What To Do

Q: What data was exposed in the Emanuel Medical Center breach?

According to the notification letter and supporting filings, the compromised data included: Full name, Date of birth, Home address and contact information, Social Security number, Driver's license number, Health insurance information, Patient ID, Dates of service, Provider name, Diagnoses, Treatment information, Prescription information, Medical history, Lab reports.

Emanuel Medical Center, a 72-bed county hospital in Swainsboro, Georgia, disclosed in February 2026 a May 2025 network intrusion exposing names, Social Security numbers, driver's license numbers, diagnoses, prescriptions, and lab reports for 28,963 patients. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated May 15, 2026 Sources & methodology

Timeline

May 21, 2025

Unauthorized access window begins

May 22, 2025

Suspicious activity detected; network secured

Feb 17, 2026

Filed with HHS OCR; website notice posted; individual letters mailed

May 21, 2025

Unauthorized access window begins

May 22, 2025

Suspicious activity detected; network secured

Feb 17, 2026

Filed with HHS OCR; website notice posted; individual letters mailed

Data exposed

High-risk identity

Enables financial + identity theft

Date of birth Social Security number Driver's license number

Health records

Don't expire and can't be reissued

Diagnoses Treatment information Prescription information Lab reports

Contact & insurance

Phishing + targeted scams

Full name Home address and contact information Health insurance information Patient ID Dates of service Provider name Medical history

Class actions filed by

These firms have publicly announced investigations. You may be eligible to join. We are not a law firm and cannot give legal advice.

Strauss Borrelli (publicly investigating)

If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

Accept credit monitoring

It’s the floor of the response. Take it.

Freeze your credit

Free at Equifax, Experian, TransUnion.

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

Review your EOBs

Insurance statements catch medical identity theft early.

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

Emanuel Medical Center is a county-owned nonprofit hospital at 117 Kite Road, Swainsboro, Georgia. Licensed for 72 acute-care beds plus 12 bassinets, with private patient rooms, critical-care rooms, a 15-bed senior behavioral health unit, and a 49-bed nursing home, EMC is Joint Commission and DNV accredited and Level IV Trauma-designated. It is governed by the Emanuel County Hospital Authority and is the primary acute-care facility for Emanuel County. (This is distinct from the unrelated Emanuel Medical Center in Turlock, California.)

Between May 21 and May 24, 2025, an unauthorized third party accessed EMC’s network. EMC detected suspicious activity on May 22, 2025 and engaged outside cybersecurity experts. The forensic review took roughly 9 months. EMC filed with HHS OCR and began mailing individual notification letters on February 17, 2026, confirming 28,963 affected individuals.

No ransomware group has publicly claimed responsibility in any source verified for this brief. (One unconfirmed search-snippet attribution to Qilin exists but could not be corroborated through primary sources.)

What was stolen

Full name, date of birth, home address and contact information
Social Security number
Driver’s license number
Health insurance information
Patient ID, dates of service, provider name
Diagnoses, treatment information, prescription information
Medical history, lab reports

What Emanuel Medical Center is offering

The public substitute notice does not appear to enumerate complimentary credit monitoring enrollment. Affected individuals are directed to standard fraud-alert and security-freeze procedures.

Dedicated call center: 855-815-3937 (Monday to Friday, 9 a.m. to 9 p.m. Eastern)

What to do

Place free credit freezes at Equifax, Experian, and TransUnion. Full SSN + driver’s license combination requires this.
File IRS Form 14039.
Watch your insurance Explanation of Benefits for unfamiliar claims.
Stop the ongoing flow of your hospital data. HealthConsent files HIPAA restriction requests so the demographic, diagnosis, and prescription data exposed in this breach is not continuously re-shared by downstream entities.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.