HealthConsent
Active breach tracker Atlanta, GA Disclosed March 12, 2026

Good Samaritan Health Center Atlanta Data Breach 2026 (Ransomware): 10,000 Charitable Clinic Patients Exposed. No Credit Monitoring Offered. What To Do

Good Samaritan Health Center, an Atlanta charitable safety-net clinic, disclosed in March 2026 a February 2026 ransomware attack exposing names, dates of birth, ZIP codes, and limited clinical information for 10,000 uninsured and underinsured patients. SSN and financial data not in scope. No credit monitoring offered. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated Sources & methodology

Timeline

Feb 9, 2026

Ransomware attack on internal server identified; server isolated and restored from backups same day

Feb 9, 2026

Attacker gained access

Mar 12, 2026

Bilingual breach notification PDF authored and posted

Mar 12, 2026

Disclosed publicly

Data exposed

01

High-risk identity

Enables financial + identity theft

Date of birth

02

Health records

Don't expire and can't be reissued

Limited clinical information

03

Contact & insurance

Phishing + targeted scams

Full name ZIP code
If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

01

Accept credit monitoring

It’s the floor of the response. Take it.

02

Freeze your credit

Free at Equifax, Experian, TransUnion.

03

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

04

Review your EOBs

Insurance statements catch medical identity theft early.

05

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

The Good Samaritan Health Center is an Atlanta charitable safety-net clinic at 1015 Donald Lee Hollowell Pkwy NW, founded in 1999 by Dr. William C. Warren IV. The clinic serves approximately 27,000 patient visits per year, primarily uninsured and underinsured residents. (Note: this Atlanta entity is not an HRSA-funded Federally Qualified Health Center; the similarly-named Good Samaritan Health & Wellness Center in Jasper, GA is a separate FQHC entity.)

On February 9, 2026, the clinic identified a ransomware attack on an internal server. The server was isolated and restored from backups the same day. The breach notification PDF was authored and posted in mid-March 2026, confirming 10,000 affected individuals in the HHS OCR filing.

No threat actor has been publicly identified. No dark-web leak-site listing has been observed.

What was stolen

  • Full name
  • Date of birth
  • ZIP code
  • Limited clinical information

The notice explicitly states that Social Security numbers and financial data were not on the affected server and were not compromised. This is a narrower exposure than most ransomware breaches.

What Good Samaritan is offering

No credit monitoring or identity-theft protection is being offered, citing the limited data scope. The notice directs affected individuals to “review the statements they receive from their healthcare providers.” Internal remediation: password resets, enhanced malware monitoring, ongoing security and privacy training.

What to do

  1. Be alert to scam outreach referencing your specific GSHC visits. With name + DOB + ZIP code in the dataset, scammers can craft locally targeted phishing.
  2. Review your healthcare provider statements for unfamiliar claims.
  3. Place a free credit freeze at all three bureaus as a baseline precaution even though SSN was not exposed.
  4. Stop the ongoing flow of your healthcare data. HealthConsent files HIPAA restriction requests so the demographic and clinical context data exposed in this breach is not continuously re-shared.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.