Notification of Data Incident

Cedar County Memorial Hospital (“CCMH”) has become aware of a data security incident that may have affected the privacy of certain information provided to us.

On August 14, 2026, CCMH discovered unusual activity in its computer network and immediately began an investigation into the full scope and nature of the event with the assistance of third-party specialists. While the forensic investigation into the incident is still ongoing, CCMH has determined that certain information on its network was subject to unauthorized access for a limited period of time. We are currently conducting a comprehensive investigation and analysis of the potentially impacted data to determine the types of information contained within the data and to whom the information relates. While this review remains ongoing, we believe a limited amount of protected health information (“PHI”) may have been subject to unauthorized access in connection with this event. At this time, we believe the information potentially at risk will vary by individual but may contain individuals’ first and last name in combination with one or more of the following: Social Security number, driver’s license number/government-issued ID number, date of birth, diagnosis and treatment information, prescription information, provider name and location, dates of service/admittance/discharge, medical record number, patient account number, Medicare/Medicaid ID number, lab results, billing information, and/or health insurance information. Should our investigation identify potential impact to individuals’ information in relation to this incident, we will directly notify those individuals whose information is identified to have been at risk in accordance with applicable law.

In response to this incident, we took immediate steps to secure our systems and engage third-party specialists to assist in a thorough investigation and response. Additionally, we have implemented additional security measures to further minimize the risk of a similar incident occurring in the future. We also notified law enforcement and are reviewing our policies and procedures related to data protection.

Additionally, in an abundance of caution, we are providing access to complimentary credit monitoring and identity protection services to any individual who believes they may have been impacted in this incident. If you have questions about this incident or would like to enroll in credit monitoring and identity protection services at no cost, please call 1-844-772-1430 between 8:00 am to 8:00 pm EST, Monday through Friday excluding major U.S. holidays. You may also write to us at 1401 S Park Street, El Dorado Springs, MO 64744.

In general, we encourage individuals to remain vigilant in regularly reviewing and monitoring all account statements, explanation of benefits statements, and credit history to guard against any unauthorized transactions or activity. You may also place a fraud alert or credit freeze by contacting the credit reporting agencies: TransUnion 1-800-680-7289; Experian 1-888-397-3742; Equifax 1-888-298-0045. You can further educate yourself regarding identity theft, fraud alerts, credit freezes, and steps to protect their personal information by contacting the credit reporting bureaus, the Federal Trade Commission (“FTC”), or their state Attorney General. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. Instances of known or suspected identity theft should also be reported to law enforcement, the state Attorney General, and the FTC.