Jackson Hospital and Clinic (Jackson Hospital), is providing notice regarding a recent cybersecurity incident occurring at a former third-party vendor, Nationwide Recovery Services.
Jackson Hospital recently became aware that Nationwide Recovery Services was involved in a data security incident that involved Jackson Hospital’s information. Upon learning of this issue, Jackson Hospital immediately commenced a thorough investigation. As part of the investigation, Jackson Hospital has been working very closely with external legal counsel experienced in handling these types of incidents.
After an extensive investigation and consultation with Nationwide Recovery Services, on or about January 27, 2026, Jackson Hospital discovered Protected Health Information pertaining to a limited number of Jackson Hospital patients was contained in the data that was subject to unauthorized access between on or about July 5, 2024, and on or about July 15, 2024.
The type of patient information involved in the Nationwide Recovery Services incident includes full names along with one or more of the following: Social Security number, phone number, address, date of birth, account information, health insurance information and/or dates of service.
Jackson Hospital has no evidence that any personal information has been or will be used for identity theft as a direct result of this incident.
Sustainability as a Baseline in Healthcare Facilities
Penobscot Valley Hospital Reports Data Security Incident
Ballad Health Acquires Land for Future Unicoi County Hospital
Why Healthcare Facilities Management Is Critical to Patient Safety 
Brookdale Senior Living Announces Acquisition of the Brookdale Galleria Community