By HFT Staff

Murray County Medical Center (MCMC) is a county-owned hospital and clinic based in Slayton, Minnesota. MCMC experienced a data security incident that may have impacted data belonging to current and former individuals served by MCMC. MCMC sent notifications of this incident to potentially impacted individuals and has provided resources to assist them. 

On January 27, 2026, it was discovered that certain personal information of certain patients and employees was potentially impacted as the result of suspicious activity initially learned of on August 21, 2025. Upon learning of this event, MCMC took steps to secure its network and engaged a leading, independent cybersecurity firm to investigate what happened and whether any sensitive data may have been impacted. The investigation subsequently revealed certain personal information and personal health information may have been accessed and acquired without authorization by an unknown actor during the incident. MCMC undertook a comprehensive review of the potentially impacted data to identify the individuals and information involved which concluded on January 27, 2026. 

Based on the investigation, the personal and protected health information involved in the incident varied by individual but may have included patient name, Social Security number, driver’s license number, state identification number, date of birth, health insurance information, and medical treatment and/or history information. 

As soon as MCMC discovered the incident, MCMC took the steps referenced above. In addition, MCMC has implemented several measures to enhance its security posture and reduce the risk of similar future incidents.