The full extent of a data breach at Lakelands Public Health has come into focus: a June 30 press release from the agency confirms that approximately 60,000 current or former patients in the city and county of Peterborough may have been affected by an incident that occurred on January 29, 2026. Patients who received services, treatment, or whose health information (including lab results) was received by Lakelands Public Health between 1996 and January 2026 are potentially impacted.
## What Lakelands Public Health disclosed
Lakelands Public Health (LPH) issued a statement on June 30 confirming the timeline and the scale of the incident. The organization says the breach dates back to January 29, 2026, and that the pool of potentially affected records covers three decades of interactions with the agency. LPH’s Director of Strategic and Emergency Services and Privacy Officer, Donna Churipuy, was interviewed about the breach; an additional interview with cybersecurity expert Jack Thompson was released to explain what threat actors typically target in incidents of this kind.
## Who could be affected and why it matters
According to LPH, anyone who received services or whose health information was forwarded to the organization between 1996 and January 2026 may be included in the exposed data. Health records and lab results commonly contain sensitive personal and medical information that can be used for identity theft, insurance fraud or other forms of misuse; cybersecurity experts regularly warn that such data is high-value on criminal markets. The agency’s disclosure narrows the timeframe and population potentially exposed but does not, in the materials provided, detail the specific types of data confirmed as taken or how the compromise occurred.
## What officials and experts have said
LPH’s public materials include an interview with Donna Churipuy, who holds responsibility for strategic, emergency and privacy matters at the organization. The available reporting also includes commentary from Jack Thompson, a cybersecurity specialist, who explains what threat actors typically seek when they breach health organizations. The released interviews provide context on the organizational response and on general threat motivations, but the press release itself supplies the confirmed facts: the incident date, the affected timeframe (1996–January 2026) and the estimated number of affected people (about 60,000).
## What affected individuals should consider
While LPH’s announcement lays out who may be affected, it does not, in the material provided, list specific remediation steps offered by the agency. In situations involving health-data breaches, common precautions for potentially affected individuals include monitoring financial and medical statements, checking for unexpected billing or insurance activity, and reviewing communications from the health provider for instructions about identity-protection services or notifications. Patients seeking clarity should consult the official LPH statement and any direct communications from the agency for guidance on how to confirm whether they are affected and what support is being provided.
The Lakelands Public Health data breach underscores how long‑standing record holdings can expand the scope of exposure when an incident occurs. As LPH continues to communicate with patients and stakeholders, the priority for those potentially affected will be to follow official guidance and remain alert to signs of identity or medical-record misuse.
