AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Healthcare Provider Data Breaches
Coverage from Paubox, Morningstar, and others
Healthcare provider data breaches can expose medical records alongside Social Security numbers, financial details, government identification, employment information, and other sensitive data.
Coverage follows how providers discover and investigate unauthorized access, determine who and what was affected, notify patients and regulators, offer protections, and respond to questions about cybersecurity safeguards. The subject also includes consequences such as identity theft and medical identity theft risks, patient-trust concerns, and potential litigation. A documented Brown Health Medical Group-MA incident illustrates the complexity of determining multistate impact when legacy systems contain both health and personal information.
Looking Back
39 Day Timeline
Jul 20
Jul 26
Aug 2
Aug 8
Aug 14
Aug 21
Aug 27
All Articles31 articles
Important
Brown Health Medical Group-MA reported in 2026 that attackers accessed a legacy Massachusetts file server in December 2025, exposing information involving 311,760 individuals.
8/12/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP launched a class action investigation in response to a Brown Health Medical Group-MA data breach reported to the Vermont Attorney General on July 16, 2026.
7/21/2026 • Data Breaches & Exposure Events • General
Advanced Center for Orthopedics & Sports Medicine notified potentially affected patients in Vermont in August 2026 after reporting a breach involving Social Security numbers and protected health information.
8/27/2026 • Data Breaches & Exposure Events • General
Premier Medical Group of the Hudson Valley began notifying patients in August 2026 after unauthorized access exposed names, birth dates, insurance details, and medical information in Hudson Valley, New York.
8/27/2026 • Data Breaches & Exposure Events • General
Life Bridges identified unauthorized access to its Massachusetts computer systems between June 17 and June 22, 2026, potentially exposing workers' and service recipients' sensitive information.
8/26/2026 • Data Breaches & Exposure Events • General
Three patients and a former employee sued Boston Health Care for the Homeless in Massachusetts after delayed notification of a suspected breach involving personal and health information.
8/14/2026 • Data Breaches & Exposure Events • General
Boston Health Care for the Homeless Program notified affected patients and employees across Massachusetts, Texas, and Vermont on August 7, 2026, after investigating unauthorized access to files containing personal and health information.
8/12/2026 • Data Breaches & Exposure Events • General
Brown University Health notified 311,760 patients in Dartmouth, Massachusetts, after unauthorized access to a legacy file server exposed potentially sensitive personal information in December 2025.
8/11/2026 • Data Breaches & Exposure Events • General
Brown University Health confirmed in 2026 that a December 2025 breach at Brown Health Medical Group - MA potentially exposed sensitive information belonging to more than 311,000 people in Massachusetts and Vermont.
8/6/2026 • Data Breaches & Exposure Events • General
Global Secret Group claimed in early August 2026 that Pavillon in North Carolina suffered a 646-gigabyte data breach, although Pavillon has not confirmed the allegation.
8/6/2026 • Data Breaches & Exposure Events • General
Public reporting indicates that Brown Health Medical Group-MA experienced a data breach affecting at least 290,443 residents in Massachusetts and Vermont, with the final scope still under investigation.
8/5/2026 • Data Breaches & Exposure Events • General
Village Practice Management Company reported a breach exposing personal and medical information of approximately 25,022 Texas residents after filing notification with the Texas Attorney General.
8/5/2026 • Data Breaches & Exposure Events • General
Lifespan Physicians Group disclosed in July 2026 that unauthorized December 2025 access to its Rhode Island-based network affected 290,443 Massachusetts and Vermont residents.
8/4/2026 • Data Breaches & Exposure Events • General
Lifespan Physicians Group disclosed on July 16, 2026, that unauthorized December 2025 server access affected 290,443 patients in Massachusetts and Vermont.
8/4/2026 • Data Breaches & Exposure Events • General
Lifespan Physicians Group reported in July 2026 that unauthorized access to its Rhode Island-based historic server network affected 290,443 Massachusetts and Vermont residents.
8/3/2026 • Data Breaches & Exposure Events • General
Lifespan Physicians Group disclosed in July 2026 that unauthorized access to a Rhode Island server network in December 2025 affected 290,443 Massachusetts and Vermont patients.
8/3/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating a Lifespan Physicians Group-MA data breach reported to the Vermont Attorney General after unauthorized access exposed sensitive information for about 86 Vermont residents.
7/20/2026 • Data Breaches & Exposure Events • General
The Asthma Center disclosed in November 2025 that an unauthorized actor accessed its computer systems and potentially obtained patient health and identity information.
8/24/2026 • Data Breaches & Exposure Events • General
Premier Medical Group disclosed unauthorized access to patient files on June 14, 2026, at its Poughkeepsie, New York, medical practice.
8/24/2026 • Data Breaches & Exposure Events • General
Advanced Women's Care and parent company Valley Perinatal Services LLC disclosed a breach exposing Social Security numbers and health records from the Phoenix-area practice on August 20, 2026.
8/21/2026 • Data Breaches & Exposure Events • General
ANIBIC disclosed on July 17, 2026, that unauthorized network access in Queens, New York, exposed personal and medical information affecting 1,918 individuals.
8/10/2026 • Data Breaches & Exposure Events • General
Oculus Pathology disclosed unauthorized access to employee email accounts in Austin, Texas, between March 31 and April 2, 2026, potentially exposing personal and medical information.
8/9/2026 • Data Breaches & Exposure Events • General
Brown Health Medical Group-MA notified 311,760 individuals in June 2026 that attackers accessed sensitive files on a historic server at the organization's Hawthorn, Massachusetts, location.
8/5/2026 • Data Breaches & Exposure Events • General
Valley Kidney Specialists disclosed in July 2026 that a June 11 network intrusion potentially exposed Lehigh Valley patients' personal and health information.
8/3/2026 • Data Breaches & Exposure Events • General
Anesthesia Group of Albany disclosed a patient data breach in a notice filed with the Vermont Attorney General's Office on Aug. 7, involving personal, medical, and financial information.
8/11/2026 • Data Breaches & Exposure Events • General
Anesthesia Group of Albany, P.C. reported on August 7, 2026, that a breach exposed health records belonging to one Vermont resident.
8/10/2026 • Data Breaches & Exposure Events • General
Anesthesia Group of Albany reported an undisclosed health-records breach to the Vermont Attorney General in Vermont on August 7, 2026.
8/10/2026 • Data Breaches & Exposure Events • General
Interesting
Genesis Healthcare Management reported on August 19, 2026, that unauthorized access exposed potentially sensitive Kern Psychiatric patient files in Bakersfield, California.
8/26/2026 • Data Breaches & Exposure Events • General
Kern Psychiatric Health and Wellness Center reported in California that unauthorized access to Genesis Healthcare Management systems potentially exposed current and former patients' health and identity information in 2026.
8/24/2026 • Data Breaches & Exposure Events • General
Kern Psychiatric Health and Wellness Center reported on August 21, 2026, in Bakersfield, California, that unauthorized access to Genesis-managed systems exposed patient files.
8/24/2026 • Data Breaches & Exposure Events • General
Brown University Health reported in July that a December 2025 server intrusion at a Dartmouth, Massachusetts affiliated medical practice compromised personal information belonging to more than 300,000 patients.
8/24/2026 • Data Breaches & Exposure Events • General