AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Healthcare Data Breaches
Coverage from PMBAUSA, Paubox, and others
Healthcare data breaches can affect hospitals, medical groups, clinics, and the outside companies that manage billing, practice software, records, or other services.
Incidents described in this subject range from compromised employee or contractor credentials to unauthorized access at vendors and service providers, with potentially exposed information including diagnoses, treatment details, insurance data, and identity records. Investigations and disclosures may involve forensic reviews, reports to regulators such as the U.S. Department of Health and Human Services, notices to affected people, and steps such as identity-monitoring offers. These incidents matter because healthcare information can connect sensitive medical details with identifiers that may create risks beyond the original breach.
Looking Back
598 Day Timeline
Jan '25
Apr '25
Jul '25
Nov '25
Feb '26
May '26
Aug '26
History
10/13/2026
New sector-level figures show that the number of people affected fell sharply in 2025 from its 2024 peak, even as breach activity remained high. The reporting also reaches beyond the U.S. with a large-scale medical software breach in France.
10/03/2026
The current version reinforces the existing picture of healthcare breaches involving providers and vendors, without adding a materially new development.
All Articles305 articles
Important
MCBS reported in 2026 that unauthorized network access during September 2025 compromised personal and health information for approximately 1.26 million healthcare patients.
8/15/2026 • Data Breaches & Exposure Events • General
HHS recorded 170 email-related healthcare data breaches affecting more than 2.5 million people in the United States during 2025.
7/30/2026 • Data Breaches & Exposure Events • General
Medical Computer Business Services reported in June 2026 that a September 2025 network intrusion potentially exposed healthcare information for 1,261,464 individuals.
7/30/2026 • Data Breaches & Exposure Events • General
Medical Computer Business Services disclosed in June 2026 that a September 2025 ransomware intrusion in Augusta, Georgia, affected 1,261,464 people.
7/29/2026 • Data Breaches & Exposure Events • General
The GMC apologized after a by-email disclosure of another confidential abuse complaint occurred during investigation of a doctor sex-assault allegation complaint in Hampshire, UK.
7/28/2026 • Data Breaches & Exposure Events • General
Unlimited Technology Systems notified Iowa and other states in July 2026 after a 2025 vendor hack exposed patient and medical information for at least 442,000 people.
7/28/2026 • Data Breaches & Exposure Events • General
Lifespark Management Services detected suspicious email access in February 2026 and notified individuals in July 2026 of potential exposure of personal and health data.
7/27/2026 • Data Breaches & Exposure Events • General
Wildwood Surgical Center in Toledo, Ohio reported a 2025 network intrusion on June 26 with public breach notice issued July 13, 2026.
7/26/2026 • Data Breaches & Exposure Events • General
OpenLoop Health confirmed a breach affecting over 716,000 patients across 120 healthcare organizations after an unauthorized session exposed regulated patient records.
7/26/2026 • Data Breaches & Exposure Events • General
In the US, healthcare data breaches expose identifiable medical information and are governed by HIPAA and the FTC Health Breach Notification Rule, shaping notice, mitigation, and legal recourse.
7/24/2026 • Data Breaches & Exposure Events • General
Centers Laboratory detected suspicious activity in August 2025 and notified 542,377 affected patients around July 20, 2026, prompting privacy litigation claims.
7/24/2026 • Data Breaches & Exposure Events • General
Behavioral health providers in Colorado, Nebraska, Arizona, and Texas disclosed four data breaches involving unauthorized access and email compromises affecting patients and employees.
7/24/2026 • Data Breaches & Exposure Events • General
NAS Recovery Solutions in Lakewood, Colorado discovered May 13, 2026 that unauthorized workforce downloads exposed limited client identifiers, potentially revealing substance use disorder treatment under HIPAA.
7/23/2026 • Data Breaches & Exposure Events • General
Penobscot Valley Hospital in Lincoln, Maine notified patients in mid-2026 after June 4 confirmation that a late-Jan detected healthcare breach involved protected health information.
7/22/2026 • Data Breaches & Exposure Events • General
Penobscot Valley Hospital notified Maine patients and employees in mid-year after a breach investigation identified potential exposure of personal information and protected health information.
7/22/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed a July 4 social-engineering incident in a U.S. SEC filing after three employee accounts were compromised and PII and protected health information exposure occurred.
7/21/2026 • Data Breaches & Exposure Events • General
Heart Care Centers of Illinois notified affected Chicago-area individuals in July 2026 after unauthorized access to an employee email account from Aug 2024 to Nov 2024.
7/21/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed a July 4 breach after unauthorized access to three employee accounts exposed potential personal and protected health information, pending scope investigation.
7/20/2026 • Data Breaches & Exposure Events • General
Unlimited Technology Systems, LLC discovered unauthorized datacenter activity on October 19, 2025 and began patient notifications around July 20, 2026 after a potential data exposure.
7/20/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed a July 4 employee-account compromise in USA operations, potentially exposing member PII and protected health information while the company investigates scope.
7/20/2026 • Data Breaches & Exposure Events • General
Craneware disclosed an ongoing cyberattack and data exfiltration incident in the United Kingdom, impacting U.S. healthcare billing customers as investigation continues.
7/20/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed in a July 17 SEC filing that abnormal logins on July 4 led to social-engineering access of three employee health plan accounts.
7/20/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed in an SEC filing on July 17 that social engineering enabled unauthorized access to three health plan employee accounts discovered on July 4.
7/20/2026 • Data Breaches & Exposure Events • General
Unlimited Technology Systems disclosed a 2025 breach involving unauthorized access to patient files, with potential PII and PHI exposure and Iowa Attorney General notification submitted in 2026.
7/20/2026 • Data Breaches & Exposure Events • General
Ohio Living detected suspicious network activity on April 17, 2026 and confirmed patient-data exfiltration between April 16-17 in Westerville, Ohio.
7/19/2026 • Data Breaches & Exposure Events • General
J. Arthur Trudeau Memorial Center reported suspicious network activity on Jan. 29 that led to unauthorized access to PHI and PII between Jan. 22 and Jan. 28 in Rhode Island.
7/16/2026 • Data Breaches & Exposure Events • General
HHS OCR reported 772 large healthcare data breaches in 2025, exposing about 138.5 million records while OCR increased HIPAA Security Rule risk-analysis enforcement.
7/16/2026 • Data Breaches & Exposure Events • General
J. Arthur Trudeau Memorial Center reported Jan. 22 to Jan. 28 data exfiltration after suspicious activity detection on Jan. 29, exposing PII and protected health information.
7/16/2026 • Data Breaches & Exposure Events • General
Wildwood Surgical Center reported unauthorized network access in June 2025, later concluding exposure of personal data and protected health information with notification letters starting in July 2026.
7/15/2026 • Data Breaches & Exposure Events • General
Child Care Resource Center, Inc. notified the California Attorney General in connection with a phishing incident that enabled internal file forwarding to an unauthorized external email account.
7/14/2026 • Data Breaches & Exposure Events • General
Healthcare data breaches expose medical and financial information, triggering HIPAA security and notification duties and potentially enabling CCPA claims in California.
7/14/2026 • Data Breaches & Exposure Events • General
CCRC, a California child care nonprofit, notified affected individuals after unauthorized external email forwarding exposed case records dated 2016-2025, reported to the state on July 2, 2026.
7/14/2026 • Data Breaches & Exposure Events • General
Gastro Health notified individuals in February 2026 after phishing-related unauthorized access potentially exposed sensitive identity and health identifiers.
7/13/2026 • Data Breaches & Exposure Events • General
Centers Lab NJ disclosed a HIPAA breach affecting 542,377 people after unauthorized system access between August 9 and 14, 2025.
7/13/2026 • Data Breaches & Exposure Events • General
Lake Region Healthcare in Fergus Falls, Minnesota notified patients in 2026 after unauthorized access detected in 2025 potentially exposed patient identity and health data.
7/13/2026 • Data Breaches & Exposure Events • General
Centers Lab NJ LLC confirmed a 2025 intrusion in New Jersey affecting 542,377 people after disclosure in July 2026.
7/13/2026 • Data Breaches & Exposure Events • General
Greenbaum Rowe Smith & Davis reported a healthcare data breach in New Jersey after compromised credentials exposed patient records in November 2025.
7/13/2026 • Data Breaches & Exposure Events • General
Centers Laboratory disclosed a 2025 breach affecting about 540,000 people in Cedar Knolls, New Jersey, after unauthorized access exposed health and identity records.
7/13/2026 • Data Breaches & Exposure Events • General
Oracle Health faced lawsuits and potential regulatory scrutiny after a 2025 breach affected at least 17 hospitals using legacy Cerner systems and allegedly delayed patient notification.
7/9/2026 • Data Breaches & Exposure Events • General
AdaptHealth told the SEC in July that a June 27 materiality assessment followed a social engineering hack that accessed external EHR portals and potentially exposed patient PII and PHI.
7/6/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates INTEGRIS Health after Cerner detected unauthorized third-party access to legacy electronic health record systems affecting Oklahoma patients.
6/29/2026 • Data Breaches & Exposure Events • General
Huntsville Hospital Health System notified patients in 2025 after Cerner reported unauthorized access to vendor-maintained health record data beginning Jan. 22, 2025.
6/25/2026 • Data Breaches & Exposure Events • General
Huntsville Hospital Health System notified patients in 2025 about a Cerner vendor breach that exposed electronic health record data and delayed notification at law enforcement direction.
6/25/2026 • Data Breaches & Exposure Events • General
June 19 federal court filing alleges One Medical exposed health records after unauthorized access to third-party archived storage used for Iora Health data.
6/25/2026 • Data Breaches & Exposure Events • General
On June 13, 2026, One Medical reported a June 8-11 vendor file-storage breach affecting archived former Iora Health Seniors patient data in multiple U.S. cities.
6/24/2026 • Data Breaches & Exposure Events • General
One Medical Seniors reported unauthorized access to third-party file storage of archived Iora Health patient files discovered June 13, with ShinyHunters extortion claims unverified.
6/24/2026 • Data Breaches & Exposure Events • General
Cherry Health in Michigan issued a preliminary breach notice on June 18, 2026, after suspected unauthorized access and data copying was detected April 19, 2026.
6/22/2026 • Data Breaches & Exposure Events • General
INC Ransom claimed mid-June 2026 ransomware access to Horizon Family Medical Group in Orange County, New York, with alleged protected health and financial data exposure.
6/19/2026 • Data Breaches & Exposure Events • General
iRhythm Holdings reported a HIPAA-relevant patient data breach in third-party hosted applications, with potential downstream breach notification duties for referring providers.
6/16/2026 • Data Breaches & Exposure Events • General
La Perouse notified the California Attorney General in 2025 of unauthorized access at a third-party billing platform affecting at least seven healthcare providers.
6/10/2026 • Data Breaches & Exposure Events • General
In 2024, healthcare breaches in the United States exposed over 289 million individuals, with Change Healthcare's cyberattack driving exposure for many Chicago-area providers.
6/8/2026 • Data Breaches & Exposure Events • General
Mid and South Essex NHS Foundation Trust will notify patients after Qilin ransomware theft from Synnovis, following a roughly 18-month forensic investigation timeline.
6/8/2026 • Data Breaches & Exposure Events • General
A Manhattan federal class action alleges NYC Health + Hospitals exposed millions to identity theft after a breach exposed Social Security numbers, medical records, and biometric data.
6/5/2026 • Data Breaches & Exposure Events • General
Sandhills Medical disclosed a May 2025 ransomware attack discovered May 8 that potentially exposed patient identifiers and health data for 169,017 people.
6/4/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals identified a February 2, 2026 breach traced to vendor access that exposed protected health and biometric data for at least 1.8 million people.
5/20/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals disclosed May 19, 2026 that a third-party vendor vulnerability in November 2025 enabled unauthorized access affecting about 1.8 million individuals.
5/20/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals disclosed a March 24, 2026 report of a vendor-based breach detected February 2, 2026 that exposed medical and biometric data for at least 1.8 million people in New York City.
5/19/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals disclosed March 24, 2026 that a vendor-linked breach exposed medical records and biometric fingerprints for at least 1.8 million patients and employees.
5/19/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals notified nearly 2 million patients in 2024 after a third-party vendor hacking incident led to potential exposure of health, identity, payment, and biometric data in New York City.
5/19/2026 • Data Breaches & Exposure Events • General
NYC Health and Hospitals disclosed on 2026 that hackers accessed systems from 25 November 2025, stealing health records, biometric identifiers, and geolocation data affecting at least 1.8 million people.
5/18/2026 • Data Breaches & Exposure Events • General
NYC Health and Hospitals reported a months-long network breach from November 2025 to February 2026 affecting at least 1.8 million people, exposing medical records, IDs, and fingerprint scans.
5/18/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP offered free consultations in connection with Excelas after Excelas disclosed a 2025-2026 data breach and Massachusetts notification in 2026.
5/18/2026 • Data Breaches & Exposure Events • General
HHS OCR reported 44 HIPAA breaches in March 2026 affecting 1.5 million individuals, with hacking as the dominant cause.
5/18/2026 • Data Breaches & Exposure Events • General
DeXpose reports 2025 incidents across Oracle Cloud, Oracle EBS, and Oracle Health after CloudSEK observed credentials sold online and CISA issued an active-threat advisory.
5/16/2026 • Data Breaches & Exposure Events • General
OpenLoop Health disclosed in 2026 that hackers accessed systems between January 7 and 8 and exposed telehealth patient personal data of 716,000 people.
5/13/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP investigated a Community Health Systems patient data breach disclosed around April 29, 2026 after access around February 28, 2026 in California.
5/11/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating an NYC Health + Hospitals data breach reported to U.S. HHS after unauthorized network server access impacted about 5,086 patients.
5/8/2026 • Data Breaches & Exposure Events • General
Bridewell and US HHS data show over 2,200 US medical center breaches since 2023, with fewer affected individuals in 2025 amid HIPAA segmentation and faster detection.
4/28/2026 • Data Breaches & Exposure Events • General
Cookeville Regional Medical Center reported a July 2025 intrusion that exposed records of 337,917 individuals, with affected-person notification beginning April 14, 2026.
4/24/2026 • Data Breaches & Exposure Events • General
Murray's Cheese LLC investigated unauthorized file access in Maine in 2026 and notified individuals after exposure of employee health-plan and identity data.
4/23/2026 • Data Breaches & Exposure Events • General
In a Maine Attorney General filing, Cookeville Regional Medical Center reported a July 2025 ransomware incident affecting 337,917 people, including 22 Maine residents.
4/20/2026 • Data Breaches & Exposure Events • General
Providence Health & Services notified patients in 2026 about a Health Information Exchange data-sharing incident involving Health Gorilla and Epic between 2024 and 2025.
4/20/2026 • Data Breaches & Exposure Events • General
Cookeville Regional Medical Center disclosed a July 2025 ransomware attack in Tennessee that exposed personal and health insurance data for about 337,917 people.
4/16/2026 • Data Breaches & Exposure Events • General
In February 2026, HHS Office for Civil Rights breach reports recorded 63 HIPAA-related healthcare incidents exposing PHI for at least 8,134,378 people.
4/12/2026 • Data Breaches & Exposure Events • General
Innovative Pharmacy Packaging Corp affiliates confirmed a September 2025 third-party intrusion exposed PHI for 133,862 patients, with notifications starting April 1, 2026.
4/11/2026 • Data Breaches & Exposure Events • General
Jeremiah Fowler reported an unprotected database exposing nearly one million Ohio medical patient records.
9/17/2025 • Data Breaches & Exposure Events • General
HHS OCR reports 772 large healthcare breaches in 2025 under HITECH rules, while affected individuals fell versus 2024 due to Change Healthcare outlier impact.
7/28/2026 • Data Breaches & Exposure Events • General
Medical Computer Business Services reported a PEAR-attributed 2025 network breach impacting 1,261,464 people in Georgia, including exposure of health and identity data.
7/28/2026 • Data Breaches & Exposure Events • General
MCBS reported a PEAR-attributed ransomware breach affecting 1,261,464 people in late September 2025, exposing Social Security numbers and medical information.
7/27/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP investigated a July 2026 breach tied to Exact Sciences legacy cancer diagnostic systems, with ShinyHunters alleging Social Security number exfiltration.
7/24/2026 • Data Breaches & Exposure Events • General
Clover Health Investments disclosed a July 4 breach after a social engineering attack compromised three employee accounts accessing personal and protected health information in the U.S.
7/21/2026 • Data Breaches & Exposure Events • General
Unlimited Technology Systems LLC disclosed to the Iowa Attorney General on July 1, 2026 that unauthorized activity in an October 2025 datacenter may have exposed PII and limited PHI, and offered Kroll identity monitoring.
7/20/2026 • Data Breaches & Exposure Events • General
Craneware disclosed an ongoing response to a cyberattack after hackers exfiltrated customer, employee, and partner data, with the investigation continuing in the United Kingdom.
7/20/2026 • Data Breaches & Exposure Events • General
Heart Care Centers of Illinois reported a phishing-enabled employee email breach with exposure of sensitive PII and health information discovered in 2026.
7/20/2026 • Data Breaches & Exposure Events • General
Centers Laboratory notified US officials in connection with a late-discovered August 2025 breach affecting 542,377 people, after WorldLeaks posted leak and extortion claims.
7/13/2026 • Data Breaches & Exposure Events • General
Aitkin County Health and Human Services in Minnesota disclosed an April 2026 email breach that exposed MnCHOICES protected health information for about 83,114 people.
7/9/2026 • Data Breaches & Exposure Events • General
Greenbaum Rowe Smith and Davis reported a cyberattack in New Jersey on Nov. 27, 2025, exposing 12,801 patients' protected health information.
7/8/2026 • Data Breaches & Exposure Events • General
Lake Region Healthcare Corp. reported a 2026 data breach exposing PII and PHI to Texas and Massachusetts residents, with regulator notifications starting July 1, 2026.
7/6/2026 • Data Breaches & Exposure Events • General
Optalis Management Solutions disclosed unauthorized network access from April 2025, affecting financial and health data, and notified Massachusetts regulators in June 2026.
6/30/2026 • Data Breaches & Exposure Events • General
AgelessRx disclosed help-desk ticket access in April 2026 that exposed patient health and identity data, with consumer notifications starting June 23 and state reporting on June 24.
6/25/2026 • Data Breaches & Exposure Events • General
Colorado Health Network disclosed a data breach to regulators on June 22, 2026 after alleged Tor data posting by threat actor Cephalus on Aug. 28, 2025.
6/22/2026 • Data Breaches & Exposure Events • General
Google Threat Intelligence Group reported UNC6508 targeting exposed REDCap servers with InfiniteRed malware, compromising a North American medical research organization from September 2023 to November 2025.
6/15/2026 • Cybersecurity Tech (Privacy-Relevant) • General
C2N Diagnostics LLC disclosed an April 27, 2026 breach notice after unauthorized access to employee email communications exposed patient PII and protected health information affecting about 2,027 people in the United States.
6/5/2026 • Data Breaches & Exposure Events • General
Acadia Healthcare reported a social-engineering incident accessing email and SharePoint from March 21-25, 2026, with patient notifications starting May 22, 2026.
5/29/2026 • Data Breaches & Exposure Events • General
Unknown hackers breached Unimed, an external billing provider, leading German university hospitals in Cologne and Baden-Württemberg to report patient data theft in mid-April.
5/22/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals confirmed a November 2025 to February 2026 cyberattack exposing about 1.8 million patients' biometrics, health records, IDs, and precise geolocation.
5/19/2026 • Data Breaches & Exposure Events • General
NYC Health + Hospitals disclosed a data breach reported to U.S. HHS on March 24, 2026, affecting about 1.8 million people in New York City.
5/18/2026 • Data Breaches & Exposure Events • General
NYC Health and Hospitals disclosed a months-long vendor-mediated cyberattack detected February 2, 2026, exposing medical, identity, geolocation, and fingerprint data for at least 1.8 million people in New York.
5/18/2026 • Data Breaches & Exposure Events • General
Western Orthopaedics disclosed a 2025 ransomware data breach affecting Texas and Massachusetts patients after PEAR claimed data access on the dark web.
5/5/2026 • Data Breaches & Exposure Events • General
ASC Ortho Management Company disclosed an email-environment data breach in 2025 that may have exposed personal and protected health information, with notifications mailed starting April 17, 2026 across Washington, D.C., Maryland, and Virginia.
4/24/2026 • Data Breaches & Exposure Events • General
Springfield Hospital disclosed an unauthorized email-account access in December 2025 that exposed sensitive identifiers, leading to investigation and possible class action.
4/14/2026 • Data Breaches & Exposure Events • General
Rocky Mountain Associated Physicians reported on February 2, 2026 that an unauthorized systems access may have exposed patient and financial data for 50,640 people in Salt Lake City.
4/13/2026 • Data Breaches & Exposure Events • General
Oracle Health confirmed a January 2025 hacking incident of legacy Cerner servers affecting up to 80 US hospitals, prompting patient notifications and CISA security guidance.
12/30/2025 • Data Breaches & Exposure Events • General
Silver Summit Medical Corporation notified potentially affected patients in California on August 19, 2026, after a third-party vendor incident acquired patient information months earlier.
8/28/2026 • Data Breaches & Exposure Events • General
Glucobit, Inc. disclosed a Reframe data breach involving personal health information in a Washington State Attorney General filing in July 2026.
8/14/2026 • Data Breaches & Exposure Events • General
MCBS disclosed in 2026 that a September 2025 network breach exposed personal and health information of 1.26 million people connected to healthcare clients in Georgia and elsewhere.
7/29/2026 • Data Breaches & Exposure Events • General
In 2026, U.K.-based Craneware disclosed a cybersecurity incident compromising customer and employee data, amid rising healthcare billing breaches affecting hospitals and patients.
7/29/2026 • Data Breaches & Exposure Events • General
Medical Computer Business Services disclosed in 2026 that a 2025 cyberattack on its healthcare systems may have exposed personal and medical information of 1,261,464 Americans.
7/29/2026 • Data Breaches & Exposure Events • General
HHS OCR breach-portal data under the HITECH Act reports 772 large US healthcare breaches in 2025, with hacking and mega-incidents shaping totals.
7/28/2026 • Data Breaches & Exposure Events • General
MCBS reported a September 2025 cyberattack in Atlanta that potentially exposed Social Security numbers and medical data for 1,261,464 individuals.
7/28/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP investigated potential class action claims tied to a January 28, 2026 Penobscot Valley Hospital network intrusion in Lincoln, Maine.
7/28/2026 • Data Breaches & Exposure Events • General
Regional Center of Orange County notified Cypress office clients in California after a janitorial contractor discarded potentially sensitive records in regular trash on May 27, 2026.
7/28/2026 • Data Breaches & Exposure Events • General
Vanderbilt Health notified patients in Nashville, Tennessee, around July 24, 2026, that a compromised employee email account may have exposed medical information.
7/28/2026 • Data Breaches & Exposure Events • General
Wolf Haldenstein Adler Freeman & Herz LLP began investigating a Lifespark Management Services data breach reported in February 2026 in St. Louis Park, Minnesota.
7/27/2026 • Data Breaches & Exposure Events • General
RXNT filed a Washington State Attorney General breach notification after possible unauthorized access to healthcare cloud systems holding personal and health-related data.
7/25/2026 • Data Breaches & Exposure Events • General
Centers Laboratory in New Jersey detected unauthorized access in August 2025 and reportedly began patient notification around July 20, 2026 after data exfiltration.
7/24/2026 • Data Breaches & Exposure Events • General
Unlimited Technology Systems LLC identified suspicious activity on October 19, 2025, after an unauthorized party potentially accessed patient PII and PHI in Montgomery, Ohio.
7/24/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating NAS Recovery Solutions after a reported patient-data breach involving electronic medical records and network systems affected about 7,000 people in the USA.
7/24/2026 • Data Breaches & Exposure Events • General
Community Health Center of Buffalo Inc. reported unauthorized network access in April 2026 that potentially exposed patient identifiers and health information, prompting notifications and credit monitoring.
7/21/2026 • Data Breaches & Exposure Events • General
Heart Care Centers of Illinois notified individuals after a potential data breach on when and where Palos Park, Illinois exposed identity, payment, and medical information.
7/20/2026 • Data Breaches & Exposure Events • General
Redwood Caregiver Resource Center notified caregivers on June 30, 2026 of unintended disclosure of personal identifiers via a misdirected email.
7/20/2026 • Data Breaches & Exposure Events • General
Casper Orthopedics disclosed a ransomware-linked data breach in the US after Anubis claimed responsibility for unauthorized exposure of patient medical records.
7/15/2026 • Data Breaches & Exposure Events • General
Centers Lab NJ LLC disclosed unauthorized data access in August 2025 that may have exposed personal and protected health information, with notification and monitoring guidance for affected individuals.
7/14/2026 • Data Breaches & Exposure Events • General
Lake Region Healthcare notified patients in Fergus Falls, Minnesota, after unauthorized network access detected in May 2025 and investigated through June 2026.
7/13/2026 • Data Breaches & Exposure Events • General
Clinical Registry disclosed a data breach affecting 8,545 patients at Dignity Health’s St. Mary’s Medical Center, including medical record identifiers.
7/12/2026 • Data Breaches & Exposure Events • General
AdaptHealth disclosed on July 2 that social engineering enabled contractor-session compromise, leading to exfiltration of patient and insurance billing data from cloud systems.
7/9/2026 • Cybersecurity (Privacy-Relevant) • General
In 2025 and 2026, Greenbaum Rowe Smith and Davis reported a cyberattack that led HHS Office for Civil Rights to post a protected health information breach affecting 12,801 people.
7/8/2026 • Data Breaches & Exposure Events • General
iRhythm Technologies notified California officials in 2026 of unauthorized access to unencrypted patient information affecting more than 500 residents.
6/17/2026 • Data Breaches & Exposure Events • General
Kentucky Management Services Organization reported a CRS medical records vendor breach affecting about 500 Kentucky Bariatric Institute patients, with exposure limited to names, medical record numbers, and service dates.
6/13/2026 • Data Breaches & Exposure Events • General
Western Orthopaedics, P.C. disclosed a 113,330-person healthcare data breach after unauthorized network access during September 2025.
6/1/2026 • Data Breaches & Exposure Events • General
The Oncology Institute received May 2026 notification from Kroll and filed an SEC Form 8-K on May 22, 2026 about unauthorized access to patient-data systems via a vendor.
5/26/2026 • Data Breaches & Exposure Events • General
On May 20, 2026, Kroll notified The Oncology Institute about vendor-detected unauthorized access tied to patient data after a November 2025 breach disclosure.
5/26/2026 • Data Breaches & Exposure Events • General
Erie Family Health Centers confirmed unauthorized access between December 10, 2025 and January 27, 2026, potentially exposing health and identity data for about 570,000 people in Chicago.
5/20/2026 • Data Breaches & Exposure Events • General
Healthcare breaches involving unsecured PHI trigger HIPAA notification duties to individuals and HHS, with ransomware, phishing, and cloud misconfiguration cited as common causes.
4/15/2026 • Cybersecurity (Privacy-Relevant) • General
McShane & Brady, LLC announced a Tennessee data breach involving unauthorized email access that exposed PII and protected health information for 3,171 individuals in December 2025.
4/14/2026 • Data Breaches & Exposure Events • General
TriZetto Provider Solutions data breach exposes patient records nationwide from November 2024 to October 2, 2025, with notification beginning in December 2025.
2/18/2026 • Data Breaches & Exposure Events • General
Healthcare providers and business associates in the United States faced rising HIPAA data breaches from 2009 to January 2026.
1/4/2026 • Data Breaches & Exposure Events • General
HHS OCR listings show nearly 57 million individuals affected by healthcare data breaches in 2025, with major vendor and ransomware incidents reported across the United States.
1/2/2026 • Data Breaches & Exposure Events • General
France Health Ministry reports 15 million health records exposed in late 2025 following a cyberattack on Cegedim Sante software used by 1500 doctors in France.
11/3/2025 • Data Breaches & Exposure Events • General
Two healthcare providers disclosed data breaches in 2025, exposing patient identifiers and health information, prompting breach notifications and identity protection measures.
11/3/2025 • Data Breaches & Exposure Events • General
Goshen Medical Center and Survival Flight disclosed 2025 data breach incidents exposing patient information in North Carolina and Arkansas.
9/18/2025 • Data Breaches & Exposure Events • General
In 2025, hospitals report email and vendor driven data breaches exposing protected health information across California, Louisiana, Connecticut, South Dakota, and Tennessee.
9/12/2025 • Data Breaches & Exposure Events • General
Frederick Health Medical Group confirmed a ransomware breach affecting 934,326 patients in Maryland in 2025, triggering class action lawsuits alleging cybersecurity and breach-notice failures.
4/28/2025 • Data Breaches & Exposure Events • General
Healthcare providers in the United States reported 2024 to 2025 data breaches, with investigations finding unauthorized access to patient identifiers and medical information.
4/16/2025 • Data Breaches & Exposure Events • General
Healthcare providers in Virginia, Massachusetts, California, New York, and Ohio reported protected health information exposure from ransomware and unauthorized access incidents during 2023 to 2024.
1/15/2025 • Data Breaches & Exposure Events • General
Terry J. Dubrow, MD, A Medical Corp. notified patients and California and Vermont authorities on August 13, 2026, after a network intrusion exposed patient personal and health information in Newport Beach.
8/14/2026 • Data Breaches & Exposure Events • General
Nephrology Associates notified affected individuals in the United States on July 30, 2026, after unauthorized access exposed medical and identity information from January through April.
7/30/2026 • Data Breaches & Exposure Events • General
Youth Home Inc. disclosed on July 13, 2026, that an unauthorized party accessed a Little Rock employee email inbox containing sensitive health and identity information.
7/29/2026 • Data Breaches & Exposure Events • General
Loma Linda University Health disclosed in Loma Linda, California, that a May 25, 2026 research upload exposed limited patient health information to an external AI platform.
7/28/2026 • Data Breaches & Exposure Events • General
Clover Health disclosed a healthcare data breach to the SEC on July 4, 2026, with PII and PHI exposure in the United States.
7/24/2026 • Data Breaches & Exposure Events • General
Dermatology Partners disclosed a Catonsville, Maryland breach after unauthorized access between February 27 and March 10, 2026 may have exposed patient records.
7/23/2026 • Data Breaches & Exposure Events • General
Alkegen disclosed a ransomware-related breach on April 2026 after Akira claimed theft of data including Social Security numbers and health records.
7/21/2026 • Data Breaches & Exposure Events • General
SportsMed Physical Therapy disclosed a July 7, 2026 breach in Glen Rock, New Jersey, after a compromised employee email account potentially exposed patient and health insurance information.
7/21/2026 • Data Breaches & Exposure Events • General
Oak Hill confirmed May 13, 2026 that an October 6, 2025 security incident involved unauthorized access to files containing PII and protected health information, with notifications mailed June 30, 2026 in Connecticut.
7/20/2026 • Data Breaches & Exposure Events • General
PennyMac unit Private National Mortgage Acceptance Company LLC disclosed a Group Health Plan breach affecting 3,972 U.S. individuals after HHS notification on June 9, 2026.
7/13/2026 • Data Breaches & Exposure Events • General
Sturdy Health Inc. disclosed a June 5, 2026 protected health information breach affecting 1,006 U.S. individuals to HHS from Attleboro, Massachusetts.
7/13/2026 • Data Breaches & Exposure Events • General
One Medical reported a June 2026 vendor file storage breach affecting One Medical Seniors archived patient health records, with ShinyHunters claiming responsibility.
6/24/2026 • Data Breaches & Exposure Events • General
Orthopaedic Specialists of Massachusetts disclosed a January 2026 data breach in Massachusetts, reporting potential exposure of patient and employee medical records.
6/12/2026 • Data Breaches & Exposure Events • General
Clinical Registry Solutions reported a 2026 patient-data breach for St. Mary's Medical Center after Akira claimed data theft on a Tor site.
6/11/2026 • Data Breaches & Exposure Events • General
IMA Diligence Services LLC disclosed a December 2025 breach tied to a third-party file server, affecting about 525,306 people, with notifications beginning May 29, 2026.
6/5/2026 • Data Breaches & Exposure Events • General
Champion Healthcare disclosed a May 8, 2026 consumer notification after a late-January 2026 incident involving unauthorized access to internal systems.
5/12/2026 • Data Breaches & Exposure Events • General
Sandhills Medical Foundation disclosed on April 28, 2026 a ransomware breach that affected 169,017 patients after unauthorized access to company servers and potential exposure of personal health information.
4/29/2026 • Data Breaches & Exposure Events • General
Hong Kong privacy regulators reported that a ransomware attack on a club management system compromised personal information of more than 9,000 people.
4/23/2026 • Data Breaches & Exposure Events • General
SimonMed Imaging data breach reveals exposure of patient data in the United States between January and February 2025.
10/24/2025 • Data Breaches & Exposure Events • General
Whitfield Regional Hospital detected unauthorized network access in 2025, later traced it to May 15, 2025, and issued patient notifications in July 2026.
7/25/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood opened a privacy and cybersecurity investigation into ZenPatient on July 21, 2026, after a breach detected in late February 2026.
7/21/2026 • Data Breaches & Exposure Events • General
HHS Office for Civil Rights statistics show 2024 healthcare breaches exposed about 289 million people, largely due to a Change Healthcare ransomware attack.
7/5/2026 • Data Breaches & Exposure Events • General
Ahdoot & Wolfson explored a potential class action after Boston Orthotics and Prosthetics disclosed a cybersecurity incident that may have exposed sensitive patient and employee data.
7/2/2026 • Data Breaches & Exposure Events • General
In February 2024, ALPHV/BlackCat ransomware disrupted Change Healthcare systems and exposed Social Security numbers and medical records for about 192.7 million people in the United States.
5/27/2026 • Data Breaches & Exposure Events • General
Sandhills Medical Foundation notified South Carolina patients by mail in April 2026 after a May 2025 ransomware discovery, citing potential exposure of Social Security numbers and health information.
4/30/2026 • Data Breaches & Exposure Events • General
Cory Watson Attorneys is investigating a LockBit 5.0 ransomware claim against Decatur Diagnostic Laboratory in Decatur, Alabama, reported April 14, 2026.
4/21/2026 • Data Breaches & Exposure Events • General
ColorTokens threat advisory reports ransomware and healthcare data exposures tied to stolen credentials, identity vulnerabilities, and third-party application access in the 2020s.
7/1/2026 • Data Breaches & Exposure Events • General
Interesting
Medical Cost Benefit Services (MCBS) disclosed a data breach affecting about 1.2 million individuals, raising concerns about healthcare cybersecurity across integrated third-party ecosystems.
7/27/2026 • Data Breaches & Exposure Events • General
Wolf Haldenstein Adler Freeman & Herz LLP began investigating a Heart Care Centers of Illinois data breach in Palos Park, Illinois, after breach notifications.
7/24/2026 • Data Breaches & Exposure Events • General
David Ludlow of NCC Group discusses cybersecurity measures and patient steps after a data breach at a major Australian healthcare provider affects patient information.
7/20/2026 • Data Breaches & Exposure Events • General
Dozens of U.S. hospitals reported patient data compromise after a January 22, 2025 Oracle Health Cerner breach, as Oracle Health sought delayed notification.
7/14/2026 • Data Breaches & Exposure Events • General
Ransomware group Anubis claimed an attack on Casper Orthopedics in Wyoming on July 12, 2026, involving exposed patients data and medical records.
7/13/2026 • Data Breaches & Exposure Events • General
Greenbaum Rowe Smith & Davis LLP notified about 12,800 New Jersey patients in response to a cybersecurity breach involving protected health information affecting multiple healthcare systems.
7/9/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates the All About Women’s Care data breach reported in 2026 after unauthorized network server access exposed patient information affecting about 12,000 people.
7/9/2026 • Data Breaches & Exposure Events • General
Spokane Digestive Disease Center disclosed May 2026 findings of unauthorized employee email access that exposed patient data, with notifications beginning May 26.
7/7/2026 • Data Breaches & Exposure Events • General
Singing River Health System investigated unauthorized network access from December 19-21, 2025 and disclosed patient-file exposure on February 10, 2026.
7/7/2026 • Data Breaches & Exposure Events • General
Ransomware intelligence on July 2, 2026 alleged an unverified INCRansom attack on Colorado Rehabilitation & Occupational Medicine, with patient data exposure unconfirmed.
7/2/2026 • Data Breaches & Exposure Events • General
Operation PAR, Boley Centers, and Eleos notified individuals in 2026 after discovering a June 2025 unauthorized network intrusion that may have involved patient and employee personal information.
7/2/2026 • Data Breaches & Exposure Events • General
On June 29, 2026, dark web monitoring sites reported Rocky Mountain Care as a data breach victim, with suspected Social Security number and address exposure.
6/30/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates the MCBS, LLC data breach in Augusta, Georgia, after potential exposure of sensitive personal and protected health information between Sept. 22-26, 2025.
6/29/2026 • Data Breaches & Exposure Events • General
Operation PAR began breach notifications on June 25, 2026 for at least 375 Florida clients after unauthorized access to medical and identity data.
6/29/2026 • Data Breaches & Exposure Events • General
Northeast Professional Caregivers disclosed an April 23 email account breach potentially affecting personal health information and personal identifiers.
6/26/2026 • Data Breaches & Exposure Events • General
One Medical identified June 8 to June 11, 2026 unauthorized access to a third-party file storage system for One Medical Seniors patient records, as ShinyHunters claimed 8.8 TB exfiltration on June 13, 2026.
6/24/2026 • Data Breaches & Exposure Events • General
On June 13, One Medical Senior Health disclosed limited unauthorized access to archived patient records stored in a third-party file system.
6/22/2026 • Data Breaches & Exposure Events • General
In Houston, a developing investigation into an alleged One Medical data breach examines patient information exposure and potential legal claims for affected individuals.
6/20/2026 • Data Breaches & Exposure Events • General
Colorado Health Network, Inc. disclosed an unauthorized-access cybersecurity incident and began breach notifications on June 18, 2026, after exposure of patients medical and financial data.
6/19/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood began investigating the Pivot Health data breach on June 19, 2026 after reporting of unauthorized access to sensitive health information in the USA.
6/19/2026 • Cybersecurity Tech (Privacy-Relevant) • General
ShinyHunters issued an extortion threat against One Medical in 2023, while One Medical confirmed a limited third-party storage access affecting archived Iora Health records.
6/18/2026 • Data Breaches & Exposure Events • General
One Medical reported June 13 unauthorized access to a third-party file storage system holding archived health records for limited legacy Iora Health patients.
6/18/2026 • Data Breaches & Exposure Events • General
On June 13, One Medical learned of unauthorized access to a third-party file storage system used for archived One Medical Senior Health records, affecting a limited number of patients.
6/17/2026 • Data Breaches & Exposure Events • General
Open Arms Care Corporation notified potentially affected individuals starting June 9, 2026 after unauthorized access to its Tennessee email environment occurred between June and August 2025.
6/17/2026 • Data Breaches & Exposure Events • General
A cybercriminal accessed stored employee communications in a breach reported in notifications sent in letters to 2,027 individuals.
6/17/2026 • Data Breaches & Exposure Events • General
Gastro Health disclosed two phishing incidents on Feb. 25 and March 2 that enabled unauthorized access to patient files affecting over 37,000 people.
6/16/2026 • Data Breaches & Exposure Events • General
HHS OCR reported that 2026 healthcare breach reports have impacted more than 19 million individuals, with hacking/IT incidents the leading breach type as of June 9, 2026.
6/16/2026 • Data Breaches & Exposure Events • General
Rochester Regional Health notified patients in Rochester, New York after a January phishing attack involving a third-party vendor system, offering 12-month identity monitoring despite an incorrect hospital name on letters.
6/15/2026 • Data Breaches & Exposure Events • General
Open Arms Care Corporation notified clients in Tennessee starting June 9, 2026 after an internal review found unauthorized access to certain email accounts in 2025.
6/14/2026 • Data Breaches & Exposure Events • General
Almeida Law Group investigates a June 8, 2026 alleged ransomware breach at Central Arkansas Pediatrics in Conway, Arkansas, while affected data scope remains unconfirmed.
6/9/2026 • Data Breaches & Exposure Events • General
Senator Bill Cassidy asked NYC Health + Hospitals for details about a months-long hack that allegedly exposed medical records and fingerprint scans for over 1.8 million patients.
6/5/2026 • Data Breaches & Exposure Events • General
Tennessee officials investigated reports from consumers in Minnesota, New York, and Idaho of Medicare and private insurance charges for unreceived medical supplies traced to Memphis DME Supply.
5/21/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating a Rhode Island nonprofit data breach reported to HHS after unauthorized network server access allegedly exposed patient information for about 5,630 people.
5/20/2026 • Data Breaches & Exposure Events • General
CMS deferred more than 1.3 billion dollars in California Medicaid payments as a Congressional Medical Office breach exposed lawmakers' prescription and medical record data via RXNT.
5/14/2026 • Data Breaches & Exposure Events • General
Lawmakers were notified after an RXNT-targeted data breach affecting the congressional medical office potentially exposed prescription history on March 1 and 3.
5/13/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates Western Orthopaedics, P.C. after a Texas patient data breach reported in 2026.
5/12/2026 • Data Breaches & Exposure Events • General
Alta Orthopaedics reported a March 2026 discovery of unauthorized access to patient data affecting systems during February 3-6, 2026, with remediation and credit monitoring offered.
5/11/2026 • Data Breaches & Exposure Events • General
Sandhills Medical Foundation discovered a May 2, 2025 ransomware incident on May 8, 2025, potentially exposing personal and medical data of 169,017 patients.
5/6/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP is investigating a May 8, 2025 ransomware breach at Sandhills Medical in North Carolina that exposed patient health information for about 169,017 people.
5/4/2026 • Data Breaches & Exposure Events • General
Integrated Pain Associates reported a 2026 data breach in Killeen, Texas, exposing patient Social Security numbers and medical records and offering 12 months of credit monitoring.
5/3/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP is investigating potential class action claims after Sandhills Medical reported a ransomware attack exposing patient health data in McBee, South Carolina.
5/3/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP described investigation of a DermCare Management patient data breach affecting 9,724 Texas residents after file exfiltration in February 2025.
5/1/2026 • Data Breaches & Exposure Events • General
McShane & Brady, LLC is investigating a Doctor Alliance vendor breach that potentially exposed health records of 724 Duncan Regional Hospital patients in Oklahoma between Oct. 31 and Nov. 17, 2025.
4/30/2026 • Data Breaches & Exposure Events • General
DermCare Management notified of a healthcare data breach in 2025, exposing Social Security, financial, and medical records across Florida, Texas, Virginia, and California.
4/30/2026 • Data Breaches & Exposure Events • General
North Texas Behavioral Health Authority notified 285,086 Dallas-area patients after third-party network access exposed patient files with Social Security numbers.
4/21/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates a hacking-related network server data breach at Hospital Caribbean Medical Center in Puerto Rico after HHS notification affecting about 92,000 people.
4/21/2026 • Data Breaches & Exposure Events • General
IPPC Inc. reported a September 18 to 19 network intrusion that potentially exposed medical and Social Security data for up to 133,862 people across New Jersey and neighboring states.
4/17/2026 • Data Breaches & Exposure Events • General
CardioFit Medical Group discovered a patient-data email incident on February 17, 2026, and issued notifications around April 10, 2026.
4/16/2026 • Data Breaches & Exposure Events • General
Vital Imaging Diagnostic Centers reported a 2025 network intrusion in Miami involving unauthorized file removal that may have exposed medical and government identification data and issued notifications in 2026.
4/15/2026 • Data Breaches & Exposure Events • General
Springfield Hospital notified individuals starting February 10, 2026, after a December 17, 2025 employee email account compromise potentially exposed personal and health information.
4/14/2026 • Data Breaches & Exposure Events • General
DermCare Management notified affected individuals in March 2026 after a February 2025 unauthorized access event potentially impacted patient information.
4/10/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP investigate a December 2025 data breach at QualDerm Partners affecting Texas residents.
2/25/2026 • Data Breaches & Exposure Events • General
Healthcare providers disclosed data breaches in 2024-2025 in New Jersey, Pennsylvania, and California involving patient data and ransomware.
11/5/2025 • Data Breaches & Exposure Events • General
Three healthcare entities in California and Massachusetts reported data breaches in 2024 and 2025.
10/20/2025 • Data Breaches & Exposure Events • General
Hackers breached Healthcare Interactive between July 8 and July 12, 2025, exposing customer personal and health data in the United States.
9/29/2025 • Data Breaches & Exposure Events • General
Health data breaches at CPAP Medical Services, Health Services LLC, and East Adams Rural Healthcare affect patients in Florida, Maine, and Washington during 2024 and 2025.
8/20/2025 • Data Breaches & Exposure Events • General
UChicago Medicine Medical Group ended its relationship with Nationwide Recovery Services after a July 2024 vendor breach potentially exposed patients' personal information.
5/29/2025 • Data Breaches & Exposure Events • General
UChicago Medicine disclosed a July 2024 third-party vendor cybersecurity incident through Nationwide Recovery Services that may have exposed personal data of nearly 40,000 patients.
5/28/2025 • Data Breaches & Exposure Events • General
Cherry Health reported a computer network breach after suspicious activity on April 19 in Grand Rapids, Michigan, with potential exposure of patient and staff identifiers.
6/19/2026 • Data Breaches & Exposure Events • General
Craneware disclosed a 2026 cybersecurity incident potentially compromising customer and employee data in the United Kingdom, amid rising healthcare breaches targeting billing platforms.
7/28/2026 • Data Breaches & Exposure Events • General
Mid-South Pulmonary & Sleep Specialists P.C. investigated ransomware-linked unauthorized network access in Memphis after Nov. 2, 2025 detection, later notifying patients in June 2026.
7/8/2026 • Data Breaches & Exposure Events • General
Heart of America Eye Care disclosed a likely unauthorized network access event in Kansas City during April 2026, with HHS notification on June 5, 2026 after a CMD Organization dark web claim.
7/7/2026 • Data Breaches & Exposure Events • General
Centers for Dialysis Care reported a March 2026 network breach and May 15, 2026 HHS notification affecting about 8,000 U.S. individuals through potential exposure of identity and health data.
7/6/2026 • Data Breaches & Exposure Events • General
Glucobit Inc. notified Texas users after a May 2026 unauthorized download exposed Reframe medical information and was reported to the California Attorney General on June 30, 2026.
7/1/2026 • Data Breaches & Exposure Events • General
MCBS LLC reported a privacy incident involving unauthorized network access between Sept. 22 and Sept. 26, 2025, to the California Attorney General on June 26, 2026.
6/29/2026 • Data Breaches & Exposure Events • General
Northeast Professional Caregivers reported an email account breach discovered April 23 in Jackson Township, Ohio, potentially exposing personal health information and personal identifiers.
6/26/2026 • Data Breaches & Exposure Events • General
One Medical Seniors disclosed a June 13, 2026 ransomware breach of a third-party file-storage archive, after unauthorized access lasting about three days.
6/20/2026 • Data Breaches & Exposure Events • General
On June 13, 2026, One Medical Seniors disclosed unauthorized access to a third-party archived-file storage system, affecting patients at multiple US clinic locations.
6/20/2026 • Data Breaches & Exposure Events • General
Attorneys working on a potential class action sought Colorado Health Network breach victims after a cybersecurity incident exposed sensitive personal and health data and notices began June 18, 2026.
6/19/2026 • Data Breaches & Exposure Events • General
Fresenius Kabi USA LLC disclosed in 2026 a third-party unauthorized access incident on an Ivenix-associated network potentially exposing employee identifiers and medical data affecting 285 Massachusetts residents.
6/17/2026 • Data Breaches & Exposure Events • General
iRhythm Holdings disclosed June 2026 third-party hosted application cyberattack results including theft of patient protected health information and other personal data, while investigation continued.
6/17/2026 • Data Breaches & Exposure Events • General
Southwest Behavioral & Health Services reported April-May 2026 unauthorized access to six employee email accounts affecting 2,316 individuals in the United States.
6/17/2026 • Data Breaches & Exposure Events • General
Lifepoint Health disclosed a 2026 vendor-related data breach after compromised account access exposed U.S. vendor employees' personally identifiable information.
6/17/2026 • Data Breaches & Exposure Events • General
Legal Services of Long Island disclosed a data breach to the Vermont Attorney General on June 12, 2026, exposing Social Security, financial, health, and biometric data.
6/15/2026 • Data Breaches & Exposure Events • General
Liberty Solutions Inc. reported a PHI-related data breach affecting 7,329 U.S. individuals, with HHS filing details but no public specifics on exposed data types or attack dates.
6/11/2026 • Data Breaches & Exposure Events • General
CenterWell disclosed a U.S. data breach in notifications to Massachusetts and Texas attorneys general and HHS, affecting 9,651 people including 4,618 Texans.
6/8/2026 • Data Breaches & Exposure Events • General
NJ Pain Care Specialists LLC reported to U.S. HHS on May 14, 2026 after unauthorized access between Feb 25 and Feb 28, 2025 potentially exposed PII and protected health information.
6/8/2026 • Data Breaches & Exposure Events • General
LGBTQ Center OC reported a Dec 25-26, 2025 data breach to the California Attorney General on June 5, 2026, exposing PII, PHI, and biometric identifiers affecting Rhode Island residents.
6/5/2026 • Data Breaches & Exposure Events • General
Attorneys investigating a Gastro Health phishing-driven data breach on February 25 and March 2, 2026 seek class action plaintiffs in the U.S.
5/29/2026 • Data Breaches & Exposure Events • General
Nursa disclosed unauthorized access to clinician profiles on its Murray, Utah platform, exposing names and full dates of birth for 13,168 Washington residents.
5/29/2026 • Data Breaches & Exposure Events • General
Jeffrey Lisiecki MD PLLC disclosed a patient health data breach after unauthorized access to an employee email account occurred between late 2024 and early 2026.
5/26/2026 • Data Breaches & Exposure Events • General
Ira L. Savetsky, MD PLLC reported a long-running unauthorized employee email access incident in Manhattan from 2024-2026, exposing patient protected health information.
5/26/2026 • Data Breaches & Exposure Events • General
On January 27, 2026, Erie Family Health Centers in Chicago confirmed suspected unauthorized access between December 10, 2025 and January 27, 2026 affecting about 570,000 individuals.
5/21/2026 • Data Breaches & Exposure Events • General
Vacation Myrtle Beach disclosed a ransomware-linked breach on June 16-19, 2025, potentially exposing Social Security numbers, financial data, and possible health records for about 10,750 people.
5/18/2026 • Data Breaches & Exposure Events • General
Pivot Health disclosed a March 2026 AWS data breach affecting 1,172 people in Texas and 27 in Nebraska after unauthorized access between Feb. 26 and March 13.
5/15/2026 • Data Breaches & Exposure Events • General
FMRS Health Systems disclosed in 2026 an intrusion from January to February that potentially exposed PII and PHI, after Qilin claimed responsibility.
5/13/2026 • Data Breaches & Exposure Events • General
Belmont Aesthetic & Reconstructive Plastic Surgery disclosed a U.S. health-data breach impacting 528 individuals after an Insomnia ransomware dark-web claim on March 3, 2026.
5/12/2026 • Data Breaches & Exposure Events • General
Healthcare In Action reported a January 2026 credential compromise that exposed PII and protected health information for 1,143 people, with breach notification to HHS in March 2026.
5/11/2026 • Data Breaches & Exposure Events • General
Western Orthopaedics reported a 2025 unauthorized access incident that potentially exposed identity, financial, and health data, with legal teams seeking class action filings.
5/5/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys investigated whether a class action can be filed after Integrated Pain Associates disclosed an unauthorized systems access around February 24, 2026 in Texas.
5/5/2026 • Data Breaches & Exposure Events • General
Tri-Cities Gastroenterology notified 67,115 individuals in April 2026 after a third-party data breach exposed Social Security numbers and medical record numbers.
5/4/2026 • Data Breaches & Exposure Events • General
Integrated Pain Associates notified patients on April 30, 2026 after investigation found possible unauthorized access to sensitive data around February 24, 2026 in Killeen, Texas.
5/2/2026 • Data Breaches & Exposure Events • General
Community Health Systems Inc. disclosed a suspected data breach in late February 2026 affecting potential PII and protected health information across California clinic locations.
4/30/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys are assessing potential class action after Mid-South Pulmonary & Sleep Specialists detected suspicious activity in November 2025 and found exposure of Social Security and medical diagnosis data.
4/30/2026 • Data Breaches & Exposure Events • General
Greater Boston Urology reported a protected health information breach affecting 4,717 people to the U.S. Department of Health and Human Services on Feb. 28, 2026.
4/29/2026 • Data Breaches & Exposure Events • General
Skin & Beauty Center Inc. and DermCare Management reported an unauthorized patient-data copy from Feb. 26, 2025, and mailed breach notices after a March 2, 2026 review in California.
4/27/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP investigates an alleged Southern Illinois Dermatology data breach after November 28, 2025 access and April 2, 2026 notification in Illinois.
4/24/2026 • Data Breaches & Exposure Events • General
Aligned Orthopedic Partners identified unusual activity in its email system on December 8, 2025, reporting potential exposure of personal and health information after unauthorized access in late 2025.
4/18/2026 • Data Breaches & Exposure Events • General
Aligned Orthopedic Partners reported an email system intrusion between Nov. 16 and Dec. 16, 2025, potentially exposing PII and protected health information.
4/18/2026 • Data Breaches & Exposure Events • General
Longevity Health Plan reported a data breach affecting about 15,000 U.S. Medicare plan members after disclosure to HHS on March 4, 2026.
4/16/2026 • Data Breaches & Exposure Events • General
Pediatric Products disclosed suspicious network activity in February 2026 and reported unauthorized access exposing customers' medical and personal data across multiple U.S. states.
4/15/2026 • Data Breaches & Exposure Events • General
Legend Senior Living LLC disclosed a March 2026 data breach discovered after unauthorized access between July 2025 and August 2025, with April 10, 2026 notices to Texas and other state attorneys general.
4/13/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys evaluate a potential class action after Emanuel Medical Center reported a May 2025 breach affecting 28,963 people.
3/25/2026 • Data Breaches & Exposure Events • General
Emanuel Medical Center in California reports unauthorized access to hospital systems May 21-24, 2025, exposing patients PII and PHI.
2/17/2026 • Data Breaches & Exposure Events • General
Cerner and Jupiter Medical Center report January 14 2026 data breach in Florida affecting patient data
1/22/2026 • Data Breaches & Exposure Events • General
MMMBS disclosed a data breach on January 2, 2026 in Michigan exposing pii and phi for over 28,000 individuals.
1/16/2026 • Data Breaches & Exposure Events • General
Beverly Hills Oncology Medical Group reports a data breach in February 2025 affecting patients in California.
11/3/2025 • Data Breaches & Exposure Events • General
Goshen Medical Center detected a data breach on February 15 2025 in the United States and notified affected individuals.
10/9/2025 • Data Breaches & Exposure Events • General
Altos disclosed on June 17 that an unauthorized party accessed an internet exposed internal system containing personal and health data of patients in Southern California.
9/19/2025 • Data Breaches & Exposure Events • General
Goshen Medical Center in Fayetteville disclosed a ransomware driven data breach affecting 456385 patients on March 4 2025
9/18/2025 • Data Breaches & Exposure Events • General
Fusion Medical Staffing reported a 2025 breach discovered March 6 and notified Maine residents starting August 19 after exposure of personal and medical information.
8/20/2025 • Data Breaches & Exposure Events • General
CPAP Medical reported to the California Attorney General a breach discovered June 27, 2025, involving potential access to sensitive data between December 2024.
8/18/2025 • Data Breaches & Exposure Events • General
Select Medical began June 6, 2025 notifications after a July 2024 unauthorized third-party access to patient systems potentially exposed personal identifiers and protected health information.
6/9/2025 • Data Breaches & Exposure Events • General
Shore Medical Center notified patients in New Jersey after a Nationwide Recovery Services vendor breach exposed potentially sensitive medical and identity data, with class action discussions beginning in 2025.
5/30/2025 • Data Breaches & Exposure Events • General
BMC Health System identified unauthorized access to Workday-linked user accounts on March 9, 2025, and attorneys sought breach-notified individuals for a potential class action.
4/28/2025 • Data Breaches & Exposure Events • General
OCH Regional Medical Center filed an HHS Office for Civil Rights breach notice on March 11, 2025 and began notifying affected individuals after unauthorized access to sensitive consumer information.
3/26/2025 • Data Breaches & Exposure Events • General
Birch Medical filed a California Attorney General notice on February 27, 2025, after investigation of suspected unauthorized network access exposed consumers' names and medical information.
3/5/2025 • Data Breaches & Exposure Events • General
On October 2, 2024, Charleston Area Medical Center detected phishing-driven email compromise affecting 67,413 people, potentially exposing health and identity data and prompting class action discussions.
2/20/2025 • Data Breaches & Exposure Events • General
Attorneys sought individuals affected by a January 2025 Sierra Vista Hospital & Clinics breach in Truth or Consequences, New Mexico, to assess a possible class action.
1/29/2025 • Data Breaches & Exposure Events • General
McLeod Health detected unauthorized access to a Dillon Family Medicine server months after Oct 2025 intrusions, with Qilin ransomware blamed and HIPAA timing issues discussed.
6/11/2026 • Data Breaches & Exposure Events • General
The Oncology Institute disclosed a May 2026 Kroll notification about unauthorized access to patient-data systems tied to a third-party vendor breach.
5/27/2026 • Data Breaches & Exposure Events • General
DermCare Management found suspicious activity on February 26, 2025 and reported an intrusion between February 14 and February 26 that may have exposed patient PII and PHI.
4/15/2026 • Data Breaches & Exposure Events • General
IPPC reported an unauthorized network access in September 2025 that potentially exposed PHI and PII for over 133,000 customers across six states.
4/10/2026 • Data Breaches & Exposure Events • General
On February 27, 2026, Boston Mountain Rural Health Center began notifying about a data security incident affecting about 4,800 individuals, prompting class action investigation.
4/6/2026 • Data Breaches & Exposure Events • General
Xsolis contained a healthcare data breach discovered on Jan. 22, prompting letters to some former Mayo Clinic patients.
6/22/2026 • Data Breaches & Exposure Events • General
Wakefield and Associates data breach affects Benefis Health System patients in central Montana in January 2025
12/12/2025 • Data Breaches & Exposure Events • General
AnMed reported malware-caused network disruption on Georgia and South Carolina health facilities, closing many departments while restoring systems.
7/27/2026 • Cybersecurity (Privacy-Relevant) • General
Signature Healthcare disclosed a nationwide data breach to the U.S. Department of Health and Human Services on June 5, 2026, while exposed data types remained undisclosed as of June 30, 2026.
7/9/2026 • Data Breaches & Exposure Events • General
United HealthCare Services disclosed a health data breach affecting 34,574 U.S. individuals to HHS on June 5, 2026.
7/8/2026 • Data Breaches & Exposure Events • General
Stockton Cardiology disclosed a breach in California between December 2025 and February 2026, exposing patient identifiers and billing records and triggering class-action intake for affected individuals.
3/23/2026 • Data Breaches & Exposure Events • General
Central Ozarks Medical Center disclosed a data breach in January 2026 in Missouri affecting personal identifiers and protected health information.
1/29/2026 • Data Breaches & Exposure Events • General
Fort Wayne Medical Education Program data breach affects 29,485 individuals in Indiana; unauthorized access occurred December 12-17, 2024; notices mailed October 2, 2025.
10/6/2025 • Data Breaches & Exposure Events • General
Huron Regional Medical Center in South Dakota reported a May 31 2025 data breach exposing PII and PHI.
9/11/2025 • Data Breaches & Exposure Events • General