Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
LeMaitre Vascular, Inc. notified regulators that a data breach exposed Social Security numbers, government ID numbers, and health records belonging to affected individuals.
LeMaitre Vascular Data Breach Exposes Social Security Numbers and Health Records Read More »
G.I. Medicine Associates, P.C. notified regulators that unauthorized parties accessed patient Social Security numbers and health records in a recent data breach.
Partnership HealthPlan of California discovered a mailing mix-up that sent Primary Care Physician Selection Forms and Welcome Packets containing sensitive member data to the wrong recipients.
Practice Management, a medical billing and revenue cycle management firm serving Federally Qualified Health Centers, suffered a ransomware attack in which the Akira group claims to have stolen 43GB of corporate, employee, and client data.
MedImpact Healthcare Systems, a pharmacy benefits manager, discovered unauthorized activity in its systems in October 2025 that exposed personal information belonging to health plan members.
MedImpact Healthcare Systems Data Breach Exposes Personal and Health Plan Information Read More »
Promantra, Inc, a healthcare revenue cycle management company, suffered a ransomware attack claimed by the metaencryptor group, raising concerns that patient billing and medical data may have been exposed.
Promantra, Inc Data Breach Exposes Patient Billing and Healthcare Records Read More »
Ocracoke Health Center, Inc. notified regulators of a data breach that exposed patients’ Social Security numbers and health records, raising risks of identity theft and medical fraud.
Beckman Coulter, Inc, a major medical diagnostics company, suffered a ransomware attack claimed by the metaencryptor group, raising concerns about exposed personal and healthcare-related data.
Beckman Coulter, Inc Data Breach Exposes Sensitive Healthcare and Personal Data Read More »
Cedar County Memorial Hospital in Missouri suffered a cyberattack in August 2026 that disrupted its systems, and a hacking group has claimed it stole patient data.
Cedar County Memorial Hospital Data Breach Exposes Patient Health Records Read More »
Trinity Caring, a senior services organization jointly owned by Guardian Angels Senior Services and Cassia, suffered a ransomware attack by the Safepay group that exposed sensitive personal information.
Trinity Caring Data Breach Exposes Sensitive Patient and Employee Information Read More »