Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Vascular Associates of South Alabama notified federal regulators of a data breach affecting 623 individuals after unauthorized access to an employee email account. The specific data types involved have not been publicly disclosed.
Vascular Associates of South Alabama Data Breach Exposes Personal Information Read More »
A hacking incident at Kostelic and Associates 3PLLC compromised email accounts containing patient health information, affecting 535 individuals according to a federal filing with HHS.
Kostelic and Associates 3PLLC Data Breach Exposes Patient Health Information Read More »
Arkansas Hospice Inc., operating as LifeTouch Health, notified regulators of a data breach exposing Social Security numbers, financial account details, and health records.
LifeTouch Health Data Breach Exposes Social Security Numbers and Health Records Read More »
Photon Health, a Brooklyn-based prescription network company, disclosed that a hacker exploited a software flaw to access patient names, contact details, and prescription records.
Photon Health Data Breach Exposes Prescription and Patient Contact Information Read More »
A ransomware group claims it accessed and stole data from HiqBio, a marine biotechnology company serving human and animal health markets. HiqBio has not publicly confirmed the incident.
HiqBio Data Breach Claim: Sensitive Company and Personal Data Reportedly Exposed Read More »
Kim Knobbe, a Missouri-based healthcare business associate, reported a data breach affecting 11,927 people to federal regulators after unauthorized access to a network server.
An extortion group claims it stole and published data from digital health company Sharecare, including B2B contact records and a smaller set of Brazilian health insurance details. Sharecare has not publicly confirmed the incident.
Sharecare Data Breach Claim: B2B Contact and Health Insurance Data Reportedly Exposed Read More »
A ransomware group claims it accessed patient data from Concord Eye Center, including Social Security numbers and medical records. The clinic has not publicly confirmed the incident.
Concord Eye Center Data Breach Claim: Patient Health and SSN Records Reportedly Exposed Read More »
Blueberry Pediatrics notified the California Attorney General of a data breach that may have exposed sensitive patient and personal information.
Blueberry Pediatrics Data Breach Exposes Patient Health and Personal Information Read More »
A ransomware group has claimed responsibility for an alleged data breach at MyMichigan Health, though the healthcare provider has not publicly confirmed the incident or any data exposure.
MyMichigan Health Data Breach Claim: Patient Records Reportedly Exposed Read More »