Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
HCA Healthcare, Inc. notified regulators of a data breach that may have exposed personal information belonging to patients or employees. Here is what is known so far.
HCA Healthcare, Inc. Data Breach Exposes Personal Information Read More »
Blossom BH Opco Inc. notified the California Attorney General about a data breach that may have exposed personal information belonging to affected individuals.
Blossom BH Opco Inc. Data Breach Exposes Personal Information Read More »
El Camino Health notified California regulators of a data breach. The specific types of personal information involved have not been publicly disclosed.
El Camino Health Data Breach Exposes Personal Information Read More »
A data breach at Integrated Health Centers of West Virginia exposed patients’ Social Security numbers and health records, according to a notice filed with the Vermont Attorney General.
A ransomware group claims it accessed data from Suburban Orthopaedics, a New Jersey medical practice. The organization has not confirmed the incident, and the exact information involved has not been publicly disclosed.
Suburban Orthopaedics Data Breach Claim: Personal Information Reportedly Exposed Read More »
Marathon Health notified Vermont regulators that a data breach exposed patients’ Social Security numbers and health records. Here is what affected individuals need to know.
Marathon Health Data Breach Exposes Social Security Numbers and Health Records Read More »
A ransomware group claims responsibility for a cyberattack on UNM Health, though the organization has not confirmed that personal data was exposed.
UNM Health Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims responsibility for stealing data from LifeFone, a medical alert device provider, though the company has not confirmed the incident.
LifeFone Data Breach Claim: Personal Information Reportedly Exposed Read More »
The Research Foundation for Mental Health, Inc. notified Vermont regulators that a data breach compromised Social Security numbers belonging to affected individuals.
A ransomware group claims it accessed data from A&B Lab, a laboratory services provider. The company has not publicly confirmed the incident, and the specific data involved has not been disclosed.
A&B Lab Data Breach Claim: Personal Information Reportedly Exposed Read More »