Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Anesthesia Group of Albany, P.C. notified the Vermont Attorney General that a data breach compromised patients’ health records, raising concerns about medical identity theft and fraud.
Anesthesia Group of Albany Data Breach Exposes Health Records Read More »
Precision Imaging Center, a Florida diagnostic imaging provider, discovered that an unauthorized party accessed its network and copied files that may hold patient information.
Precision Imaging Center Data Breach Exposes Patient Health Information Read More »
Boston Healthcare for the Homeless Program notified regulators that a data breach exposed patients’ Social Security numbers, government ID numbers, financial account details, and health records.
United Seating and Mobility LLC, doing business as Numotion, notified the Vermont Attorney General that a data breach exposed customers’ financial account codes and credit and debit card information.
SpinLife Data Breach: Numotion Website Hit by Payment Card Skimmer Read More »
ERMI LLC notified the Vermont Attorney General of a data breach that exposed patient health records, raising concerns about medical identity theft for those affected.
Networking Technology, Inc. notified the Vermont Attorney General of a data breach involving health records, raising concerns about medical identity theft for affected individuals.
Networking Technology, Inc. Data Breach Exposes Health Records Read More »
Clarinda Regional Health Center notified the Vermont Attorney General of a data breach that exposed patients’ Social Security numbers, raising identity theft concerns for affected individuals.
Clarinda Regional Health Center Data Breach Exposes Social Security Numbers Read More »
Waveny Lifecare Network notified the Vermont Attorney General of a data breach that exposed Social Security numbers, financial account codes, credit and debit account information, and health records.
Waveny Lifecare Network Data Breach Exposes Social Security Numbers and Health Records Read More »
Orthopaedic Specialists of Massachusetts notified regulators that a data breach exposed patients’ Social Security numbers and health records, raising risks of identity theft and medical fraud.
Centers Lab NJ LLC notified the Vermont Attorney General that a data breach exposed Social Security numbers, government ID numbers, and health records belonging to affected individuals.
Centers Lab NJ LLC Data Breach Exposes Social Security Numbers and Health Records Read More »