Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
AgelessRx notified the Vermont Attorney General of a data breach that compromised customer health records, raising concerns about medical fraud and identity theft.
AgelessRx Data Breach Exposes Health Records and Personal Information Read More »
Medtronic Inc. notified the Vermont Attorney General of a data breach involving Social Security numbers and health records, raising identity theft and medical fraud concerns for affected individuals.
Medtronic Inc. Data Breach Exposes Social Security Numbers and Health Records Read More »
A cybersecurity incident at Aesto, a data-services vendor for Monroe Health Center, may have exposed patient names, demographic details, and Social Security numbers.
Monroe Health Center Data Breach Exposes Social Security Numbers and Patient Data Read More »
American Addiction Centers has notified individuals that a third party accessed their names, Social Security numbers, and health information through a breach of its Salesforce environment.
Cottage Hospital notified the Vermont Attorney General that a data breach exposed patients’ Social Security numbers, financial account codes, government ID numbers, and health records.
Cottage Hospital Data Breach Exposes Social Security Numbers and Health Records Read More »
A ransomware group known as Dark Project claims it stole roughly 35 gigabytes of data from LabPharma, a Florida clinical laboratory, raising concerns about patient and personal information.
LabPharma Data Breach Exposes Patient and Personal Data Read More »
The National Association of Drug Abuse Programs, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers and health records belonging to affected individuals.
Center for Life Resources, operating as Central Texas MHMR, notified the Vermont Attorney General that a data breach exposed patients’ Social Security numbers and health records.
Center for Life Resources Data Breach Exposes Social Security Numbers and Health Records Read More »
Humana Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers and health records, putting affected individuals at risk of identity theft and medical fraud.
Humana Inc. Data Breach Exposes Social Security Numbers and Health Records Read More »
Abbott’s Cancer Diagnostics business unit confirmed a vishing attack led to unauthorized access of internal files containing personal and health information belonging to clients.
Abbott Cancer Diagnostics Data Breach Exposes Personal and Health Information Read More »