Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Medical Express PSI, a Texas-based medical equipment and billing provider, notified the Texas Attorney General that a data security incident affected 870 residents, though the exact data types exposed remain undisclosed.
Medical Express PSI Data Breach Exposes Patient and Billing Information Read More »
A Bellaire, Texas medical practice run by Jeffrey David Reuben, MD, has notified the Texas Attorney General that a data security incident exposed sensitive personal, financial, and medical information belonging to more than 14,000 patients.
Jeffrey David Reuben MD Data Breach Exposes Social Security Numbers and Medical Records Read More »
A Texas dental practice, Azle Smiles, has disclosed a data breach that exposed the personal and medical information of more than 9,000 patients, including driver’s license numbers and health insurance details.
Azle Smiles Data Breach Exposes Driver’s License Numbers and Medical Records Read More »
Operation PAR, a Florida addiction treatment provider, has disclosed a data breach affecting more than 145,700 current and former clients, exposing Social Security numbers, driver’s license numbers, and protected health information.
Operation PAR Data Breach Exposes Social Security Numbers and Health Records Read More »
CareCloud, Inc. confirmed that an unauthorized third party accessed one of its AWS environments in March 2026 and stole data from its electronic health record systems, exposing patient health information.
CareCloud Data Breach Exposes Patient Health Information Read More »
Pennyroyal Healthcare Services, operating as Community Medical Clinic in Kentucky, notified patients that a network intrusion detected in January 2026 may have exposed their personal information.
Pennyroyal Healthcare Services Data Breach Exposes Patient Personal Information Read More »
DentaQuest, a major US dental and vision benefits administrator, is notifying millions of people that hackers accessed their Social Security numbers, Medicaid and Medicare numbers, and dental health information in a network intrusion.
DentaQuest Data Breach Exposes Social Security Numbers and Health Records Read More »
Minnesota senior care provider Lifespark notified clients that hackers accessed an employee email system containing Social Security numbers, medical records, and financial account details.
Lifespark Data Breach Exposes Social Security Numbers and Medical Records Read More »
A ransomware group called Global Secret Group claims to have stolen more than 28 gigabytes of files from Middendorf Animal Hospital & Laser Centre in Kentucky, raising concerns about exposed client and employee data.
Middendorf Animal Hospital Data Breach Exposes Client and Employee Records Read More »
Spokane Digestive Disease Center, P.S. notified Washington regulators of a data breach that may have compromised sensitive patient health information.
Spokane Digestive Disease Center Data Breach Exposes Patient Health Records Read More »