Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Centers Lab NJ LLC has disclosed a data breach that exposed the Social Security numbers, medical information, and identification details of more than 542,000 patients after a threat group stole and leaked files from its systems.
Centers Lab Data Breach Exposes Social Security Numbers and Medical Records Read More »
Abbott is investigating claims from two separate hacking groups, including one that says it stole 30 million rows of customer data with a million Social Security numbers, from systems tied to its Exact Sciences cancer diagnostics business.
Abbott Data Breach Exposes Social Security Numbers and Personal Information Read More »
ZenPatient, Inc. has notified individuals that an unauthorized actor accessed and copied company data over a two-month period, exposing personal information tied to patients.
ZenPatient Data Breach Exposes Personal and Health-Related Information Read More »
A phishing attack gave an intruder access to an employee email account at Heart Care Centers of Illinois for over two months, exposing patients’ Social Security numbers, financial data, and medical records.
ParentCare USA has notified clients that hackers accessed files containing names, Social Security numbers, and bank account information over a six-month period in 2025.
ParentCare USA Data Breach Exposes Social Security Numbers and Bank Details Read More »
BAYADA Home Health Care notified California regulators of a data breach that exposed sensitive personal and medical information belonging to patients and employees.
Atrium Health has agreed to pay up to $1.8 million to settle claims that tracking tools on its patient portal disclosed protected health information of up to 585,959 patients to third parties like Meta and Google.
Atrium Health Data Breach Exposes Patient Portal Tracking Data Read More »
Casper Orthopedics, an orthopedic clinic, suffered a ransomware attack by the Anubis group that exposed patient data and medical records, raising serious identity theft and medical fraud risks for patients.
Casper Orthopedics Data Breach Exposes Patient Medical Records Read More »
Arcadia of Benton LLC notified the Indiana Attorney General of a data breach that occurred in January 2026, affecting 254 individuals nationwide, including at least one Indiana resident.
Arcadia of Benton LLC Data Breach Exposes Personal and Financial Information Read More »
The Wisconsin Department of Health Services notified federal regulators that unauthorized access to paper records exposed the protected health information of 8,157 individuals.
Wisconsin Department of Health Services Data Breach Exposes Patient Health Records Read More »