Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
A revised $32 million settlement resolves claims that GoodRx shared user data with advertisers without consent, following earlier FTC action over the same practices.
GoodRx Holdings, Inc. Data Breach Exposes Personal Information Read More »
A ransomware group has claimed responsibility for an alleged attack on Santiam Hospital & Clinics. The hospital has not confirmed the incident, and the full scope remains unclear.
Santiam Hospital & Clinics Data Breach Claim: Personal Information Reportedly Exposed Read More »
Metro Tulsa Foot & Ankle Specialist notified Vermont regulators that patient Social Security numbers, financial account codes, card details, and health records were involved in a recent data breach.
A cybercriminal accessed patient records at Baptist Health Medical Center-Drew County, leading to a class action settlement offering credit monitoring and reimbursement for losses.
A data breach tied to Kymberlie McNicholas has resulted in the exposure of health records, according to a notification filed with the Vermont Attorney General.
Kymberlie McNicholas Data Breach Exposes Health Records Read More »
A ransomware group claims it stole 121 GB of data from Horizon Eye Specialists & LASIK Center, though the practice has not publicly confirmed the incident.
A ransomware group has claimed responsibility for an attack on Aesthetic Dental Designs, P.A., alleging it may have exposed personal information. The dental practice has not publicly confirmed the incident.
A ransomware group has claimed responsibility for a reported breach at King Family Medical, saying it stole 67 GB of data. The organization has not confirmed the incident.
King Family Medical Data Breach Claim: Personal Information Reportedly Exposed Read More »
A cyberattack disrupted surgeries and ambulance routing at UNM Health Sciences Center, and a ransomware group now claims it stole network data, though the university has not confirmed what, if anything, was taken.
NorthShore Health Centers has notified patients that a cybersecurity incident allowed unauthorized access to files containing personal and health information.
NorthShore Health Centers Data Breach Exposes Social Security Numbers and Health Records Read More »