Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Vista Del Mar Child and Family Services notified federal regulators of a hacking incident that compromised the protected health information of 500 individuals.
Vista Del Mar Child and Family Services Data Breach Exposes Protected Health Information Read More »
The Foot and Ankle Wellness Center of Western Pennsylvania notified 653 individuals that their electronic medical records and network server data were accessed without authorization.
Virta Health Corp. and Virta Medical, PC notified regulators of a data breach that may have exposed patient health and personal information. Here’s what affected individuals should know.
Virta Health Corp. Data Breach Exposes Patient Health and Personal Information Read More »
Beaver County Behavioral Health notified federal regulators that a hacking incident on its network server exposed protected health information belonging to 501 patients.
Beaver County Behavioral Health Data Breach Exposes Patient Health Records Read More »
zHealth, Inc., a cloud-based practice management and EHR software provider, disclosed a data breach affecting more than 118,000 individuals after an unauthorized third party accessed its network.
zHealth, Inc. Data Breach Exposes Medical Records and Health Insurance Information Read More »
A ransomware group known as thegentlemen has claimed responsibility for an attack on Hattiesburg Eye Clinic, raising concerns that patient medical and personal records were accessed or stolen.
A network security incident at vendor Aesto, LLC exposed protected health information belonging to Catalyst Physician Group patients. Here’s what was taken and what affected individuals should do next.
Catalyst Physician Group Data Breach Exposes Protected Health Information Read More »
Psychiatry of Texas PLLC notified federal regulators that a hacking incident on its network server exposed the personal and mental health information of 5,902 patients.
Psychiatry of Texas PLLC Data Breach Exposes Patient Health and Personal Records Read More »
Hawaii Family Dental has notified nearly 46,000 patients that hackers accessed personal and health information during a July 2026 network intrusion later claimed by the Qilin extortion group.
Hawaii Family Dental Data Breach Exposes Patient Health and Insurance Information Read More »
Imperial Healthcare Solutions suffered a ransomware attack claimed by the Qilin group, raising concerns that patient health and personal information was accessed or stolen.
Imperial Healthcare Solutions Data Breach Exposes Patient Health and Personal Records Read More »