Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
ERMI LLC, a Georgia medical equipment manufacturer, has disclosed a data breach affecting over 74,000 patients after an unauthorized party accessed sensitive health and financial information for months.
ERMI Data Breach Exposes Social Security Numbers and Medical Records Read More »
A 2024 ransomware attack on Drug and Alcohol Treatment Services exposed the Social Security numbers and health records of over 22,000 patients and employees, leading to a class action settlement.
United HealthCare Services Inc. disclosed a data breach affecting 34,574 individuals to federal regulators, though the specific types of health information exposed have not yet been made public.
United HealthCare Data Breach Affects 34,574 Individuals’ Health Records Read More »
Centers for Dialysis Care, an Ohio-based nonprofit kidney care provider, disclosed a hacking incident that may have exposed the Social Security numbers, financial accounts, and health records of about 8,000 patients.
Centers for Dialysis Care Data Breach Exposes Social Security Numbers and Health Records Read More »
Mid-South Pulmonary & Sleep Specialists confirmed a data breach after the Anubis ransomware group accessed patient records containing Social Security numbers, medical history and other sensitive information.
Liberty Solutions Inc., a healthcare IT consulting and staffing firm, disclosed a data breach affecting 7,329 individuals after protected health information was compromised.
Liberty Solutions Data Breach Exposes Protected Health Information Read More »
Elmwood Home Care, a Rhode Island and Massachusetts home health provider, suffered a ransomware attack that exposed patients’ names, Social Security numbers, medical records and health insurance details.
Elmwood Home Care Data Breach Exposes Social Security Numbers and Medical Records Read More »
A ransomware attack on healthcare vendor Clinical Registry Solutions exposed the Social Security numbers, driver’s license numbers and medical records of thousands of patients at a Dignity Health hospital.
Clinical Registry Solutions Data Breach Exposes Social Security Numbers and Medical Data Read More »
Open Arms Care Corp. has notified individuals that a 2015 email breach exposed names, Social Security numbers, medical information and, in some cases, financial account details.
Open Arms Care Data Breach Exposes Social Security Numbers and Medical Records Read More »
Memorial Healthcare Services has agreed to a $750,000 settlement after tracking pixels on its patient portal allegedly shared patients’ personal and health information with third parties without consent.
Memorial Healthcare Services Data Breach Exposes Patient Portal Personal Information Read More »