Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
iRhythm Technologies, maker of the Zio cardiac monitoring platform, disclosed that hackers stole patient information from its computer systems in a breach discovered in June 2026.
iRhythm Technologies Data Breach Exposes Patient Health Information Read More »
Cherry Health, formerly Cherry Street Services, confirmed a data breach that may have exposed patient and staff Social Security numbers, health insurance details, and other personal information after unauthorized network access.
Cherry Health Data Breach Exposes Social Security Numbers and Health Records Read More »
Centers Laboratory, a New Jersey healthcare diagnostics company, confirmed that a threat actor accessed and copied sensitive patient and employee data, including Social Security numbers, health records, and government ID numbers.
Centers Laboratory Data Breach Exposes Social Security Numbers and Medical Records Read More »
Anatomic and Clinical Laboratory Associates (ACLA) has disclosed a data breach that exposed Social Security numbers, medical records, and other sensitive information after unauthorized network access in late 2025.
ACLA Data Breach Exposes Social Security Numbers and Medical Information Read More »
MCBS LLC, a medical billing company, disclosed that hackers accessed its network and potentially stole Social Security numbers, medical records, and other sensitive data belonging to hundreds of thousands of patients.
MCBS LLC Data Breach Exposes Social Security Numbers and Medical Records Read More »
Park Dental Research Corp. suffered a ransomware attack that exposed Social Security numbers, bank account details, and other sensitive employee and customer information.
Ohio Living, a nonprofit senior living organization based in Ohio, disclosed that an unauthorized actor accessed its network in April 2026 and copied files containing sensitive personal and medical information.
Ohio Living Data Breach Exposes Medical Records and Social Security Numbers Read More »
North Los Angeles County Regional Center is notifying individuals that a November 2024 ransomware attack led to the theft of Social Security numbers, medical records, and other sensitive personal data.
Midland Care Connection, a Kansas nonprofit healthcare organization, disclosed that hackers accessed and copied sensitive files including Social Security numbers, medical records, and financial account information.
Midland Care Connection Data Breach Exposes Social Security Numbers and Medical Records Read More »
A Michigan dental practice, Erick K. Perroud, D.D.S., P.C., disclosed a data incident affecting 7,692 individuals through a state Attorney General filing, though full details remain limited.
Erick K. Perroud DDS Data Breach Exposes Patient Personal Information Read More »