Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Signature Healthcare Corp., a Massachusetts nonprofit health system, disclosed a data breach to federal regulators that may have compromised patient information across the United States.
Signature Healthcare Data Breach Compromises Patient Information Read More »
Carlyle Senior Care Management Company disclosed a data breach affecting 4,060 individuals, reporting the incident to federal health regulators as involving protected health information.
Carlyle Senior Care Data Breach Exposes Protected Health Information Read More »
Decatur Diagnostic Laboratory confirmed that hackers linked to the group stole sensitive patient data, including Social Security numbers, driver’s license numbers, and medical record information.
ERMI LLC, a Georgia medical equipment manufacturer, has disclosed a data breach affecting over 74,000 patients after an unauthorized party accessed sensitive health and financial information for months.
ERMI Data Breach Exposes Social Security Numbers and Medical Records Read More »
A 2024 ransomware attack on Drug and Alcohol Treatment Services exposed the Social Security numbers and health records of over 22,000 patients and employees, leading to a class action settlement.
United HealthCare Services Inc. disclosed a data breach affecting 34,574 individuals to federal regulators, though the specific types of health information exposed have not yet been made public.
United HealthCare Data Breach Affects 34,574 Individuals’ Health Records Read More »
Centers for Dialysis Care, an Ohio-based nonprofit kidney care provider, disclosed a hacking incident that may have exposed the Social Security numbers, financial accounts, and health records of about 8,000 patients.
Centers for Dialysis Care Data Breach Exposes Social Security Numbers and Health Records Read More »
Mid-South Pulmonary & Sleep Specialists confirmed a data breach after the ransomware group accessed patient records containing Social Security numbers, medical history and other sensitive information.
Liberty Solutions Inc., a healthcare IT consulting and staffing firm, disclosed a data breach affecting 7,329 individuals after protected health information was compromised.
Liberty Solutions Data Breach Exposes Protected Health Information Read More »
Elmwood Home Care, a Rhode Island and Massachusetts home health provider, suffered a ransomware attack that exposed patients’ names, Social Security numbers, medical records and health insurance details.
Elmwood Home Care Data Breach Exposes Social Security Numbers and Medical Records Read More »