Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
BASS Medical Group notified the California Attorney General of a data breach. The specific information involved has not been publicly disclosed.
BASS Medical Group Data Breach Exposes Personal Information Read More »
UltraMobile Imaging has notified 75,000 individuals that their medical, personal, and financial information was exposed after a network intrusion discovered in July 2026.
UltraMobile Imaging Data Breach Exposes Health and Financial Information Read More »
A ransomware group claims it stole corporate data from pathology lab Annapath, Inc., including employee and customer records, though the company has not confirmed the incident.
Annapath, Inc. Data Breach Claim: Employee and Customer Records Reportedly Exposed Read More »
Ancestral Medicine notified Vermont regulators that financial account codes and credit or debit account information were involved in a recent data breach affecting its customers.
Ancestral Medicine Data Breach Exposes Financial Account Codes and Card Information Read More »
A ransomware group has claimed responsibility for an alleged attack on Ultimate Health Plans, a Medicare Advantage plan in Florida. The company has not confirmed the incident, and the claim may have exposed personal information.
Ultimate Health Plans Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group has claimed responsibility for an alleged attack on ProSomnus Inc., and the incident may have exposed personal information, though the company has not confirmed the claim.
ProSomnus Inc. Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it obtained internal network data from Heritage Senior Living, though the company has not confirmed the incident. Here is what is known so far.
Heritage Senior Living Data Breach Claim: Network Security Data Reportedly Exposed Read More »
Covered California has notified the California Attorney General of a data breach that may have exposed personal information belonging to consumers who used the state health insurance marketplace.
Covered California Data Breach Exposes Personal Information Read More »
A ransomware group claims it stole hundreds of gigabytes of files from Asensus Surgical, a medical device maker now part of KARL STORZ. The company has not confirmed the incident.
Asensus Surgical Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it stole data from Chicago Vein Institute, a healthcare provider, though the practice has not publicly confirmed the incident.
Chicago Vein Institute Data Breach Claim: Personal Information Reportedly Exposed Read More »