Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Valley Perinatal Services LLC, operating as Advanced Women’s Care, notified Vermont regulators of a data breach that exposed patients’ Social Security numbers and health records.
Carolina Internal Medicine notified regulators that a data breach exposed patients’ Social Security numbers, prompting questions about identity theft risk and the practice’s response.
Carolina Internal Medicine Data Breach Exposes Social Security Numbers Read More »
Southfield Rehabilitation Company LLC, doing business as Surgeons Choice Medical Center, notified regulators that a data breach exposed patients’ Social Security numbers and health records.
Hologic, Inc., a major U.S. medical technology company, was targeted by a ransomware group known as metaencryptor, raising concerns about the exposure of sensitive patient, employee, and corporate data.
Hologic, Inc. Data Breach Exposes Sensitive Patient and Corporate Data Read More »
An unauthorized third party accessed patient systems at Jeffrey David Reuben, M.D.’s Texas orthopedic practice, exposing names, Social Security numbers, driver’s license numbers, and financial information for over 17,000 patients.
University Surgical Associates, PLLC notified regulators of a data breach that exposed patients’ Social Security numbers and health records, raising risks of identity theft and medical fraud.
Alvita Care Holdings notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit account information. Here’s what affected individuals need to know.
eAssist Dental Solutions, a dental staffing and support company, suffered a ransomware attack claimed by the direwolf threat actor group, raising concerns about exposed patient and employee data.
Evergen, a biomaterials manufacturer serving regenerative medicine partners, was targeted by the Chaos ransomware group in an attack that may have exposed sensitive company and personal data.
Evergen Data Breach Exposes Sensitive Corporate and Personal Data Read More »
myLaurel, an elderly care services provider, suffered a ransomware attack linked to the direwolf threat group, raising concerns that patient health information and personal data were accessed.
myLaurel Data Breach Exposes Patient Health and Personal Information Read More »