Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
A ransomware group claims it stole 35 GB of data from Pearland Pediatrics. The practice has not publicly confirmed the incident, but here’s what affected patients should know.
Pearland Pediatrics Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it stole data from Coastal Carolina Neuropsychiatric Center, PA. The practice has not confirmed the incident, and the full scope remains unclear.
A vishing attack on Central Ohio Primary Care Physicians led to the theft of names, Social Security numbers, financial details, and health information belonging to roughly 1.4 million patients.
Paradigm Healthcare Services has confirmed a data breach affecting more than 970,000 Medi-Cal members, exposing names, dates of birth, gender, and member ID numbers.
Paradigm Healthcare Services Data Breach Exposes Medi-Cal Member ID Numbers Read More »
A ransomware group claims it accessed the internal systems of Kingwood Endoscopy, a Texas outpatient surgery center, though the organization has not confirmed the incident.
Kingwood Endoscopy Data Breach Claim: Personal Information Reportedly Exposed Read More »
American Board of Preventative Medicine notified regulators that a data breach exposed Social Security numbers, prompting questions about who is affected and what protections are available.
American Board of Preventative Medicine Data Breach Exposes Social Security Numbers Read More »
The Way to My Heart Inc., operator of the Global PAD Association, notified the Vermont Attorney General that a data breach exposed health records belonging to affected individuals.
The Way to My Heart Inc. (Global PAD Association) Data Breach Exposes Health Records Read More »
Texas Spine Consultants, PLLC has notified regulators that a data breach exposed patients’ Social Security numbers and health records. Here is what affected individuals need to know.
A ransomware group claims it accessed Personify Health records and posted them online, though the company has not confirmed the incident. Here is what is known so far.
Personify Health Data Breach Claim: Personal Information Reportedly Exposed Read More »
Neuro Wellness Spa notified California regulators of a data breach in October 2026. Here’s what is known so far about the incident and who may be affected.
Neuro Wellness Spa Data Breach Exposes Personal Information Read More »