Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Boston Children’s Health Physicians and its IT vendor XTIUM reached a $2.7 million settlement with Connecticut and New York regulators after failing to protect patient data from a breach.
Boston Children’s Health Physicians (BCHP) Data Breach Exposes Personal Information Read More »
A ransomware group claims it stole years of patient records from EnVision Eye Care, a Mississippi ophthalmology practice, after the practice reportedly did not pay a ransom demand.
A ransomware group claims responsibility for a data breach at Skin Center, a Fort Lauderdale dermatology clinic. The claim may have exposed personal information, though the clinic has not confirmed the incident.
Skin Center Data Breach Claim: Personal Information Reportedly Exposed Read More »
Mid Florida Dermatology & Plastic Surgery has confirmed a data breach affecting 85,585 patients, with names, Social Security numbers, financial data, and medical information potentially exposed.
A ransomware group has reportedly claimed responsibility for a cyberattack on Shared Medical Technology, Inc. The company has not publicly confirmed the incident or what data may have been affected.
A ransomware group claims it accessed and leaked internal records belonging to Evolution Spine / All Labs, a Texas medical device maker, though the company has not confirmed the incident.
A ransomware group has reportedly claimed responsibility for an attack on Kidz R Kool Pediatric Dentistry, an Arizona dental practice, though the company has not confirmed the incident.
Center for bone and Joint Surgery of the Palm Beaches has notified federal regulators of a hacking incident affecting 5,461 individuals, after unauthorized access to its network server.
Indiana University Health, Affiliated Covered Entity reported a hacking incident on its network server to federal regulators, affecting 2,080 individuals whose personal information may have been exposed.
NextStep Care has disclosed a data breach affecting 685 individuals after paper records were accessed without authorization. The incident may have exposed personal information.
NextStep Care Data Breach Exposes Personal Information Read More »