Healthcare data breaches expose some of the most sensitive personal information that exists: medical records, Social Security numbers, insurance details, diagnosis and treatment history, and sometimes genetic or mental health information. These exposures can lead to medical identity theft, insurance fraud committed in a patient’s name, and the unwanted disclosure of private health conditions that can affect employment, relationships, or insurability. Hospitals, clinics, health insurers, and healthcare technology vendors are among the most frequently targeted organizations for ransomware and data theft, in part because medical records are especially valuable on illicit markets and healthcare providers often operate complex, interconnected IT systems. A single breach at a hospital system, health plan, or medical billing vendor can affect hundreds of thousands of patients at once. This page tracks confirmed data breaches at hospitals, clinics, insurers, and other healthcare organizations, including what data was exposed, which companies notified the HHS Office for Civil Rights and other regulators, and what affected patients can do next to protect their medical and financial identity.
Eyecare Center of Snohomish, a Washington optometry practice, has confirmed a ransomware attack claimed by the group known as thegentlemen, raising concerns about exposed patient data.
Eyecare Center of Snohomish Data Breach Exposes Patient Health and Personal Information Read More »
Kern Psychiatric Health and Wellness Center notified patients that unauthorized access to its management company’s network exposed Social Security numbers, medical records, and other sensitive information.
Silver Summit Medical Corporation, doing business as Digestive Disease Center and Heart Vascular & Leg Center, notified patients that a third-party vendor’s cybersecurity incident exposed their personal and health information.
Silver Summit Medical Corporation Data Breach Exposes Protected Health Information Read More »
The Women’s Center for Radiology notified over 66,000 Florida patients that hackers accessed patient files containing medical, insurance, and identification information during a network intrusion in April 2026.
Atrium Centers, Inc. notified the Vermont Attorney General that a data breach exposed Social Security numbers, raising identity theft risks for those affected.
Atrium Centers, Inc. Data Breach Exposes Social Security Numbers Read More »
Baylor Genetics, a Houston-based genetic testing lab, says hackers accessed patient and employee data including Social Security numbers, lab results, and financial account details in June 2026.
Baylor Genetics Data Breach Exposes Social Security Numbers and Health Records Read More »
Glucobit, Inc., doing business as Reframe, notified the Washington State Attorney General of a data breach that may have compromised personal health information belonging to its users.
Glucobit, Inc. dba Reframe Data Breach Exposes Personal Health Information Read More »
AdaptHealth, LLC notified the Vermont Attorney General of a data breach involving patient health records, raising concerns about medical identity theft for affected individuals.
AdaptHealth, LLC Data Breach Exposes Health Records Read More »
Terry J. Dubrow, MD, A Medical Corporation has notified patients that an unauthorized actor accessed its network and stole Social Security numbers, ID numbers, and detailed medical records.
Tapestry 360 Health has disclosed a data breach involving Social Security numbers, prompting concerns about identity theft and fraud for affected individuals.
Tapestry 360 Health Data Breach Exposes Social Security Numbers Read More »