HIPAA Breach News

Data breaches have been announced by NFI North in New Hampshire, Nephrology Associates in Kansas, PAMCAH-UA Local 675 Health and...

Luminis Health in Maryland is investigating a cyberattack that has taken certain systems offline. Data breaches have been announced by...

In June 2026, 66 large healthcare data breaches – data breaches involving the protected health information of 500 or more...

The diagnostic imaging service provider Lumexa Imaging has been affected by a security incident involving one of its vendors. FMRS...

Data breaches have been announced by Resource Center of Dallas, Kern Psychiatric Health and Wellness Center, The Asthma Center, Integrative...

Data breaches have been announced by Midwest Spine and Brain Institute, Brookhaven ENT Allergy and Facial Surgery, Digestive Disease Center...

Data breaches have been confirmed by Alta Orthopaedics in California, Cornerstone Behavioral Healthcare in Maine, Cameron Regional Medical Center in...

On August 19, 2026, we reported on a cybersecurity incident at the clinical genomics company Baylor Genetics. At the time,...

Nutex Health, a Houston, Texas-based healthcare management and operations company that delivers care through 27 micro-hospitals, specialty hospitals, and outpatient...

The medical technology and oncology company Novocure has recently confirmed that patient and employee data were exposed in a recent...

Data breaches have been announced by multiple North Carolina rehabilitative care practices, senior living and skilled nursing care providers in...

On August 14, 2026, we reported on a data breach at the Birmingham, Alabama-based healthcare technology company Aesto Health. While...

The ShinyHunters data theft and extortion group recently claimed responsibility for an intrusion at the medical device manufacturer Baxter International...

Hacking incidents have been announced by American Addiction Centers in Tennessee and Oculus Pathology in Texas. Regional Center of Orange...

When we last reported on the CareCloud data breach in early August, it was starting to become clear from breach...

Data breaches have recently been announced by Terry J. Dubrow, MD, SunCloud Health, Integer Precision Technologies, Minnesota ENT, and Nipro...

Data breaches have recently been announced by the healthcare navigation and care coordination company Quantum Health, Heart of America Medical...

Data breaches have been reported by the Boston Healthcare for the Homeless Program in Massachusetts, Monongalia County General Hospital Company...

Texas Hearing Institute has announced a cybersecurity incident involving the protected health information of almost 30,000 patients. Data breaches have...

Data breaches have recently been announced by the Women’s Center for Radiology in Florida, Optalis Management Solutions in Michigan, the...

AnMed has not disclosed the name of the group behind the attack, but a threat group called The Gentlemen claimed...

The volume and sensitive nature of the data stolen from Change Healthcare in its 2024 ransomware attack have led to...

Five small healthcare organizations have recently announced that they have experienced security incidents exposing patient data: Family Medical Associates of...

A vishing attack on Sunshine Health, a Florida-based Medicaid and health insurance agency, involved the theft of the PHI of...

Data security incidents have recently been announced by Loma Linda University Health and UCLA Health. Loma Linda University Health Loma...

On July 23, 2026, the HIPAA Journal reported on a data breach at Unlimited Technology Systems, a Cincinnati, Ohio-based provider...

Lifespan Physicians Group of Massachusetts, doing business as Brown Health Medical Group-MA, has confirmed that the protected health information of...

Amgen Inc., a Thousand Oaks, CA-based biopharmaceutical company that develops and manufactures pharmaceutical products for oncological, hematological, and cardiovascular diseases,...

OSF Healthcare System and its Affiliated Covered Entities (OSF Healthcare) have agreed to pay a penalty of $552,250 to resolve...

Data breaches have been announced by Soniva Dental Care in Texas, Optalis Management Solutions in Michigan, and Hudson Valley Medical...

The IBM 2026 Cost of a Data Breach Study shows data breach costs have risen by 12% in a year...

Operation PAR, a Florida-based SUD treatment provider, has announced a data breach affecting more than 145,700 individuals. Data breaches have...

MCBS, LLC, an Augusta, Georgia-based healthcare management and revenue cycle management company, has announced a major data incident involving the...

Data breaches have been reported by Wildwood Surgical Center, Michigan Surgical Center, Penobscot Valley Hospital, and Whitfield Regional Hospital. Wildwood...

Anatomic and Clinical Laboratory Associates is notifying almost 170,000 patients about a recent cybersecurity incident. Data breaches have also been...

There has been a general trend of increasing data breaches over the past decade, with this year on track to...

Security incidents have resulted in the exposure of patient data at Meridian Health Plan of Illinois and Little Flower Children...

Data breaches have been announced by NAS Recovery Solutions, Entyre Care Massachusetts, and Carle Health. NAS Recovery Solutions NAS Recovery...

The cardiovascular medical practice, Heart Care Centers of Illinois (HCCI), announced on July 18, 2026, that certain patients had some...

The dental benefits administrator DentaQuest has started issuing notification letters to individuals affected by a May 2026 cybersecurity incident.  The...

Data breaches have been announced by TriWest Healthcare Alliance, Texas Medicaid and Healthcare Partnership, the Minnesota Health Insurance Network, and...

Clover Health Investments has notified the U.S. Securities and Exchange Commission (SEC) about a cybersecurity incident first identified on July...

The healthcare technology company Craneware is investigating a cybersecurity incident and has confirmed that a significant amount of data was...

The healthcare giant Abbott is investigating claims from two threat groups who allege cyberattacks and data theft, one involving legacy...

Centers Lab NJ LLC, a Hanover, New Jersey-based diagnostic testing laboratory that provides medical and diagnostic testing services to healthcare...

All About Women’s Care in Colorado has notified 12,000 patients that their data has been compromised in a data breach,...

Data breaches have recently been announced by the senior living company Ohio Living, Erlinger Health System in Tennessee, and Heart...

Data breaches have been announced by Community Health Center of Buffalo in New York and the New Jersey law firm...

Based on the current data on the HHS’ Office for Civil Rights (OCR) breach portal, 61 healthcare data breaches affecting...

Gay & Lesbian Community Services Center of Orange County, California, a provider of mental health, HIV testing, education and outreach,...

Aitkin County Health and Human Services in Minnesota has identified a breach of its email environment. Data breaches have also...

Drug and Alcohol Treatment Services, Inc., a Scranton, Pennsylvania-based provider of drug and alcohol addiction services, has agreed to settle...

Data breaches have been announced by the Georgia-based medical equipment company ERMI, McLeod Physician Associates in South Carolina, and the...

Employee data has been compromised in data security incidents at Park Dental Research Corporation in Oklahoma and Wabi Sabi Behavioral...

North Los Angeles County Regional Center has started mailing notification letters to individuals affected by a November 2024 ransomware attack,...

The Texas Hearing Institute has notified the Texas Attorney General about a data breach impacting more than 29, 000 state...

Two women’s healthcare providers have announced data privacy incidents. Women’s Wellness of Southern Delaware recently learned about unauthorized retention of...

Medtronic has started issuing notifications to individuals affected by an April 2026 cyberattack. The ShinyHunters threat group claimed responsibility for...

Amicus Solutions (Fedora Solutions) has been affected by a cybersecurity incident, and Huntsville Hospital has confirmed it was affected by...

The Washington Department of Social and Health Services (DSHS) has identified an insider data breach involving unauthorized access to the protected...

A hacking incident has been reported by South Florida Injury Centers, and Chickasaw Nation Department of Health has discovered that...

Data security incidents have been announced by the Colorado Health Network and Kentucky Mountain Health Alliance. In both cases, only...

Data breaches have been announced by Minnesota Epilepsy Group, Campbell University, and the City of Middletown, Ohio. Minnesota Epilepsy Group...

Florida Retina Center has identified unauthorized access to systems containing the protected health information of more than 13,600 patients. Acadia...

In April 2026, 47 healthcare data breaches affecting 500 or more individuals were reported to the HHS’ Office for Civil...

Data breaches have been announced by Lifepoint Health, Southwest Behavioral & Health Services, and Nottingham Village. Lifepoint Health Lifepoint Health...

Xsolis, a business associate of HIPAA-covered entities that provides AI-powered solutions for improving case and utilization management to achieve more...

Blue Fish Pediatrics in Texas has announced a July 2025 cyberattack that affected more than 62,000 patients. Data breaches have...

One Medical, the Amazon-owned primary care provider, has recently announced a cybersecurity incident in which an unauthorized third party gained...

HIPAA violation cases are compliance investigations that result from a data breach being reported to the Department of Health and...

A hacking group has claimed responsibility for the cyberattack on the pharmaceutical company Novo Nordisk and says it exfiltrated more...

Data breaches have been announced by the Tennessee-based disability care provider Open Arms Care Corporation and the Rhode Island and...

Data breaches have been announced by Clinical Registry Solutions in New York, First Sight Family Vision in Washington, and VHC...

Cybersecurity incidents involving unauthorized access to protected health information have been announced by the revenue cycle management company Medenet, the...

A cyberattack at the law firm GrayRobinson has affected 65,000 individuals. Data breaches have also been announced by C2N Diagnostics...

Cyberattacks and data breaches have recently been announced by the national gastroenterology medical group Gastro Health and Spokane Digestive Disease...

Data breaches have been announced by several dental practices: Bayside Dental (TX/WA), Aldrich Pediatric Dentistry (IN), Stafford Oral Surgery (VA),...

The Senate Health, Education, Labor, and Pensions (HELP) Committee Chair Senator Bill Cassidy, M.D. (R-LA), is seeking answers from NYC...

A data breach at Southern Illinois Ob-Gyn Associates has affected 38,700 individuals. Data breaches have also been reported by Wellpoint...

Episource, a provider of medical coding, risk adjustment services, and software solutions, experienced a cyberattack in early 2025, in which...

2025 was another bad year for healthcare data breaches. As of June, 2026, 2025, 772 healthcare data breaches affecting 500...

In January 2025, news first surfaced about a massive data breach at Conduent Business Services, a vendor that provides printing,...

Data breaches have been announced by Clarinda Regional Health Center in Iowa, Community Connections in DC, Waveny Lifecare Network in...

Singing River Health System in Mississippi has issued an update on a cybersecurity incident that was first announced in December...

Data breaches have been announced by Bridle Trails Family Dentistry, Verber Dental Group, and Bronsky Orthodontics. Across the three incidents,...

The Las Vegas medical billing and coding management company, La Perouse, has announced a data breach that has affected seven...

A settlement has been negotiated to resolve a class action lawsuit against Lakeview Health Systems LLC. The lawsuit stemmed from...

The personal and protected health information of approximately 22,500 Hartford HealthCare patients has been exposed in a security incident. Data...

The Oncology Institute, a publicly traded provider of cancer care through more than 100 clinics in California, Oregon, Nevada, Arizona,...

A round-up of data breaches recently announced by 9 HIPAA-regulated entities: University of Nebraska Medical Center, Singing River Health System,...

Radiology Associates of Richmond in Virginia, one of the oldest, continuously operating private radiology practices in the United States, has...

Data breaches have been announced by Totem Lake Family Dentistry, Family Health Centers of San Diego, and Glendora Surgery Center....

The HIPAA Journal reported on a data breach affecting patients of NYC Health + Hospitals Corporation in late March (see...

Erie Family Health Centers, a Chicago, IL-based network of health centers providing primary medical, dental, and behavioral healthcare services to individuals regardless...

Elara Caring has confirmed that thousands of its patients were affected by the cyberattack on vendor Doctor Alliance. Data breaches...

Further information has come to light about the RXNT data breach, reported by the HIPAA Journal on May 6, 2026....

Ransomware groups have claimed responsibility for attacks on Advanced Family Surgery Center in Tennessee, Orem Eye Clinic in Utah, and...

Data breaches have recently been announced by Verber Dental Group in Pennsylvania, Northwoods Surgery Center in Minnesota, Cunningham Prosthetic Care...

Atrium Health Navicent and Interim HealthCare of Lubbock/Amarillo have recently announced that they have been affected by data breaches at...

A cyberattack on Mt. Spokane Pediatrics exposed the data of more than 32,000 patients. Data breaches have also been announced...

In March 2026, 66 healthcare data breaches affecting 500 or more individuals were reported to the HHS’ Office for Civil...

On March 24, 2026, The HIPAA Journal reported on a data breach at the telehealth platform provider Open Loop Health...

Data breaches have recently been announced by Hematology Oncology Consultants in Michigan, Cunningham Prosthetic Care in Maine, and Southcoast Health...

Data breaches have recently been announced by Western Orthopaedics in Colorado, Community Health Systems in California, Tri-Cities Gastroenterology in Tennessee,...

The health insurance company Starr Insurance has disclosed a ransomware attack and data breach. Data breaches have also been reported...

A database created by the Centers for Medicare and Medicaid Services (CMS) has been exposed online, exposing providers’ Social Security...

Data breaches have recently been announced by Good Samaritan Health Center, Wonderland Child & Family Services, and L.A. Care Health...

Sandhills Medical Foundation in South Carolina and Laurel Eye Clinic in Pennsylvania have experienced security incidents that exposed patient data....

There have been several announcements about data breaches at business associates of HIPAA-regulated entities recently, including Providence St. Joseph Orange...

Florida Physician Specialists has started notifying patients affected by a November 2025 hacking incident. Mile Bluff Medical Center in Wisconsin...

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced four financial penalties to...

Minidoka Memorial Hospital was the victim of a cyberattack on Easter morning, and two further healthcare providers have confirmed they...

A ransomware attack on Hospital Caribbean Medical Center in Puerto Rico has affected up to 92,000 individuals. Data breaches have...

North Texas Behavioral Health Authority (NTBHA), a provider of mental health and substance use treatment and services in Dallas, Ellis,...

Saint Anthony Hospital, a nonprofit, faith-based, acute care, community hospital in Chicago, has started notifying individuals about unauthorized access and/or...

Data breaches have been announced by the California psychiatry and therapy provider Mindpath Health, Springfield Hospital in Vermont, and Lone...

Ransomware attacks have been announced by Glendale Obstetrics & Gynecology in Arizona and Lymphedema Therapy Specialists in Texas, and City...

A district court judge in Montana has ruled that the State Auditor and Insurance Commissioner’s investigation of Blue Cross Blue...

Two providers of senior services have recently disclosed data security incidents. Windward Life Care in California and Legend Senior Care...

Cookeville Regional Medical Center in Cookeville, Tennessee, has recently confirmed that a 2025 ransomware attack exposed the personal and protected...

Brockton Hospital in Massachusetts is continuing to grapple with a cybersecurity incident that took many of its electronic systems offline...

The medical technology giant Stryker has provided an update on the impact of its March 11, 2026, cyberattack, confirming that...

Rocky Mountain Associated Physicians has reported a data breach affecting more than 50,000 patients. Data breaches have also been announced...

CardioFit Medical Group has discovered emails containing protected health information were inadvertently sent without encryption. Interventional Pain Center in Tennessee...

In May 2025, the Ohio health system Kettering Adventist Healthcare (Kettering Health) experienced a ransomware attack. The attack was detected...

Data breaches have recently been announced by DermCare Management in Florida, Option Care Health in New York, and Aetna in...

In February 2026, 63 data breaches were reported to the Department of Health and Human Services (HHS) Office for Civil...

Neinstein Plastic Surgery in New York and Atlantic Brain and Spine in North Carolina have announced security incidents that exposed...

The New Jersey long-term care pharmacy Innovative Pharmacy Packaging Corp (IPPC Inc), and the affiliated entities IPPC of New York...

Patient data has potentially been compromised in data incidents at Southern Illinois Dermatology and Heart South Cardiovascular Group in Alabama....

Legal counsel for Woodfords Family Services has provided an updated breach notice to the Maine Attorney General, confirming that more...

Data incidents have recently been announced by ProxyCare in Florida, Oscar Health in New York, and AccentCare in Texas. ProxyCare,...

The direct-to-consumer telehealth company Him & Hers has experienced a data breach. In early February, an unauthorized third party gained...

Nacogdoches Memorial Hospital (NMH), a 226-bed hospital in Nacogdoches, Texas, has recently announced a data security incident that was first...

TriMed, a Santa Clarita, California-based manufacturer of upper and lower orthopedic implants, has announced a data security incident involving unauthorized...

Rocky Mountain Care in Utah has announced a January 2026 data breach, and Corewell Health in Michigan has confirmed that...

Data breaches have been announced by Coastal Carolina Health Care in North Carolina, New Horizons Behavioral Health in Georgia, CWA...

Data breaches have recently been reported by Vantage Plastic Surgery in New York City and Austin Plastic and Reconstructive Surgery...

Evansville, Indiana-based Deaconess Health System has announced a data breach involving information shared with a third-party vendor, the MRO Corp-owned...

The sensitive data of more than 23,000 Florida Medicare members has been impermissibly shared with overseas companies, putting Medicare members’...

The National Association on Drug Abuse Problems has experienced a data breach affecting up to 90,000 individuals. An insider data...

Over a three-week period between December 2025 and January 2026, hackers had access to the network of a Washington-based employee...

Trinity Health and the University of Pittsburgh Medical Center are notifying patients about potential unauthorized access to patient data by...

A telehealth company has admitted to improperly accessing patients’ medical records. GuardDog Telehealth purported to require access to patients’ medical...

Data breaches have recently been announced by Delta Medical Systems in Wisconsin, Ansell Healthcare Products in New Jersey, and FuturHealth...

Data breaches have recently been reported by Cedar Valley Services and Health Dimensions Group in Minnesota, and Community Nurse in...

The Chicago, IL-based Catholic health system CommonSpirit Health has announced that it has been affected by a security incident at...

Meadowlark Hills retirement community in Kansas and MedPeds Associates of Sarasota in Florida have announced data breaches. The Beast ransomware...

Data breaches have been reported by two entities in California – Tieu Dental Corporation has announced a July 2025 hacking-related...

Orthopaedic Institute of Western Kentucky has notified patients that their PHI was compromised in two security incidents at their managed...

The Seattle, Washington-based surgical group, Proliance Surgeons, has agreed to a settlement to resolve class action litigation over a February...

ID Care in New Jersey and Barrio Comprehensive Family Health Care Center (CommuniCare) in Texas have confirmed that patients’ personal...

Centerwell, a provider of senior healthcare services in 30 U.S. states, has experienced a cyberattack and data breach. Lakeside Pediatric...

Bell Ambulance has confirmed that the protected health information of more than 230,000 patients was compromised in a February 2025...

Jackson Hospital and Clinic in Montgomery, Alabama, has notified 14,485 individuals about a July 2024 data breach at one of...

PIH Health, a healthcare provider serving patients in Orange County and the San Gabriel Valley in California, has started notifying...

Data breaches have recently been announced by two California medical groups – Valley Radiology Consultants Medical Group, which serves San...

Data breaches have been announced by Insight Hospital and Medical Center in Chicago and Community Health Action of Staten Island....

In late February, The HIPAA Journal reported on a QualDerm Partners data breach, the scale of which was currently unknown,...

The University of Hawai’i Cancer Center (UHCC) has confirmed that up to 1.15 million individuals may have been affected by...

It has been more than four months since TriZetto Provider Solutions discovered unauthorized access to its IT environment, and it...

The HHS’ Office for Civil Rights (OCR) healthcare data breach portal shows a slight month-over-month decline in large healthcare data...

Data breaches have been announced by Apex Spine & Neurosurgery in Georgia and North Central Behavioral Health Systems in Illinois....

Cyberattacks and data breaches have been announced by the healthcare providers Carolina Foot & Ankle Associates, New Age Dermatology, and...

The Center for Advanced Eye Care in Pennsylvania/Delaware, Southwest C.A.R.E Center in New Mexico, and Evergreen Healthcare Group in Washington...

The U.S. medical device manufacturer UFP Technologies has submitted a FORM 8-K filing to the U.S Securities and Exchange Commission (SEC)...

Data breaches have recently been announced by Cedar Point Health in Colorado, Wee Care Pediatrics in Utah, and Easterseals Northeast...

Greater Pittsburgh Orthopedic Associates has experienced a ransomware attack that has affected almost 57,000 individuals. Data breaches have also been...

Vikor Scientific (now rebranded as Vanta Diagnostics), a molecular diagnostics company based in Charleston, South Carolina, has been affected by...

University of Mississippi Medical Center (UMMC) has temporarily closed most of its clinics following a ransomware attack, and scheduled appointments...

Granite Wellness Centers in California and Pediatric Home Service in Minnesota have both settled lawsuits stemming from cyberattacks that exposed...

WIRX Pharmacy in Pennsylvania has experienced a security incident that exposed the protected health information of more than 20,000 current...

Issaqueena Pediatric Dentistry in South Carolina, Enhabit Home Health & Hospice in Texas, and AltaMed Health Services in California have...

A class action lawsuit against Norton Healthcare over a 2023 ransomware attack has been settled for $11 million. The settlement...

Academic Urology & Urogynecology of Arizona, a division of Palo Verde Hematology and Oncology that serves patients throughout Arizona, has...

Managed Care Advisors and Sedgwick Government Solutions recently announced a cybersecurity incident involving unauthorized access to a corporate Secure File...

More than 700 healthcare data breaches affecting 500 or more individuals are being reported to the Department of Health and...

Data breaches have been confirmed by the revenue cycle management company MedRevenu Inland Physicians Hospitalist Services, and the Missouri-based eye...

We previously reported that the Aflac data breach had affected 22.65 million individuals worldwide; however, it was unclear exactly how...

The extent of a May 2025 ransomware attack on the Georgia-based physician- and clinician-owned staffing and management group ApolloMD has...

The Counseling Center of Wayne and Holmes Counties has experienced a cyberattack affecting 83,350 individuals. Data breaches have also been...

Data breaches have been announced by the Connecticut diagnostic laboratory Precipio, Pit River Health Service in California, and Tulane University...

Jefferson-Blount-St. Clair Mental Health Authority in Alabama, Cottage Hospital in New Hampshire, WindRose Health Network in Indiana, and Iroquois Memorial...

Central States Dermatology Services (DOCS Dermatology Group) in Ohio and The Center for Neuropsychology and Learning in Michigan have identified...

Cyberattacks and data breaches have recently been announced by the healthcare technology company Insightin Health and the Colorado-based medical billing...

Data breaches have recently been announced by Central Ozarks Medical Center in Missouri, AdventHealth Daytona Beach in Florida, and the...

Alpine Ear, Nose, and Throat in Colorado, The Phia Group in Massachusetts, and Community Health Northwest Florida have started notifying...

Bayada Home Health Care, a New Jersey-based home healthcare provider serving 22 U.S. states, has recently announced a data breach...

In the final month of 2025, a further 41 healthcare data breaches affecting 500 or more individuals were reported to...

Healthcare Interactive, better known as HCIactive, reported a data breach to the HHS’ Office for Civil Rights on September 22,...

Protected health information has been exposed in data security incidents at Mitchell County Department of Social Services in North Carolina,...

MACT Health Board has confirmed that patient data was stolen in a November 2025 cyberattack, for which the INC Ransom...

Munson Healthcare, the largest health system in Northern Michigan, has recently notified patients about unauthorized access to its electronic medical...

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state...

Patients of Laurel Health Centers have been notified that their protected health information was exposed in a July 2025 security...

Columbia Medical Practice has experienced a ransomware attack in which patient data was stolen, and Jupiter Medical Center has notified...

Based on breach reports submitted to the U.S. Department of Health and Human Services (HHS), November saw relatively low numbers...

Data breaches have recently been announced by Central Maine Healthcare, Dermatology Associates in Kentucky, and Reproductive Medicine Associates of Michigan....

The Minnesota Department of Human Services (DHS) has notified almost 304,000 individuals about unauthorized access to their demographic records. The...

Valley Eye Associates has fallen victim to a ransomware attack in which sensitive patient data was exfiltrated from its network....

Monroe University, a for-profit university with campuses in the Bronx and La Rochelle in New York, and Saint Lucia in...

Mid Michigan Medical Billing Service, a Flint, MI-based revenue cycle management company that provides billing support services to HIPAA-covered entities,...

Data breaches have recently been announced by Vida Y Salud-Health Systems in Crystal City, Texas, and Dublin Medical Center in...

There are ways you can report a HIPAA violation anonymously but, due to the risk your anonymous report may be...

CareOregon and Health Share of Oregon have notified certain patients about a data breach and potential insurance fraud. Andover Eye...

Data breaches have recently been reported by Pearlman Aesthetic Surgery and Associated Radiologists of the Finger Lakes in New York...

A delayed October 2025 healthcare data breach report due to the government shutdown for the whole of the month, which...

A business associate data breach has affected 55,000 members of the Bosch Choice Welfare Benefit Plan, and a data breach...

Denton County MHMR Center, a community behavioral health clinic in Denton, Texas, recently reported a major data breach to the...

How you should respond to an accidental HIPAA violation depends on the nature of the accidental violation and the potential...

The Illinois Department of Human Services (IDHS) has announced a major data breach affecting hundreds of thousands of state residents,...

Covenant Health has provided an update on the number of individuals affected by its May 2025 ransomware attack, confirming that...

HIPAA violations occur when covered entities, business associates, or members of either’s workforces fail to comply with a standard of...

The penalties for HIPAA violations include civil monetary penalties ranging from $145 to $2,190,294 per violation, depending on the level...

Singing River Health System, the largest health system on the Mississippi Gulf Coast, has announced that action has been taken...

AllerVie Health, a Frisco, TX-based provider of allergy and immunology services, has announced a security incident that exposed personally identifiable...

Tennessee-based Artemis Healthcare has experienced a ransomware attack involving data theft, and email account breaches have been announced by Greater...

Personal and protected health information has been compromised in security incidents affecting NCH Corporation Employee Benefits Plan members, and patients...

Fyzical Acquisition Holdings LLC, the parent company of Fyzical Therapy & Balance Centers, has announced a security incident involving unauthorized...

Orthopedics NY LLP (aka OrthoNY; OrthopedicsNY), a New York orthopedic medicine practice, has been fined $500,000 by the New York...

TapestryHealth, a Connecticut-based provider of technology solutions for post-acute and assisted living facilities, has identified unauthorized access to patient data....

Madison, WI-based ARC Community Services, a provider of behavioral health, substance use disorder treatment, and support services to women and...

Data breaches have been announced by Wilbarger General Hospital, a rural and community hospital in Vernon, Texas, and Ochsner LSU...

Excellent Home Care Services in New York has identified unauthorized access to an employee’s email account. Sports Medicine & Orthopaedics...

A former employee of Evoke Wellness at Hilliard has stolen and misused patient data, Conifer Value-Based Care has experienced an...

Officials in Albemarle County, Virginia, have confirmed that sensitive data, including protected health information (PHI), was compromised in a June...

Richmond Behavioral Health Authority (RBHA), the public entity responsible for providing mental health, substance abuse, and prevention services in the...

NS Support LLC, a Boise, Idaho-based healthcare provider specializing in neurosurgical treatment for conditions such as brain tumors, reported a...

Data breaches have recently been announced by the California radiology specialists, Expert MRI, and the small business technology consultancy firm,...

Data breaches have been announced by the Pennsylvania law firm Victory Disability and the Minnesota healthcare provider Madison Healthcare Services....

Revere Health in Utah and Health Management Systems of America in Michigan have recently confirmed that they have experienced cyberattacks...

MedStar Health, a non-profit health system that operates 10 hospitals in the Baltimore-Washington metropolitan area, has recently disclosed a cyberattack...

Brevard Skin and Cancer Center, a dermatology practice in Brevard, Florida, has fallen victim to a cyberattack that was first...

An insider data breach has been reported by Henry Ford Health in Michigan, and Wilmington Community Clinic has notified patients...

Data breaches have recently been announced by the North Atlantic States Carpenters Health Benefits Fund in Massachusetts and Millcreek Pediatrics...

Data breaches have been announced by the medical malpractice law firm Davies, McFarland & Carroll, the sex therapy and couples...

Data breaches have been announced by Morton Drug Company in Wisconsin, Physicians to Children & Adolescents in Kentucky, and the...

The West Lafayette, Indiana-based pharmaceutical research company Inotiv has recently disclosed a ransomware attack and data breach that involved the...

On November 19, 2025, Wyandot Center, a nonprofit community behavioral health center in Kansas City, KS, disclosed a cybersecurity incident...

Two sleep specialists, Persante Health Care in New Jersey and SomnoSleep Consultants in Virginia, have recently disclosed security incidents that...

Liberty Resources, a Syracuse, NY-based human services agency, has announced a security incident that was first identified 16 months ago,...

The Oakland, CA-based healthcare giant Kaiser Permanente has agreed to pay up to $47.5 million to settle class action litigation...

Data breaches have been announced by Fieldtex Products in New York State and the Utah ear, nose & throat specialists,...

Data breaches have recently been announced by Ennoble Care & Circa Health in New Jersey and Dermatology Associates of Concord...

The senior living company Heritage Communities and the Dallas mental health care company Metrocare Services have announced security incidents that...

North Kansas City Hospital has notified patients about a January 2025 data breach at its EHR vendor Cerner. Data breaches...

Data breaches have recently been announced by the OB/GYN practice Rockhill Women’s Care and Harbor Regional Center, a California provider...

VITAS Hospice Services, LLC, the largest for-profit hospice chain in the United States, has notified the California and Texas attorneys...

Delta Dental of Virginia has notified almost 146,000 members about a security incident that may have exposed their protected health...

The Danville, Pennsylvania-based healthcare provider Geisinger Health and its former IT vendor Nuance Communications, Inc., have agreed to a $5...

Personic Management Company (Personic Health) and Innovative Physical Therapy have recently confirmed that patient information was compromised in vendor security...

Data breaches have recently been announced by St. Anthony Hospital in Chicago, Intercommunity Action in Pennsylvania, and Munson Healthcare in...

A lawsuit filed by Nebraska Attorney General Mike Hilgers over the 2024 Change Healthcare data breach has been allowed to...

Data breaches have recently been announced by the EHR vendor CareTracker (Amazing Charts) and the Wisconsin health system, Marshfield Clinic....

Dallas, TX-based Doctor Alliance, a HIPAA business associate that provides document management and billing services to HIPAA-covered entities, is investigating...

DealMed Medical Supplies has confirmed that sensitive data was stolen in a July ransomware attack, the Wisconsin Department of Corrections...

Wakefield & Associates, a Knoxville, Tennessee-based vendor that offers revenue cycle & collections services to healthcare providers, has recently announced...

Data breaches have recently been announced by Tri Century Eye Care in Pennsylvania, Pittsburgh Gastroenterology Associates, NAHGA Claims Services, and...

Central Jersey Medical Center in New Jersey has experienced a ransomware attack. David A. Nover, M.D, is notifying patients about...

A Tampa, FL-based network of mental health and addiction recovery treatment facilities has recently disclosed a security incident that involved...

OB-GYN Associates in Nevada and Beverly Hills Oncology Medical Group in California have recently started notifying patients affected by hacking...

Data security incidents have recently been announced by George E. Weems Memorial Hospital in Florida, Vibra Hospital of Sacramento in...

Ransomware attacks have recently been announced by the Illinois retirement village and skilled nursing provider Sedgebrook, and the Nebraska healthcare...

Data breaches have been announced by the EHR provider Modernizing Medicine (ModMed), the Baltimore healthcare provider LifeBridge Health, and the...

An $18 million settlement proposed by Yale New Haven Health to resolve claims stemming from a 2025 data breach has been...

Four employees of Baptist Health’s Jay Hospital in Florida have been terminated for allegedly taking unauthorized photographs of patients and...

Approximately 462,000 current and former customers of Blue Cross Blue Shield of Montana (BCBSMT) have been affected by a cyberattack...

As of December 18, 2025, OCR has added 41 data breaches affecting 500 or more individuals to its data breach...

Cyberattacks have recently been announced by River City Eye in Oregon and Elmcrest Children’s Center in New York. River City...

City of Hope, a Duarte, California-based non-profit clinical research and cancer treatment center, has agreed to settle a class action...

A cyberattack has caused a network outage that has disrupted operations at two hospitals in North Central Massachusetts – the...

Data breaches have recently been announced by Watsonville Community Hospital and Palomar Health Medical Group in California, and the Phia...

Cyberattacks and data breaches have been announced by Crenshaw Community Hospital in Alabama, Waveny LifeCare in Connecticut, Aunt Martha’s Health...

Data breaches have recently been announced by Methodist Homes of Alabama & Northwest Florida, Rockhill Women’s Care, and Sierra Vista...

A data breach at the Fort Wayne Medical Education Program has affected almost 30,000 individuals. Data breaches have also been...

Integris Health has agreed to pay $30 million to settle class action data breach litigation. The settlement resolves claims stemming...

ALN Medical Management, a Nebraska-based revenue cycle management company, has agreed to pay $4 million to settle class action litigation...

On October 10, 2025, SimonMed Imaging started mailing notification letters to the individuals affected by its January 2025 cyberattack. SimonMed...

An Iowa nurse has been terminated for a HIPAA violation and has lost her unemployment benefits after disclosing the pregnancy...

Data breaches have been announced by Doctors Imaging Group in Florida, Rectangle Health in New York, and Care N’ Care...

Harris Health in Texas has recently started notifying 5,357 patients that their electronic health records may have been impermissibly accessed...

Superior Vision Service has announced that protected health information has been compromised in a phishing attack. People Encouraging People has...

Treasure Coast Hospice, a palliative care provider in Florida, and Harbor, a mental health and addiction treatment service provider in...

Outcomes One, a Florida-based business associate of health plans, has disclosed a phishing incident that has affected almost 150,000 individuals....

Gaylord Specialty Healthcare is notifying patients affected by a December hacking incident, and Gainwell Technologies has reported a breach involving...

Data breaches have been announced by the City of St. Joseph Health Department in Missouri and Viva Health in Alabama....

On September 22, 2025, Veradigm, a Chicago, Illinois-based provider of practice management and electronic health record solutions to healthcare providers...

Cybersecurity researcher Jeremiah Fowler has found an exposed 23.7 GB database containing more than 145,000 files, such as PDFs, PNGs,...

Data breaches have recently been announced by Coos County Family Health Services in New Hampshire, Roush Fenway Keselowski Racing in...

OneBlood, a non-profit organization that provides blood to approximately 350 hospitals in the southeastern United States, has agreed to pay...

Albany Gastroenterology Consultants and Inlet Care (Communicare) are notifying patients affected by cyberattacks in November 2024 that involved unauthorized access...

Sturgis Hospital, a rural critical access hospital in Michigan, has recently reported two security incidents to the HHS’ Office for...

There has been a 13.7% month-over-month increase in large healthcare data breaches, with 58 breaches affecting 500 or more individuals...

Two New Jersey medical groups have notified patients that their data may have been compromised in a recent security incident....

Goshen Medical Center, a federally qualified healthcare organization serving patients in eastern North Carolina, is notifying 456,385 individuals about a...

Central Valley Regional Center, a Fresno, California-based state-funded provider of services to individuals with developmental disabilities, has notified patients about...

Cybercriminals have gained access to employee email accounts at Community Health Network in Indiana and Mid South Rehab Services in...

Retina Group of Florida is the latest eye care provider to report a breach of patient data. The protected health...

Data breaches have been reported by Radiology Associates of San Luis Obispo, North Oaks Health System, The Children’s Center of...

Teamsters Union 25 Health Services & Insurance Plan, a health and wellness benefits plan for members of Teamsters Union Local...