INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Lazarus Group Exploits Vulnerability in Healthcare Database Management System

| 2026-10-15 08:18 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
In July 2026, a series of large healthcare data breaches affected over 32 million individuals in the United States, which is more than 9% of the population. The four biggest breaches occurred at DentaQuest and three business associates, with one breach affecting an estimated 15 million individuals. ShinyHunters, a notorious data theft and extortion group, claimed responsibility for the attack on DentaQuest, which exposed around 2.6 million unique email addresses and approximately 234 GB of data over a period of around 3 days in May 2026. The breaches were reported to the U.S. Department of Health and Human Services Office for Civil Rights (OCR) as affecting at least 33,485,970 individuals across all incidents.
Technical Mitigations AI-generated
• Patch AWS environment vulnerabilities to prevent unauthorized access, as seen in the Aesto Health breach. • Monitor for ShinyHunters' tactics and techniques, including data exfiltration and ransom demands, to detect potential threats. • Implement robust network segmentation and monitoring to identify and block suspicious activity, such as the Unlimited Technology Systems incident.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
The GentlemenThe GentlemenINC RansomINC RansomShinyHuntersShinyHunters
Target & Sectors
NORTH_AMERICA NORTH_AMERICA healthhealth technologytechnology
Incident Timeline
‎April 2021
OSF Healthcare System and its Affiliated Covered Entities agreed to pay a $552,250 financial penalty after OCR's investigators found they failed to conduct a HIPAA-compliant risk analysis, disclosed ePHI of 53,907 individuals impermissibly, and provided inadequate notifications.
organisation the HHS Office for Civil Rights
About this Report The HIPAA Journal monthly data breach reports are based on data obtained from the HHS Office for Civil Rights and have been combined with breach report data from other sources.
organisation Affiliated Covered Entities
The alleged HIPAA violations were settled, with OSF Healthcare System and its Affiliated Covered Entities agreeing to pay a $552,250 financial penalty and adopt a corrective action plan to address the identified areas of noncompliance.
financial $552,250 $ financial penalty
The alleged HIPAA violations were settled, with OSF Healthcare System and its Affiliated Covered Entities agreeing to pay a $552,250 financial penalty and adopt a corrective action plan to address the identified areas of noncompliance.
organisation HIPAA Breach Notification Rule
While OCR has not announced a specific enforcement initiative targeting noncompliance with the HIPAA Breach Notification Rule, OCR appears to be looking closely at HIPAA Breach Notification Rule compliance.
‎2025/10/15
While the same number of healthcare data breaches have been reported as this time last year, hacking/IT incidents have increased by 7.
general_metric 67,400,422 individuals
Between January and July 2026, the protected health information of 67,400,422 individuals was exposed or impermissibly disclosed; an increase of 35.1% from this time last year.
general_metric 35.1 %
Between January and July 2026, the protected health information of 67,400,422 individuals was exposed or impermissibly disclosed; an increase of 35.1% from this time last year.
general_metric 7.3 %
While the same number of healthcare data breaches have been reported as this time last year, hacking/IT incidents have increased by 7.3% year-over-year.
‎October 2025
Threat actors accessed Unlimited Technology Systems' network for five days in October 2025, potentially obtaining the protected health information of more than 3.8 million individuals.
infrastructure 3.8
Unlimited Technology Systems, an Ohio-based revenue cycle management and practice management software company, discovered its network had been accessed by an unauthorized third party for five days in October 2025, and potentially obtained the protected health information of more than 3.8 million individuals.
organisation Unlimited Technology Systems
Unlimited Technology Systems, an Ohio-based revenue cycle management and practice management software company, discovered its network had been accessed by an unauthorized third party for five days in October 2025, and potentially obtained the protected health information of more than 3.8 million individuals.
general_metric 3.8 individuals
Unlimited Technology Systems, an Ohio-based revenue cycle management and practice management software company, discovered its network had been accessed by an unauthorized third party for five days in October 2025, and potentially obtained the protected health information of more than 3.8 million individuals.
‎the start of 2025
Threat actors failed to notify affected individuals and organizations in compliance with the Breach Notification Rule, resulting in eight HIPAA settlements issued since the start of 2025.
organisation HIPAA
Since the start of 2025, eight HIPAA settlements have included penalties for Breach Notification Rule failures.
organisation Breach Notification Rule
Since the start of 2025, eight HIPAA settlements have included penalties for Breach Notification Rule failures.
‎December 2025
Threat actors exploited a vulnerability in AWS's security controls to gain unauthorized access to its environment between December 2025 and the time of discovery.
organisation AWS
The incident occurred in December 2025 and involved unauthorized access to its AWS environment.
‎March 2026
Threat actors, specifically the ShinyHunters data theft and extortion group, accessed DentaQuest's systems in July 2026.
tactic Data Breach
A similar-sized data breach was reported by CareCloud, a provider of cloud-based and AI-powered EHR, RCM, PM, and clinical documentation solutions, which discovered that a threat actor accessed its AWS environment over 6 days in March 2026, and likely exfiltrated databases containing the protected health information of more than 3.7 million individuals.
organisation CareCloud
A similar-sized data breach was reported by CareCloud, a provider of cloud-based and AI-powered EHR, RCM, PM, and clinical documentation solutions, which discovered that a threat actor accessed its AWS environment over 6 days in March 2026, and likely exfiltrated databases containing the protected health information of more than 3.7 million individuals.
general_metric 3.7 individuals
A similar-sized data breach was reported by CareCloud, a provider of cloud-based and AI-powered EHR, RCM, PM, and clinical documentation solutions, which discovered that a threat actor accessed its AWS environment over 6 days in March 2026, and likely exfiltrated databases containing the protected health information of more than 3.7 million individuals.
organisation AL Business Associate
Aesto, LLC AL Business Associate 9,540,683 Hacking incident Unlimited Technology Systems, LLC OH Business Associate 3,803,750 Hacking incident CareCloud, Inc. NJ Business Associate 3,756,469 Hacking incident Lifespan Physician Group of Massachusetts, Inc.
organisation NJ Business Associate
Aesto, LLC AL Business Associate 9,540,683 Hacking incident Unlimited Technology Systems, LLC OH Business Associate 3,803,750 Hacking incident CareCloud, Inc. NJ Business Associate 3,756,469 Hacking incident Lifespan Physician Group of Massachusetts, Inc.
organisation Lifespan Physician Group
Aesto, LLC AL Business Associate 9,540,683 Hacking incident Unlimited Technology Systems, LLC OH Business Associate 3,803,750 Hacking incident CareCloud, Inc. NJ Business Associate 3,756,469 Hacking incident Lifespan Physician Group of Massachusetts, Inc.
organisation Boundary Regional Community Health Center
Boundary Regional Community Health Center dba Kaniksu Community Health ID Healthcare Provider 88,000 Hacking incident at business associate Aesto (see above) A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons AR Healthcare Provider 64,831 Hacking incident (PEAR data theft and extortion group)
organisation Kaniksu Community Health ID
Boundary Regional Community Health Center dba Kaniksu Community Health ID Healthcare Provider 88,000 Hacking incident at business associate Aesto (see above) A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons AR Healthcare Provider 64,831 Hacking incident (PEAR data theft and extortion group)
organisation Arkansas Oral & Maxillofacial Surgeons
Boundary Regional Community Health Center dba Kaniksu Community Health ID Healthcare Provider 88,000 Hacking incident at business associate Aesto (see above) A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons AR Healthcare Provider 64,831 Hacking incident (PEAR data theft and extortion group)
organisation AR Healthcare Provider
Boundary Regional Community Health Center dba Kaniksu Community Health ID Healthcare Provider 88,000 Hacking incident at business associate Aesto (see above) A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons AR Healthcare Provider 64,831 Hacking incident (PEAR data theft and extortion group)
threat_actor ShinyHunters
Regulated Entity State Covered Entity Type Individuals Affected Cause of Breach DentaQuest, LLC MA Health Plan 15,000,000 Hacking incident (ShinyHunters data theft and extortion group)
organisation LLC
Regulated Entity State Covered Entity Type Individuals Affected Cause of Breach DentaQuest, LLC MA Health Plan 15,000,000 Hacking incident (ShinyHunters data theft and extortion group)
organisation MA Health Plan
Regulated Entity State Covered Entity Type Individuals Affected Cause of Breach DentaQuest, LLC MA Health Plan 15,000,000 Hacking incident (ShinyHunters data theft and extortion group)
‎May 2026
Threat actors, identified as ShinyHunters, gained unauthorized access to Aesto Health's network for approximately 3 days in May 2026.
organisation EHR
Aesto Health, a healthcare technology company that offers secure data migration, legacy data archiving, and electronic health record (EHR) exchanges, experienced a hacking incident that affected at least 39 of its healthcare clients and involved the protected health information of more than 9.5 million individuals.
threat_actor ShinyHunters
ShinyHunters claimed responsibility and said 234 GB of data was exfiltrated in the incident, then started leaking the stolen data as it failed to reach an agreement with DentaQuest on a ransom payment.
data_breach 234 GB
ShinyHunters claimed responsibility and said 234 GB of data was exfiltrated in the incident, then started leaking the stolen data as it failed to reach an agreement with DentaQuest on a ransom payment.
‎June 2026
Threat actors used hacking and IT-related incidents to target protected health information of at least 33,485,970 individuals in July.
data_breach 77 data breaches
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
general_metric 33,485,970 individuals
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
general_metric 642 %
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
general_metric 154 %
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
general_metric 13.2 individuals
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
data_breach 23 data breaches
Causes of June 2026 Healthcare Data Breaches A majority of the data breaches reported in July were due to hacking and other IT-related incidents, including all but one of the 23 data breaches affecting 10,000 or more individuals.
general_metric 10,000 individuals
Causes of June 2026 Healthcare Data Breaches A majority of the data breaches reported in July were due to hacking and other IT-related incidents, including all but one of the 23 data breaches affecting 10,000 or more individuals.
‎early June 2026
Threat actors used an unspecified vector to target DentaQuest's computer network, prompting the company to initiate a cybersecurity incident investigation in early June 2026.
‎July 2026
Threat actors used a ransomware group to target DentaQuest, a Sun Life U.S-owned dental and vision benefits administrator.
target_region Jersey
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
organisation the HIPAA Rules
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 15,317,249 Wisconsin
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 18,549 Alabama
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 9,540,683 Minnesota
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 15,398 Ohio
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 3,759,869 Virginia
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 9,909 California
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 478,468 Tennessee
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 9,835 Idaho
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 88,000 Michigan
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 5,707 Texas
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 71,136 North Carolina
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 4,493 Arkansas
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 65,520 West Virginia
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 2,173 Florida
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 60,164 Connecticut
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 1,556 Illinois
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 56,638 Indiana
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 1,530 Indiana District
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 56,197 Arizona
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
infrastructure 800 Mississippi
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 30,403 Iowa
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 746 Iowa
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 24,496 Washington
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 501 Kansas
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 24,088 Maryland
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
general_metric 500 New York
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
In July 2026, 77 healthcare data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
general_metric 19,678 Oklahoma
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
tactic Data Breach
July 2026 Healthcare Data Breach Report.
July 2026 Healthcare Data Breach Report Posted By Steve Alder on Oct 15, 2026
organisation Healthcare Data Breach Report
July 2026 Healthcare Data Breach Report.
organisation the U.S. Department of Health and Human Services
In July 2026, 77 healthcare data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
organisation HHS) Office for Civil Rights
In July 2026, 77 healthcare data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
data_breach 77 data breaches
In July 2026, 77 healthcare data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
organisation Biggest Healthcare Data Breaches
Biggest Healthcare Data Breaches in July 2026
general_metric 9 %
In July 2026, 9 of the month’s data breaches were reported as unauthorized access/disclosure incidents (11.7% of incidents), involving the protected health information of 23,054 of the month’s affected individuals (0.07%).
general_metric 11.7 %
In July 2026, 9 of the month’s data breaches were reported as unauthorized access/disclosure incidents (11.7% of incidents), involving the protected health information of 23,054 of the month’s affected individuals (0.07%).
general_metric 0.07 %
In July 2026, 9 of the month’s data breaches were reported as unauthorized access/disclosure incidents (11.7% of incidents), involving the protected health information of 23,054 of the month’s affected individuals (0.07%).
general_metric 16,545 Business Associate
In July 2026, only one of the month’s data breaches was due to the improper disposal of protected health information (1.3%), and that incident affected 16,545 individuals (0.05%).
general_metric 1.3 %
In July 2026, only one of the month’s data breaches was due to the improper disposal of protected health information (1.3%), and that incident affected 16,545 individuals (0.05%).
general_metric 0.05 %
In July 2026, only one of the month’s data breaches was due to the improper disposal of protected health information (1.3%), and that incident affected 16,545 individuals (0.05%).
data_breach 56 data breaches
In July, healthcare providers reported 56 data breaches, business associates reported 12 breaches, and 9 breaches were reported by health plans.
organisation OCR
The OCR data breach portal currently shows 806 large healthcare data breaches in 2025 – an increase of 8.6% from 2024.
data_breach 806 large data breaches
The OCR data breach portal currently shows 806 large healthcare data breaches in 2025 – an increase of 8.6% from 2024.
organisation DentaQuest
The largest data breach occurred at DentaQuest, a Sun Life U.S-owned dental and vision benefits administrator, which fell victim to a cyberattack by the notorious data theft and extortion group ShinyHunters.
organisation Sun Life U.S
The largest data breach occurred at DentaQuest, a Sun Life U.S-owned dental and vision benefits administrator, which fell victim to a cyberattack by the notorious data theft and extortion group ShinyHunters.
threat_actor ShinyHunters
The largest data breach occurred at DentaQuest, a Sun Life U.S-owned dental and vision benefits administrator, which fell victim to a cyberattack by the notorious data theft and extortion group ShinyHunters.
organisation Location of Breached Protected Health Information
Location of Breached Protected Health Information In July, network servers were the most common location of breached protected health information, followed by email systems.
organisation HIPAA Regulated Entities
Data Breaches at HIPAA Regulated Entities The HIPAA Breach Notification Rule requires HIPAA-covered entities to report data breaches to OCR and notify the affected individuals.
organisation Geographical Distribution of
Geographical Distribution of Healthcare Data Breaches In July, large healthcare data breaches were reported to OCR by HIPAA-regulated entities in 30 U.S. states and the District of Columbia.
organisation Healthcare System
OSF Healthcare System is a Peoria, Illinois-based integrated health system that serves patients at 174 locations in Illinois and Michigan, including 16 hospitals.
organisation OSF Healthcare System
OSF Healthcare System was investigated by OCR in response to a reported cybersecurity incident that exposed the protected health information of 53,907 individuals.
data_breach 11 large data breaches
Texas was the worst affected state with 11 large data breaches, closely followed by California with nine.
‎October 10, 2026
The figures in the report may increase or decrease as HIPAA-regulated entities complete their breach investigations.
industry Health
General Document Context
industry Technology
General Document Context
‎Oct 15, 2026
A healthcare data breach occurred on October 15, 2026.
tactic Data Breach
July 2026 Healthcare Data Breach Report Posted By Steve Alder on Oct 15, 2026
industry Health
General Document Context
industry Technology
General Document Context
‎Between January and July 2026
The protected health information of 67,400,422 individuals was exposed or impermissibly disclosed between January and July 2026.
general_metric 67,400,422 individuals
Between January and July 2026, the protected health information of 67,400,422 individuals was exposed or impermissibly disclosed; an increase of 35.1% from this time last year.
general_metric 35.1 %
Between January and July 2026, the protected health information of 67,400,422 individuals was exposed or impermissibly disclosed; an increase of 35.1% from this time last year.
‎Between January 1 and July 31
Between January 1 and July 31, hacking incidents accounted for the majority of reported data breaches.
organisation 65,89,1098
Between January 1 and July 31, 414 hacking/IT incidents were reported – 86% of all data breaches – and they accounted for 97.8% of all affected individuals (65,89,1098 individuals).
general_metric 414 hacking IT incidents
Between January 1 and July 31, 414 hacking/IT incidents were reported – 86% of all data breaches – and they accounted for 97.8% of all affected individuals (65,89,1098 individuals).
general_metric 86 %
Between January 1 and July 31, 414 hacking/IT incidents were reported – 86% of all data breaches – and they accounted for 97.8% of all affected individuals (65,89,1098 individuals).
general_metric 97.8 %
Between January 1 and July 31, 414 hacking/IT incidents were reported – 86% of all data breaches – and they accounted for 97.8% of all affected individuals (65,89,1098 individuals).
general_metric 65,89,1098 individuals
Between January 1 and July 31, 414 hacking/IT incidents were reported – 86% of all data breaches – and they accounted for 97.8% of all affected individuals (65,89,1098 individuals).
general_metric 62 unauthorized disclosure incidents
Between January 1 and July 31, 62 unauthorized access/disclosure incidents were reported – 12.9% of all data breaches – and they accounted for 2.2% of all affected individuals (1,490,420 individuals).
general_metric 12.9 %
Between January 1 and July 31, 62 unauthorized access/disclosure incidents were reported – 12.9% of all data breaches – and they accounted for 2.2% of all affected individuals (1,490,420 individuals).
general_metric 2.2 %
Between January 1 and July 31, 62 unauthorized access/disclosure incidents were reported – 12.9% of all data breaches – and they accounted for 2.2% of all affected individuals (1,490,420 individuals).
general_metric 1,490,420 individuals
Between January 1 and July 31, 62 unauthorized access/disclosure incidents were reported – 12.9% of all data breaches – and they accounted for 2.2% of all affected individuals (1,490,420 individuals).
general_metric 2 Oklahoma
Between January 1 and July 31, 2 improper disposal incidents were reported – 2.6% of all data breaches – and they accounted for 0.03% of all affected individuals (17,545 individuals).
Between January 1 and July 31, only 2 loss/theft incidents were reported – 0.4% of all data breaches – and they accounted for 0.002% of all affected individuals (1,359 individuals).
general_metric 2.6 %
Between January 1 and July 31, 2 improper disposal incidents were reported – 2.6% of all data breaches – and they accounted for 0.03% of all affected individuals (17,545 individuals).
general_metric 0.03 %
Between January 1 and July 31, 2 improper disposal incidents were reported – 2.6% of all data breaches – and they accounted for 0.03% of all affected individuals (17,545 individuals).
general_metric 17,545 individuals
Between January 1 and July 31, 2 improper disposal incidents were reported – 2.6% of all data breaches – and they accounted for 0.03% of all affected individuals (17,545 individuals).
general_metric 0.4 %
Between January 1 and July 31, only 2 loss/theft incidents were reported – 0.4% of all data breaches – and they accounted for 0.002% of all affected individuals (1,359 individuals).
general_metric 0.002 %
Between January 1 and July 31, only 2 loss/theft incidents were reported – 0.4% of all data breaches – and they accounted for 0.002% of all affected individuals (1,359 individuals).
general_metric 1,359 individuals
Between January 1 and July 31, only 2 loss/theft incidents were reported – 0.4% of all data breaches – and they accounted for 0.002% of all affected individuals (1,359 individuals).
‎2026/10/15
Massachusetts topped the list in terms of affected individuals, with more than 18 million individuals impacted by a healthcare data breach.
organisation Breaches State Breaches
…as 1 North Carolina 4 Maine 1 Tennessee 3 Maryland 1 Wisconsin 3 Mississippi 1 Arkansas 2 Oklahoma 1 Michigan 2 Pennsylvania 1 New Jersey 2 South Carolina 1 Ohio 2 Virginia 1 Alabama 1 Washington 1 Massachusetts topped the list in terms of affected individuals, with more than 18 million indi…
infrastructure 3 Mississippi
…as 1 North Carolina 4 Maine 1 Tennessee 3 Maryland 1 Wisconsin 3 Mississippi 1 Arkansas 2 Oklahoma 1 Michigan 2 Pennsylvania 1 New Jersey 2 South Carolina 1 Ohio 2 Virginia 1 Alabama 1 Washington 1 Massachusetts topped the list in terms of affected individuals, with more than 18 million indi…
organisation Casper Orthopedic Associates
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation Sunshine Health FL Health Plan
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation Brookhaven ENT Allergy
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation MS Healthcare Provider
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation CloudCare
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation Alta Orthopaedics Medical Group, Inc.
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
threat_actor INC Ransom
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation Nephrology Associates
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
organisation KS
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
threat_actor The Gentlemen
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
financial 24,496 Ransomware
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
financial 24,088 Ransomware
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
threat_actor ShinyHunters
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation Ransomware
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation MA Healthcare Provider
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation One Medical Group, Inc.
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation CA Healthcare Provider
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation Madera Community Hospital
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation Healthcare Provider
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation zHealth, Inc.
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation CA Business Associate
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation Kazu
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
organisation TX
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation ZenPatient
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation Cornerstone Behavioral Healthcare ME
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation Group
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation Agave Dental-Floresville
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation Any-Time Home Care, Inc.
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation NY
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation Hacking/IT Incident
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
organisation the HIPAA Breach Notification Rule
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
financial 14,830 Ransomware
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
financial 11,790 Ransomware
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
Tactical Metrics
Metrics
infrastructure
3
Mississippi
…as 1 North Carolina 4 Maine 1 Tennessee 3 Maryland 1 Wisconsin 3 Mississippi 1 Arkansas 2 Oklahoma 1 Michigan 2 Pennsylvania 1 New Jersey 2 South Carolina 1 Ohio 2 Virginia 1 Alabama 1 Washington 1 Massachusetts topped the list in terms of affected individuals, with more than 18 million indi…
Metrics
infrastructure
800
Mississippi
…viduals Affected State Individuals Affected Massachusetts 15,317,249 Wisconsin 18,549 Alabama 9,540,683 Minnesota 15,398 Ohio 3,805,854 Maine 14,830 New Jersey 3,759,869 Virginia 9,909 California 478,468 Tennessee 9,835 Idaho 88,000 Michigan 5,707 Texas 71,136 North Carolina 4,493 Arkansas 65,520 We…
Metrics
data_breach
806
Large Data Breaches
The OCR data breach portal currently shows 806 large healthcare data breaches in 2025 – an increase of 8.6% from 2024.
Metrics
financial
150,810
Provider Incident Incident Ransomware Attack
…own Health Medical Group-MA MA Healthcare Provider 311,760 Hacking incident One Medical Group, Inc. CA Healthcare Provider 153,174 Hacking incident (ShinyHunters data theft and extortion group) Madera Community Hospital CA Healthcare Provider 150,810 Hacking incident zHealth, Inc. CA Business Associate 118,563 Ransomware attack (Kazu ransomware g…
Metrics
financial
24,496
Ransomware
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
Metrics
financial
24,088
Ransomware
Casper Orthopedic Associates, PC DC Healthcare Provider 56,197 Hacking incident Heart Care Centers of Illinois IL Healthcare Provider 52,562 Email phishing incident Sunshine Health FL Health Plan 41,569 Vishing (voice phishing) incident Brookhaven ENT Allergy and Facial Surgery MS Healthcare Provider 30,403 Hacking incident at vendor CloudCare…
Metrics
financial
14,830
Ransomware
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
Metrics
financial
11,790
Ransomware
…al service provider ZenPatient, Inc. CA Healthcare Provider 15,749 Hacking incident (data theft confirmed) Cornerstone Behavioral Healthcare ME Healthcare Provider 14,830 Ransomware attack (Group unknown) Resource Center of Dallas, Inc. TX Healthcare Provider 12,490 Hacking incident Agave Dental-Floresville TX Healthcare Provider 11,790 Ran…
Metrics
infrastructure
‎3.8
Software Version
Unlimited Technology Systems, an Ohio-based revenue cycle management and practice management software company, discovered its network had been accessed by an unauthorized third party for five days in October 2025, and potentially obtained the protected health information of more than 3.8 million individuals.
Metrics
data_breach
77
Data Breaches
In July 2026, 77 healthcare data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights.
Across the 77 large data breaches, the protected health information of at least 33,485,970 individuals was exposed or impermissibly disclosed – an increase of 642% from June 2026, and 154% higher than the 12-month average of 13.2 million individuals per month.
Metrics
data_breach
234
Gb
ShinyHunters claimed responsibility and said 234 GB of data was exfiltrated in the incident, then started leaking the stolen data as it failed to reach an agreement with DentaQuest on a ransom payment.
Metrics
data_breach
23
Data Breaches
Causes of June 2026 Healthcare Data Breaches A majority of the data breaches reported in July were due to hacking and other IT-related incidents, including all but one of the 23 data breaches affecting 10,000 or more individuals.
Metrics
financial
552,250
$ Financial Penalty
The alleged HIPAA violations were settled, with OSF Healthcare System and its Affiliated Covered Entities agreeing to pay a $552,250 financial penalty and adopt a corrective action plan to address the identified areas of noncompliance.
Metrics
data_breach
56
Data Breaches
In July, healthcare providers reported 56 data breaches, business associates reported 12 breaches, and 9 breaches were reported by health plans.
Metrics
data_breach
11
Large Data Breaches
Texas was the worst affected state with 11 large data breaches, closely followed by California with nine.
Intelligence Sources
HIPAA Journal 2026-10-15