HealthConsent
Live tracker Last update May 1, 2026

Healthcare data breaches, explained for the people affected.

If you received a notification letter and want to know what was actually taken, what your provider’s response covers, and what to do next, start here.

Each entry names the entity, summarizes what was exposed, and tells you the five concrete steps to take today. Looking for the landmark enforcement cases and what they cost? See real HIPAA violation cases.

Protect your health data The 5-step breach checklist

Tracked incidents

569

named US healthcare breaches

People affected

71.8M

across tracked incidents

Ransomware share

128

of 569 confirmed ransomware

Update cadence

Daily

cross-referenced from HHS OCR + press

Browse
By state Clusters 2026 rollup May '26 April '26 March '26 February '26 January '26 December '25 November '25 October '25 September '25 August '25 July '25 June '25 May '25 April '25 March '25 February '25 January '25

Featured incidents

Cluster anchors · highest-impact disclosures

Hacking

OpenLoop Health, Inc.

Des Moines, IA

Stuckin2019 · leaked

716,000 affected
Vendor breach

Trinity Health Corporation

Livonia, MI HQ

Class action filed

2,740 affected
Vendor breach

University of Pittsburgh Medical Center

Pittsburgh, PA

OCR investigation open

687 affected

02

April 2026

27 incidents

Unauthorized access

City Health, a medical corporation

San Leandro, CA

OCR investigation open

65,000 affected
Hacking

Exclusive Physicians PLLC

Ferndale, MI

OCR investigation open

58,000 affected
Hacking

Integrated Pain Associates

Killeen, TX HQ

OCR investigation open

500 affected · interim
Ransomware

Mt. Spokane Pediatrics

Spokane and Spokane Valley, WA

LockBit 5.0 · leaked

32,021 affected
Unauthorized access

Ouster, Inc.

San Francisco, CA

OCR investigation open

574 affected · interim
Ransomware

Tri-Cities Gastroenterology, P.C.

Northeast Tennessee

Insomnia · leaked

67,115 affected
Ransomware

Rocky Mountain Associated Physicians, P.C.

Salt Lake City, UT

PEAR (Pure Extortion and Ransom) · leaked

50,640 affected
Hacking

Prime-Care 12 Priority Health, Inc.

Princeton, WV

OCR investigation open

1,000 affected
Phishing

Aligned Orthopedic Partners

Bethesda, MD

OCR investigation open

7,213 affected
Hacking

Innovative Scientific Solutions, LLC

Greenville, SC

OCR investigation open

143,842 affected
Hacking

University of Nebraska Medical Center

Omaha, NE

OCR investigation open

26,937 affected · interim
Vendor breach

Amedisys

Baton Rouge, LA HQ

Kazu · leaked

9,111 affected
Vendor breach

Liberty Bankers Life Insurance Co.

Texas

OCR investigation open

20,202 affected
Hacking

Mazzola Mardon, P.C.

26 Broadway, Floor 17, New York, NY 10004

OCR investigation open

2,123 affected
Phishing

Defense Health Agency

Falls Church, VA

OCR investigation open

1,300 affected
Hacking

CardioFit Medical Group, Inc.

Torrance, CA

OCR investigation open

7,243 affected
Phishing

C.A.R.E. Clinic

Red Wing, MN

OCR investigation open

500 affected · interim
Phishing

Springfield Hospital

Springfield, VT

OCR investigation open

5,892 affected
Phishing

Interventional Pain Center, PLLC

Hendersonville, TN

OCR investigation open

3,171 affected
Phishing

Option Care Health, Inc.

Bannockburn, IL HQ

OCR investigation open

1,891 affected
Phishing

Option Care Health, Inc.

Bannockburn, IL HQ

OCR investigation open

2,086 affected
Hacking

Pinnacle Holdings, LTD

Centennial, CO

OCR investigation open

18,313 affected
Ransomware

Heart South Cardiovascular Group, P.C.

Central Alabama

Rhysida · leaked

46,666 affected
Ransomware

Hospital Caribbean Medical Center

Fajardo, Puerto Rico

The Gentlemen · leaked

92,000 affected
Hacking

LifeSpring Home Care

Norman, OK

OCR investigation open

7,509 affected
Phishing

Village Heart & Vein Center

Lady Lake, FL

OCR investigation open

687 affected
Ransomware

Southern Illinois Dermatology

Herrin, IL

Insomnia · leaked

160,312 affected

03

March 2026

29 incidents

Ransomware

Woodfords Family Services

Westbrook, ME

Medusa · leaked

38,061 affected
Hacking

Corporación de Servicios Médicos Primarios y Prevención de Hatillo

Hatillo, Puerto Rico

OCR investigation open

24,236 affected
Hacking

Cullen/Frost Bankers, Inc.

San Antonio, TX

OCR investigation open

4,698 affected
Vendor breach

Securian Financial

St. Paul, MN

OCR investigation open

500 affected · interim
Hacking

Coastal Carolina Health Care, PA

New Bern, NC

OCR investigation open

110,304 affected
Hacking

Mays Housecall Home Health, Inc.

Texas

OCR investigation open

5,208 affected
Ransomware

Orem Eye Clinic

Orem, UT

NightSpire · leaked

5,800 affected
Ransomware

The South Alabama Regional Planning Commission

Mobile, AL

Qilin · leaked

3,043 affected
Hacking

OpenLoop Health, Inc.

Des Moines, IA

Stuckin2019 · leaked

716,000 affected
Ransomware

MedPeds Associates of Sarasota

Sarasota, FL

Beast · leaked

22,017 affected
Hacking

illumifin Corporation

Woodbury, MN / Greenville, SC

OCR investigation open

5,385 affected
Vendor breach

Lena Health

Houston, TX

FulcrumSec · leaked

3,651 affected
Vendor breach

Trinity Health Corporation

Livonia, MI HQ

Class action filed

2,740 affected
Hacking

True RCM

Maryland

OCR investigation open

1,247 affected
Vendor breach

University of Pittsburgh Medical Center

Pittsburgh, PA

OCR investigation open

687 affected
Ransomware

Good Samaritan Health Center

Atlanta, GA

OCR investigation open

10,000 affected
Vendor breach

Team Select

Phoenix, AZ HQ

Kazu · leaked

949 affected
Ransomware

Austin Plastic & Reconstructive Surgery

Austin, TX

3AM (ThreeAM) · leaked

4,266 affected
Phishing

Delta Medical Systems, Inc.

Brookfield, WI

OCR investigation open

1,574 affected
Physical theft

Renovo Chiropractic & Wellness LLC

Auburn, WA

OCR investigation open

538 affected
Phishing

Barrio Comprehensive Family Health Care Center

San Antonio, TX

OCR investigation open

19,971 affected
Hacking

Cedar Valley Hospice

Waterloo, IA

OCR investigation open

10,666 affected
Ransomware

Community Health Action of Staten Island

Staten Island, NY

GENESIS · leaked

501 affected · interim
Unauthorized access

Metrocare Services

Dallas, TX

OCR investigation open

602 affected
Hacking

North Texas Behavioral Health Authority

Dallas, TX

OCR investigation open

285,086 affected
Phishing

Saint Anthony Hospital

Chicago, IL

OCR investigation open

146,108 affected
Hacking

Tieu Dental Corporation

Bay Area, CA

OCR investigation open

8,918 affected
Hacking

Longevity Health Plan

Palm Beach Gardens, FL

OCR investigation open

15,000 affected · interim
Hacking

Murray County Medical Center

Slayton, MN

OCR investigation open

5,073 affected

04

February 2026

36 incidents

Vendor breach

Access Information Management Shared Services, LLC

Woburn, MA

OCR investigation open

1,522 affected · interim
Vendor breach

Insurance ACE / Humana Inc.

Louisville, KY HQ

Class action filed

1,000 affected · interim
Unauthorized access

Aetna

Hartford, CT

OCR investigation open

10,888 affected
Hacking

IPPC Inc., IPPC of New York LLC, and Innovative Pharmacy LLC

Morganville, NJ

Class action filed

133,862 affected
Hacking

Lakeside Pediatrics & Adolescent Medicine, PLLC

Coeur d'Alene, ID

OCR investigation open

34,154 affected
Vendor breach

LHC Group

Lafayette, LA HQ

Kazu · leaked

8,644 affected
Phishing

Nephrology Associates Medical Group, Inc.

Inland Empire / Coachella Valley, CA

OCR investigation open

4,631 affected
Ransomware

BMG of Kansas, Inc.

Hesston, KS

Qilin · leaked

1,327 affected
Ransomware

Couve Healthcare Consulting, LLC DBA Evergreen Healthcare Group

Vancouver, WA

Medusa · leaked

11,795 affected
Ransomware

Manhattan Retirement Foundation d/b/a Meadowlark Hills

Manhattan, KS

Beast · leaked

14,442 affected
Hacking

QualDerm Partners, LLC

Brentwood, TN

Class action filed

3.1M affected
Hacking

The Center for Advanced Eye Care

Wilmington, DE

Frenshyny · leaked

9,300 affected
Vendor breach

Benton County Health

Corvallis, OR

OCR investigation open

1,476 affected
Ransomware

Builders FirstSource Flex Plan

Texas HQ

Leaknet · leaked

1,514 affected
Ransomware

Resource Corporation of America

Clear Lake Shores, TX

Medusa + Qilin (double extortion by two separate groups) · leaked

501 affected · interim
Ransomware

Easterseals Arc of Northeast Indiana

Fort Wayne, IN

INC RANSOM · leaked

3,158 affected
Hacking

Emanuel Medical Center

Swainsboro, GA

OCR investigation open

28,963 affected
Ransomware

44North

Cadillac, MI

OCR investigation open

2,158 affected
Hacking

AltaMed Health Services Corporation

Los Angeles, CA HQ

OCR investigation open

501 affected · interim
Ransomware

Academic Urology & Urogynecology of Arizona

Arizona

INC RANSOM · leaked

73,281 affected
Ransomware

National Association on Drug Abuse Problems

New York, NY

Genesis · leaked

90,000 affected
Hacking

VPS Medical PLLC

Pennsylvania

OCR investigation open

4,600 affected
Hacking

Alexes Hazen MD, PLLC

Upper East Side Manhattan, NY

OCR investigation open

500 affected · interim
Hacking

Cedar Point Health, LLC

Montrose, CO

OCR investigation open

23,114 affected
Hacking

Counseling Center of Wayne & Holmes Counties

Wooster, OH

OCR investigation open

83,354 affected
Ransomware

Wendy Foster OD

Wichita, KS

OCR investigation open

20,000 affected
Ransomware

Cottage Hospital

Woodsville, NH

Qilin · leaked

2,156 affected
Hacking

Marin Cancer Care

Greenbrae, CA

OCR investigation open

501 affected
Phishing

Triad Radiology Associates

Winston-Salem, NC

Class action filed

11,011 affected
Hacking

TriZetto Provider Solutions

Missouri

Class action filed

3.4M affected
Ransomware

Apex Spine & Neurosurgery, LLC

Georgia

Interlock · leaked

2,500 affected
Hacking

WIRX Pharmacy

Fort Washington, PA

OCR investigation open

20,047 affected
Ransomware

Issaqueena Pediatric Dentistry PA

Upstate SC

Interlock · leaked

501 affected
Phishing

Personalis, Inc.

Fremont, CA

OCR investigation open

650 affected
Ransomware

ApolloMD Business Services, LLC

Atlanta, GA

Qilin · leaked

626,540 affected
Phishing

Fair Oaks Ortho P.C.

Fairfax, VA

OCR investigation open

1,544 affected

05

January 2026

30 incidents

Vendor breach

BAYADA Home Health Care, Inc.

Moorestown, NJ HQ

OCR investigation open

9,526 affected
Ransomware

High Point Treatment Center, Inc.

New Bedford, MA HQ

Abyss

25,832 affected
Insider threat

Health and Hospital Corporation of Marion County

Indianapolis, IN

OCR investigation open

792 affected
Unauthorized access

Cashflow Solutions, LLC

Chadds Ford, PA

OCR investigation open

1,007 affected
Hacking

Clinic Service Corporation

Denver, CO

OCR investigation open

82,331 affected
Ransomware

Wound Technology Network, Inc.

Orlando, FL

FulcrumSec · leaked

139,830 affected
Hacking

Central States Dermatology Services, LLC

Blue Ash, OH HQ

OCR investigation open

4,626 affected
Vendor breach

Coastal Skin Surgery & Dermatology

Florida Panhandle

Class action filed

6,173 affected
Ransomware

Pecan Tree Dental, PLLC

Grand Prairie, TX

Sinobi · leaked

13,300 affected
Ransomware

Jefferson-Blount-St. Clair Mental Health Authority

Birmingham, AL

Medusa · leaked

30,434 affected
Ransomware

Precipio, Inc.

New Haven, CT

INC RANSOM · leaked

4,952 affected · interim
Ransomware

Waterford Surgical Center

Waterford, MI

SafePay · leaked

9,000 affected
Physical theft

AdventHealth Daytona Beach

Daytona Beach, FL

OCR investigation open

821 affected
Hacking

Middlesex Sheriff's Office

Billerica, MA

OCR investigation open

501 affected · interim
Ransomware

FullBeauty Brands, Inc. Associate Benefits Plan

New York, NY

Everest · leaked

4,725 affected
Unauthorized access

Minnesota Department of Human Services

St. Paul, MN

OCR investigation open

303,965 affected
Phishing

Supportive Home Health

Girard, OH

OCR investigation open

1,415 affected
Ransomware

360 Dental PC

Philadelphia, PA

OCR investigation open

11,273 affected
Hacking

Continental Casualty Company

Chicago, IL

OCR investigation open

6,086 affected
Phishing

Southern Immediate Care, LLC

Alabama

OCR investigation open

7,447 affected
Ransomware

Tulane University Medical Group

New Orleans, LA

Cl0p · leaked

6,556 affected
Phishing

Circle Park Behavioral Health Services

Florence, SC

OCR investigation open

7,020 affected
Vendor breach

TMG Health, Inc.

Scranton/Jessup, PA

Class action filed

2,076 affected
Ransomware

Avosina Healthcare Solutions

Lorton, VA

Qilin · leaked

44,425 affected
Hacking

Central Ozarks Medical Center

Mid-Missouri

OCR investigation open

11,818 affected
Ransomware

The Center for Neuropsychology and Learning, PC

Ann Arbor, MI

Qilin · leaked

3,722 affected
Hacking

Home, Hope and Healing, Inc.

Smithfield, ME

OCR investigation open

500 affected · interim
Hacking

Iowa Health and Human Services

Iowa

OCR investigation open

3,340 affected · interim
Ransomware

Mid Michigan Medical Billing Service, Inc.

Flint, MI

Qilin · leaked

28,185 affected
Insider threat

Texas Health and Human Services Commission

Austin, TX

OCR investigation open

68,066 affected · interim

06

December 2025

37 incidents

Unauthorized access

Andover Eye Associates

Andover, MA

OCR investigation open

1,638 affected
Hacking

Pines of Sarasota Healthcare, LLC

FL

OCR investigation open

1,258 affected
Hacking

Standards Home Health, Inc.

TX

OCR investigation open

6,847 affected
Hacking

Steel Encounters, Inc.

UT

OCR investigation open

959 affected
Hacking

Advantage Capital Holdings LLC

UT

OCR investigation open

26,343 affected
Hacking

Associated Radiologists of the Finger Lakes, P.C.

NY

OCR investigation open

501 affected · interim
Ransomware

Docs Medical Group, Inc. dba Pulse Urgent Care

Redding, CA

Medusa ransomware group

4,035 affected
Unauthorized access

BlueCross BlueShield of Tennessee, Inc.

TN

OCR investigation open

780 affected
Unauthorized access

CareOregon

OR

OCR investigation open

5,473 affected
Hacking

Glendale Obstetrics & Gynecology PCA

AZ

OCR investigation open

501 affected
Ransomware

AllerVie Health

Headquartered in Birmingham, AL with corporate operations in Frisco, TX; approximately 75 clinics across 12 states

Class action filed

80,521 affected
Hacking

HAP (Health Alliance Plan)

MI

OCR investigation open

1,059 affected
Hacking

Medical Center, LLP

Dublin, GA

Class action filed

32,090 affected
Hacking

Mitchell County Department of Social Services

NC

OCR investigation open

501 affected
Hacking

Reproductive Medicine Associates of Michigan

MI

OCR investigation open

501 affected
Vendor breach

North East Medical Services

San Francisco, California

RansomHouse (claimed; not confirmed by UnitedLayer) · leaked

91,513 affected
Hacking

Excellent Home Care Services, LLC

New York

OCR investigation open

16,278 affected
Hacking

Pit River Health Service Inc.

Burney and Alturas, CA

OCR investigation open

1,800 affected
Unauthorized access

FPMCM LLC

TN

OCR investigation open

2,072 affected
Ransomware

Baltimore Medical System, Inc.

MD

Brain Cipher · leaked

501 affected · interim
Ransomware

Brevard Skin and Cancer Center

Brevard County, Florida

Class action filed

54,570 affected
Hacking

Heywood Healthcare Inc. including Henry Heywood Memorial Hospital, Athol Memorial Hospital, and Heywood Medical Group, Inc. (“Heywood”)

MA

OCR investigation open

500 affected
Unauthorized access

OCAT, LLC dba Evoke Wellness at Hilliard

OH

OCR investigation open

1,629 affected
Hacking

Centric Health

Bakersfield, CA

OCR investigation open

6,855 affected
Hacking

Advanced Healthcare Professionals

Houston, TX

OCR investigation open

1,800 affected · interim
Hacking

Ochsner LSU Health – Regional Urology

LA

OCR investigation open

4,519 affected
Hacking

Southern Oregon Neurosurgical and Spine Associates, PC

OR

OCR investigation open

1,000 affected
Hacking

TriCity Family Services

IL

OCR investigation open

2,511 affected
Hacking

Vida Y Salud-Health Systems, Inc.

Texas

OCR investigation open

35,236 affected
Ransomware

Columbia Medical Practice

Columbia, Maryland

Qilin · leaked

94,131 affected
Hacking

NCH Corporation Employee Benefits Plan

TX

OCR investigation open

3,098 affected
Hacking

Greater St. Louis Oral & Maxillofacial Surgery PC

MO

OCR investigation open

501 affected
Hacking

Fieldtex Products, Inc.

NY

OCR investigation open

5,901 affected
Ransomware

MedStar Health, Inc.

Columbia, Maryland

Rhysida · leaked

64,332 affected · interim
Hacking

Madison Healthcare Services

MN

OCR investigation open

500 affected
Hacking

West Texas Health, PLLC

Abilene, Texas

Class action filed

73,720 affected
Hacking

FedEx Corporation Group Health Plan

TN

OCR investigation open

1,066 affected

07

November 2025

39 incidents

Ransomware

Cerenade

CA

Akira ransomware group

987 affected
Hacking

Sports Medicine & Orthopaedics

RI

OCR investigation open

4,000 affected
Ransomware

Richmond Behavioral Health Authority

Richmond, Virginia

Qilin · leaked

113,232 affected
Ransomware

Spindletop Center

Beaumont, TX

Rhysida · leaked

88,863 affected
Hacking

Center for Urologic Care of Berks County, PC

Wyomissing, Pennsylvania

OCR investigation open

543 affected
Unauthorized access

Henry Ford Health

MI

OCR investigation open

1,984 affected
Hacking

Keystone Alliance, Inc.

IL

OCR investigation open

1,021 affected
Ransomware

Persante Health Care

Mt. Laurel Township, New Jersey

INC Ransom

111,815 affected
Unauthorized access

Tanner Medical Center

GA

OCR investigation open

1,000 affected
Hacking

Davies, McFarland & Carroll LLC

Pittsburgh, Pennsylvania

Lynx · leaked

54,712 affected
Hacking

Greater Meridian Health Clinic, Inc.

MS

OCR investigation open

4,651 affected
Hacking

AgeRight Clinical Services

Oregon

OCR investigation open

4,859 affected
Ransomware

Cache Valley Ear, Nose & Throat

North Logan, Utah

OCR investigation open

26,469 affected
Unauthorized access

Delta Dental of Virginia

Roanoke, Virginia

Class action filed

126,953 affected
Hacking

Millcreek Pediatrics

DE

OCR investigation open

14,095 affected
Hacking

NS Support, LLC

Boise, Idaho

OCR investigation open

92,845 affected
Hacking

Nura PLLC

MN

OCR investigation open

5,207 affected
Hacking

VITAS Hospice Services, LLC

Miami, Florida

Class action filed

319,177 affected
Hacking

Dr. Michael Kaplan DO PC DBA Long Island Weight Loss Institute

NY

OCR investigation open

3,426 affected
Ransomware

Fieldtex Products, Inc.

Rochester, New York

Akira · leaked

238,615 affected
Hacking

Wyandot Behavioral Health Network

Kansas City, KS

OCR investigation open

27,174 affected
Hacking

Anchorage Neighborhood Health Center

Anchorage, Alaska

Class action filed

70,555 affected
Ransomware

County of Catawba

Newton, North Carolina

Qilin · leaked

500 affected · interim
Hacking

NAHGA Claim Services

Bridgton, Maine

Class action filed

21,834 affected
Hacking

Personic Management Company LLC

VA

OCR investigation open

10,929 affected
Ransomware

Dermatology Associates of Concord

Concord, Massachusetts

ANUBIS ransomware group · leaked

501 affected · interim
Unauthorized access

Marrs Ear, Nose & Throat, PA

FL

OCR investigation open

6,376 affected
Ransomware

Cary Pediatric Center, PA

Cary, NC

Qilin · leaked

TBD affected
Hacking

St. John’s Riverside Hospital

NY

OCR investigation open

2,238 affected
Ransomware

Morton Drug Company

Wisconsin

Akira · leaked

40,051 affected
Hacking

Steven J. Pearlman MD PC

NY

OCR investigation open

10,182 affected
Hacking

Healthcare Therapy Services, Inc.

IN

OCR investigation open

15,027 affected
Hacking

Loving and Living Center, PC

Raleigh & Greensboro, NC

OCR investigation open

17,800 affected
Phishing

Marshfield Clinic Health System

Marshfield, Wisconsin

OCR investigation open

35,952 affected
Ransomware

Archer Health

CA

KillSec (also reported as KillSecurity / KillSec3)

4,285 affected
Hacking

Northwoods Surgery Center

Virginia, MN

OCR investigation open

5,385 affected
Hacking

The Chase Group Employee Benefit Plan

NM

OCR investigation open

817 affected
Hacking

Denton MHMR Center

Denton County, Texas

OCR investigation open

108,967 affected
Physical theft

Tampa Bay Treatment Associates

FL

OCR investigation open

3,682 affected

08

October 2025

33 incidents

Ransomware

Beverly Hills Oncology Medical Group

California

Inc Ransom

57,655 affected
Ransomware

Expert MRI

California

PEAR · leaked

209,560 affected
Hacking

Judson Center

MI

OCR investigation open

976 affected
Ransomware

Tri Century Eye Care PC

Pennsylvania

Pear · leaked

200,000 affected
Hacking

Hale Makua Health Services

HI

OCR investigation open

500 affected
Unauthorized access

Better Vision Eyecare, LLC

AZ

OCR investigation open

501 affected
Hacking

Northwest Radiologists, Inc./Mount Baker Imaging

Bellingham, Washington

Class action filed

362,713 affected
Hacking

Health Management Systems of America

MI

OCR investigation open

4,213 affected
Hacking

REACH, Inc

AK

OCR investigation open

1,195 affected
Hacking

VirMedice, LLC

AZ

OCR investigation open

1,000 affected
Hacking

Fairbanks Urology

AK

OCR investigation open

1,446 affected
Hacking

Physicians to Children & Adolescents

KY

OCR investigation open

9,536 affected
Hacking

Southwest Urology

OH

OCR investigation open

1,310 affected
Unauthorized access

Legacy Health, LLC

TX

OCR investigation open

6,547 affected
Hacking

Michael R. Schwartz, MD Inc.

CA

OCR investigation open

9,809 affected
Unauthorized access

Express Canna Cards, LLC

FL

OCR investigation open

5,000 affected
Ransomware

Heartland Health Center, Inc.

Grand Island, NE HQ

OCR investigation open

43,728 affected
Hacking

Modernizing Medicine, Inc.

Boca Raton, Florida

OCR investigation open

198,795 affected
Hacking

North Atlantic States Carpenters Health Benefits Fund

MA

OCR investigation open

501 affected
Hacking

River City Eye Care, LLC

OR

OCR investigation open

6,588 affected
Ransomware

Coalesce, LLC dba BenefitElect

AZ

KillSec (also known as Kill Security / Kill ransomware group) · leaked

501 affected · interim
Hacking

Visiting Nurse Association of Texas, LLC

Dallas, Texas

OCR investigation open

28,515 affected
Hacking

Bay Medical LLC

MD

OCR investigation open

1,483 affected
Ransomware

Conduent Business Services LLC

Florham Park, NJ

SafePay ransomware group · leaked

42,616 affected · interim
Hacking

Wellpoint, Inc.

IN

OCR investigation open

579 affected
Hacking

Cardiovascular Medicine Associates (doing business as MyCardiologist)

FL

OCR investigation open

2,248 affected
Ransomware

OB-GYN Associates, Ltd. dba OBGYN Associates

Reno, Nevada

INC Ransom · leaked

62,238 affected
Hacking

Sierra Vista Hospital & Clinics

Truth or Consequences, New Mexico

OCR investigation open

75,054 affected
Hacking

Space Coast Vascular

Melbourne, FL

OCR investigation open

18,819 affected
Hacking

Brightstar Global Solutions Corporation

Rhode Island

OCR investigation open

103,879 affected
Ransomware

CareSTL Health, Inc.

MO

Cephalus ransomware group

501 affected
Unauthorized access

Harris County Hospital District d/b/a Harris Health

TX

OCR investigation open

5,357 affected
Ransomware

Southwest C.A.R.E. Center

Santa Fe, New Mexico

Medusa · leaked

21,866 affected

09

September 2025

33 incidents

Hacking

Harbor

Toledo, Ohio

OCR investigation open

216,000 affected
Unauthorized access

Weekend Health, LLC

NY

OCR investigation open

1,643 affected
Unauthorized access

Arizona Health Care Cost Containment System- State Medicaid Agency

Phoenix, Arizona

OCR investigation open

3,177 affected
Hacking

Intercommunity Action Inc.

PA

OCR investigation open

2,680 affected
Ransomware

Rockhill Women's Care

Kansas City metro

Qilin · leaked

70,129 affected
Hacking

Susan B. Allen Memorial Hospital

KS

OCR investigation open

11,866 affected
Hacking

Valley Radiology

CA

OCR investigation open

1,166 affected
Hacking

Doctors Imaging Group

Florida

OCR investigation open

171,862 affected
Hacking

Philadelphia Corporation for Aging

Philadelphia, Pennsylvania

Class action filed

410,491 affected
Ransomware

City of St. Joseph, MO Health Department

MO

OCR investigation open

11,538 affected
Hacking

Healthcare Interactive

MD

OCR investigation open

501 affected
Ransomware

Veradigm LLC

Chicago, Illinois

Rhysida · leaked

2.7M affected
Unauthorized access

Health & Palliative Services of the Treasure Coast, Inc d/b/a Treasure Coast Hospice (“Treasure Health ”)

FL

OCR investigation open

13,230 affected
Hacking

People Encouraging People

MD

OCR investigation open

13,083 affected
Hacking

Ennoble Care & Circa Health, LLC

New Jersey

Class action filed

36,332 affected
Hacking

Sun Valley Surgery Center

North Las Vegas, Nevada

OCR investigation open

27,001 affected
Hacking

Navesink Rehab

NJ

OCR investigation open

1,428 affected
Hacking

Trusteed Plan Services Corporation

WA

OCR investigation open

7,977 affected
Ransomware

Survival Flight, Inc.

Arizona

Worldleaks (formerly Hunters International) · leaked

97,217 affected
Ransomware

Sandhills Medical Foundation

Jefferson, South Carolina

INC Ransom · leaked

169,017 affected
Hacking

North Penn Comprehensive Health Services d.b.a Laurel Health Centers

PA

OCR investigation open

991 affected
Hacking

Saint Anthony Hospital

IL

OCR investigation open

6,679 affected
Hacking

Franklin Dermatology Group, PLC

TN

OCR investigation open

2,457 affected
Ransomware

PGA Development, Inc.

Pittsburgh, Pennsylvania

Class action filed

23,899 affected
Ransomware

Huron Regional Medical Center, Inc.

Huron, South Dakota

BEAST · leaked

25,398 affected
Ransomware

Coos County Family Health Services

Berlin, NH

RunSomeWarez · leaked

40,185 affected
Ransomware

Medical Associates of Brevard, LLC

Melbourne, Florida

BianLian · leaked

246,711 affected
Hacking

Somerset County Children and Youth Services

PA

OCR investigation open

2,251 affected
Hacking

Twin Cities Pain Clinic

MN

OCR investigation open

3,572 affected
Hacking

Retina Florida MSO, LLC

Fort Lauderdale, Florida

OCR investigation open

152,691 affected
Hacking

Teamsters Union 25 Health Services & Insurance Plan

Charlestown, MA

OCR investigation open

19,231 affected
Hacking

La Perouse, LLC

NV

OCR investigation open

501 affected
Hacking

North Oaks Health System

LA

OCR investigation open

6,243 affected

10

August 2025

45 incidents

Phishing

Anthony L. Jordan Health Corporation

Rochester, NY

OCR investigation open

2,974 affected
Ransomware

Carrollton Ear, Nose and Throat, PC

Carrollton, Georgia

INC Ransom (also reported as incransom)

3,569 affected
Hacking

Reimagine Network

CA

OCR investigation open

4,799 affected
Hacking

University of Iowa Community Home Care

Iowa City, Iowa

Class action filed

109,029 affected
Hacking

University of Iowa Health Care

Iowa City, Iowa

Class action filed

101,875 affected
Ransomware

Greater Pittsburgh Orthopaedic Associates

Pittsburgh, Pennsylvania

RansomHouse · leaked

35,000 affected · interim
Ransomware

Assisted Living Pharmacy Service, LLC

WI

Qilin ransomware group (claimed responsibility on dark-web leak site August 12, 2025; alleged 150 GB of exfiltrated data with proof-screenshots)

5,590 affected
Hacking

College Hometown Pharmacy

Schenectady, NY

OCR investigation open

9,742 affected
Hacking

College Parkside Pharmacy

Albany, NY

OCR investigation open

5,736 affected
Hacking

Pacific Imaging Management, LLC

CA

OCR investigation open

13,158 affected
Unauthorized access

Prime Therapeutics LLC

MN

OCR investigation open

2,266 affected
Hacking

Beech Acres Parenting Center

Cincinnati, Ohio

OCR investigation open

19,315 affected
Unauthorized access

Independent Health Association, Inc.

NY

OCR investigation open

637 affected
Hacking

Vance County Department of Social Services

NC

OCR investigation open

501 affected
Hacking

zizzl llc

WI

OCR investigation open

2,416 affected
Hacking

McEwen & Associates

TX

OCR investigation open

500 affected
Hacking

Vital Imaging Medical Diagnostic Centers, LLC

Miami, Florida

OCR investigation open

260,000 affected
Hacking

Arkansas Primary Care Clinic

Little Rock, AR

OCR investigation open

2,491 affected
Hacking

Revere Health PC

UT

OCR investigation open

605 affected
Unauthorized access

Bevel Health Medical Group

PA

OCR investigation open

510 affected
Vendor breach

CareTracker, Inc. (d/b/a Amazing Charts)

NY

OCR investigation open

501 affected · interim
Unauthorized access

CEI Vision Partners, LLC

Cincinnati, Ohio

Class action filed

10,841 affected · interim
Ransomware

Alert Medical Alarms

Jenkintown, Pennsylvania

Qilin · leaked

39,218 affected
Hacking

CPAP Medical Supplies and Services Inc.

Jacksonville, Florida

OCR investigation open

90,133 affected
Hacking

Lake City Cancer Care, LLC

FL

OCR investigation open

9,980 affected
Hacking

Mower County Health and Human Services

MN

OCR investigation open

501 affected
Hacking

Welcome Dentistry-Anaheim

CA

OCR investigation open

1,001 affected
Unauthorized access

Dr. Doug's Pediatric Dentistry

Logan, UT

OCR investigation open

3,590 affected
Hacking

Welcome Dentistry-Los Angeles

CA

OCR investigation open

1,001 affected
Hacking

Laurel Cancer Care, LLC

MS

OCR investigation open

1,541 affected
Unauthorized access

UnitedHealthcare

CT

OCR investigation open

3,215 affected
Unauthorized access

Zelis Healthcare LLC

MA

OCR investigation open

4,289 affected
Hacking

Mission City Community Network, Inc.

CA

OCR investigation open

11,016 affected
Hacking

Aflac Incorporated

Columbus, GA

Scattered Spider (suspected; not formally confirmed by Aflac)

13.9M affected · interim
Unauthorized access

Center for Disability Services, Inc.

NY

OCR investigation open

3,343 affected
Hacking

Friesen Group

CA

OCR investigation open

500 affected
Hacking

PROVAIL

WA

OCR investigation open

501 affected
Hacking

Oglethorpe, Inc.

Florida

Settled

92,332 affected
Hacking

Precision Endodontics of Raleigh

NC

OCR investigation open

4,022 affected
Hacking

South Coast Pediatrics

CA

OCR investigation open

7,000 affected
Ransomware

MDLand International Corporation

New York, NY

OCR investigation open

22,586 affected
Hacking

Westminster Village Greenwood, Inc.

IN

OCR investigation open

14,386 affected
Ransomware

DaVita Inc.

Denver, Colorado

Interlock · leaked

2.7M affected
Ransomware

Highlands Oncology Group PA

Arkansas

Medusa · leaked

111,766 affected
Hacking

Langdon & Company, LLP Certified Public Accountants

Garner, North Carolina

Class action filed

46,061 affected

11

July 2025

41 incidents

Hacking

David A. Nover, M.D., P.C.

PA

OCR investigation open

4,703 affected
Hacking

Vail Summit Orthopaedics

CO

OCR investigation open

5,044 affected
Insider threat

Berkshire Health Systems, Inc.

MA

Insider — a former Berkshire Health Systems employee in the Surgical Services Department at Fairview Hospital (Great Barrington, MA), who accessed records without a legitimate business purpose. BHS has stated unauthorized access may date back to 2014, though its review only covered records back to October 1, 2022.

1,421 affected
Hacking

Alera Group, Inc.

Deerfield, Illinois

Class action filed

155,567 affected
Hacking

Compass Counseling Services, LLC

FL

OCR investigation open

5,440 affected
Ransomware

Mid Florida Primary Care, PA

FL

OCR investigation open

16,435 affected
Hacking

PhyNet Dermatology, LLC

TN

OCR investigation open

1,308 affected
Hacking

The Center at Cordera

CO

OCR investigation open

6,057 affected
Hacking

Doctors’ Memorial Hospital

FL

OCR investigation open

500 affected
Hacking

Northwest Denture Center, Inc.

Burlington, Washington

Class action filed

19,419 affected
Hacking

McKenzie Memorial Hospital

Sandusky, Michigan

OCR investigation open

58,839 affected
Hacking

Nova Recovery Center, LLC d/b/a Nova Recovery Center

TX

OCR investigation open

6,242 affected
Ransomware

Gastroenterology Consultants of South Texas, P.A.

Texas

OCR investigation open

44,579 affected
Ransomware

Dr. Michael Bilikas and Associates

Seattle and Tacoma

OCR investigation open

23,517 affected
Ransomware

Infinite Services, Inc.

Brooklyn, New York

OCR investigation open

31,742 affected
Ransomware

Kettering Adventist Healthcare

Dayton, OH

Interlock · leaked

1.7M affected
Hacking

OrthoAtlanta LLC

GA

OCR investigation open

626 affected
Hacking

Equilibria Mental Health Services

PA

OCR investigation open

3,232 affected
Vendor breach

Keys Pathology Associates, PA

Marathon, Florida

OCR investigation open

20,000 affected · interim
Hacking

Human Development Services of Westchester

NY

OCR investigation open

501 affected
Hacking

The Brien Center for Mental Health and Substance Abuse Services

MA

OCR investigation open

5,427 affected
Ransomware

Central District Health Department of Nebraska

Grand Island, NE

Medusa · leaked

58,519 affected
Ransomware

Clinica Family Health Services

CO

INC Ransom · leaked

47,593 affected
Hacking

Williamsburg Area Medical Assistance Corporation d/b/a Olde Towne Medical and Dental Center (OTMDC)

VA

OCR investigation open

2,567 affected
Hacking

Anne Arundel Dermatology

Linthicum, Maryland

Settled

1.9M affected
Ransomware

Covenant Health

Tewksbury, Massachusetts

Qilin ransomware group

478,188 affected
Hacking

Freedom Plaza Senior Living

FL

OCR investigation open

4,847 affected
Hacking

Freedom Square of Seminole

FL

OCR investigation open

3,473 affected
Hacking

Picis Clinical Solutions, Inc. d/b/a Medstreaming

MA

OCR investigation open

8,840 affected
Hacking

Regency Oaks

FL

OCR investigation open

2,008 affected
Hacking

Mountain Laurel Dermatology

NC

OCR investigation open

3,324 affected
Hacking

Naper Grove Vision Care

IL

OCR investigation open

501 affected
Hacking

Florida Lung, Asthma & Sleep Specialists (FLASS)

FL

OCR investigation open

10,000 affected
Hacking

K&E Advanced Dentisrty

OH

OCR investigation open

1,700 affected
Hacking

Arbor Associates, Inc.

Michigan

OCR investigation open

17,040 affected
Vendor breach

Cierant Corporation

Danbury, Connecticut

Clop (CL0P) ransomware group — claimed responsibility for the broader Cleo VLTrader exploitation campaign; Cierant has not independently confirmed the attribution

232,506 affected
Hacking

City of Franklin

WI

OCR investigation open

3,233 affected
Hacking

Urology Associates of Charleston

SC

OCR investigation open

2,060 affected
Hacking

Zumpano Patricios, P.A.

Coral Gables, Florida

OCR investigation open

279,275 affected
Hacking

Complete Care Rehab LLC

Eastpointe, MI

OCR investigation open

4,764 affected
Hacking

Radiology Associates of Richmond, Inc.

Richmond, Virginia

Class action filed

1.4M affected

12

June 2025

54 incidents

Unauthorized access

Centers for Medicare & Medicaid Services

Baltimore, Maryland

OCR investigation open

107,154 affected
Unauthorized access

Clinical Practices of the University of Pennsylvania

Pennsylvania

OCR investigation open

1,432 affected
Phishing

Bardmoor Cancer Center

FL

OCR investigation open

991 affected
Phishing

California Cancer Associates for Research and Excellence – High Desert

Victorville, CA

OCR investigation open

17,250 affected
Phishing

California Cancer Associates for Research and Excellence – San Diego

San Diego, CA

OCR investigation open

638 affected
Phishing

Denali Biomedical

Fairbanks, AK

OCR investigation open

2,413 affected
Hacking

Fairbanks Urology

AK

OCR investigation open

4,289 affected
Ransomware

Horizon Healthcare RCM

Crown Point, Indiana

Class action filed

210,901 affected
Hacking

Integrated Oncology Network

TN

OCR investigation open

4,174 affected
Hacking

Lake City Cancer Care, LLC

FL

OCR investigation open

15,142 affected
Hacking

Orange County Radiation Oncology Medical Group

CA

OCR investigation open

1,911 affected
Hacking

PDCM Insurance

IA

OCR investigation open

501 affected
Hacking

PET Imaging of Dallas Northeast

TX

OCR investigation open

1,935 affected
Hacking

PET Imaging of Northern Colorado

CO

OCR investigation open

4,824 affected
Hacking

PET Imaging of The Woodlands

TX

OCR investigation open

2,978 affected
Hacking

PET Imaging of Tulsa

OK

OCR investigation open

3,159 affected
Hacking

Radiation Oncology Network of Southern California, LLC

CA

OCR investigation open

12,944 affected
Hacking

Southwest Urology

OH

OCR investigation open

7,214 affected
Hacking

Amalgamated Meat Cutters and Retail Food Store Employees Union Local 342 Health Care Fund

Mineola / Staten Island, NY

OCR investigation open

56,615 affected
Hacking

Jordan Drug, Inc.

KY

OCR investigation open

4,947 affected
Hacking

Texas Centers for Infectious Disease Associates

TX

OCR investigation open

19,481 affected
Hacking

Clement Manor

Greenfield, Wisconsin

OCR investigation open

16,046 affected
Ransomware

McLaren Health Care

Grand Blanc, Michigan

INC Ransom

743,131 affected
Unauthorized access

Minneapolis VA Medical Center

MN

OCR investigation open

1,099 affected
Hacking

Mainline Health Systems Inc

Monticello, Arkansas

Class action filed

101,104 affected
Hacking

Esse Health

St. Louis, Missouri

Settled

263,601 affected
Hacking

Harbor

OH

OCR investigation open

2,703 affected
Hacking

Los Angeles County Developmental Services Fdn., Inc. dba Frank D. Lanterman Regional Center

Los Angeles, CA

OCR investigation open

19,000 affected
Hacking

Retina Associates of Cleveland, Inc.

OH

OCR investigation open

3,604 affected
Hacking

Skin Care Specialty Physicians

MD

OCR investigation open

1,038 affected
Hacking

Marquette County Medical Care Facility

OH

OCR investigation open

1,499 affected
Hacking

Broadwest Specialty Surgical Center

Merrillville, IN

OCR investigation open

536 affected
Unauthorized access

Winkler County Hospital District

TX

OCR investigation open

637 affected
Unauthorized access

AltaMed Health Services Corporation

CA

Class action filed

4,530 affected
Hacking

Central Kentucky Radiology

Lexington-area, Kentucky

OCR investigation open

166,953 affected
Hacking

Decisely Insurance Services, LLC

Atlanta, Georgia

Class action filed

537,603 affected
Hacking

Diversified Services Enterprises

Sarasota, FL

OCR investigation open

501 affected
Hacking

Elmore County

ID

OCR investigation open

931 affected
Ransomware

Mount Rogers Community Services

Wytheville, Virginia

INC Ransom (a.k.a. INCRANSOM) · leaked

38,191 affected
Hacking

Imperial Beach Community Clinic

CA

OCR investigation open

10,358 affected
Hacking

Kelley Drye & Warren LLP

NY

OCR investigation open

771 affected
Ransomware

Rural Health Services

South Carolina

Medusa

36,542 affected
Hacking

Clarkston Chiropractic Sports & Wellness

Clarkston, MI

OCR investigation open

2,757 affected
Hacking

Repay Management Services, LLC

GA

OCR investigation open

606 affected
Misconfiguration

Blue Shield of California

CA

OCR investigation open

1,543 affected
Unauthorized access

Centivo Corporation

GA

OCR investigation open

630 affected
Ransomware

Episource, LLC

Gardena, California

Class action filed

6.7M affected
Hacking

NYC Health + Hospitals

NY

OCR investigation open

5,728 affected
Unauthorized access

Public Health Trust of Miami Dade County DBA Jackson Health System

FL

OCR investigation open

2,599 affected
Vendor breach

Sharp Community Medical Group

San Diego, California

OCR investigation open

26,976 affected
Hacking

Sharp HealthCare

CA

OCR investigation open

500 affected
Hacking

Sensata Technologies, Inc. Health and Welfare Benefit Plan

MA

OCR investigation open

15,630 affected
Hacking

Cumberland County Hospital Association

Burkesville, Kentucky

OCR investigation open

36,659 affected
Hacking

Renkim Corporation

Southgate, Michigan

Class action filed

105,518 affected

13

May 2025

40 incidents

Hacking

Horizon Blue Cross Blue Shield NJ

NJ

OCR investigation open

781 affected
Hacking

Missouri Department of Conservation

MO

OCR investigation open

10,260 affected
Hacking

Next Step Healthcare LLC

MA

OCR investigation open

12,090 affected
Hacking

Oliver Street Dermatology Management LLC

TX

OCR investigation open

13,717 affected
Hacking

Providia Home Care, LLC dba Preferred Care Home Health Services

Fort Myers / Naples, FL

OCR investigation open

38,401 affected
Hacking

Upper Dublin Family Dentistry

PA

OCR investigation open

5,000 affected
Ransomware

Gateway Community Services, Inc.

Jacksonville, Florida

Payouts King · leaked

34,498 affected
Ransomware

Northwestern Community Services Board

Front Royal, Virginia

BlackSuit (a.k.a. Royal successor) · leaked

21,856 affected
Hacking

Covenant Surgical Partners, Inc.

Texas

OCR investigation open

88,609 affected
Hacking

Mary B. Toporcer, MD, P.C.

PA

OCR investigation open

501 affected
Unauthorized access

The Smith Institute for Urology

NY

OCR investigation open

2,263 affected
Hacking

Cahaba Center for Mental Health

AL

OCR investigation open

15,085 affected
Phishing

Access2Day Health

LA

OCR investigation open

4,908 affected
Unauthorized access

NHPP Physical Medicine and Rehabilitation

NY

OCR investigation open

1,353 affected
Unauthorized access

North Shore University Hospital Sleep Disorders Center

NY

OCR investigation open

13,332 affected
Unauthorized access

Sports Physical Therapy, Occupational Therapy and Rehabilitation Services of the North Shore, P.L.L.C

NY

OCR investigation open

6,195 affected
Hacking

The Cooper Health System

Camden, NJ

Class action filed

57,412 affected
Ransomware

Community Hospital of Anaconda

Anaconda, Montana

OCR investigation open

21,243 affected
Ransomware

Compassion Health Care, Inc.

Yanceyville and Eden, North Carolina

Class action filed

23,282 affected
Vendor breach

Harbin Clinic, LLC

Rome, Georgia

Class action filed

176,149 affected
Unauthorized access

Insulet Corporation

MA

OCR investigation open

841 affected
Hacking

Mercy Surgical Dressing Group, Inc.

PA

OCR investigation open

4,159 affected
Ransomware

Anne Arundel County Department of Health

MD

OCR investigation open

500 affected · interim
Vendor breach

CareNexa, LLC, doing business as Molecular Testing Labs

WA

OCR investigation open

7,711 affected
Hacking

Doctors Hospital at Renaissance, LTD

TX

OCR investigation open

501 affected
Hacking

HopeHealth, Inc.

SC

OCR investigation open

5,823 affected
Hacking

Hunter Health Clinic

Wichita, Kansas

OCR investigation open

28,431 affected
Unauthorized access

CVS Caremark

Woonsocket, RI

OCR investigation open

2,599 affected
Ransomware

Weiser Valley Hospital District dba Weiser Memorial Hospital

Weiser, Idaho

EMBARGO · leaked

59,990 affected
Unauthorized access

Blue Cross Blue Shield of Texas

IL

OCR investigation open

593 affected
Hacking

Washington Gastroenterology

WA

OCR investigation open

501 affected
Hacking

Tri-City Cardiology Consultants, P.C.

Arizona

OCR investigation open

22,753 affected
Unauthorized access

Allied Services Division Welfare Fund

IL

OCR investigation open

5,727 affected
Hacking

The Carpenter Health Network

LA

OCR investigation open

878 affected
Hacking

Minnesota Orthodontics and Dentofacial Orthopedics, P.A.

MN

OCR investigation open

501 affected
Vendor breach

CardioVascular Health Clinic

Oklahoma City, OK

OCR investigation open

501 affected · interim
Unauthorized access

Monongalia Health System, Inc.

WV

OCR investigation open

4,895 affected
Hacking

Absolute Dental Group, LLC

Nevada

Class action filed

1.2M affected
Under investigation

Anesthesia Associates of Morristown, P.A.

Morristown, New Jersey

OCR investigation open

34,675 affected
Hacking

DermCare Management

FL

OCR investigation open

501 affected

14

April 2025

41 incidents

Ransomware

Berkeley Research Group, LLC

CA

Chaos ransomware (reported); intrusion via attacker impersonating an IT worker

500 affected
Unauthorized access

Canby Clinic

Canby, Oregon

OCR investigation open

549 affected
Hacking

Family Christian Health Center

IL

OCR investigation open

12,500 affected
Unauthorized access

Physician Wound Solutions, LLC dba Apollo Medical Supply

FL

OCR investigation open

3,561 affected
Vendor breach

Ascension Health

St. Louis, Missouri

Clop (suspected) — via Cleo file-transfer zero-day exploitation · leaked

437,329 affected
Hacking

Minnesota Epilepsy Group

Minnesota

OCR investigation open

38,401 affected
Phishing

Carlton County Public Health and Human Services

MN

OCR investigation open

3,502 affected
Unauthorized access

Maximus, Inc.

VA

OCR investigation open

4,955 affected
Hacking

Pediatric Otolaryngology Head & Neck Surgery Associates, P.A.

FL

OCR investigation open

43,446 affected
Hacking

Brainard Surgery Center LLC

OH

OCR investigation open

1,820 affected
Ransomware

Drug and Alcohol Treatment Services, Inc.

Scranton, PA

Interlock · leaked

22,215 affected
Hacking

Palo Verde Hospital

CA

OCR investigation open

594 affected
Ransomware

Orthopaedic Specialists of Connecticut

Brookfield, Connecticut

INC RANSOM · leaked

22,541 affected
Unauthorized access

Icon Family Healthcare LLC

CA

OCR investigation open

1,800 affected
Phishing

Onsite Mammography

Westfield, Massachusetts

Class action filed

357,265 affected
Unauthorized access

90 Degree Benefits, Inc. – St. Paul

WI

OCR investigation open

1,268 affected
Vendor breach

The Plastic Surgery Center, P.A.

Shrewsbury, NJ

OCR investigation open

64,813 affected
Unauthorized access

HEALTH AND WELLNESS OF TEXAS

TX

OCR investigation open

500 affected
Unauthorized access

Recovery Epicenter Foundation

FL

OCR investigation open

800 affected
Ransomware

Bell Ambulance, Inc.

Milwaukee, Wisconsin

Medusa ransomware group · leaked

237,830 affected
Hacking

The City of Long Beach, CA

Long Beach, California

Settled

258,191 affected
Unauthorized access

Blue Cross and Blue Shield of Illinois

IL

OCR investigation open

6,903 affected
Unauthorized access

Blue Cross and Blue Shield of Oklahoma

IL

OCR investigation open

1,020 affected
Unauthorized access

Blue Cross and Blue Shield of Texas

IL

OCR investigation open

12,086 affected
Unauthorized access

Health Care Service Corporation

IL

OCR investigation open

2,944 affected
Phishing

Altior Healthcare, LLC

CA

OCR investigation open

1,002 affected
Hacking

Endue Software

Maine

Settled

118,028 affected
Hacking

Parc Provence Memory Care Facility

MO

OCR investigation open

13,954 affected
Unauthorized access

Summit Healthcare Medical Associates

AZ

OCR investigation open

1,861 affected
Ransomware

The Gatesworth Senior Living St. Louis

St. Louis, Missouri

OCR investigation open

31,124 affected
Misconfiguration

Blue Shield of California

Oakland, CA

Class action filed

4.7M affected
Hacking

Kelly & Associates Insurance Group, Inc.

Hunt Valley / Sparks, Maryland

Class action filed

553,332 affected
Ransomware

Alabama Ophthalmology Associates

Birmingham, Alabama

BianLian · leaked

131,576 affected
Hacking

Friendship House, Inc.

NE

OCR investigation open

501 affected
Hacking

Loretto Hospital

IL

OCR investigation open

501 affected
Hacking

Newburgh Healthcare Residential Center, Inc.

IN

OCR investigation open

700 affected
Unauthorized access

Dallas County MHMR dba Metrocare Services

Dallas, TX

OCR investigation open

553 affected
Hacking

Hamilton County Government

TN

OCR investigation open

14,081 affected
Hacking

Allegany Council on Alcoholism & Substance Abuse, Inc.

Wellsville, NY

OCR investigation open

696 affected
Ransomware

Dameron Hospital

Stockton, California

RansomHouse · leaked

210,706 affected
Hacking

Health Services LLC

OH

OCR investigation open

75,906 affected

15

March 2025

31 incidents

Hacking

Family Centers, Inc.

CT

OCR investigation open

12,142 affected
Hacking

Community Dental Care, Inc.

Minnesota

OCR investigation open

134,903 affected
Ransomware

Frederick Health

Frederick, Maryland

Class action filed

934,326 affected
Hacking

North Hudson Community Action Corporation

NJ

OCR investigation open

501 affected
Hacking

SimonMed Imaging

AZ

OCR investigation open

500 affected
Hacking

Western Wayne Family Physicians

Allen Park, Michigan

OCR investigation open

62,000 affected
Hacking

Bigfork Valley Hospital

MN

OCR investigation open

8,496 affected
Vendor breach

Concord Orthopaedics

Concord, New Hampshire

Everest · leaked

72,815 affected
Hacking

James J. Lynch, MD Ltd. dba Swift Institute

NV

OCR investigation open

13,430 affected
Unauthorized access

AmeriHealth Caritas Louisiana

Baton Rouge, LA

OCR investigation open

1,552 affected
Hacking

Fyzical Acquisition Holdings LLC

FL

OCR investigation open

43,045 affected · interim
Hacking

MedicareCompareUSA

WA

OCR investigation open

5,782 affected
Ransomware

MedRevenu, LLC

Montclair, California

BianLian · leaked

17,775 affected
Hacking

Millennium Home Health Care

OK

OCR investigation open

4,743 affected
Hacking

Presbyterian Health Plan

NM

OCR investigation open

7,100 affected
Hacking

The Pavilion at HealthPark, LLC dba Park Royal Hospital

FL

OCR investigation open

9,349 affected
Hacking

Lena Pope Home Inc.

TX

OCR investigation open

3,523 affected
Phishing

Baylor Scott & White Texas Spine & Joint Hospital

TX

OCR investigation open

1,640 affected
Phishing

CDHA Management, LLC and Spark DSO, LLC

Nashville, Tennessee

Class action filed

173,430 affected
Hacking

Columbia Eye Clinic

Columbia & Lexington, SC

OCR investigation open

500 affected · interim
Ransomware

Klickitat Valley Health

Goldendale, Washington

Kraken · leaked

26,339 affected
Ransomware

Lake Washington Vascular Surgeons, PLLC

Bellevue, Washington

OCR investigation open

21,534 affected
Hacking

Welts, White, & Fontaine PC

NH

OCR investigation open

500 affected
Hacking

Nice Healthcare Management Company, Inc

MN

OCR investigation open

10,000 affected
Ransomware

Fort Wayne Medical Education Program

Fort Wayne, Indiana

INC RANSOM · leaked

28,502 affected
Physical theft

SCLARC

CA

OCR investigation open

722 affected
Hacking

Madison County, MS

MS

OCR investigation open

6,082 affected
Hacking

Hillcrest Convalescent Center, Inc.

Durham, North Carolina

Class action filed

106,194 affected
Ransomware

Liberty Resources, Inc.

Syracuse, New York

Rhysida · leaked

103,711 affected
Hacking

Manchester Rehabilitation and Healthcare Center

CT

OCR investigation open

5,415 affected
Ransomware

Community Care Alliance

Rhode Island

Rhysida · leaked

114,975 affected

16

February 2025

22 incidents

Physical theft

East Hawaii Rehab, Inc. DBA Lehua Physical Therapy and Rehab

HI

OCR investigation open

8,472 affected
Ransomware

Gaylord Hospital, Inc

Wallingford, CT

SafePay · leaked

62,232 affected
Hacking

Kronick Moskovitz Tiedemann & Girard

CA

OCR investigation open

2,511 affected
Hacking

Southeast Series of Lockton Companies, LLC

Atlanta, Georgia

Settled

1.1M affected
Hacking

Total Medical Imaging

North Miami Beach, Florida

OCR investigation open

27,000 affected
Physical theft

Children's Dental Center at Preston Trail, P.C. d/b/a Park Place Pediatric Dentistry (Arlington, TX)

TX

OCR investigation open

1,690 affected
Unauthorized access

Consultants in Pain Medicine

TX

OCR investigation open

1,124 affected
Unauthorized access

Cornerstones of Care

Kansas City, MO

OCR investigation open

2,771 affected
Unauthorized access

Restorix Health, Inc.

LA

OCR investigation open

38,553 affected
Hacking

Somnia, Inc.

Harrison, New York

Class action filed

19,069 affected
Hacking

Spring Management OK, LLC

OK

OCR investigation open

2,494 affected
Ransomware

United Backcare PS dba Pacific Rehabilitation Centers

WA

OCR investigation open

18,900 affected
Ransomware

Columbus Division of Fire

OH

Rhysida ransomware group

736 affected
Phishing

CPS Solutions, LLC

Dublin, Ohio

Class action filed

500 affected · interim
Hacking

Blue & Co., LLC

Carmel, Indiana

OCR investigation open

228,999 affected
Hacking

Primary Health-SMMPP, L.C.

Arizona

OCR investigation open

67,567 affected
Hacking

St. Marys NDS LLC

AZ

OCR investigation open

11,715 affected
Hacking

U.S. HEALTHWORKS-SMMPP, L.C.

AZ

OCR investigation open

10,673 affected
Hacking

VectraRx Mail Pharmacy Services, LLC

Arizona

Class action filed

109,383 affected
Ransomware

Escambia Community Clinics, Inc.

Pensacola, Florida

RansomHub · leaked

143,969 affected
Ransomware

ARC Community Services, Inc.

Madison, WI

INC Ransom · leaked

501 affected · interim
Ransomware

Primary Health Services Center, Inc.

Monroe, Louisiana

INC RANSOM (a.k.a. Incransom) · leaked

17,202 affected

17

January 2025

28 incidents

Unauthorized access

Mental Health Association Inc.

MA

OCR investigation open

12,633 affected
Ransomware

PIH Health, Inc.

Whittier, California

Class action filed

2.9M affected
Hacking

Community Health Center, Inc.

Middletown, Connecticut

Class action filed

1.1M affected
Hacking

Methodist Homes of Alabama and Northwest Florida

AL

OCR investigation open

908 affected
Hacking

Baptist Hospitals of Southeast Texas

Beaumont, Texas

OCR investigation open

501 affected · interim
Hacking

Benefits Management Group, Inc.

IL

OCR investigation open

501 affected · interim
Hacking

Spring River Mental Health & Wellness

KS

OCR investigation open

3,250 affected
Insider threat

Aprendamos Intervention Team, P.A.

Las Cruces, NM

Former Aprendamos employee (unnamed) who transferred electronic PHI to an external personal email account on their last day of employment

1,916 affected
Ransomware

Apex Custom Software

TX

0mid16B

1,500 affected · interim
Hacking

Inlet Health dba Communicare

KY

OCR investigation open

3,771 affected
Ransomware

University Diagnostic Medical Imaging, PC

New York

Fog ransomware group · leaked

138,080 affected
Hacking

Holdrege Memorial Homes, Inc.

NE

OCR investigation open

1,446 affected
Vendor breach

Allegheny Health Network Home Medical Equipment, LLC

Pittsburgh-area, Pennsylvania

Class action filed

292,773 affected
Unauthorized access

Alpine Ear, Nose & Throat, PLLC

Fort Collins, Colorado

Class action filed

65,648 affected
Ransomware

Asheville Eye Associates, PLLC

Asheville, North Carolina

DragonForce · leaked

204,984 affected
Hacking

Behavioral Health Resources

Olympia, WA

Settled

49,213 affected · interim
Ransomware

Community Treatment Solutions

NJ

Interlock ransomware group

950 affected
Hacking

Mid America Physician Services

Kansas

Class action filed

104,513 affected
Hacking

Newport Harbor Pathology Medical Group

Newport Beach, CA

Class action filed

501 affected · interim
Hacking

Newport Harbor Pathology Medical Group, Inc.

Newport Beach, California

Class action filed

119,341 affected
Hacking

Samaritan Counseling Center of the Fox Valley

WI

OCR investigation open

956 affected
Ransomware

BayMark Health Services, Inc.

TX

RansomHub · leaked

3,170 affected · interim
Unauthorized access

Eastern Idaho Public Health

ID

OCR investigation open

759 affected
Hacking

Medusind Inc.

Aventura, Florida

Settled

701,475 affected
Hacking

North Los Angeles County Regional Center

CA

OCR investigation open

500 affected
Hacking

Pediatric Home Respiratory Services, LLC d/b/a Pediatric Home Service

Roseville, MN

Settled

41,792 affected
Hacking

Ingham County Medical Care Facility, d/b/a Dobie Road

MI

OCR investigation open

3,078 affected
Ransomware

Buffalo Surgery Center

Amherst, New York

Settled

64,000 affected

About the tracker

This tracker is compiled from the HHS Office for Civil Rights Breach Portal, state attorney general filings, and reporting from established healthcare-privacy outlets. Some entries are assembled with the help of automated research and may contain errors, lag the underlying source, or carry details that have since been revised. Treat each page as a starting point, not legal advice. The linked sources on each page are the canonical record.

Spot something wrong? Email [email protected] and we will correct it.

Get ahead of the next breach

Your records are already somewhere else.

Most healthcare breaches expose data that was already being shared, sold, and reused by other entities downstream. HealthConsent stops that flow across 7M+ providers, insurers, HIEs, prescription networks, and data brokers. When the next breach hits, your data isn’t in their system to lose.

Start protecting my health data

Cancel anytime · Family plan covers spouses + dependents