Disclosure tracker › Healthcare disclosures
Intelligence · Disclosure tracker
Healthcare disclosures
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,366
Disclosures in the tracker, all years
2,082
Of those, indexed in 2026
146
Added in October
23
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 30 Oct 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
5,500 results · Healthcare disclosures. Clear filters
Critical30 Oct 2026
Beyond deterministic worms
Healthcare · Records not stated
In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called it the largest cyberattack ever to hit the NHS in…
30 Oct 2026
High23 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
23 Oct 2026
Critical23 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
23 Oct 2026
High20 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
20 Oct 2026
Medium12 Oct 2026
Sharecare
Healthcare · 318,185 records
318,185 records exposed, Dates of birth, Email addresses, Employers, Genders and 6 more
12 Oct 2026
High1 Oct 2026
Labcorp
Healthcare · Records not stated
Labcorp agreed to a $2.3M settlement with 44 state attorneys general over a data breach involving a debt collector.
1 Oct 2026
Critical1 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Cyberattack compromised patients' personal and health data; the number of affected patients was not specified at disclosure.
1 Oct 2026
Critical1 Oct 2026
Quest Diagnostics
Healthcare · Records not stated
Lab testing company confirmed a cyberattack exposing patients' personal and health data via its lab services platform; total number of affected individuals not yet specified.
1 Oct 2026
High1 Oct 2026
Gainwell Technologies
Healthcare · Records not stated
Kentucky Medicaid provider-portal breach; third Gainwell provider-portal incident in 2026 using the same attack vector.
1 Oct 2026
Critical1 Oct 2026
Labcorp
Healthcare · Records not stated
Labcorp agreed to a $2.3M settlement with 44 state attorneys general over a debt collector data breach exposing patient information.
1 Oct 2026
High1 Oct 2026
Organisation not named
Healthcare · 5,461 records
The disclosure as indexed does not name the organisation.
Data breach affected 5,461 patients, exposing sensitive health information.
1 Oct 2026
High1 Oct 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Personal and billing information of 3,816 Kentucky Medicaid recipients was exposed for months before being disclosed.
1 Oct 2026
Critical1 Oct 2026
BCHP and XTIUM
Healthcare · Records not stated
Medical data breach exposed SSNs of 62,871 CT and 825,000 NY residents; $2.7M settlement
1 Oct 2026
Critical1 Oct 2026
Oracle Health (Cerner)
Healthcare · 20,000,000 records
Nearly 20 million patient records exposed across 80 U.S. hospitals
1 Oct 2026
Medium30 Sep 2026
Medela
Healthcare · 423,947 records
423,947 records exposed, Email addresses, Employers, Job titles, Names and 4 more
30 Sep 2026
Critical28 Sep 2026
Labcorp
Healthcare · 10,000,000 records
2019 data breach affected approximately 10 million people; settled with 40 states for $2.2 million
28 Sep 2026
High28 Sep 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.
28 Sep 2026
Medium26 Sep 2026
Organisation not named
Healthcare · Records not stated
The disclosure as indexed does not name the organisation.
Polish healthcare entities have been the victims of cyberattacks recently. First, it was the MyDr system. Now it’s a software manufacturer that markets the Medyc software used by Polish healthcare providers.…
26 Sep 2026
High25 Sep 2026
Woodfords Family Services
Healthcare · Records not stated
Patient and family data compromised in 2024 ransomware attack
25 Sep 2026
High25 Sep 2026
Covenant Health
Healthcare · 480,000 records
Data breach impacts nearly 480,000 individuals
25 Sep 2026
Critical25 Sep 2026
US Healthcare Provider (CHC)
Healthcare · 1,000,000 records
Data breach impacting 1 million patients exposed
25 Sep 2026
Critical25 Sep 2026
Welltok
Healthcare · 14,760,000 records
MOVEit Transfer vulnerability exploitation exposed 14.76 million individuals' patient data
25 Sep 2026
Critical25 Sep 2026
Ransomware attack
Healthcare · 1,200,000 records
Ransomware attack exposed personal data of 1.2 million individuals
25 Sep 2026
Critical24 Sep 2026
Organisation not named
Healthcare · 1,200,000 records
The disclosure as indexed does not name the organisation.
2025 ransomware attack exposed personal data of 1.2 million individuals
24 Sep 2026
Were you affected?