College of Nurses of Ontario
Cyberattack compromised member personal data
Healthcare Data Breaches (742 indexed)
Managed Care of North America
8.9M dental patient records exposed in LockBit attack
Otolaryngology Associates
316K patient records exposed
Kootenai Health
464K patient records exposed in 3AM ransomware
Loretto Hospital
89K patient records exposed in ransomware
UnitedHealth Group
$3.1B spent responding to Change Healthcare attack — largest health system breach response cost
Cencora / AmerisourceBergen
Pharmaceutical distributor breach exposed patient data from 27 drug manufacturers
Change Healthcare / UnitedHealth
190M patient records stolen in ALPHV ransomware attack — largest US healthcare breach
Sanford Health (South Dakota)
350K patient records from rural health network exposed — 47 clinic locations affected
United Surgical Partners Intl
360K patient records exposed
Village Health
43K patient records exposed in vendor breach
Hamilton Health Sciences (Ontario)
167K patient records compromised — ransomware forced ER diversion to other hospitals
Mayo Clinic (Minnesota)
1.4M patient records exposed in vendor breach
Community Health Systems
6M patient records compromised via Fortra GoAnywhere MFT zero-day exploitation
Ernest Health
94K patient records exposed in ransomware across 30 hospitals
Viamedis / Almerys (France)
33M health insurance records stolen from two major French third-party payment providers
Lurie Children's Hospital (Chicago)
791K pediatric patient records exposed in Rhysida ransomware attack — systems down 6 weeks
Lurie Children's Hospital
790K pediatric patient records stolen in Rhysida ransomware
Ambulance Victoria
30,000+ employee records stolen by Agenda ransomware group
Trillium Health Partners (Ontario)
420K patient records compromised in ransomware attack
Select Medical Holdings
380K patient records from rehabilitation hospitals exposed via compromised EHR vendor
Regal Medical Group
3.3M patient records exposed in data exfiltration incident
Montefiore Medical Center
260K patient records stolen by insider threat employee
Riverside Community Care
25K patient records exposed