LifeLabs (British Columbia)
15M patient lab test records — largest healthcare breach in Canadian history
Healthcare Data Breaches (742 indexed)
Medibank Private (Australia)
9.7M customer health records published on dark web — REvil affiliate responsible
Azienda Ospedaliera di Verona
Rhysida ransomware hit hospital — patient records and medical images stolen
Sault Ste. Marie Hospital (Ontario)
Cyberattack disrupted hospital operations — patient records at risk
Mackenzie Health (York Region)
Cyberattack disrupted hospital operations — patient care diverted to other facilities
Five Ontario Hospitals (TransForm)
TransForm cyberattack hit 5 hospitals in Windsor-Essex — 267,000 patients notified
Advocate Aurora Health (Illinois/Wisconsin)
3M patient records shared with Meta and Google via tracking pixels on patient portal
Hospital de Torrevieja (Spain)
Ransomware disrupted hospital systems in Alicante — patient care affected
Indian Council of Medical Research (ICMR)
815M citizen health records offered for sale — Aadhaar numbers and COVID test data
Universitatsklinikum Frankfurt
IT systems shut down for 2 weeks after ransomware — 500K patient records compromised
23andMe (Global Impact)
6.9M user genetic ancestry profiles scraped through credential stuffing
Loretto Hospital (Chicago)
327K patient records exposed after ransomware group published full SQL database dump
HealthEC
4.5M patient records compromised in business associate breach
Regional Medical Center (Orangeburg SC)
87K patient records exposed
ESO Solutions (EMS Software)
2.7M emergency medical records exposed — 911 dispatch and ambulance run data compromised
PhilHealth (Philippines)
Medusa ransomware stole 750GB of patient data from Philippines health insurer
North Kansas City Hospital
47K patient records exposed
Singing River Health System (Mississippi)
895K patient records exposed — Rhysida ransomware encrypted EHR systems
Blue Cross Blue Shield of Arizona
730K member records exposed
Max Healthcare (India)
Patient appointment data exposed through misconfigured API
Rush University Medical Center (Chicago)
46K patient records exposed via email phishing — research participant data included
MedInform / Health Solutions
44K patient records exposed
Postmeds / Truepill Pharmacy
2.4M prescription records exposed — medication names and health conditions leaked
Truepill (Pharmacy)
2.4M patient prescription records exposed — names, medications, demographic data