Cerebral Inc. (Telehealth)
3.1M patient records shared with advertisers — FTC $7M fine for privacy violations
Healthcare Data Breaches (742 indexed)
Carolina Behavioral Health Alliance
131K member records exposed
Oklahoma Heart Hospital (2023)
45K patient records exposed
Managed Care of North America Dental
8.9M dental patient records exposed — SSNs and insurance IDs compromised
MCNA Dental
8.9M patient records — largest dental breach in US history
Ransom House / Barcelona Hospital
Patient genomic data published after hospital refused EUR 4.5M ransom
Managed Care of North America (MCNA) Dental
8.9M patient records exposed in LockBit ransomware attack
Hospital Clinic de Barcelona
RansomHouse group stole 4.5TB of patient data — cancer treatment records published
Sun Pharma (India)
ALPHV/BlackCat ransomware disrupted operations at India's largest pharma company
BetterHelp
7M user mental health records shared with advertisers
Cerebral (Telehealth)
3.2M patient records shared with third-party tracking platforms without consent
Cerebral
3.2M patient records shared with third-party advertisers
PurFoods / Mom's Meals
1.24M client records exposed in ransomware at meal delivery service
90 Degree Benefits
175K member records exposed in data breach
Noom
300K user health data shared via tracking pixel
PrimeCare Medical
37K patient records exposed
CIUSSS du Centre-Sud (Montreal)
3,600 patient records accessed by unauthorized employee
Monument / Tempest (telehealth)
2.5M patient records shared via tracking pixels on mental health platform
Lehigh Valley Health Network
BlackCat ransomware published patient clinical photos — 135K records, $65M settlement
Hospital Garcia de Orta (Portugal)
Ransomware disrupted major Lisbon hospital — patient systems offline
Community Health Systems (GoAnywhere)
1M patient records exposed in Fortra GoAnywhere MFT vulnerability
Cardiovascular Associates
441K patient records exposed in Karakurt ransomware
Tallahassee Memorial HealthCare
20K patient records exposed in ransomware
GoodRx
1.5M user prescription data shared with Facebook via tracking pixel