University of Mississippi Medical Center
University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday
Healthcare Data Breaches (824 indexed)
Canada Health Infoway
3.2M patient health records from interprovincial data exchange compromised
Bupa (UK/Global)
780K international health insurance member records exposed via insider data theft
Mayo Clinic
900K patient research records exposed via compromised genomics analysis platform
Cerner / Oracle Health
5.9M patient records exposed after legacy Cerner migration database left unsecured on Oracle Cloud
Oman Ministry of Health
280K patient records exposed
Association Nationale des Premiers Secours
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
Jean Coutu (Pharmacy)
450K patient records exposed in POS breach
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
Lonza Group (Switzerland)
280K pharmaceutical manufacturing records exposed
Discovery Health (South Africa)
560K medical records compromised
Indian Council of Medical Research
81M citizen health records from Aadhaar-linked database exposed via API vulnerability
Atrium Health (2026)
1.8M patient records exposed in supply chain attack
Baptist Health (Florida)
340K patient records compromised
Horizon Health (New Brunswick)
290K patient records stolen
Cigna Group
1.4M member pharmacy and benefits records accessed via compromised business associate
Johnson & Johnson
620K patient medical device registration records exposed via compromised portal
Tenet Healthcare
2.4M patient records stolen from 65 hospitals in coordinated supply chain attack
Ramsay Health Care (Australia)
2.3M patient records stolen from Australian private hospital operator
Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
AIIMS Delhi
2.1M patient records stolen in second cyberattack
The Ottawa Hospital
780K patient records exposed in data exfiltration
Inova Health (Virginia)
670K patient records exposed in vendor breach