GSK (GlaxoSmithKline)
560K pharmaceutical records exposed in targeted attack
Healthcare Data Breaches (742 indexed)
Sentara Healthcare (Virginia)
780K patient records exposed
Frederick Health Medical Group
934K patient records compromised in ransomware attack on Maryland healthcare group
Anna Jaques Hospital
316K patient records stolen in Christmas Day ransomware attack on Massachusetts hospital
Community Health Center Inc
1M patient records exposed in data breach
Community Health Center (Connecticut)
1M+ patient records including SSNs and health diagnoses accessed by threat actor
SickKids Toronto
Patient and research data temporarily encrypted in LockBit attack — decryptor provided after backlash
PowerSchool (student health records)
62M student and staff records including health data exposed
ESO Solutions
2.7M patient records from hospital and fire department EMS systems exposed in ransomware attack
Saint Francis Health System (Oklahoma)
275K patient records exposed — attackers exfiltrated surgical and billing records
University of Pittsburgh Medical
560K patient records stolen
Vancouver Coastal Health Authority
445K patient records exposed after contractor laptop theft — unencrypted drive
Roche
450K patient data records exposed via vendor
Alder Hey Children's Hospital
INC Ransom gang stole patient records from Liverpool children's hospital
Wirral University Teaching Hospital
Cyberattack forced hospital to declare major incident — systems offline for days
Prisma Health (South Carolina)
230K patient records exposed via compromised vendor portal — including OB/GYN records
Cardiovascular Associates (Alabama)
441K patient cardiovascular records — detailed test results and implant data exposed
Advocate Aurora Health (Illinois)
560K patient records compromised
IWK Health Centre (Halifax)
290K pediatric records compromised
Universitair Medisch Centrum Utrecht
1.5M Dutch hospital patient records accessed via compromised Epic EHR credentials
University Hospitals of Morecambe Bay
Ransomware disrupted hospital IT — appointment systems and patient portals down
23andMe (Global)
6.9M user profiles scraped via credential stuffing — ancestry and genetic data exposed worldwide
Vitalite Health (New Brunswick)
190K patient records exposed
Froedtert Health (Wisconsin)
188K patient records exposed via phishing attack on medical staff email accounts