Heritage Valley Health System (Pennsylvania)
847K patient records compromised via unpatched Citrix NetScaler vulnerability
Healthcare Data Breaches (742 indexed)
Royal Flying Doctor Service
120K patient records exposed in ransomware attack
Scottish Ambulance Service
120K patient transport records compromised
Johns Hopkins Medicine
780K patient records compromised in targeted attack
Medtronic
890K medical device records compromised in supply chain attack
Scattered Spider / Star Health India
31M customer records and 5.8M insurance claims leaked via Telegram bot
Alberta Health Services
1.8M patient records compromised — unauthorized access to provincial health database
Texas Tech University Health Sciences Center
1.4M patient records exposed in Interlock ransomware attack on academic medical center
Humber River Health (Toronto)
180K patient records exposed via vendor platform
Novartis
890K clinical trial records stolen
UCLA Health
1.1M patient records exposed in credential harvesting
Atrium Health Wake Forest Baptist
585K patient records exposed via compromised online scheduling portal
Roper St. Francis Healthcare
BianLian ransomware accessed 700K patient records across South Carolina health system
Navvis & Company
462K patient records exposed including SSNs and health insurance information
Anthem / Elevance Health (2024)
2.4M member records re-exposed via legacy system during cloud migration — SSNs and diagnoses
OnePoint Patient Care (Arizona)
795K hospice patient records compromised — INC Ransom group claimed responsibility
Belfast Health Trust
280K patient records exposed in targeted attack
Assistance Publique Hopitaux de Paris
890K patient records exposed in cyberattack
Royal Free London NHS Trust
340K patient records exposed
Interior Health (BC)
560K patient records compromised in ransomware incident
SingHealth (2024)
890K patient records exposed in second major incident
Duke Health (North Carolina)
670K patient records stolen in targeted attack
Banner Health (Arizona)
425K patient records exposed via SQL injection on patient portal — lab results leaked
Advocat Health (North Carolina)
421K skilled nursing and rehabilitation patient records exposed via phishing