Last Update: 08/01/2026 at 1:00 PM EST

Healthcare Data Breach Disclosures

Coverage from Morningstar, Yahoo, and others

Articles

127

Active Days

542

The Topic

Healthcare Data Breach Disclosures topic image

Healthcare providers and related medical organizations are repeatedly disclosing network intrusions that may expose patient identities, medical records, and financial information, followed by breach notices, credit monitoring offers, and class action investigations. The strongest pattern is not one isolated incident but a steady stream of similar privacy failures across multiple practices and regions, often with long gaps between unauthorized access and notification. Legal response is present in many cases, but the record remains fragmented because each incident is organization-specific and the total scope varies widely.

First Article: 01/29/25

Latest Article: 07/24/26

Summary

  • Most items involve healthcare providers or medical practices reporting unauthorized network or email access that may have exposed protected health information.
  • The recurring data types are names, addresses, Social Security numbers, dates of birth, medical records, insurance details, and in some cases bank or payment card information.
  • Several incidents show delayed discovery or delayed notice, with access often occurring months before public notification or regulator filings.
  • Response patterns are similar across cases: incident investigation, patient notice, credit monitoring, identity protection, and outside legal review.
  • Class action scrutiny is common, especially where breaches involve large patient populations or sensitive identifiers.
  • The current signal is dense but operationally repetitive, with many similar disclosure-and-response events rather than one single dominating policy change.
  • The topic appears ongoing and structural rather than short-term, because the same breach-response pattern repeats across different providers and dates.

History

07/24/2026

The story is now framed less as a broad set of breach notices and more as a recurring, ongoing pattern of repeated unauthorized access incidents across healthcare organizations, with a stronger emphasis on delayed disclosure and fragmented, case-by-case legal response. The geographic scope also broadened slightly with additional states appearing in the current version.

07/21/2026

The story has broadened from a set of healthcare breach disclosures into a more litigation- and compliance-centered pattern, with more emphasis on attorney investigations, state regulator filings, and settlements from older incidents. The addition of specific providers and remediation details also shows the issue is persisting across more healthcare subsegments.

Featured

Timeline: 542 Days

2025Jan 1Mar 5May 28Jul 30Oct 22Dec 242026Jan 1Mar 5May 28Jul 30Oct 22Dec 24

Additional Articles

⭐⭐⭐⭐⭐

ClassAction.org04-24-2026
ASC Ortho Management Company disclosed an email-environment data breach in 2025 that may have exposed personal and protected health information, with notifications mailed starting April 17, 2026 across Washington, D.C., Maryland, and Virginia.
GovTech07-09-2026
Greenbaum Rowe Smith and Davis disclosed a 2025 cyberattack in New Jersey that exposed protected health information for 12,801 patients, based on HHS Office for Civil Rights notification.
Claim Depot04-27-2026
Florida Physician Specialists disclosed an April 2026 investigation finding that late-2025 unauthorized access may have exposed identity, financial, and medical data for affected patients.
Claim Depot06-11-2026
Clinical Registry Solutions reported a 2026 patient-data breach for St. Mary's Medical Center after Akira claimed data theft on a Tor site.
Claim Depot07-06-2026
Lake Region Healthcare Corp. reported a 2026 data breach exposing PII and PHI to Texas and Massachusetts residents, with regulator notifications starting July 1, 2026.
Claim Depot07-09-2026
Aitkin County Health and Human Services in Minnesota disclosed an April 2026 email breach that exposed MnCHOICES protected health information for about 83,114 people.
Claim Depot07-13-2026
Estée Lauder Companies disclosed a U.S. data breach exposing Social Security numbers and health records, reported to the Vermont Attorney General on July 10, 2026.
Claim Depot07-15-2026
South Florida Injury Centers Inc. disclosed a 2026 data breach exposing Social Security numbers and medical records, reported to HHS on May 22, 2026.
NJ.com / Jackie Roman07-08-2026
In 2025 and 2026, Greenbaum Rowe Smith and Davis reported a cyberattack that led HHS Office for Civil Rights to post a protected health information breach affecting 12,801 people.
Roosevelt Island Daily06-06-2026
A Manhattan federal class action filed in 2026 alleges NYC Health + Hospitals exposed millions of patients and staff, including biometric and medical data.
Bressler Risk Blog / Dan Bressler06-29-2026
GrayRobinson reported unauthorized access from March 5-24, 2025 that exposed protected health information for 65,113 people, including Maine residents.
NJBIZ / Kimberly Redmond07-09-2026
Greenbaum Rowe Smith & Davis LLP reported a 2025 cyberattack that exposed patient data for about 12,801 people, according to an HHS notice.
Rocket City Now07-02-2026
Billy Parker filed a class-action in Madison County Circuit Court alleging Huntsville Hospital Health System violated HIPAA after a Cerner-linked cyberattack exposed patient medical and personally identifiable information.
Tech Jacks Solutions Security Command Center / Tech Jacks Solutions06-10-2026
FBI investigators are looking into a Karl Malone Auto Group data breach discovered April 4, 2026, involving exposed customer Social Security, license, financial, and passport data in Iowa.
Class Action U07-18-2026
ZenPatient notified individuals in 2026 of unauthorized access to its network affecting personal data from December 2025 to February 2026, reporting no known misuse.
Federman & Sherwood / Caroline Chesher04-28-2026
Federman & Sherwood investigates a Florida Physician Specialists network intrusion reported to the Maine Attorney General, alleging possible exposure of Social Security, financial, and medical data.
Cision PR Newswire05-11-2026
Schubert Jonckheer & Kolbe LLP investigated a Community Health Systems patient data breach disclosed around April 29, 2026 after access around February 28, 2026 in California.
The HIPAA Journal / Steve Alder08-05-2025
Dental Group of Amarillo and Heart South Cardiovascular Group settled 2023–2024 patient data breach lawsuits with monetary funds and credit monitoring for affected patients in Texas and Alabama.
ClassAction.org04-13-2026
Rocky Mountain Associated Physicians reported on February 2, 2026 that an unauthorized systems access may have exposed patient and financial data for 50,640 people in Salt Lake City.
ClassAction.org05-29-2026
Acadia Healthcare reported a social-engineering incident accessing email and SharePoint from March 21-25, 2026, with patient notifications starting May 22, 2026.
Mass.gov07-13-2026
Gastro Health notified individuals in February 2026 after phishing-related unauthorized access potentially exposed sensitive identity and health identifiers.
Federman & Sherwood / Caroline Chesher07-21-2026
Federman & Sherwood opened a privacy and cybersecurity investigation into ZenPatient on July 21, 2026, after a breach detected in late February 2026.
Federman & Sherwood / Caroline Chesher07-24-2026
Federman & Sherwood investigates McEwen and Associates, Inc. after a Texas Attorney General filing on July 24, 2026 exposed Social Security, financial, and medical data for about 4,098 residents.

⭐⭐⭐

Databreaches06-18-2026
Blue Fish Pediatrics notified Texans on a 2025 breach affecting 41,485 people, with exposed records including Social Security numbers and medical information, after a delayed notification.
ClassAction.org04-15-2026
Pediatric Products disclosed suspicious network activity in February 2026 and reported unauthorized access exposing customers' medical and personal data across multiple U.S. states.
ClassAction.org04-27-2026
Florida Physician Specialists reported a late-November 2025 data breach, with April 2026 mail notifications and class-action investigation efforts underway in Jacksonville, Florida.
ClassAction.org04-30-2026
ClassAction.org attorneys are assessing potential class action after Mid-South Pulmonary & Sleep Specialists detected suspicious activity in November 2025 and found exposure of Social Security and medical diagnosis data.
ClassAction.org05-04-2026
Tri-Cities Gastroenterology notified 67,115 individuals in April 2026 after a third-party data breach exposed Social Security numbers and medical record numbers.
ClassAction.org05-05-2026
ClassAction.org attorneys investigated whether a class action can be filed after Integrated Pain Associates disclosed an unauthorized systems access around February 24, 2026 in Texas.
ClassAction.org05-05-2026
Western Orthopaedics reported a 2025 unauthorized access incident that potentially exposed identity, financial, and health data, with legal teams seeking class action filings.
ClassAction.org05-26-2026
ClassAction.org attorneys are investigating a reported DentaQuest data breach after ShinyHunters claimed responsibility on May 23, 2026, and threatened release for May 27.
ClassAction.org06-08-2026
Minnesota Epilepsy Group began breach notifications on June 5, 2026, after unauthorized access potentially exposed health and identity data between March 19 and April 10.
ClassAction.org06-10-2026
Attorneys pursued a potential class action after Karl Auto Group disclosed an April 4, 2026 data breach affecting Iowa customers, employees, and affiliated individuals.
ClassAction.org / Tracy Bagdonas06-30-2026
Physicians' Primary Care of Southwest Florida, P.L. reached a preliminary settlement on May 18, 2026, in a class action over a September 2024 patient data breach, with final approval set for September 14, 2026.
Federman & Sherwood / Caroline Chesher07-06-2026
Federman & Sherwood investigated the Kubota North America data breach after Kubota reported unauthorized access to HR files between March and April 2026.
Claim Depot04-27-2026
Skin & Beauty Center Inc. and DermCare Management reported an unauthorized patient-data copy from Feb. 26, 2025, and mailed breach notices after a March 2, 2026 review in California.
Claim Depot04-30-2026
Community Health Systems Inc. disclosed a suspected data breach in late February 2026 affecting potential PII and protected health information across California clinic locations.
Claim Depot05-02-2026
Integrated Pain Associates notified patients on April 30, 2026 after investigation found possible unauthorized access to sensitive data around February 24, 2026 in Killeen, Texas.
Claim Depot05-12-2026
Champion Healthcare disclosed a May 8, 2026 consumer notification after a late-January 2026 incident involving unauthorized access to internal systems.
Claim Depot06-05-2026
LGBTQ Center OC reported a Dec 25-26, 2025 data breach to the California Attorney General on June 5, 2026, exposing PII, PHI, and biometric identifiers affecting Rhode Island residents.
Claim Depot06-08-2026
Lincoln Retirement Services Company LLC disclosed June 2, 2026 unauthorized access exposing Social Security numbers and financial account information, with consumer notification guidance issued May 29, 2026 in the United States.
Claim Depot06-17-2026
Fresenius Kabi USA LLC disclosed in 2026 a third-party unauthorized access incident on an Ivenix-associated network potentially exposing employee identifiers and medical data affecting 285 Massachusetts residents.
Claim Depot07-06-2026
Centers for Dialysis Care reported a March 2026 network breach and May 15, 2026 HHS notification affecting about 8,000 U.S. individuals through potential exposure of identity and health data.
Claim Depot / Nicole Aljets07-08-2026
A class action settlement tied to a May 2025 Naper Grove Vision Care cyberattack provides breach victims up to $1,000 and medical identity theft monitoring.
Claim Depot07-16-2026
Global Special Operations Forces Foundation disclosed an email account breach in Tampa, Florida, discovered October 14, 2025, exposing PII and medical information and notifying individuals starting July 15, 2026.
Claim Depot07-18-2026
ZenPatient reported a December 2025-February 2026 data breach to the California Attorney General on July 17, 2026 and began consumer notifications the same day.
Claim Depot07-23-2026
Dermatology Partners disclosed a Catonsville, Maryland breach after unauthorized access between February 27 and March 10, 2026 may have exposed patient records.
Benzinga04-28-2026
Murphy Law Firm said a Florida Physician Specialists data breach exposed Social Security, financial, and health information, with cybercriminal risks and class-action legal outreach.
FOX13 Memphis / Kate Bieri05-21-2026
Tennessee officials investigated reports from consumers in Minnesota, New York, and Idaho of Medicare and private insurance charges for unreceived medical supplies traced to Memphis DME Supply.
Legalnewsline05-22-2026
Brian Magadan filed a proposed nationwide class action in the Middle District of Louisiana against Grace Design Studios over alleged PII and PHI exposure after a Payouts King ransomware attack.
GoCredit06-04-2026
In India, a wearable health app breach exposed contact details, transaction history, and fitness data after a March 27 intrusion, with notifications on June 2.
Becker's ASC Review / Cameron Cortigiano06-16-2026
Gastro Health disclosed two phishing incidents on Feb. 25 and March 2 that enabled unauthorized access to patient files affecting over 37,000 people.
WPG Talk Radio 95.5 FM / Eric Scott07-09-2026
Greenbaum Rowe Smith & Davis LLP notified about 12,800 New Jersey patients in response to a cybersecurity breach involving protected health information affecting multiple healthcare systems.
Fergus Now07-13-2026
Lake Region Healthcare notified patients in Fergus Falls, Minnesota, after unauthorized network access detected in May 2025 and investigated through June 2026.
Becker's Dental Review05-11-2026
Verber Dental Group reported a Jan 27 data breach in Pennsylvania with potential access to medical and identity information, followed by a May 11 class action investigation.
WSAW / Emily Davies06-19-2026
KerberRose Wealth Management disclosed a data breach beginning April 29, notifying about 27,000 potentially affected customers in Wisconsin and other states.
Healthcare Facilities Today07-21-2026
Community Health Center of Buffalo Inc. reported unauthorized network access in April 2026 that potentially exposed patient identifiers and health information, prompting notifications and credit monitoring.
Class Action U05-15-2026
LifeSpring Home Care in Oklahoma reported a hacking or IT data breach affecting 7,509 people, listed in April 2026 on the HHS OCR portal.
Class Action U07-14-2026
Centers Lab NJ LLC disclosed unauthorized data access in August 2025 that may have exposed personal and protected health information, with notification and monitoring guidance for affected individuals.
Class Action U07-17-2026
BDG Law Group reported to the Identity Theft Resource Center a September 2025 incident affecting about 629 people, with undisclosed exposed data categories.
Strauss Borrelli PLLC01-16-2026
MMMBS disclosed a data breach on January 2, 2026 in Michigan exposing pii and phi for over 28,000 individuals.
Strauss Borrelli PLLC08-18-2025
CPAP Medical reported to the California Attorney General a breach discovered June 27, 2025, involving potential access to sensitive data between December 2024.
Schubert Jonckheer & Kolbe / Nelida Almeida05-01-2026
Schubert Jonckheer & Kolbe LLP described investigation of a DermCare Management patient data breach affecting 9,724 Texas residents after file exfiltration in February 2025.
Schubert Jonckheer & Kolbe / Nelida Almeida05-20-2026
Erie Family Health Centers confirmed unauthorized access between December 10, 2025 and January 27, 2026, potentially exposing health and identity data for about 570,000 people in Chicago.
The Malone Telegram06-05-2026
DentaQuest confirmed a June 2, 2026 unauthorized access breach potentially affecting up to 2.6 million account records, prompting Edelson Lechtzin LLP to review class action claims.
Radiology Business / Marty Stempniak06-30-2026
Women’s Center for Radiology in Orlando reported a late-April unauthorized-access incident in legacy systems after detecting suspicious activity on April 29.
Radiology Business / Hannah Murphy07-23-2026
Saint Pete MRI in St. Petersburg, Florida, notified patients on July 22, 2026, after a February 23, 2025 breach may have exposed scanned patient identity and health data.
Chinook Observer07-24-2026
Edelson Lechtzin LLP announced a privacy-claims investigation following a ZenPatient, Inc. data breach disclosed around Feb. 27, 2026.
Federman & Sherwood / Caroline Chesher05-07-2026
Federman & Sherwood is investigating the Pathfinder LL&D Insurance Group data breach after Texas Attorney General reporting, affecting about 7,382 residents.
Federman & Sherwood / Caroline Chesher06-02-2026
Federman & Sherwood began investigating a Verber Dental Group PC network-server data breach reported June 2, 2026, affecting about 8,598 people in Pennsylvania.
Federman & Sherwood / Caroline Chesher06-03-2026
Federman & Sherwood is investigating the Waveny LifeCare Network data breach reported to Maine on June 3, 2026 after unauthorized access was found on or about May 28, 2025.
Federman & Sherwood / Caroline Chesher06-19-2026
Federman & Sherwood began investigating the Pivot Health data breach on June 19, 2026 after reporting of unauthorized access to sensitive health information in the USA.
Federman & Sherwood / Caroline Chesher07-07-2026
Federman & Sherwood is investigating a Dr. Erick Perroud network-server data breach reported in July 2026 to the U.S. Department of Health and Human Services.
Federman & Sherwood / Caroline Chesher07-20-2026
Federman & Sherwood is investigating a Lifespan Physicians Group-MA data breach reported to the Vermont Attorney General after unauthorized access exposed sensitive information for about 86 Vermont residents.
BeyondMachines05-18-2026
Verber Dental Group notified patients and state regulators on May 7, 2026, after unauthorized access potentially exposed sensitive personal and protected health information in January.
McShane & Brady04-14-2026
McShane & Brady, LLC announced a Tennessee data breach involving unauthorized email access that exposed PII and protected health information for 3,171 individuals in December 2025.
McShane & Brady04-16-2026
CardioFit Medical Group discovered a patient-data email incident on February 17, 2026, and issued notifications around April 10, 2026.
AOL.com06-20-2026
Florida investigators charged former Department of Juvenile Justice probation officer Crystal Lawson in 2026 for alleged retained-access leaks from a state criminal case database.
PR Newswire05-17-2026
Edelson Lechtzin LLP is investigating potential class action privacy claims after New York Life confirmed April 8, 2026 that an agent email account compromise exposed clients personal information.
Cision PR Newswire05-03-2026
Florida Physician Specialists disclosed a late-November 2025 network breach exposing sensitive identifiers and medical data, with Edelson Lechtzin LLP considering class-action litigation.
Top Class Actions10-09-2025
Goshen Medical Center detected a data breach on February 15 2025 in the United States and notified affected individuals.
Top Class Actions04-06-2026
Maria Gomez filed a Nike class action in Oregon over an alleged January 21, 2026 ransomware breach and February 25, 2026 consumer notification delay.
ClassAction.org10-06-2025
Fort Wayne Medical Education Program data breach affects 29,485 individuals in Indiana; unauthorized access occurred December 12-17, 2024; notices mailed October 2, 2025.
ClassAction.org11-03-2025
Beverly Hills Oncology Medical Group reports a data breach in February 2025 affecting patients in California.
ClassAction.org01-29-2025
Attorneys sought individuals affected by a January 2025 Sierra Vista Hospital & Clinics breach in Truth or Consequences, New Mexico, to assess a possible class action.
ClassAction.org04-28-2025
BMC Health System identified unauthorized access to Workday-linked user accounts on March 9, 2025, and attorneys sought breach-notified individuals for a potential class action.
ClassAction.org03-23-2026
Stockton Cardiology disclosed a breach in California between December 2025 and February 2026, exposing patient identifiers and billing records and triggering class-action intake for affected individuals.
ClassAction.org03-25-2026
ClassAction.org attorneys evaluate a potential class action after Emanuel Medical Center reported a May 2025 breach affecting 28,963 people.
ClassAction.org04-16-2026
ClassAction.org attorneys investigated a potential class action after Bank3 reported unauthorized access from July 25 to August 7, 2025 that may exposed identity, financial, and health data.
ClassAction.org04-17-2026
Secure Health Plans of Georgia confirmed a 2026 data breach in Georgia after alleged unauthorized access to medical and insurance files emerged by Feb 3-12, 2026.
ClassAction.org04-27-2026
Florida Physician Specialists notified potentially affected individuals starting April 24, 2026 after unauthorized access in late 2025 may have compromised SSNs, payment data, and medical records.
ClassAction.org05-28-2026
On April 16, 2026, threat-actor claims linked to New York-based Empower Group led to attorney outreach for potential class action over alleged Social Security number exposure.
ClassAction.org05-29-2026
Attorneys investigating a Gastro Health phishing-driven data breach on February 25 and March 2, 2026 seek class action plaintiffs in the U.S.
ClassAction.org06-11-2026
On June 10, 2026, Vermont received a report from Miami accounting firm Palacio, Palacio & Zimmerman stating Social Security numbers may have been compromised.
ClassAction.org06-12-2026
Orthopaedic Specialists of Massachusetts disclosed a January 2026 data breach in Massachusetts, reporting potential exposure of patient and employee medical records.
ClassAction.org06-19-2026
Attorneys working on a potential class action sought Colorado Health Network breach victims after a cybersecurity incident exposed sensitive personal and health data and notices began June 18, 2026.
Claim Depot04-13-2026
Legend Senior Living LLC disclosed a March 2026 data breach discovered after unauthorized access between July 2025 and August 2025, with April 10, 2026 notices to Texas and other state attorneys general.
Claim Depot04-18-2026
Aligned Orthopedic Partners identified unusual activity in its email system on December 8, 2025, reporting potential exposure of personal and health information after unauthorized access in late 2025.
Levi & Korsinsky / Eduard Korsinsky06-09-2026
Xsolis, Inc. disclosed on June 5, 2026 that a phishing attack in January 2026 led to acquisition of sensitive personal information and protected health information.
Classlawdc06-30-2026
On June 29, 2026, dark web monitoring sites reported Rocky Mountain Care as a data breach victim, with suspected Social Security number and address exposure.
Class Action U07-08-2026
On June 10, 2026, an attorney general filing reported a data incident by a Michigan dental office, potentially impacting about 7,692 individuals.
Cole & Van Note06-30-2026
Kubota North America Corporation notified employees on June 30, 2026 about a March 16, 2026 breach affecting Social Security numbers, medical records, and payment data in Grapevine, Texas.
McShane & Brady04-30-2026
DermCare Management notified of a healthcare data breach in 2025, exposing Social Security, financial, and medical records across Florida, Texas, Virginia, and California.
The Lyon Firm / Joseph Lyon05-27-2026
The Oncology Institute disclosed a May 2026 Kroll notification about unauthorized access to patient-data systems tied to a third-party vendor breach.
Emery Reddy / Emery Reddy05-20-2026
Southern California University of Health Sciences disclosed unauthorized access on or about March 24, 2026, with personal information exposed in accessed files.
Emery Reddy06-04-2026
KerberRose Wealth Management investigated an April 29, 2026 employee email-account compromise and notified individuals in May 2026 after potential PII exposure.
Federman & Sherwood / Caroline Chesher05-08-2026
Federman & Sherwood is investigating a Providence St. Joseph Orange healthcare data breach reported in 2026 after unauthorized network-server access exposed patient information to about 11,329 people.

⭐️⭐️

Strauss Borrelli PLLC01-22-2026
Columbia Medical Practice in Maryland reported a data breach on November 5, 2025 exposing personal and health information of approximately 3000 patients.
Strauss Borrelli PLLC02-18-2026
Emanuel Medical Center in Georgia detected unauthorized third party access to sensitive information from May 21 to May 24, 2025, with breach notice posted February 17, 2026.
Strauss Borrelli PLLC11-03-2025
Beverly Hills Cancer Center reported unauthorized network access between February 7 and February 11, 2025 in California, potentially exposing personal data and protected health information.
Strauss Borrelli PLLC01-16-2026
LifeLong Medical Care in California reports a data breach involving sensitive PII and PHI, with notices issued on January 14 2026.
The HIPAA Journal / Steve Alder09-19-2025
Two New Jersey medical groups report a May 2025 PHI breach affecting patients in New Jersey and Ohio.
ClassAction.org01-07-2026
Vida Y Salud-Health Systems in Texas disclosed a data breach on October 8, 2025, with unauthorized access on October 7-8.
ClassAction.org02-05-2026
MedRevenu announced in December 2024 a data breach potentially exposing patient data among clients in the healthcare sector.
ClassAction.org09-10-2025
Medical Associates of Brevard in Melbourne, Florida disclosed a cyberattack around July 7, 2025 exposing patient data.
ClassAction.org01-09-2026
Harmony Health Medical Clinic and Family Resource Center disclosed a data breach on December 12, 2025 affecting patients in northern California.
ClassAction.org02-09-2026
Consumers affected by Catalyst RCM data breach consider class action in November 2025.
ClassAction.org09-25-2025
attorneys with classaction.org seek affected patients for potential class action over gaylord specialty healthcare data breach disclosed in 2024 in wallingford connecticut
ClassAction.org09-25-2025
florida based doctors imaging group suffered a november 2024 data breach affecting patient information in florida.
ClassAction.org03-05-2026
nephrology associates medical group reports data breach around may 20 2025 in southern california
benzinga / Globe Newswire03-18-2026
ID Care discovered suspicious network activity on November 5, 2025, leading to unauthorized access to Social Security numbers and medical records and HHS notification.
Schubert Jonckheer & Kolbe / Nelida Almeida08-18-2025
Unauthorized access occurred December 13-21, 2024 on CPAP Medical Supplies and Services, Inc.'s Florida network, affecting 90,133 patients and clients.
National Today02-16-2026
Arizona healthcare data breach affects about 73,281 patients between May 18 and May 22, 2025.
GlobeNewswire09-19-2025
Goshen Medical Center reports data breach on March 4 2025 after unauthorized access to patient files in its network