Last Update: 09/29/2026 at 3:33 PM EST

Healthcare Data Breaches and Legal Response

Coverage from Class Action U, Mass.gov, and others

Healthcare Data Breaches and Legal Response topic image

Healthcare providers, medical groups, law firms, and health-technology companies are disclosing unauthorized access to systems containing patient identifiers, medical records, insurance data, and financial information.

The 2026 reporting cycle emphasizes lengthy investigations, regulator notices, credit-monitoring remedies, and class-action scrutiny, while many notices leave the access method, affected population, or actual misuse unresolved.

Looking Back
548 Day Timeline
2025Jan 1Mar 5May 28Jul 30Oct 22Dec 242026Jan 1Mar 5May 28Jul 30Oct 22Dec 24
History
08/02/2026

The story broadened from recurring healthcare breach disclosures to a wider ecosystem that now includes law firms, health-tech vendors, and public hospital systems, with more explicit regulator and litigation scrutiny. The current version also sharpens the emphasis on lengthy investigation and notification delays, and on unresolved questions about root cause and misuse.

07/24/2026

The story is now framed less as a broad set of breach notices and more as a recurring, ongoing pattern of repeated unauthorized access incidents across healthcare organizations, with a stronger emphasis on delayed disclosure and fragmented, case-by-case legal response. The geographic scope also broadened slightly with additional states appearing in the current version.

All Articles129 articles
Important40 articles · CI Score 60 and above
Class Action U
ZenPatient notified individuals in 2026 of unauthorized access to its network affecting personal data from December 2025 to February 2026, reporting no known misuse.
7/18/2026 • Data Breaches & Exposure Events • General
Mass.gov
Gastro Health notified individuals in February 2026 after phishing-related unauthorized access potentially exposed sensitive identity and health identifiers.
7/13/2026 • Data Breaches & Exposure Events • General
NJBIZ / Kimberly Redmond
Greenbaum Rowe Smith & Davis LLP reported a 2025 cyberattack that exposed patient data for about 12,801 people, according to an HHS notice.
7/9/2026 • Data Breaches & Exposure Events • General
Rocket City Now
Billy Parker filed a class-action in Madison County Circuit Court alleging Huntsville Hospital Health System violated HIPAA after a Cerner-linked cyberattack exposed patient medical and personally identifiable information.
7/2/2026 • Data Breaches & Exposure Events • General
Tech Jacks Solutions Security Command Center / Tech Jacks Solutions
FBI investigators are looking into a Karl Malone Auto Group data breach discovered April 4, 2026, involving exposed customer Social Security, license, financial, and passport data in Iowa.
6/10/2026 • Data Breaches & Exposure Events • General
Roosevelt Island Daily
A Manhattan federal class action filed in 2026 alleges NYC Health + Hospitals exposed millions of patients and staff, including biometric and medical data.
6/6/2026 • Data Breaches & Exposure Events • General
Cision PR Newswire
Schubert Jonckheer & Kolbe LLP investigated a Community Health Systems patient data breach disclosed around April 29, 2026 after access around February 28, 2026 in California.
5/11/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood investigates a Florida Physician Specialists network intrusion reported to the Maine Attorney General, alleging possible exposure of Social Security, financial, and medical data.
4/28/2026 • Data Breaches & Exposure Events • General
Morningstar
Edelson Lechtzin LLP launched a class action investigation in response to a Brown Health Medical Group-MA data breach reported to the Vermont Attorney General on July 16, 2026.
7/21/2026 • Data Breaches & Exposure Events • General
Claim Depot
South Florida Injury Centers Inc. disclosed a 2026 data breach exposing Social Security numbers and medical records, reported to HHS on May 22, 2026.
7/15/2026 • Data Breaches & Exposure Events • General
Claim Depot
Estée Lauder Companies disclosed a U.S. data breach exposing Social Security numbers and health records, reported to the Vermont Attorney General on July 10, 2026.
7/13/2026 • Data Breaches & Exposure Events • General
GovTech
Greenbaum Rowe Smith and Davis disclosed a 2025 cyberattack in New Jersey that exposed protected health information for 12,801 patients, based on HHS Office for Civil Rights notification.
7/9/2026 • Data Breaches & Exposure Events • General
Claim Depot
Aitkin County Health and Human Services in Minnesota disclosed an April 2026 email breach that exposed MnCHOICES protected health information for about 83,114 people.
7/9/2026 • Data Breaches & Exposure Events • General
Yahoo / Jackie Roman
Greenbaum Rowe Smith and Davis reported a cyberattack in New Jersey on Nov. 27, 2025, exposing 12,801 patients' protected health information.
7/8/2026 • Data Breaches & Exposure Events • General
Claim Depot
Lake Region Healthcare Corp. reported a 2026 data breach exposing PII and PHI to Texas and Massachusetts residents, with regulator notifications starting July 1, 2026.
7/6/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Acadia Healthcare reported a social-engineering incident accessing email and SharePoint from March 21-25, 2026, with patient notifications starting May 22, 2026.
5/29/2026 • Data Breaches & Exposure Events • General
Claim Depot
Florida Physician Specialists disclosed an April 2026 investigation finding that late-2025 unauthorized access may have exposed identity, financial, and medical data for affected patients.
4/27/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ASC Ortho Management Company disclosed an email-environment data breach in 2025 that may have exposed personal and protected health information, with notifications mailed starting April 17, 2026 across Washington, D.C., Maryland, and Virginia.
4/24/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Rocky Mountain Associated Physicians reported on February 2, 2026 that an unauthorized systems access may have exposed patient and financial data for 50,640 people in Salt Lake City.
4/13/2026 • Data Breaches & Exposure Events • General
Radiology Business / Hannah Murphy
Saint Pete MRI in St. Petersburg, Florida, notified patients on July 22, 2026, after a February 23, 2025 breach may have exposed scanned patient identity and health data.
7/23/2026 • Data Breaches & Exposure Events • General
Healthcare Facilities Today
Community Health Center of Buffalo Inc. reported unauthorized network access in April 2026 that potentially exposed patient identifiers and health information, prompting notifications and credit monitoring.
7/21/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating a Lifespan Physicians Group-MA data breach reported to the Vermont Attorney General after unauthorized access exposed sensitive information for about 86 Vermont residents.
7/20/2026 • Data Breaches & Exposure Events • General
Class Action U
BDG Law Group reported to the Identity Theft Resource Center a September 2025 incident affecting about 629 people, with undisclosed exposed data categories.
7/17/2026 • Data Breaches & Exposure Events • General
Class Action U
Centers Lab NJ LLC disclosed unauthorized data access in August 2025 that may have exposed personal and protected health information, with notification and monitoring guidance for affected individuals.
7/14/2026 • Data Breaches & Exposure Events • General
Fergus Now
Lake Region Healthcare notified patients in Fergus Falls, Minnesota, after unauthorized network access detected in May 2025 and investigated through June 2026.
7/13/2026 • Data Breaches & Exposure Events • General
NJ.com / Jackie Roman
In 2025 and 2026, Greenbaum Rowe Smith and Davis reported a cyberattack that led HHS Office for Civil Rights to post a protected health information breach affecting 12,801 people.
7/8/2026 • Data Breaches & Exposure Events • General
Cole & Van Note
Kubota North America Corporation notified employees on June 30, 2026 about a March 16, 2026 breach affecting Social Security numbers, medical records, and payment data in Grapevine, Texas.
6/30/2026 • Data Breaches & Exposure Events • General
Bressler Risk Blog / Dan Bressler
GrayRobinson reported unauthorized access from March 5-24, 2025 that exposed protected health information for 65,113 people, including Maine residents.
6/29/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe / Nelida Almeida
Erie Family Health Centers confirmed unauthorized access between December 10, 2025 and January 27, 2026, potentially exposing health and identity data for about 570,000 people in Chicago.
5/20/2026 • Data Breaches & Exposure Events • General
McShane & Brady
McShane & Brady, LLC announced a Tennessee data breach involving unauthorized email access that exposed PII and protected health information for 3,171 individuals in December 2025.
4/14/2026 • Data Breaches & Exposure Events • General
The HIPAA Journal / Steve Alder
Dental Group of Amarillo and Heart South Cardiovascular Group settled 2023–2024 patient data breach lawsuits with monetary funds and credit monitoring for affected patients in Texas and Alabama.
8/5/2025 • Data Breaches & Exposure Events • General
Claim Depot
Nephrology Associates notified affected individuals in the United States on July 30, 2026, after unauthorized access exposed medical and identity information from January through April.
7/30/2026 • Data Breaches & Exposure Events • General
Claim Depot
Dermatology Partners disclosed a Catonsville, Maryland breach after unauthorized access between February 27 and March 10, 2026 may have exposed patient records.
7/23/2026 • Data Breaches & Exposure Events • General
Claim Depot
ZenPatient reported a December 2025-February 2026 data breach to the California Attorney General on July 17, 2026 and began consumer notifications the same day.
7/18/2026 • Data Breaches & Exposure Events • General
Claim Depot
Global Special Operations Forces Foundation disclosed an email account breach in Tampa, Florida, discovered October 14, 2025, exposing PII and medical information and notifying individuals starting July 15, 2026.
7/16/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Orthopaedic Specialists of Massachusetts disclosed a January 2026 data breach in Massachusetts, reporting potential exposure of patient and employee medical records.
6/12/2026 • Data Breaches & Exposure Events • General
Claim Depot
Clinical Registry Solutions reported a 2026 patient-data breach for St. Mary's Medical Center after Akira claimed data theft on a Tor site.
6/11/2026 • Data Breaches & Exposure Events • General
Claim Depot
Champion Healthcare disclosed a May 8, 2026 consumer notification after a late-January 2026 incident involving unauthorized access to internal systems.
5/12/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood investigates McEwen and Associates, Inc. after a Texas Attorney General filing on July 24, 2026 exposed Social Security, financial, and medical data for about 4,098 residents.
7/24/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood opened a privacy and cybersecurity investigation into ZenPatient on July 21, 2026, after a breach detected in late February 2026.
7/21/2026 • Data Breaches & Exposure Events • General
Interesting89 articles · CI Score 45–59
Chinook Observer
Edelson Lechtzin LLP announced a privacy-claims investigation following a ZenPatient, Inc. data breach disclosed around Feb. 27, 2026.
7/24/2026 • Data Breaches & Exposure Events • General
WPG Talk Radio 95.5 FM / Eric Scott
Greenbaum Rowe Smith & Davis LLP notified about 12,800 New Jersey patients in response to a cybersecurity breach involving protected health information affecting multiple healthcare systems.
7/9/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating a Dr. Erick Perroud network-server data breach reported in July 2026 to the U.S. Department of Health and Human Services.
7/7/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood investigated the Kubota North America data breach after Kubota reported unauthorized access to HR files between March and April 2026.
7/6/2026 • Data Breaches & Exposure Events • General
Radiology Business / Marty Stempniak
Women’s Center for Radiology in Orlando reported a late-April unauthorized-access incident in legacy systems after detecting suspicious activity on April 29.
6/30/2026 • Data Breaches & Exposure Events • General
Classlawdc
On June 29, 2026, dark web monitoring sites reported Rocky Mountain Care as a data breach victim, with suspected Social Security number and address exposure.
6/30/2026 • Data Breaches & Exposure Events • General
AOL.com
Florida investigators charged former Department of Juvenile Justice probation officer Crystal Lawson in 2026 for alleged retained-access leaks from a state criminal case database.
6/20/2026 • Cybersecurity Tech (Privacy-Relevant) • General
WSAW / Emily Davies
KerberRose Wealth Management disclosed a data breach beginning April 29, notifying about 27,000 potentially affected customers in Wisconsin and other states.
6/19/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood began investigating the Pivot Health data breach on June 19, 2026 after reporting of unauthorized access to sensitive health information in the USA.
6/19/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Databreaches
Blue Fish Pediatrics notified Texans on a 2025 breach affecting 41,485 people, with exposed records including Social Security numbers and medical information, after a delayed notification.
6/18/2026 • Data Breaches & Exposure Events • General
Becker's ASC Review / Cameron Cortigiano
Gastro Health disclosed two phishing incidents on Feb. 25 and March 2 that enabled unauthorized access to patient files affecting over 37,000 people.
6/16/2026 • Data Breaches & Exposure Events • General
Levi & Korsinsky / Eduard Korsinsky
Xsolis, Inc. disclosed on June 5, 2026 that a phishing attack in January 2026 led to acquisition of sensitive personal information and protected health information.
6/9/2026 • Data Breaches & Exposure Events • General
The Malone Telegram
DentaQuest confirmed a June 2, 2026 unauthorized access breach potentially affecting up to 2.6 million account records, prompting Edelson Lechtzin LLP to review class action claims.
6/5/2026 • Data Breaches & Exposure Events • General
GoCredit
In India, a wearable health app breach exposed contact details, transaction history, and fitness data after a March 27 intrusion, with notifications on June 2.
6/4/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating the Waveny LifeCare Network data breach reported to Maine on June 3, 2026 after unauthorized access was found on or about May 28, 2025.
6/3/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood began investigating a Verber Dental Group PC network-server data breach reported June 2, 2026, affecting about 8,598 people in Pennsylvania.
6/2/2026 • Data Breaches & Exposure Events • General
Legalnewsline
Brian Magadan filed a proposed nationwide class action in the Middle District of Louisiana against Grace Design Studios over alleged PII and PHI exposure after a Payouts King ransomware attack.
5/22/2026 • Data Breaches & Exposure Events • General
FOX13 Memphis / Kate Bieri
Tennessee officials investigated reports from consumers in Minnesota, New York, and Idaho of Medicare and private insurance charges for unreceived medical supplies traced to Memphis DME Supply.
5/21/2026 • Data Breaches & Exposure Events • General
BeyondMachines
Verber Dental Group notified patients and state regulators on May 7, 2026, after unauthorized access potentially exposed sensitive personal and protected health information in January.
5/18/2026 • Data Breaches & Exposure Events • General
PR Newswire
Edelson Lechtzin LLP is investigating potential class action privacy claims after New York Life confirmed April 8, 2026 that an agent email account compromise exposed clients personal information.
5/17/2026 • Data Breaches & Exposure Events • General
Becker's Dental Review
Verber Dental Group reported a Jan 27 data breach in Pennsylvania with potential access to medical and identity information, followed by a May 11 class action investigation.
5/11/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating the Pathfinder LL&D Insurance Group data breach after Texas Attorney General reporting, affecting about 7,382 residents.
5/7/2026 • Data Breaches & Exposure Events • General
Cision PR Newswire
Florida Physician Specialists disclosed a late-November 2025 network breach exposing sensitive identifiers and medical data, with Edelson Lechtzin LLP considering class-action litigation.
5/3/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe / Nelida Almeida
Schubert Jonckheer & Kolbe LLP described investigation of a DermCare Management patient data breach affecting 9,724 Texas residents after file exfiltration in February 2025.
5/1/2026 • Data Breaches & Exposure Events • General
McShane & Brady
DermCare Management notified of a healthcare data breach in 2025, exposing Social Security, financial, and medical records across Florida, Texas, Virginia, and California.
4/30/2026 • Data Breaches & Exposure Events • General
McShane & Brady
CardioFit Medical Group discovered a patient-data email incident on February 17, 2026, and issued notifications around April 10, 2026.
4/16/2026 • Data Breaches & Exposure Events • General
Claim Depot / Nicole Aljets
A class action settlement tied to a May 2025 Naper Grove Vision Care cyberattack provides breach victims up to $1,000 and medical identity theft monitoring.
7/8/2026 • Data Breaches & Exposure Events • General
Claim Depot
Centers for Dialysis Care reported a March 2026 network breach and May 15, 2026 HHS notification affecting about 8,000 U.S. individuals through potential exposure of identity and health data.
7/6/2026 • Data Breaches & Exposure Events • General
ClassAction.org / Tracy Bagdonas
Physicians' Primary Care of Southwest Florida, P.L. reached a preliminary settlement on May 18, 2026, in a class action over a September 2024 patient data breach, with final approval set for September 14, 2026.
6/30/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Attorneys working on a potential class action sought Colorado Health Network breach victims after a cybersecurity incident exposed sensitive personal and health data and notices began June 18, 2026.
6/19/2026 • Data Breaches & Exposure Events • General
Claim Depot
Fresenius Kabi USA LLC disclosed in 2026 a third-party unauthorized access incident on an Ivenix-associated network potentially exposing employee identifiers and medical data affecting 285 Massachusetts residents.
6/17/2026 • Data Breaches & Exposure Events • General
ClassAction.org
On June 10, 2026, Vermont received a report from Miami accounting firm Palacio, Palacio & Zimmerman stating Social Security numbers may have been compromised.
6/11/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Attorneys pursued a potential class action after Karl Auto Group disclosed an April 4, 2026 data breach affecting Iowa customers, employees, and affiliated individuals.
6/10/2026 • Data Breaches & Exposure Events • General
Morningstar
Minnesota Epilepsy Group notified patients in Roseville, Minnesota, after a March 2026 data breach exposed Social Security and health data, with legal investigation underway.
6/9/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Minnesota Epilepsy Group began breach notifications on June 5, 2026, after unauthorized access potentially exposed health and identity data between March 19 and April 10.
6/8/2026 • Data Breaches & Exposure Events • General
Claim Depot
Lincoln Retirement Services Company LLC disclosed June 2, 2026 unauthorized access exposing Social Security numbers and financial account information, with consumer notification guidance issued May 29, 2026 in the United States.
6/8/2026 • Data Breaches & Exposure Events • General
Claim Depot
LGBTQ Center OC reported a Dec 25-26, 2025 data breach to the California Attorney General on June 5, 2026, exposing PII, PHI, and biometric identifiers affecting Rhode Island residents.
6/5/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Attorneys investigating a Gastro Health phishing-driven data breach on February 25 and March 2, 2026 seek class action plaintiffs in the U.S.
5/29/2026 • Data Breaches & Exposure Events • General
ClassAction.org
On April 16, 2026, threat-actor claims linked to New York-based Empower Group led to attorney outreach for potential class action over alleged Social Security number exposure.
5/28/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys are investigating a reported DentaQuest data breach after ShinyHunters claimed responsibility on May 23, 2026, and threatened release for May 27.
5/26/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Western Orthopaedics reported a 2025 unauthorized access incident that potentially exposed identity, financial, and health data, with legal teams seeking class action filings.
5/5/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys investigated whether a class action can be filed after Integrated Pain Associates disclosed an unauthorized systems access around February 24, 2026 in Texas.
5/5/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Tri-Cities Gastroenterology notified 67,115 individuals in April 2026 after a third-party data breach exposed Social Security numbers and medical record numbers.
5/4/2026 • Data Breaches & Exposure Events • General
Claim Depot
Integrated Pain Associates notified patients on April 30, 2026 after investigation found possible unauthorized access to sensitive data around February 24, 2026 in Killeen, Texas.
5/2/2026 • Data Breaches & Exposure Events • General
Claim Depot
Community Health Systems Inc. disclosed a suspected data breach in late February 2026 affecting potential PII and protected health information across California clinic locations.
4/30/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys are assessing potential class action after Mid-South Pulmonary & Sleep Specialists detected suspicious activity in November 2025 and found exposure of Social Security and medical diagnosis data.
4/30/2026 • Data Breaches & Exposure Events • General
Benzinga
Murphy Law Firm said a Florida Physician Specialists data breach exposed Social Security, financial, and health information, with cybercriminal risks and class-action legal outreach.
4/28/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Florida Physician Specialists reported a late-November 2025 data breach, with April 2026 mail notifications and class-action investigation efforts underway in Jacksonville, Florida.
4/27/2026 • Data Breaches & Exposure Events • General
Claim Depot
Skin & Beauty Center Inc. and DermCare Management reported an unauthorized patient-data copy from Feb. 26, 2025, and mailed breach notices after a March 2, 2026 review in California.
4/27/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Florida Physician Specialists notified potentially affected individuals starting April 24, 2026 after unauthorized access in late 2025 may have compromised SSNs, payment data, and medical records.
4/27/2026 • Data Breaches & Exposure Events • General
Claim Depot
Aligned Orthopedic Partners identified unusual activity in its email system on December 8, 2025, reporting potential exposure of personal and health information after unauthorized access in late 2025.
4/18/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Secure Health Plans of Georgia confirmed a 2026 data breach in Georgia after alleged unauthorized access to medical and insurance files emerged by Feb 3-12, 2026.
4/17/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys investigated a potential class action after Bank3 reported unauthorized access from July 25 to August 7, 2025 that may exposed identity, financial, and health data.
4/16/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Pediatric Products disclosed suspicious network activity in February 2026 and reported unauthorized access exposing customers' medical and personal data across multiple U.S. states.
4/15/2026 • Data Breaches & Exposure Events • General
Claim Depot
Legend Senior Living LLC disclosed a March 2026 data breach discovered after unauthorized access between July 2025 and August 2025, with April 10, 2026 notices to Texas and other state attorneys general.
4/13/2026 • Data Breaches & Exposure Events • General
Top Class Actions
Maria Gomez filed a Nike class action in Oregon over an alleged January 21, 2026 ransomware breach and February 25, 2026 consumer notification delay.
4/6/2026 • Data Breaches & Exposure Events • General
ClassAction.org
ClassAction.org attorneys evaluate a potential class action after Emanuel Medical Center reported a May 2025 breach affecting 28,963 people.
3/25/2026 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
MMMBS disclosed a data breach on January 2, 2026 in Michigan exposing pii and phi for over 28,000 individuals.
1/16/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Beverly Hills Oncology Medical Group reports a data breach in February 2025 affecting patients in California.
11/3/2025 • Data Breaches & Exposure Events • General
Top Class Actions
Goshen Medical Center detected a data breach on February 15 2025 in the United States and notified affected individuals.
10/9/2025 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
CPAP Medical reported to the California Attorney General a breach discovered June 27, 2025, involving potential access to sensitive data between December 2024.
8/18/2025 • Data Breaches & Exposure Events • General
ClassAction.org
BMC Health System identified unauthorized access to Workday-linked user accounts on March 9, 2025, and attorneys sought breach-notified individuals for a potential class action.
4/28/2025 • Data Breaches & Exposure Events • General
ClassAction.org
Attorneys sought individuals affected by a January 2025 Sierra Vista Hospital & Clinics breach in Truth or Consequences, New Mexico, to assess a possible class action.
1/29/2025 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood investigates Western Orthopaedics, P.C. after a Texas patient data breach reported in 2026.
5/12/2026 • Data Breaches & Exposure Events • General
benzinga / Globe Newswire
ID Care discovered suspicious network activity on November 5, 2025, leading to unauthorized access to Social Security numbers and medical records and HHS notification.
3/18/2026 • Cybersecurity (Privacy-Relevant) • General
Emery Reddy
KerberRose Wealth Management investigated an April 29, 2026 employee email-account compromise and notified individuals in May 2026 after potential PII exposure.
6/4/2026 • Data Breaches & Exposure Events • General
The Lyon Firm / Joseph Lyon
The Oncology Institute disclosed a May 2026 Kroll notification about unauthorized access to patient-data systems tied to a third-party vendor breach.
5/27/2026 • Data Breaches & Exposure Events • General
Emery Reddy / Emery Reddy
Southern California University of Health Sciences disclosed unauthorized access on or about March 24, 2026, with personal information exposed in accessed files.
5/20/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating a Providence St. Joseph Orange healthcare data breach reported in 2026 after unauthorized network-server access exposed patient information to about 11,329 people.
5/8/2026 • Data Breaches & Exposure Events • General
Class Action U
On June 10, 2026, an attorney general filing reported a data incident by a Michigan dental office, potentially impacting about 7,692 individuals.
7/8/2026 • Data Breaches & Exposure Events • General
Class Action U
LifeSpring Home Care in Oklahoma reported a hacking or IT data breach affecting 7,509 people, listed in April 2026 on the HHS OCR portal.
5/15/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Stockton Cardiology disclosed a breach in California between December 2025 and February 2026, exposing patient identifiers and billing records and triggering class-action intake for affected individuals.
3/23/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Fort Wayne Medical Education Program data breach affects 29,485 individuals in Indiana; unauthorized access occurred December 12-17, 2024; notices mailed October 2, 2025.
10/6/2025 • Data Breaches & Exposure Events • General
National Today
Arizona healthcare data breach affects about 73,281 patients between May 18 and May 22, 2025.
2/16/2026 • Data Breaches & Exposure Events • General
The HIPAA Journal / Steve Alder
Two New Jersey medical groups report a May 2025 PHI breach affecting patients in New Jersey and Ohio.
9/19/2025 • Data Breaches & Exposure Events • General
GlobeNewswire
Goshen Medical Center reports data breach on March 4 2025 after unauthorized access to patient files in its network
9/19/2025 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe / Nelida Almeida
Unauthorized access occurred December 13-21, 2024 on CPAP Medical Supplies and Services, Inc.'s Florida network, affecting 90,133 patients and clients.
8/18/2025 • Data Breaches & Exposure Events • General
ClassAction.org
nephrology associates medical group reports data breach around may 20 2025 in southern california
3/5/2026 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
Emanuel Medical Center in Georgia detected unauthorized third party access to sensitive information from May 21 to May 24, 2025, with breach notice posted February 17, 2026.
2/18/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Consumers affected by Catalyst RCM data breach consider class action in November 2025.
2/9/2026 • Data Breaches & Exposure Events • General
ClassAction.org
MedRevenu announced in December 2024 a data breach potentially exposing patient data among clients in the healthcare sector.
2/5/2026 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
Columbia Medical Practice in Maryland reported a data breach on November 5, 2025 exposing personal and health information of approximately 3000 patients.
1/22/2026 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
LifeLong Medical Care in California reports a data breach involving sensitive PII and PHI, with notices issued on January 14 2026.
1/16/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Harmony Health Medical Clinic and Family Resource Center disclosed a data breach on December 12, 2025 affecting patients in northern California.
1/9/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Vida Y Salud-Health Systems in Texas disclosed a data breach on October 8, 2025, with unauthorized access on October 7-8.
1/7/2026 • Data Breaches & Exposure Events • General
Strauss Borrelli PLLC
Beverly Hills Cancer Center reported unauthorized network access between February 7 and February 11, 2025 in California, potentially exposing personal data and protected health information.
11/3/2025 • Data Breaches & Exposure Events • General
ClassAction.org
florida based doctors imaging group suffered a november 2024 data breach affecting patient information in florida.
9/25/2025 • Data Breaches & Exposure Events • General
ClassAction.org
attorneys with classaction.org seek affected patients for potential class action over gaylord specialty healthcare data breach disclosed in 2024 in wallingford connecticut
9/25/2025 • Data Breaches & Exposure Events • General
ClassAction.org
Medical Associates of Brevard in Melbourne, Florida disclosed a cyberattack around July 7, 2025 exposing patient data.
9/10/2025 • Data Breaches & Exposure Events • General