Healthcare Data Breaches and Legal…Healthcare Data Breaches and Legal ResponseCoverage from Class Action U, Mass.gov, and others
00/00/0000
DailyWeekly
Healthcare providers, medical groups, law firms, and health-technology companies are disclosing unauthorized access to systems containing patient identifiers, medical records, insurance data, and financial information.
The 2026 reporting cycle emphasizes lengthy investigations, regulator notices, credit-monitoring remedies, and class-action scrutiny, while many notices leave the access method, affected population, or actual misuse unresolved.
Looking Back
548 Day Timeline
Articles published over time. Hover any bar for the period and its article count.
Jan '25
May '25
Jul '25
Nov '25
Jan '26
May '26
Jul '26
History
08/02/2026
The story broadened from recurring healthcare breach disclosures to a wider ecosystem that now includes law firms, health-tech vendors, and public hospital systems, with more explicit regulator and litigation scrutiny. The current version also sharpens the emphasis on lengthy investigation and notification delays, and on unresolved questions about root cause and misuse.
07/24/2026
The story is now framed less as a broad set of breach notices and more as a recurring, ongoing pattern of repeated unauthorized access incidents across healthcare organizations, with a stronger emphasis on delayed disclosure and fragmented, case-by-case legal response. The geographic scope also broadened slightly with additional states appearing in the current version.
ZenPatient notified individuals in 2026 of unauthorized access to its network affecting personal data from December 2025 to February 2026, reporting no known misuse.
7/18/2026 • Data Breaches & Exposure Events • General
Gastro Health notified individuals in February 2026 after phishing-related unauthorized access potentially exposed sensitive identity and health identifiers.
7/13/2026 • Data Breaches & Exposure Events • General
Billy Parker filed a class-action in Madison County Circuit Court alleging Huntsville Hospital Health System violated HIPAA after a Cerner-linked cyberattack exposed patient medical and personally identifiable information.
7/2/2026 • Data Breaches & Exposure Events • General
Tech Jacks Solutions Security Command Center / Tech Jacks Solutions70
FBI investigators are looking into a Karl Malone Auto Group data breach discovered April 4, 2026, involving exposed customer Social Security, license, financial, and passport data in Iowa.
6/10/2026 • Data Breaches & Exposure Events • General
A Manhattan federal class action filed in 2026 alleges NYC Health + Hospitals exposed millions of patients and staff, including biometric and medical data.
6/6/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP investigated a Community Health Systems patient data breach disclosed around April 29, 2026 after access around February 28, 2026 in California.
5/11/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates a Florida Physician Specialists network intrusion reported to the Maine Attorney General, alleging possible exposure of Social Security, financial, and medical data.
4/28/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP launched a class action investigation in response to a Brown Health Medical Group-MA data breach reported to the Vermont Attorney General on July 16, 2026.
7/21/2026 • Data Breaches & Exposure Events • General
Estée Lauder Companies disclosed a U.S. data breach exposing Social Security numbers and health records, reported to the Vermont Attorney General on July 10, 2026.
7/13/2026 • Data Breaches & Exposure Events • General
Greenbaum Rowe Smith and Davis disclosed a 2025 cyberattack in New Jersey that exposed protected health information for 12,801 patients, based on HHS Office for Civil Rights notification.
7/9/2026 • Data Breaches & Exposure Events • General
Aitkin County Health and Human Services in Minnesota disclosed an April 2026 email breach that exposed MnCHOICES protected health information for about 83,114 people.
7/9/2026 • Data Breaches & Exposure Events • General
Lake Region Healthcare Corp. reported a 2026 data breach exposing PII and PHI to Texas and Massachusetts residents, with regulator notifications starting July 1, 2026.
7/6/2026 • Data Breaches & Exposure Events • General
Acadia Healthcare reported a social-engineering incident accessing email and SharePoint from March 21-25, 2026, with patient notifications starting May 22, 2026.
5/29/2026 • Data Breaches & Exposure Events • General
Florida Physician Specialists disclosed an April 2026 investigation finding that late-2025 unauthorized access may have exposed identity, financial, and medical data for affected patients.
4/27/2026 • Data Breaches & Exposure Events • General
ASC Ortho Management Company disclosed an email-environment data breach in 2025 that may have exposed personal and protected health information, with notifications mailed starting April 17, 2026 across Washington, D.C., Maryland, and Virginia.
4/24/2026 • Data Breaches & Exposure Events • General
Rocky Mountain Associated Physicians reported on February 2, 2026 that an unauthorized systems access may have exposed patient and financial data for 50,640 people in Salt Lake City.
4/13/2026 • Data Breaches & Exposure Events • General
Saint Pete MRI in St. Petersburg, Florida, notified patients on July 22, 2026, after a February 23, 2025 breach may have exposed scanned patient identity and health data.
7/23/2026 • Data Breaches & Exposure Events • General
Community Health Center of Buffalo Inc. reported unauthorized network access in April 2026 that potentially exposed patient identifiers and health information, prompting notifications and credit monitoring.
7/21/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating a Lifespan Physicians Group-MA data breach reported to the Vermont Attorney General after unauthorized access exposed sensitive information for about 86 Vermont residents.
7/20/2026 • Data Breaches & Exposure Events • General
BDG Law Group reported to the Identity Theft Resource Center a September 2025 incident affecting about 629 people, with undisclosed exposed data categories.
7/17/2026 • Data Breaches & Exposure Events • General
Centers Lab NJ LLC disclosed unauthorized data access in August 2025 that may have exposed personal and protected health information, with notification and monitoring guidance for affected individuals.
7/14/2026 • Data Breaches & Exposure Events • General
Lake Region Healthcare notified patients in Fergus Falls, Minnesota, after unauthorized network access detected in May 2025 and investigated through June 2026.
7/13/2026 • Data Breaches & Exposure Events • General
In 2025 and 2026, Greenbaum Rowe Smith and Davis reported a cyberattack that led HHS Office for Civil Rights to post a protected health information breach affecting 12,801 people.
7/8/2026 • Data Breaches & Exposure Events • General
Kubota North America Corporation notified employees on June 30, 2026 about a March 16, 2026 breach affecting Social Security numbers, medical records, and payment data in Grapevine, Texas.
6/30/2026 • Data Breaches & Exposure Events • General
GrayRobinson reported unauthorized access from March 5-24, 2025 that exposed protected health information for 65,113 people, including Maine residents.
6/29/2026 • Data Breaches & Exposure Events • General
Erie Family Health Centers confirmed unauthorized access between December 10, 2025 and January 27, 2026, potentially exposing health and identity data for about 570,000 people in Chicago.
5/20/2026 • Data Breaches & Exposure Events • General
McShane & Brady, LLC announced a Tennessee data breach involving unauthorized email access that exposed PII and protected health information for 3,171 individuals in December 2025.
4/14/2026 • Data Breaches & Exposure Events • General
Dental Group of Amarillo and Heart South Cardiovascular Group settled 2023–2024 patient data breach lawsuits with monetary funds and credit monitoring for affected patients in Texas and Alabama.
8/5/2025 • Data Breaches & Exposure Events • General
Nephrology Associates notified affected individuals in the United States on July 30, 2026, after unauthorized access exposed medical and identity information from January through April.
7/30/2026 • Data Breaches & Exposure Events • General
Dermatology Partners disclosed a Catonsville, Maryland breach after unauthorized access between February 27 and March 10, 2026 may have exposed patient records.
7/23/2026 • Data Breaches & Exposure Events • General
ZenPatient reported a December 2025-February 2026 data breach to the California Attorney General on July 17, 2026 and began consumer notifications the same day.
7/18/2026 • Data Breaches & Exposure Events • General
Global Special Operations Forces Foundation disclosed an email account breach in Tampa, Florida, discovered October 14, 2025, exposing PII and medical information and notifying individuals starting July 15, 2026.
7/16/2026 • Data Breaches & Exposure Events • General
Orthopaedic Specialists of Massachusetts disclosed a January 2026 data breach in Massachusetts, reporting potential exposure of patient and employee medical records.
6/12/2026 • Data Breaches & Exposure Events • General
Champion Healthcare disclosed a May 8, 2026 consumer notification after a late-January 2026 incident involving unauthorized access to internal systems.
5/12/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigates McEwen and Associates, Inc. after a Texas Attorney General filing on July 24, 2026 exposed Social Security, financial, and medical data for about 4,098 residents.
7/24/2026 • Data Breaches & Exposure Events • General
Greenbaum Rowe Smith & Davis LLP notified about 12,800 New Jersey patients in response to a cybersecurity breach involving protected health information affecting multiple healthcare systems.
7/9/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating a Dr. Erick Perroud network-server data breach reported in July 2026 to the U.S. Department of Health and Human Services.
7/7/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood investigated the Kubota North America data breach after Kubota reported unauthorized access to HR files between March and April 2026.
7/6/2026 • Data Breaches & Exposure Events • General
Women’s Center for Radiology in Orlando reported a late-April unauthorized-access incident in legacy systems after detecting suspicious activity on April 29.
6/30/2026 • Data Breaches & Exposure Events • General
On June 29, 2026, dark web monitoring sites reported Rocky Mountain Care as a data breach victim, with suspected Social Security number and address exposure.
6/30/2026 • Data Breaches & Exposure Events • General
Florida investigators charged former Department of Juvenile Justice probation officer Crystal Lawson in 2026 for alleged retained-access leaks from a state criminal case database.
6/20/2026 • Cybersecurity Tech (Privacy-Relevant) • General
KerberRose Wealth Management disclosed a data breach beginning April 29, notifying about 27,000 potentially affected customers in Wisconsin and other states.
6/19/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood began investigating the Pivot Health data breach on June 19, 2026 after reporting of unauthorized access to sensitive health information in the USA.
6/19/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Blue Fish Pediatrics notified Texans on a 2025 breach affecting 41,485 people, with exposed records including Social Security numbers and medical information, after a delayed notification.
6/18/2026 • Data Breaches & Exposure Events • General
Xsolis, Inc. disclosed on June 5, 2026 that a phishing attack in January 2026 led to acquisition of sensitive personal information and protected health information.
6/9/2026 • Data Breaches & Exposure Events • General
DentaQuest confirmed a June 2, 2026 unauthorized access breach potentially affecting up to 2.6 million account records, prompting Edelson Lechtzin LLP to review class action claims.
6/5/2026 • Data Breaches & Exposure Events • General
In India, a wearable health app breach exposed contact details, transaction history, and fitness data after a March 27 intrusion, with notifications on June 2.
6/4/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating the Waveny LifeCare Network data breach reported to Maine on June 3, 2026 after unauthorized access was found on or about May 28, 2025.
6/3/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood began investigating a Verber Dental Group PC network-server data breach reported June 2, 2026, affecting about 8,598 people in Pennsylvania.
6/2/2026 • Data Breaches & Exposure Events • General
Brian Magadan filed a proposed nationwide class action in the Middle District of Louisiana against Grace Design Studios over alleged PII and PHI exposure after a Payouts King ransomware attack.
5/22/2026 • Data Breaches & Exposure Events • General
Tennessee officials investigated reports from consumers in Minnesota, New York, and Idaho of Medicare and private insurance charges for unreceived medical supplies traced to Memphis DME Supply.
5/21/2026 • Data Breaches & Exposure Events • General
Verber Dental Group notified patients and state regulators on May 7, 2026, after unauthorized access potentially exposed sensitive personal and protected health information in January.
5/18/2026 • Data Breaches & Exposure Events • General
Edelson Lechtzin LLP is investigating potential class action privacy claims after New York Life confirmed April 8, 2026 that an agent email account compromise exposed clients personal information.
5/17/2026 • Data Breaches & Exposure Events • General
Verber Dental Group reported a Jan 27 data breach in Pennsylvania with potential access to medical and identity information, followed by a May 11 class action investigation.
5/11/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating the Pathfinder LL&D Insurance Group data breach after Texas Attorney General reporting, affecting about 7,382 residents.
5/7/2026 • Data Breaches & Exposure Events • General
Schubert Jonckheer & Kolbe LLP described investigation of a DermCare Management patient data breach affecting 9,724 Texas residents after file exfiltration in February 2025.
5/1/2026 • Data Breaches & Exposure Events • General
DermCare Management notified of a healthcare data breach in 2025, exposing Social Security, financial, and medical records across Florida, Texas, Virginia, and California.
4/30/2026 • Data Breaches & Exposure Events • General
A class action settlement tied to a May 2025 Naper Grove Vision Care cyberattack provides breach victims up to $1,000 and medical identity theft monitoring.
7/8/2026 • Data Breaches & Exposure Events • General
Centers for Dialysis Care reported a March 2026 network breach and May 15, 2026 HHS notification affecting about 8,000 U.S. individuals through potential exposure of identity and health data.
7/6/2026 • Data Breaches & Exposure Events • General
Physicians' Primary Care of Southwest Florida, P.L. reached a preliminary settlement on May 18, 2026, in a class action over a September 2024 patient data breach, with final approval set for September 14, 2026.
6/30/2026 • Data Breaches & Exposure Events • General
Attorneys working on a potential class action sought Colorado Health Network breach victims after a cybersecurity incident exposed sensitive personal and health data and notices began June 18, 2026.
6/19/2026 • Data Breaches & Exposure Events • General
Fresenius Kabi USA LLC disclosed in 2026 a third-party unauthorized access incident on an Ivenix-associated network potentially exposing employee identifiers and medical data affecting 285 Massachusetts residents.
6/17/2026 • Data Breaches & Exposure Events • General
On June 10, 2026, Vermont received a report from Miami accounting firm Palacio, Palacio & Zimmerman stating Social Security numbers may have been compromised.
6/11/2026 • Data Breaches & Exposure Events • General
Attorneys pursued a potential class action after Karl Auto Group disclosed an April 4, 2026 data breach affecting Iowa customers, employees, and affiliated individuals.
6/10/2026 • Data Breaches & Exposure Events • General
Minnesota Epilepsy Group notified patients in Roseville, Minnesota, after a March 2026 data breach exposed Social Security and health data, with legal investigation underway.
6/9/2026 • Data Breaches & Exposure Events • General
Minnesota Epilepsy Group began breach notifications on June 5, 2026, after unauthorized access potentially exposed health and identity data between March 19 and April 10.
6/8/2026 • Data Breaches & Exposure Events • General
Lincoln Retirement Services Company LLC disclosed June 2, 2026 unauthorized access exposing Social Security numbers and financial account information, with consumer notification guidance issued May 29, 2026 in the United States.
6/8/2026 • Data Breaches & Exposure Events • General
LGBTQ Center OC reported a Dec 25-26, 2025 data breach to the California Attorney General on June 5, 2026, exposing PII, PHI, and biometric identifiers affecting Rhode Island residents.
6/5/2026 • Data Breaches & Exposure Events • General
On April 16, 2026, threat-actor claims linked to New York-based Empower Group led to attorney outreach for potential class action over alleged Social Security number exposure.
5/28/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys are investigating a reported DentaQuest data breach after ShinyHunters claimed responsibility on May 23, 2026, and threatened release for May 27.
5/26/2026 • Data Breaches & Exposure Events • General
Western Orthopaedics reported a 2025 unauthorized access incident that potentially exposed identity, financial, and health data, with legal teams seeking class action filings.
5/5/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys investigated whether a class action can be filed after Integrated Pain Associates disclosed an unauthorized systems access around February 24, 2026 in Texas.
5/5/2026 • Data Breaches & Exposure Events • General
Tri-Cities Gastroenterology notified 67,115 individuals in April 2026 after a third-party data breach exposed Social Security numbers and medical record numbers.
5/4/2026 • Data Breaches & Exposure Events • General
Integrated Pain Associates notified patients on April 30, 2026 after investigation found possible unauthorized access to sensitive data around February 24, 2026 in Killeen, Texas.
5/2/2026 • Data Breaches & Exposure Events • General
Community Health Systems Inc. disclosed a suspected data breach in late February 2026 affecting potential PII and protected health information across California clinic locations.
4/30/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys are assessing potential class action after Mid-South Pulmonary & Sleep Specialists detected suspicious activity in November 2025 and found exposure of Social Security and medical diagnosis data.
4/30/2026 • Data Breaches & Exposure Events • General
Murphy Law Firm said a Florida Physician Specialists data breach exposed Social Security, financial, and health information, with cybercriminal risks and class-action legal outreach.
4/28/2026 • Data Breaches & Exposure Events • General
Florida Physician Specialists reported a late-November 2025 data breach, with April 2026 mail notifications and class-action investigation efforts underway in Jacksonville, Florida.
4/27/2026 • Data Breaches & Exposure Events • General
Skin & Beauty Center Inc. and DermCare Management reported an unauthorized patient-data copy from Feb. 26, 2025, and mailed breach notices after a March 2, 2026 review in California.
4/27/2026 • Data Breaches & Exposure Events • General
Florida Physician Specialists notified potentially affected individuals starting April 24, 2026 after unauthorized access in late 2025 may have compromised SSNs, payment data, and medical records.
4/27/2026 • Data Breaches & Exposure Events • General
Aligned Orthopedic Partners identified unusual activity in its email system on December 8, 2025, reporting potential exposure of personal and health information after unauthorized access in late 2025.
4/18/2026 • Data Breaches & Exposure Events • General
Secure Health Plans of Georgia confirmed a 2026 data breach in Georgia after alleged unauthorized access to medical and insurance files emerged by Feb 3-12, 2026.
4/17/2026 • Data Breaches & Exposure Events • General
ClassAction.org attorneys investigated a potential class action after Bank3 reported unauthorized access from July 25 to August 7, 2025 that may exposed identity, financial, and health data.
4/16/2026 • Data Breaches & Exposure Events • General
Pediatric Products disclosed suspicious network activity in February 2026 and reported unauthorized access exposing customers' medical and personal data across multiple U.S. states.
4/15/2026 • Data Breaches & Exposure Events • General
Legend Senior Living LLC disclosed a March 2026 data breach discovered after unauthorized access between July 2025 and August 2025, with April 10, 2026 notices to Texas and other state attorneys general.
4/13/2026 • Data Breaches & Exposure Events • General
CPAP Medical reported to the California Attorney General a breach discovered June 27, 2025, involving potential access to sensitive data between December 2024.
8/18/2025 • Data Breaches & Exposure Events • General
BMC Health System identified unauthorized access to Workday-linked user accounts on March 9, 2025, and attorneys sought breach-notified individuals for a potential class action.
4/28/2025 • Data Breaches & Exposure Events • General
Attorneys sought individuals affected by a January 2025 Sierra Vista Hospital & Clinics breach in Truth or Consequences, New Mexico, to assess a possible class action.
1/29/2025 • Data Breaches & Exposure Events • General
ID Care discovered suspicious network activity on November 5, 2025, leading to unauthorized access to Social Security numbers and medical records and HHS notification.
3/18/2026 • Cybersecurity (Privacy-Relevant) • General
KerberRose Wealth Management investigated an April 29, 2026 employee email-account compromise and notified individuals in May 2026 after potential PII exposure.
6/4/2026 • Data Breaches & Exposure Events • General
Southern California University of Health Sciences disclosed unauthorized access on or about March 24, 2026, with personal information exposed in accessed files.
5/20/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood is investigating a Providence St. Joseph Orange healthcare data breach reported in 2026 after unauthorized network-server access exposed patient information to about 11,329 people.
5/8/2026 • Data Breaches & Exposure Events • General
Stockton Cardiology disclosed a breach in California between December 2025 and February 2026, exposing patient identifiers and billing records and triggering class-action intake for affected individuals.
3/23/2026 • Data Breaches & Exposure Events • General
Fort Wayne Medical Education Program data breach affects 29,485 individuals in Indiana; unauthorized access occurred December 12-17, 2024; notices mailed October 2, 2025.
10/6/2025 • Data Breaches & Exposure Events • General
Unauthorized access occurred December 13-21, 2024 on CPAP Medical Supplies and Services, Inc.'s Florida network, affecting 90,133 patients and clients.
8/18/2025 • Data Breaches & Exposure Events • General
Emanuel Medical Center in Georgia detected unauthorized third party access to sensitive information from May 21 to May 24, 2025, with breach notice posted February 17, 2026.
2/18/2026 • Data Breaches & Exposure Events • General
Columbia Medical Practice in Maryland reported a data breach on November 5, 2025 exposing personal and health information of approximately 3000 patients.
1/22/2026 • Data Breaches & Exposure Events • General
Beverly Hills Cancer Center reported unauthorized network access between February 7 and February 11, 2025 in California, potentially exposing personal data and protected health information.
11/3/2025 • Data Breaches & Exposure Events • General
attorneys with classaction.org seek affected patients for potential class action over gaylord specialty healthcare data breach disclosed in 2024 in wallingford connecticut
9/25/2025 • Data Breaches & Exposure Events • General