Live disclosure tracker · updated continuously

Healthcare Data Breaches

Hospitals, clinics, insurers, and medical-IT vendors are the highest-value targets in cybercrime. Below is every healthcare-sector breach LeakTrace has indexed — patient records, HIPAA disclosures, ransomware victims, and supply-chain compromises.

98B+
Records Exposed
801
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026

Healthcare Data Breaches (801 indexed)

medium · healthcare · May 25, 2026

266,000 Affected by Data Breach

Threat actors stole files containing names and protected health information from the healthcare organization’s systems. The post 266,000 Affected by Data Breach at Radiology Associates of Richmond appeared first on Secur

View incident → Original disclosure Indexed 3 days, 9 hours ago
high · healthcare · May 22, 2026

Hackers steal patient and billing

Daryna Antoniuk reports: German university hospitals are grappling with a large-scale patient data breach after unknown hackers targeted an external billing service provider used by medical centers across the country, ac

View incident → Original disclosure Indexed 6 days, 9 hours ago
medium · healthcare · May 13, 2026

OpenLoop Health

In January 2026, telehealth infrastructure firm OpenLoop Health suffered a security breach that exposed information of 716,000 people. OpenLoop Health confirmed a January 2026 cyberattack that exposed personal informatio

View incident → Original disclosure Indexed 2 weeks, 1 day ago
high · healthcare · May 11, 2026

Thousands of DICOM servers

From the way-too-slow-learning-curve dept. Steve Alder reports: Healthcare organizations are exposing a vast amount of patient data by failing to implement even basic security measures for DICOM servers, according to a r

View incident → Original disclosure Indexed 2 weeks, 3 days ago
high · healthcare · May 4, 2026

Medicare portal database

Dan Diamond and Clara Ence Morse report: The Trump administration inadvertently exposed the Social Security numbers of health care providers in a database powering a new Medicare portal, The Washington Post found. The Ce

View incident → Original disclosure Indexed 3 weeks, 3 days ago
medium · healthcare · Apr 29, 2026

Almost one year after discovery,

On April 28, Sandhills Medical Foundation in South Carolina notified the Maine Attorney General’s Office of a data breach that affected a total of 169,017 people, only 8 of whom are Maine residents. Their notificat

View incident → Original disclosure Indexed 4 weeks, 1 day ago
critical · healthcare · Apr 27, 2026

Medtronic

Medical device giant Medtronic disclosed last week that hackers breached its network and accessed data in "certain corporate IT systems." [...]

critical · healthcare · Apr 27, 2026

Medtronic

Medtronic confirmed a breach of its IT systems after ShinyHunters claimed the theft of over 9 million records. Medtronic confirmed a cyberattack on its corporate IT systems after the hacker group ShinyHunters claimed to

critical · healthcare · Apr 19, 2026

Qilin’s 2024 attack on NHS

Long-term follow-ups are important, and DataBreaches is glad that Alexander Martin points out that at least one NHS Trust is still impacted by the Qilin ransomware attack on Synnovis in 2024. From his reporting: At South

View incident → Original disclosure Indexed 1 month, 1 week ago
medium · healthcare · Apr 17, 2026

Flawed Cisco update threatens to

Cisco admins are scrambling to patch a critical flash memory overflow vulnerability in over 200 Cisco Systems IOS XE-based models of wireless access points (APs), caused by a recent flawed software update. If the issu

View incident → Original disclosure Indexed 1 month, 1 week ago