Piedmont Healthcare
1.3M patient records exposed in third-party vendor breach
Healthcare Data Breaches (727 indexed)
Children's Hospital of Philadelphia
185K pediatric patient records exposed via phishing — developmental assessment data included
Trinity Health (Michigan)
2.1M patient records exposed via compromised remote monitoring vendor — 97 hospitals affected
Aflac Incorporated
13M health insurance records compromised — largest healthcare breach of 2025
Smith & Nephew
210K surgical records compromised
Fortis Healthcare (India)
670K patient records compromised
NHS Dumfries and Galloway
Patient data published by INC Ransom group after Scottish health board refused to pay
Scripps Health (San Diego)
530K patient records re-exposed via legacy system — previously thought contained from 2021
Blue Cross Blue Shield of Massachusetts
490K member records exposed via compromised third-party billing vendor
ChristianaCare (Delaware)
215K patient records exposed via compromised employee credentials — pharmacy data included
Anthem Inc. (Elevance Health)
3.2M member records exposed via compromised claims processing vendor
Hartford HealthCare (Connecticut)
298K patient records — credentials stolen via brute-force attack on VPN gateway
Winnipeg Regional Health Authority
340K patient records compromised
Alabama Ophthalmology Associates
130K patient records including medical images and insurance details exposed
Vancouver Coastal Health
Ransomware disrupted health authority systems — patient care coordination affected
Mount Sinai Health System (NYC)
320K patient records exposed via third-party billing vendor ransomware attack
Valley Oaks Health (Indiana)
Behavioral health provider breach exposed 750K patient mental health records
Blue Shield of California
4.7M member records shared with Google Analytics via misconfigured web tracking
Hospital Clinic Barcelona
340K patient records compromised in RansomHouse attack
HSE Ireland (Health Service Executive)
890K patient records compromised in new attack
King Faisal Specialist Hospital (Saudi)
340K patient records stolen
AstraZeneca
1.1M patient trial records compromised in vendor breach
Northeast Orthopedics & Sports Medicine
Ransomware attack encrypted patient records and disrupted clinical operations
MultiCare Health System
870K patient records exposed in Washington state health system cyberattack