Change Healthcare
190M health records — largest healthcare breach in US history
View incident → Indexed 1 year, 3 months ago
Healthcare Data Breaches (801 indexed)
SSM Health
760K patient records stolen via compromised vendor portal at Missouri-based Catholic health system
Frederick Health
934K patient records exposed in ransomware attack
Mass General Brigham (Boston)
520K patient records exposed via compromised third-party scheduling vendor
Change Healthcare (Ongoing Fallout)
Continued discovery of exposed records — total revised upward to 190M affected individuals
Change Healthcare (2025 Update)
Updated count: 190M Americans affected — largest healthcare breach in US history confirmed
Ascension Health (Former Partner)
437K patient records stolen from former business partner system
BrightSpring Health Services
3.4M home health and pharmacy patient records exposed in ransomware incident
Conduent Business Services
10.5M individuals affected — SafePay ransomware targeting government health contracts
Concentra Health (2025)
890K patient records exposed in vendor platform breach
CommonSpirit Health (Follow-Up)
870K additional patient records identified from 2024 ransomware attack residual access
McGill University Health Centre
670K patient records stolen in targeted attack
GSK (GlaxoSmithKline)
560K pharmaceutical records exposed in targeted attack
Sentara Healthcare (Virginia)
780K patient records exposed
Frederick Health Medical Group
934K patient records compromised in ransomware attack on Maryland healthcare group
Anna Jaques Hospital
316K patient records stolen in Christmas Day ransomware attack on Massachusetts hospital
Community Health Center Inc
1M patient records exposed in data breach
Community Health Center (Connecticut)
1M+ patient records including SSNs and health diagnoses accessed by threat actor
SickKids Toronto
Patient and research data temporarily encrypted in LockBit attack — decryptor provided after backlash
PowerSchool (student health records)
62M student and staff records including health data exposed
ESO Solutions
2.7M patient records from hospital and fire department EMS systems exposed in ransomware attack
Saint Francis Health System (Oklahoma)
275K patient records exposed — attackers exfiltrated surgical and billing records
University of Pittsburgh Medical
560K patient records stolen
Vancouver Coastal Health Authority
445K patient records exposed after contractor laptop theft — unencrypted drive