Roche
450K patient data records exposed via vendor
Healthcare Data Breaches (801 indexed)
Alder Hey Children's Hospital
INC Ransom gang stole patient records from Liverpool children's hospital
Wirral University Teaching Hospital
Cyberattack forced hospital to declare major incident — systems offline for days
Prisma Health (South Carolina)
230K patient records exposed via compromised vendor portal — including OB/GYN records
Cardiovascular Associates (Alabama)
441K patient cardiovascular records — detailed test results and implant data exposed
IWK Health Centre (Halifax)
290K pediatric records compromised
Advocate Aurora Health (Illinois)
560K patient records compromised
Universitair Medisch Centrum Utrecht
1.5M Dutch hospital patient records accessed via compromised Epic EHR credentials
University Hospitals of Morecambe Bay
Ransomware disrupted hospital IT — appointment systems and patient portals down
23andMe (Global)
6.9M user profiles scraped via credential stuffing — ancestry and genetic data exposed worldwide
Froedtert Health (Wisconsin)
188K patient records exposed via phishing attack on medical staff email accounts
Vitalite Health (New Brunswick)
190K patient records exposed
Heritage Valley Health System (Pennsylvania)
847K patient records compromised via unpatched Citrix NetScaler vulnerability
Royal Flying Doctor Service
120K patient records exposed in ransomware attack
Scottish Ambulance Service
120K patient transport records compromised
Johns Hopkins Medicine
780K patient records compromised in targeted attack
Medtronic
890K medical device records compromised in supply chain attack
Scattered Spider / Star Health India
31M customer records and 5.8M insurance claims leaked via Telegram bot
Alberta Health Services
1.8M patient records compromised — unauthorized access to provincial health database
Texas Tech University Health Sciences Center
1.4M patient records exposed in Interlock ransomware attack on academic medical center
Humber River Health (Toronto)
180K patient records exposed via vendor platform
Novartis
890K clinical trial records stolen
UCLA Health
1.1M patient records exposed in credential harvesting
Atrium Health Wake Forest Baptist
585K patient records exposed via compromised online scheduling portal