Data breaches or leaks involving health or medical data.
Claims that AU Medicare had been hacked by an OpenAI agent made headlines everywhere this week. But was the compromise really a sophisticated action by an OpenAI agent, or was it easy peasy because AU Medicare had an obvious vulnerability? The Record reports: Security researchers are questioning whether an OpenAI agent needed to hack an […]
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million to settle a proposed class action lawsuit arising from a data breach that affected approximately 2.7 million people last year. Once the preliminary settlement is approved, DaVita will pay out claims associated with the breach, according to […]
Between December 2 and December 18, 2025, Aesto LLC, a business associate under HIPAA, suffered a data breach that would impact dozens of its covered entity clients. The clients first found out in June, however. Bleeping Computer reports: Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 […]
On June 15, Baylor Genetics in Texas discovered a breach. An investigation subsequently determined that an unauthorized party had accessed data between June 11 and June 17. From their press release: For all impacted patients, the information potentially involved varied by individual and may have included names and one or more of the following for […]
More than a dozen dental practices have recently disclosed data breaches. Six of them are dental practices linked to Soniva Dental. Soniva has 14 locations in Texas and Massachusetts, and as of yesterday, six of its Texas locations had notified the Texas Attorney General’s Office of breaches: Soniva Dental’s website is currently offline with a […]
SecurityWeek reports: Healthcare diagnostics company Centers Laboratory (Centers Lab NJ LLC) has informed the US government that a data breach discovered nearly one year ago affects more than 540,000 individuals. According to a data breach notice posted on its website, the New Jersey-based provider of testing and laboratory services for healthcare organizations discovered an intrusion in its […]
Bleeping Computer reports: Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients’ personal and health information stored on third-party-hosted business applications. The company says its cardiac monitoring service has been used to analyze more than 2 billion hours of curated heartbeat data from over 12 million patients. In a filing with the […]
HIPAA Journal reports: A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a 2018 cybersecurity incident at American Medical Collection Agency. Laboratory Corporation of America Holdings (Labcorp), a provider of diagnostic testing services, had contracted with a company called Retrieval-Masters Creditor’s Bureau, Inc., which does business as American Medical […]
Fierce Healthcare reports that a legislator is seeking answers about the recently disclosed breach affecting 1.8 million patients: Senate Health, Education, Labor and Pensions (HELP) Committee Chairman Sen. Bill Cassidy, M.D., R-La., is seeking information from New York City officials about a late 2025 cybersecurity breach at NYC Health + Hospitals, the largest public U.S. health system. […]
TechCrunch reports: New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people. NYCHHC is the largest public health system in the United States and provides healthcare to over a million New Yorkers, the majority of whom […]
