INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

August 2026 Healthcare Data Breach Report Reveals Massive Patient Information Theft

| 2026-10-30 17:52 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
In August 2026, a total of 52 data breaches affecting over 8.3 million individuals were reported to the US Department of Health and Human Services Office for Civil Rights (OCR), with two incidents standing out in terms of scale: one at AdaptHealth involving unauthorized access to more than 4.1 million individuals' protected health information, and another at Baylor Genetics where an unknown hacker accessed parts of its network containing over 2.8 million patients' data; all but one incident were hacking-related, while the remaining was a case of data theft by a former facilitator.
Technical Mitigations AI-generated
• Patch AdaptHealth's network servers to prevent future hacking incidents. • Implement multi-factor authentication for all users, including former facilitators and employees of Baylor Genetics. • Regularly monitor Salesforce environments for suspicious activity and implement data encryption.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters QilinQilin
Target & Sectors
JE MO GE
healthhealth
Incident Timeline
‎2025/10/30
Threat actors have targeted approximately 74,315,731 individuals with hacking incidents, resulting in a significant decrease compared to the same period last year.
general_metric 807 incidents
Last year was the worst-ever year for healthcare data breaches, with 807 incidents reported.
data_breach 556 data breaches
At this time last year, the total stood at 556 data breaches.
general_metric 0.9 %
While hacking incidents are only up by 0.9% year-over-year, 74,315,731 individuals have been affected, which is an 18.7% increase compared to this time last year.
general_metric 74,315,731 individuals
While hacking incidents are only up by 0.9% year-over-year, 74,315,731 individuals have been affected, which is an 18.7% increase compared to this time last year.
general_metric 18.7 %
While hacking incidents are only up by 0.9% year-over-year, 74,315,731 individuals have been affected, which is an 18.7% increase compared to this time last year.
general_metric 21.2 %
The year-to-date figures show a 21.2% decrease in unauthorized access/disclosure incidents compared to this time last year, with incidents dropping from 94 for the period from January 1 to August 31 to 74 this year.
general_metric 1,651,788 individuals
So far this year, 1,651,788 individuals have been affected by these incidents, 71.7% fewer individuals than this time last year.
general_metric 71.7 %
So far this year, 1,651,788 individuals have been affected by these incidents, 71.7% fewer individuals than this time last year.
general_metric 75 %
The year-to-date figures show a 75% year-over-year decrease in loss/theft incidents, with only two such incidents reported so far this year compared to 8 last year.
‎August 30, 2026
Notifications must also be issued when there is a data breach at a business associate of a HIPAA-covered entity; however, it is ultimately the responsibility of each affected HIPAA-covered entity to ensure that notifications are issued.
industry Health
General Document Context
data_breach 7 large data breaches
Texas was the worst affected with 7 large data breaches, with California and Florida taking joint second spot with 4 breaches each.
data_breach 41 data breaches
In August, healthcare providers reported 41 data breaches, business associates reported 8 breaches, and 3 breaches were reported by health plans.
organisation Location of Breached Protected Health Information
Location of Breached Protected Health Information In August, the most common location of breached protected health information was network servers, with email accounts the next most common location of breached data.
organisation HIPAA Regulated Entities
Data Breaches at HIPAA Regulated Entities The HIPAA Breach Notification Rule requires HIPAA-covered entities to report data breaches to OCR and notify the affected individuals.
organisation Geographical Distribution of
Geographical Distribution of Healthcare Data Breaches In August, large healthcare data breaches were reported by HIPAA-regulated entities in 29 states.
‎August 2026
AdaptHealth, a healthcare company providing home medical equipment and diabetes supplies, had its network accessed by the ShinyHunters data theft and extortion group in June.
target_region Jersey
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
target_region Georgia
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
organisation the HIPAA Rules
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 4,121,776 Colorado
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 5,378 Texas
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 2,838,764 Maine
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 5,000 Tennessee
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 333,448 Kansas
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 4,649 Kansas
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 295,031 Arizona
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 3,000 Minnesota
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 208,201 Georgia
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 2,750 Massachusetts
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 206,100 North Dakota
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 1,750 North Dakota
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 79,588 Arkansas
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 1,500 California
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 69,251 Vermont
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 1,408 Hawaii
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 54,172 West Virginia
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 1,215 Ohio
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 49,540 Ohio
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 808 Connecticut
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 41,000 Idaho
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 553 Indiana
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 19,851 Michigan
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 501 Illinois
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 13,474 New Jersey
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
general_metric 11,927 South Carolina
…Pennsylvania 4,121,776 Colorado 5,378 Texas 2,838,764 Maine 5,000 Tennessee 333,448 Kansas 4,649 New York 295,031 Arizona 3,000 Minnesota 208,201 Georgia 2,750 Massachusetts 206,100 North Dakota 1,750 Florida 79,588 Arkansas 1,500 California 69,251 Vermont 1,408 Hawaii 54,172 West Virginia 1,21…
tactic Data Breach
August 2026 Healthcare Data Breach Report.
August 2026 Healthcare Data Breach Report Posted By Steve Alder on Oct 30, 2026
organisation Healthcare Data Breach Report
August 2026 Healthcare Data Breach Report.
organisation the U.S. Department of Health and Human Services
An analysis of data breaches affecting 500 or more individuals reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in August 2026 shows a considerable improvement from the previous month.
organisation HHS) Office for Civil Rights
An analysis of data breaches affecting 500 or more individuals reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in August 2026 shows a considerable improvement from the previous month.
organisation OCR
An analysis of data breaches affecting 500 or more individuals reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in August 2026 shows a considerable improvement from the previous month.
general_metric 500 individuals
An analysis of data breaches affecting 500 or more individuals reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in August 2026 shows a considerable improvement from the previous month.
organisation The Biggest Healthcare Data Breaches
The Biggest Healthcare Data Breaches in August 2026
organisation the HHS Office for Civil Rights
About this Report The HIPAA Journal monthly data breach reports are based on data obtained from the HHS Office for Civil Rights and have been combined with breach report data from other sources.
threat_actor ShinyHunters
AdaptHealth was contacted by a member of the ShinyHunters data theft and extortion group in June and was informed that its network had been accessed and sensitive data exfiltrated.
data_breach 52 data breaches
Data breaches are down 34% month-over-month, with August’s total of 52 data breaches, the second-lowest monthly total in the past 12 months, well below the 12-month average of 66 data breaches per month.
Across the 52 data breaches, the protected health information of at least 8,377,327 individuals was exposed or impermissibly accessed or disclosed.
data_breach 66 data breaches
Data breaches are down 34% month-over-month, with August’s total of 52 data breaches, the second-lowest monthly total in the past 12 months, well below the 12-month average of 66 data breaches per month.
organisation Cybersecurity Consultation
Avail of a Free 30-Minute Cybersecurity Consultation with Blue Team Alpha Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
organisation Blue Team Alpha Review
Avail of a Free 30-Minute Cybersecurity Consultation with Blue Team Alpha Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
organisation AdaptHealth
The incident occurred at AdaptHealth, a healthcare company that provides home medical equipment, diabetes supplies, and sleep therapy products.
organisation Azul Vision, Inc.
Azul Vision, Inc. , a California optometry and ophthalmology service provider, agreed to settle an alleged violation of the HIPAA Privacy Rule’s right of access for $50,000.
organisation the HIPAA Privacy Rule’s
Azul Vision, Inc. , a California optometry and ophthalmology service provider, agreed to settle an alleged violation of the HIPAA Privacy Rule’s right of access for $50,000.
organisation State Attorneys General
State Attorneys General may also impose penalties for HIPAA violations, although no HIPAA violation cases were announced in August.
organisation HIPAA
State Attorneys General may also impose penalties for HIPAA violations, although no HIPAA violation cases were announced in August.
data_breach 593 large data breaches
So far this year, 593 large healthcare data breaches have been reported to OCR.
data_breach 17 data breaches
These were two of 17 data breaches affecting more than 10,000 individuals, and all but two of those incidents were hacking incidents.
‎October 23, 2026
The figures in the report may increase or decrease as HIPAA-regulated entities complete their breach investigations.
industry Health
General Document Context
‎Oct 30, 2026
A healthcare data breach occurred on October 30, 2026.
tactic Data Breach
August 2026 Healthcare Data Breach Report Posted By Steve Alder on Oct 30, 2026
industry Health
General Document Context
‎January 1 to August 31 to 74
Unauthorized access/disclosure incidents decreased by 21.2% from 94 to 74 between January 1 and August 31 of this year compared to the same period last year.
general_metric 21.2 %
The year-to-date figures show a 21.2% decrease in unauthorized access/disclosure incidents compared to this time last year, with incidents dropping from 94 for the period from January 1 to August 31 to 74 this year.
‎Between January 1 and August 30, 2026
457 hacking/IT incidents were reported between January 1 and August 30, 2026.
general_metric 457 hacking IT incidents
Between January 1 and August 30, 2026, 457 hacking/IT incidents have been reported, compared to 453 incidents for the corresponding period in 2025.
general_metric 453 incidents
Between January 1 and August 30, 2026, 457 hacking/IT incidents have been reported, compared to 453 incidents for the corresponding period in 2025.
‎2026/10/30
Threat actors used ransomware (Qilin) to target a provider reimbursement account.
organisation Breaches State Breaches
…nois 3 Maine 1 New York 3 Michigan 1 Pennsylvania 3 Missouri 1 Tennessee 3 North Dakota 1 Hawaii 2 New Hampshire 1 Massachusetts 2 New Jersey 1 Minnesota 2 Ohio 1 Arkansas 1 Oklahoma 1 Arizona 1 South Carolina 1 Colorado 1 Vermont 1 Connecticut 1 West Virginia 1 Geo…
organisation Kern Psychiatric Health
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Genesis Healthcare Management
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation NFI North, Inc.
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation NH
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Hawaii Dental Group
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Inc DBA
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Connecticut Department of Social Services
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Advantage Home Health Care IN
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Viking Enterprises, Inc.
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
infrastructure 19,851 Incident Server Hacking incident
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
organisation Ransomware
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
organisation NY Business Associate
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
organisation Business Associate
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
organisation Silver Summit Medical Corporation
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
infrastructure 11,927 former Unauthorized Network Server
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
organisation LLC
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Healthcare Provider
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Hacking/IT Incident Network
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation TX
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Premier Medical Group
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Boston Healthcare
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation the Homeless Program
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation MA Healthcare Provider
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Midwest Spine & Brain Institute
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Unauthorized Access/Disclosure Network
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Oakdale Ear Nose & Throat PA d/b/
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation MN Healthcare Provider
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Hacking/IT Incident Email
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
organisation Osceola Mental Health Inc.
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
Tactical Metrics
Metrics
infrastructure
19,851
Incident Server Hacking Incident
…volving a compromised email account Connecticut Department of Social Services CT Health Plan 41,000 Hacking/IT Incident Network Server Hacking incident involving a provider reimbursement account Advantage Home Health Care IN Healthcare Provider 19,851 Hacking/IT Incident Network Server Hacking incident involving data exfiltration Viking Enterprises, Inc.
Metrics
infrastructure
11,927
Former Unauthorized Network Server
d/b/a City Ambulance Service TX Healthcare Provider 14,324 Hacking/IT Incident Email Ransomware attack (Qilin) Public Partnerships LLC NY Business Associate 12,018 Unauthorized Access/Disclosure Network Server Insider data theft incident involving a former network facilitator Kim Knobbe MO Business Associate 11,927 Unauthorized Access/Disclosure Netw…
Metrics
data_breach
556
Data Breaches
At this time last year, the total stood at 556 data breaches.
Metrics
data_breach
52
Data Breaches
Data breaches are down 34% month-over-month, with August’s total of 52 data breaches, the second-lowest monthly total in the past 12 months, well below the 12-month average of 66 data breaches per month.
Across the 52 data breaches, the protected health information of at least 8,377,327 individuals was exposed or impermissibly accessed or disclosed.
Metrics
data_breach
66
Data Breaches
Data breaches are down 34% month-over-month, with August’s total of 52 data breaches, the second-lowest monthly total in the past 12 months, well below the 12-month average of 66 data breaches per month.
Metrics
infrastructure
282,075
Incident Server Incident Boston Healthcare
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
Metrics
infrastructure
108,487
Incident Server Incident Unauthorized Network Server
Regulated Entity State Covered Entity Type Individuals Affected Type of Breach Location of Breached Information Cause of Breach AdaptHealth, LLC PA Healthcare Provider 4,115,802 Hacking/IT Incident Network Server Hacking incident involving data theft Baylor Genetics TX Healthcare Provider 2,810,878 Hacking/IT Incident Network Server Hacking inciden…
Metrics
data_breach
593
Large Data Breaches
So far this year, 593 large healthcare data breaches have been reported to OCR.
Metrics
data_breach
17
Data Breaches
These were two of 17 data breaches affecting more than 10,000 individuals, and all but two of those incidents were hacking incidents.
Metrics
data_breach
41
Data Breaches
In August, healthcare providers reported 41 data breaches, business associates reported 8 breaches, and 3 breaches were reported by health plans.
Metrics
data_breach
7
Large Data Breaches
Texas was the worst affected with 7 large data breaches, with California and Florida taking joint second spot with 4 breaches each.
Intelligence Sources
HIPAA Journal 2026-10-30