A number of main data breaches have been added to the healthcare data breach tracker maintained by the US Division of Well being and Human Providers (HHS) in current days.
All the breaches have been disclosed in current months, however the variety of affected people has solely been made public now on the HHS breach tracker.
The most important incident impacts the New York Metropolis Well being and Hospitals Company, which in March disclosed a data breach detected on February 2, 2026. An investigation discovered that menace actors had entry to its methods between November 2025 and February 2026 by way of a third-party vendor. Uncovered info contains private, medical health insurance, medical, biometric, and monetary info.
In line with the HHS tracker, the NYC Well being and Hospitals data breach impacts 1.8 million people.
Erie Household Well being Facilities in Chicago, Illinois, detected a hacker assault in January. A probe confirmed that hackers had entry to its community between December 10, 2025, and late January 2026.
Compromised info, the healthcare group mentioned in a knowledge incident discover, contains names, telephone numbers, e-mail addresses, SSNs, driver’s license numbers, passport numbers, on-line account credentials, monetary info, and medical info.
The HHS tracker exhibits that the Erie breach has affected 570,000 people.
A breach at Florida Doctor Specialists reportedly impacts 276,000. The group mentioned in an incident discover on its web site that hackers had entry to its community for 2 days in November 2025, having access to info akin to names, SSNs, driver’s license numbers, monetary info, and medical info.
Coastal Carolina Well being Care in North Carolina and Western Orthopaedics in Colorado every reported data breaches impacting roughly 110,000 folks. The previous mentioned it detected the intrusion multiple yr in the past.
A breach at Nacogdoches Memorial Hospital in Texas impacts 2.5 million people, in response to the HHS tracker. Nonetheless, it was beforehand reported that 250,000 people have been affected, suggesting a doable typo within the determine.
The opposite figures could also be up to date as effectively. Final week, a small dermatology clinic in Arizona was reported to have suffered a data breach affecting 3 million folks. The quantity was later up to date within the HHS tracker to 500.
None of those healthcare data breaches seems to have been claimed by identified cybercrime teams.
