PrivacySignal
Breach

H1 2026 Healthcare Data Breach Report

HIPAA Journal · · US Federal · Data Breaches

A new report covering the first half of 2026 shows healthcare data breaches dropped roughly 6% compared to the same period in 2025, according to the HIPAA Journal's mid-year analysis.

Why this matters: A dip in breach numbers is real progress, but healthcare data is still one of the most sensitive categories out there. Medical records do not expire. A breach today can affect someone's insurance, employment, or personal life years from now. The direction is good. The underlying risk has not changed.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
HIPAA Journal · · US Federal

The Mental Health Association Data Breach Settlement Agreed

The Mental Health Association, a Massachusetts-based agency providing substance use recovery and developmental support services, has agreed to a settlement following a data breach. The organization is based in Chicopee and falls under HIPAA obligations as a human services provider.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
HIPAA Journal · · US Federal

DC Medicaid Agency Notifies 400,000 Beneficiaries About Data Exposure

Washington DC's Medicaid agency has notified nearly 400,000 beneficiaries that their personal and protected health information was exposed online. The agency has not yet disclosed how the exposure occurred or how long the data was accessible.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach Critical
BleepingComputer · · International

Bitget hacked via zero-day in third-party security products

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
CyberScoop · · US Federal

WaterISAC reckons with range of threats after summer of cyberattacks

Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and analysis center is watching. The post WaterISAC reckons with range of threats after summer of cyberattacks appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
DataBreaches.net · · International

Data breach incident targets prisoner medical records at 2 Mass. jails

A cybersecurity incident has compromised the electronic health record system used at two Suffolk County jails in Massachusetts. The system provider, Computer Systems Integrated Inc., confirmed it is investigating the breach, which exposed prisoner medical and health data stored on its EHRs-C platform.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
BleepingComputer · · International

Former US Air Force members sent to prison over BEC attacks

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →