PrivacySignal
Breach

Healthcare Data Breach Statistics – Updated for 2026

HIPAA Journal · · US Federal · Data Breaches

The HIPAA Journal has published an updated compilation of healthcare data breach statistics drawing on records from the Department of Health and Human Services dating back to October 2009. The report tracks the scale and trend of reported breaches across the U.S. healthcare sector over more than fifteen years.

Why this matters: Healthcare records are among the most sensitive data anyone holds about you. They cover diagnoses, medications, mental health, reproductive history, and financial details. Years of breach data in one place makes the pattern hard to ignore: this sector gets hit constantly, and patients rarely have a real choice about who holds their information. The numbers matter because they show whether things are getting better or worse, and whether the rules in place are actually working.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
HIPAA Journal · · US Federal

NFI North Data Breach Affects Almost 50,000 Individuals

NFI North, a New Hampshire-based organization, disclosed a data breach affecting nearly 50,000 individuals. The breach was reported alongside separate incidents at Nephrology Associates in Kansas and PAMCAH-UA Local 675 Health, suggesting a broader pattern of healthcare and benefits-sector breaches.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
C cio.com · · International

The EU AI Act just gave you a breach notification clock you didn’t know about

The EU AI Act contains breach notification requirements that many organizations may not have recognized as such, creating compliance deadlines that could catch unprepared companies off guard.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

#breach#ai-governance#ai Read original →
Breach
New York Times — Tech · · International

A.I. Models Built a Computer Worm That Could Rapidly Hack WeChat Accounts

AI researchers built a computer worm using AI models that was capable of rapidly compromising WeChat accounts at massive scale. Experts said the attack could have affected hundreds of millions of devices within hours if deployed.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

220 million traveler records exposed in Vietnam-linked APIS leak

A misconfigured Advance Passenger Information System database linked to Vietnam exposed roughly 220 million passenger and crew records, including passport numbers, dates of birth, nationalities, and flight details covering nearly a decade. Researchers reached the cloud-hosted system using default credentials, suggesting basic security controls were never changed.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
HIPAA Journal · · US Federal

June 2026 Healthcare Data Breach Report

The HIPAA Journal's June 2026 report recorded 66 large healthcare data breaches — each affecting 500 or more individuals — reported during the month. The figures reflect ongoing exposure of protected health information across the U.S. healthcare sector.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
BleepingComputer · · International

Mathspace discloses data breach affecting over 1 million people

Mathspace, an online mathematics learning platform, disclosed a data breach in which attackers accessed its internal Metabase reporting system and stole data belonging to more than one million students, staff members, and parents.

Who should care: Cybersecurity · Privacy officers · Administrators