We Reviewed 80,300 Healthcare Review Replies. The HIPAA Risk Was Hiding in Plain Sight
A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.
Why this matters: When a doctor's office replies to a one-star review and mentions why you came in, that is a HIPAA violation anyone with a browser can read. This study found it happening at scale, across thousands of practices. The risk is not hackers. It is staff defending the practice's reputation without thinking about what they are confirming in public. Patients did not consent to having their care discussed online. The practices doing this are not securing data — they are broadcasting it.
Who should care: Healthcare professionals · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.