Topic
Incidents in which patient records or other sensitive data are stolen from hospitals, clinics, or the software vendors that serve them.
iRhythm says unauthorized individuals downloaded PHI from third-party-hosted business applications between June 3 and June 8, 2026. Patient notices began October 2, 116 days after detection. The company did not disclose how many people are affected.
Reality
Texas's attorney general puts the breach of Oracle Health's legacy Cerner systems at nearly 20 million people, according to Bloomberg. Oracle has not confirmed the figure, far above the counts in earlier state filings and patient notices.
Perspective Coverage
3 publishersReality
Clover Health and AngMar Management Services have reported breaches affecting a combined 264,873 people to HHS. Clover's began with social engineering of staff accounts, while AngMar's took patient records it held for home health and hospice providers.
Reality
Fingerprint, who took data on over 18 million Poles from MyDr, stole Qbusoft's Medyc.pl patient database by SQL injection, Zaufana Trzecia Strona reports. Qbusoft is the second Polish medical-practice software vendor the actor has breached, and one Inowrocław clinic has had patient data taken in both leaks.
Reality
Qbusoft confirmed an attacker stole patient data from its Medyc clinic software through an SQL injection flaw that went unnoticed for about 17 days. It is the second Polish clinic-software supplier to lose ID numbers in weeks, after MyDr lost data on nearly 19 million people in August.
Perspective Coverage
3 publishersReality
DC's Department of Health Care Finance says two public summary reports exposed underlying records on 399,086 people. The data sat behind pages built to show enrollment counts and was reachable from 2023 until July 2026, when the agency found and pulled the reports.
Perspective Coverage
3 publishersReality
Veradigm told the SEC that an attacker took credentials from a vendor's environment and used them against a Veradigm API to download patient data including Social Security numbers, while The Gentlemen gang claims 3.5 million records.
Reality
Astrana Health's SEC filing describes impersonation of its own staff and a spoofed corporate number as the way onto its servers, and says private and confidential data was exfiltrated. No group has claimed it.
Reality
The medical equipment network says social engineering against a third-party contractor's session opened its cloud patient management and document systems in early June, and the HHS portal now lists 4,115,802 people.
Reality
The lab says operations continued and no misuse is confirmed. No actor has claimed the theft, so the company's own inventory is the only description of what left the building, and the employee half of it is the reusable kind.
Reality