Undisclosed Arizona dermatology clinic
May 18, 2026
•[ healthcare data breach, medical data, HHS breach tracker ]
A small dermatology clinic in Arizona was reported in the HHS breach tracker as having suffered a healthcare data breach. The initial public figure of 3 million affected individuals was later corrected in the HHS tracker to 500 individuals; the clinic name, breach method, exposed data fields, and threat actor were not reported.
McKenzie Health System (McKenzie Memorial Hospital)
April 15, 2025
•[ data leak, healthcare data breach, repeat incident ]
Notification to Maine AG reported an incident discovered on or about April 15 affecting 54,016 people; prior 2022 incident had 51,040 impacted, indicating recurring exposure issues.
Saint Anthony Hospital
February 6, 2025
•[ unauthorized access, email account compromise, healthcare data breach ]
Saint Anthony Hospital reported that on February 6 2025 an unauthorized party accessed two employee email accounts, exposing personal and health information of approximately 146,108 patients; the breach was confirmed in February 2026 and notifications were sent in March 2026.
Methodist Homes of Alabama and Northwest Florida
October 2, 2024
•[ unauthorized access, healthcare data breach, network incident ]
Methodist Homes of Alabama and Northwest Florida reported an incident involving unauthorized access to its network between October 2 and October 14, 2024. The organization notified HHS on January 30, 2025 that 908 patients were affected, and later notified the Maine Attorney Generals Office in October 2025 that the incident affected 25,579 individuals in total.
