American Heart of Poland
November 28, 2024
•[ hack, healthcare ]
American Heart of Poland receives a fine of 330,000, after suffering a hacking incident.
Alder Hey Children’s Hospital
November 28, 2024
•[ ransomware, data leak, healthcare ]
Alder Hey Childrens Hospital says it is investigating claims that its systems may have been breached and that patient records and other information was stolen, after the ransomware group INC Ransom adds Alder Hey to its leak site.
Wirral University Teaching Hospital
November 25, 2024
•[ hack, healthcare ]
Major UK healthcare provider Wirral University Teaching Hospital (WUTH), part of the NHS Foundation Trust, suffers a cyberattack that causes a systems outage leading to postponing appointments and scheduled procedures.
Pinnacle Holdings
November 25, 2024
•[ network disruption, protected health information, data leak ]
Pinnacle Holdings reported a November 25, 2024 network disruption that affected certain IT systems and exposed protected health information belonging to about 19,000 Corewell Health patients.
Northwest Asthma & Allergy Center
November 12, 2024
•[ hack, phishing, healthcare ]
An unauthorized party accessed an employees email account on November 12, 2024, compromising sensitive patient data at Northwest Asthma & Allergy Center. The breach was discovered and contained by November 13. At least ~1,000 patients were notified by January 2, 2025, and the incident was reported to HHS OCR. Investigation did not find evidence of exfiltration beyond what was accessible via the compromised mailbox.
Guardian Healthcare
November 8, 2024
•[ ransomware, malware, healthcare ]
Guardian Healthcare is the victim of a Stormous ransomware attack. The threat actors leaked 3 GB of files, many of which contain protected health information (PHI) of patients.
Georgia Urology
October 25, 2024
•[ email compromise, healthcare, data leak ]
Georgia Urology disclosed unauthorized access to two employee Microsoft 365 email accounts that exposed patient PII/PHI; notification letters began March 27 2025.
DoctorsToYou
October 16, 2024
•[ ransomware, malware, healthcare ]
The RansomHub ransomware group adds a listing for DoctorsToYou in New York to their leak site. After they realize the organization is non-profit, they claim to return the data and provide a decryptor.
Central Kentucky Radiology
October 16, 2024
•[ data leak, healthcare, PII ]
Unauthorized actor accessed CKRs network Oct 1618 2024 and copied files; ~167k people impacted; notifications issued mid-June 2025; data stolen from Lexington-based servers; no encryption or operational shutdown confirmed.
Axis Health System
October 10, 2024
•[ ransomware, malware, healthcare ]
Axis Health System is hit with a Rhysida ransomware attack.
Omni Family Health
October 10, 2024
•[ hack, healthcare ]
Omni Family Health notifies close to 470,000 individuals that their personal information was stolen in a cyberattack earlier this year.
Family Medical Center in Mount Airy
October 9, 2024
•[ ransomware, malware, healthcare ]
Family Medical Center in Mount Airy reports a ransomware attack.
Healthcare Services Group Inc. (HSGI)
October 7, 2024
•[ hack, leak, healthcare ]
Unauthorized actor accessed HSGI network between 2024-09-27 and 2024-10-03; intrusion discovered on 2024-10-07; data exfiltration confirmed June 2025; notifications issued Aug 2025. No encryption/disruption reported.
Center for Vein Restoration
October 6, 2024
•[ hack, healthcare ]
Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
Access Sports Medicine & Orthopaedics
October 5, 2024
•[ ransomware, malware, healthcare ]
Access Sports Medicine & Orthopaedics informs more than 88,000 individuals that their information was compromised as a result of a cyberattack. The Inc Ransom ransomware gang claims responsibility for the attack.
Mystic Valley Elder Services
October 5, 2024
•[ leak, healthcare ]
Mystic Valley Elder Services suffers a data breach impacting many individuals.
Pacific Pulmonary Medical Group
October 4, 2024
•[ ransomware, malware, healthcare ]
The Pacific Pulmonary Medical Group (PPMG) is hit with an Everest Team ransomware attack.
Bloom Hearing Specialists
October 3, 2024
•[ ransomware, malware, healthcare ]
Bloom Hearing Specialists warns thousands of customers about a ransomware attack stealing sensitive data.
University Medical Center Health System
September 27, 2024
•[ ransomware, malware, healthcare ]
University Medical Center Health System (UMC) in Lubbock is forced to divert ambulances after a ransomware attack shuts down many of its systems.
Kuwait’s Health Ministry
September 25, 2024
•[ hack, ddos, healthcare ]
The Kuwaits Health Ministry is recovering from a cyberattack that took down systems at several of the countrys hospitals, as well as the countrys Sahel healthcare app.
