CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Multiple confirmed US healthcare data breaches impact over 5.6 million individuals across five organizations

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Five US healthcare organizations disclosed data breaches affecting at least 5.6 million individuals, with incidents linked to third-party access and unauthorized network access spanning late 2025 to early 2026. The largest confirmed breach involves Nacogdoches Memorial Hospital in Texas, impacting 2.5 million individuals, followed by New York City Health and Hospitals Corporation with 1.8 million affected users. Other impacted organizations include Erie Family Health Centers in Illinois (570,000 individuals), Florida Physician Specialists (276,000), Coastal Carolina Health Care in North Carolina (110,000), and Western Orthopaedics in Colorado (110,000).

Timeline

  1. 18.05.2026 15:58 1 articles · 15h ago

    US healthcare sector hit by cascading data breaches affecting over 5.6 million individuals since late 2025

    Five healthcare organizations across New York, Texas, Illinois, Florida, North Carolina, and Colorado disclosed data breaches with combined impact of at least 5.6 million individuals. Intrusions occurred between November 2025 and January 2026, with threat actors maintaining access for weeks or months. Exposed data includes full names, SSNs, driver’s license and passport numbers, financial details, medical records, and biometric information. The breaches were reported to HHS in recent months but only made public in May 2026 via the HHS breach tracker.

    Show sources
    Open in new tab

Information Snippets

  • Nacogdoches Memorial Hospital (Texas) breach affects 2.5 million individuals, though previous reporting suggested 250,000, indicating a possible data entry error in HHS tracking.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources

  • New York City Health and Hospitals Corporation breach spans from November 2025 to February 2026 via a third-party vendor, exposing personal, health insurance, medical, biometric, and financial data for 1.8 million individuals.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources

  • Erie Family Health Centers (Chicago, Illinois) detected intrusion between December 10, 2025, and late January 2026, compromising names, phone numbers, email addresses, SSNs, driver’s license numbers, passport numbers, online account credentials, financial information, and medical data for 570,000 individuals.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources

  • Florida Physician Specialists reported 276,000 individuals affected after hackers accessed its network for two days in November 2025, exposing names, SSNs, driver’s license numbers, financial, and medical information.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources

  • Coastal Carolina Health Care (North Carolina) and Western Orthopaedics (Colorado) each reported breaches impacting approximately 110,000 individuals, with the former detecting the intrusion more than one year prior.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources

  • No cybercrime groups have claimed responsibility for any of the disclosed healthcare breaches as of May 18, 2026.

    First reported: 18.05.2026 15:58
    1 source, 1 article
    Show sources