Published 58 minutes ago • loading... • Updated 58 minutes ago
Health data breaches are surging. What to do when personal and medical records are exposed
Reported health data breaches reached a record high in 2025 as hackers exposed sensitive records for nearly 800 incidents, HHS data show.
On Monday, August 31, 2026, Baylor Genetics suffered a hacking incident that may have exposed sensitive medical information of 2.8 million people nationwide, according to the National Consumer Unit.
Reported data breaches reached a record high in 2025, with nearly 800 incidents submitted to the U.S. Department of Health and Human Services, as cybersecurity events involving patient data trend upward each year.
While the average health data breach affects 136,300 individuals, larger incidents prove far more damaging; a 2024 cyberattack on Change Healthcare compromised the personal and medical data of around 192.7 million people.
The American Hospital Association reports a Russian ransomware group orchestrated the attack; federal regulations require companies to report breaches affecting 500 or more individuals to HHS within 60 days of discovery.
Identity theft risks remain high following such exposures, prompting experts to recommend individuals freeze their credit files and replace vulnerable passwords with secure passkeys to protect sensitive information.