The HealthTech Signal

Health Data Breach Tracker/Monthly roundup

Biggest health data breaches: September 2025

In September 2025, 74 health data breaches affecting 500 or more people were reported to the HHS Office for Civil Rights, with a combined 5,438,667 individuals affected as reported. Hacking/IT Incident was the most common breach type this month, and healthcare provider accounted for the most reports. Counts are as reported to OCR and may overlap across breaches; a listing does not imply wrongdoing.

Breaches reported

74

Individuals affected

5,438,667

Hacking or IT incidents

64

  1. 1Veradigm LLCIL · Business Associate · Hacking/IT Incident · Sep 22, 20252,672,036
  2. 2Goshen Medical CenterNC · Healthcare Provider · Hacking/IT Incident · Sep 17, 2025456,385
  3. 3Philadelphia Corporation for Aging (PCA)PA · Business Associate · Hacking/IT Incident · Sep 23, 2025410,491
  4. 4Outcomes One, Inc.FL · Business Associate · Hacking/IT Incident · Sep 23, 2025257,481
  5. 5Medical Associates of Brevard, LLCFL · Healthcare Provider · Hacking/IT Incident · Sep 5, 2025246,711
  6. 6HarborOH · Healthcare Provider · Hacking/IT Incident · Sep 30, 2025216,000
  7. 7Doctors Imaging GroupFL · Healthcare Provider · Hacking/IT Incident · Sep 24, 2025171,862
  8. 8Sandhills Medical FoundationSC · Healthcare Provider · Hacking/IT Incident · Sep 14, 2025169,017
  9. 9Retina Group of FloridaFL · Healthcare Provider · Hacking/IT Incident · Sep 3, 2025152,691
  10. 10Survival Flight, Inc.AZ · Healthcare Provider · Hacking/IT Incident · Sep 15, 202597,217
  11. 11Blue Shield of CaliforniaCA · Health Plan · Unauthorized Access/Disclosure · Sep 29, 202593,921
  12. 12Sturgis HospitalMI · Healthcare Provider · Hacking/IT Incident · Sep 18, 202577,771
  13. 13Rockhill Women’s CareMO · Healthcare Provider · Hacking/IT Incident · Sep 25, 202570,129
  14. 14R.F.M.S. Inc.IL · Business Associate · Hacking/IT Incident · Sep 9, 202543,009
  15. 15Ennoble Care & Circa Health, LLCNJ · Healthcare Provider · Hacking/IT Incident · Sep 18, 202536,332
  16. 16Sun Valley Surgery CenterNV · Healthcare Provider · Hacking/IT Incident · Sep 18, 202527,001
  17. 17Superior Vision Services, Inc.NY · Business Associate · Hacking/IT Incident · Sep 29, 202525,341
  18. 18PGA Development, Inc.PA · Healthcare Provider · Hacking/IT Incident · Sep 10, 202523,899
  19. 19Teamsters Union 25 Health Services & Insurance PlanMA · Health Plan · Hacking/IT Incident · Sep 3, 202519,231
  20. 20Thomas Davies, DPMNY · Healthcare Provider · Hacking/IT Incident · Sep 29, 202514,581
August 2025October 2025All breachesHHS OCR Breach Portal