HHS Tracker Adds Millions Affected Across U.S. Healthcare Data Breaches
Summary
The HHS tracker lists millions affected across several U.S. healthcare breaches. Counts include 1.8 million at NYC Health and Hospitals and 2.5 million at Nacogdoches Memorial Hospital, though the latter may be a typo.
Key points
- The HHS tracker lists 1.8 million people affected by a breach at NYC Health and Hospitals; the article says threat actors accessed its systems through a third-party vendor from November 2025 to February 2026.
- Erie Family Health Centers’ breach affected 570,000 people; exposed information included contact details, government ID numbers, credentials, financial information, and medical information.
- Florida Physician Specialists reportedly had 276,000 people affected after hackers accessed its network for two days in November 2025.
- Coastal Carolina Health Care and Western Orthopaedics each reported breaches affecting roughly 110,000 people.
- The HHS tracker lists 2.5 million affected at Nacogdoches Memorial Hospital, but an earlier report said 250,000, raising the possibility of a tracker error.
- An Arizona dermatology clinic’s reported affected count was later changed in the HHS tracker from 3 million to 500; the article says no known cybercrime groups claimed these breaches.
Article Details
- Victim Organization
- New York City Health and Hospitals Corporation; Erie Family Health Centers; Florida Physician Specialists; Coastal Carolina Health Care; Western Orthopaedics; Nacogdoches Memorial Hospital; and an unnamed Arizona dermatology clinic
- Incident Type
- Multiple healthcare data breaches involving unauthorized access to organizational systems or networks
- Data Types Exposed
- Personal information
- Health insurance information
- Medical information
- Biometric information
- Financial information
- Names
- Phone numbers
- Email addresses
- Social Security numbers
- Driver’s license numbers
- Passport numbers
- Online account credentials
- Affected Records
- NYC Health and Hospitals Corporation: 1.8 million; Erie Family Health Centers: 570,000; Florida Physician Specialists: 276,000; Coastal Carolina Health Care and Western Orthopaedics: roughly 110,000 each; Nacogdoches Memorial Hospital: 2.5 million according to the HHS tracker, although a prior report said 250,000, suggesting a possible tracker typo; unnamed Arizona dermatology clinic: initially reported as 3 million, later updated on the HHS tracker to 500.
- Operational Impact
- Unauthorized access to systems or networks was reported across multiple healthcare organizations. No service disruption or other operational impact is reported.
- Ransom Or Extortion
- None of the breaches appears to have been claimed by known cybercrime groups; no ransom demand is reported.
- Claim Status
- confirmed