6,468 Personal Health Information Data Breaches Exposing More Than 732 Million Records Occurred From 2009 & 2024

A total of 6,468 large data breaches reported from October 2009 to October 2024 exposed more than 732 million records containing consumers’ personal health information (PHI), which includes personally identifiable information and sensitive medical information. The impact on consumers and the frequency of data breaches are likely underestimated, according to an analysis of large data breaches reported to U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). A large data breach was defined as affecting 500 or more consumers.

The researchers said the known number of exposed PHI records likely underestimates the situation due . . .