6,468 Personal Health Information Data Breaches Reported To Feds Between 2009 & 2024

A total of 6,468 data breaches exposing the personal health information of 500 or more health care consumers were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) from October 2009 to October 2024; these breaches affected 732 million records. The impact on consumers and the frequency of data breaches are likely underestimated, according to an analysis of data breaches reported to OCR. The researchers said the underestimate is due to underreporting, reluctance to disclose ransom payments, and the OCR’s exclusion of breaches affecting fewer than 500 records.

For each . . .