Recent Breaches & Incidents

Description: 

Ascension, one of the largest private healthcare systems in the United States, has disclosed a significant data breach affecting more than 430,000 patients. The breach originated from a cyberattack on a former business partner in December 2024, leading to unauthorized access to sensitive patient information. By January 21, 2025, it was determined that patient data had been inadvertently disclosed to a former business partner, who was subsequently compromised due to a vulnerability in third-party software. 

The exposed information includes: 

• Personal details: names, addresses, phone numbers, email addresses, dates of birth, race, gender, and Social Security numbers (SSNs). 
• Health information: inpatient visit details such as physician names, admission and discharge dates, diagnosis and billing codes, medical record numbers, and insurance company names. 

Ascension has initiated notifications to affected individuals and is offering support to mitigate potential risks. 

External Links:

Bleeping Computer