HIPAA Journal: 52 large healthcare breaches in August 2026, led by AdaptHealth (ShinyHunters) and Baylor Genetics
HHS OCR data for August 2026 shows 52 healthcare data breaches affecting 500+ individuals, down 34% from July and below the 12-month average of 66. At least 8,377,327 individuals were affected, a 75% drop from July's 33 million. Year to date, 593 large breaches have been reported (6.7% above the same point in 2025), exposing PHI of 78.6 million people (up 14.8%). The largest incident was at AdaptHealth, where a member of ShinyHunters contacted the company in June and claimed data exfiltration; data theft was later confirmed and more than 4.1 million individuals were affected. Baylor Genetics reported the second largest, with more than 2.8 million patients affected after an unknown hacker accessed parts of its network.
Detalhes técnicos
- Hacking/IT incidents made up 78.8% of August breaches and 98% of affected individuals (8,215,959). The average size was 205,399 and the median 5,258.
- Year to date, 457 hacking/IT incidents were reported (453 in 2025, +0.9%), affecting 74,315,731 individuals (+18.7%).
- Of 17 breaches affecting more than 10,000 people, all but two were hacking incidents. One of the exceptions involved a former facilitator who stole data and tried to sell it.
- There were 12 unauthorized access/disclosure incidents affecting 161,368 people. No loss, theft or improper disposal incidents were reported.
- Network servers were the most common location of breached PHI, followed by email accounts.
- Seven breaches were reported with placeholder figures of 500 or 501 individuals, so true impact is likely higher.
- Providers reported 41 breaches, business associates 8 and health plans 3. Texas had the most breaches (7), and Pennsylvania had the most affected individuals.
- OCR announced one enforcement action: Azul Vision, Inc. settled a right-of-access violation for $50,000.
Remediação
The article does not give specific remediation guidance.
Linha do tempo
-
HIPAA Journal: 52 large healthcare breaches in August 2026, led by AdaptHealth (ShinyHunters) and Baylor Genetics
ler a análise desta fonte ocultar
HHS OCR data for August 2026 shows 52 healthcare data breaches affecting 500+ individuals, down 34% from July and below the 12-month average of 66. At least 8,377,327 individuals were affected, a 75% drop from July's 33 million. Year to date, 593 large breaches have been reported (6.7% above the same point in 2025), exposing PHI of 78.6 million people (up 14.8%). The largest incident was at AdaptHealth, where a member of ShinyHunters contacted the company in June and claimed data exfiltration; data theft was later confirmed and more than 4.1 million individuals were affected. Baylor Genetics reported the second largest, with more than 2.8 million patients affected after an unknown hacker accessed parts of its network.
Technical Details
- Hacking/IT incidents made up 78.8% of August breaches and 98% of affected individuals (8,215,959). The average size was 205,399 and the median 5,258.
- Year to date, 457 hacking/IT incidents were reported (453 in 2025, +0.9%), affecting 74,315,731 individuals (+18.7%).
- Of 17 breaches affecting more than 10,000 people, all but two were hacking incidents. One of the exceptions involved a former facilitator who stole data and tried to sell it.
- There were 12 unauthorized access/disclosure incidents affecting 161,368 people. No loss, theft or improper disposal incidents were reported.
- Network servers were the most common location of breached PHI, followed by email accounts.
- Seven breaches were reported with placeholder figures of 500 or 501 individuals, so true impact is likely higher.
- Providers reported 41 breaches, business associates 8 and health plans 3. Texas had the most breaches (7), and Pennsylvania had the most affected individuals.
- OCR announced one enforcement action: Azul Vision, Inc. settled a right-of-access violation for $50,000.
Remediation
The article does not give specific remediation guidance.