Healthcare Data Breaches Surge in 2026, Exposing Millions

www.ibm.com

Healthcare Data Breaches Surge in 2026, Exposing Millions

First seen 18 Jun 2026, 17:55 UTC • •64.5

Article Content

1 / 50

Browse articles

ThreatCluster •June 19, 2026 at 17:54 UTC

•Over 19 million individuals affected by healthcare data breaches in 2026.
•173 out of 175 breaches reported were due to hacking incidents.
•The average cost of a healthcare data breach is now 10.93 million USD.

In 2026, over 19 million individuals have been impacted by healthcare data breaches, primarily due to hacking incidents. The HHS Office for Civil Rights reported that 173 out of 175 breaches were attributed to hacking/IT incidents, with only one theft and one loss reported. The largest breach involved TriZetto Provider Solutions, which disclosed unauthorized access to sensitive data dating back to November 2024. QualDerm also reported a breach involving unauthorized activity on its systems, affecting patient and doctor information. The healthcare sector continues to face significant challenges, with the average cost of breaches reaching 10.93 million USD. The IBM report highlights the rising costs and complexities associated with data breaches in healthcare, emphasizing the need for improved cybersecurity measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 113d ago How this analysis works

Timeline

2025-10-02

TriZetto detects suspicious activity

TriZetto Provider Solutions became aware of unauthorized access to its systems, leading to a breach investigation.

2025-11-01

Unauthorized access ongoing since November 2024

TriZetto discovered that records related to insurance eligibility verification were accessed without authorization since November 2024.

2025-12-24

QualDerm detects unauthorized activity

QualDerm reported unauthorized access to its systems, resulting in the removal of sensitive patient information.

2026-06-16

Healthcare data breaches reported to OCR

The HHS Office for Civil Rights reported a total of 175 healthcare data breaches in 2026, with hacking being the primary cause.

2026-06-18

IBM reports on data breach costs

IBM's report indicates that the average cost of a healthcare data breach reached 10.93 million USD, the highest across industries.

More articles in this cluster (49)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (2)

QualDerm
TriZetto Provider Solutions

Relationships

Data Breach related to QualDerm
Data Breach related to TriZetto Provider Solutions

Following this threat?

Track QualDerm in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…