In 2021, 30 hospitals and health systems have reported to HHS that they were hit by data breaches.
Breaches of protected health information affecting more than 500 individuals are required to be listed on HHS' breach portal.
Here are the organizations that reported data breaches to HHS during 2021, ranked by the number of patients affected:
- Hendrick Health System (Abilene, Texas): 640,436
- Trinity Health (Livonia, Mich.): 586,869
- Roper St. Francis Healthcare (Charleston, S.C.): 189,761
- Apple Valley (Minn.) Clinic, part of Allina Health System: 157,939
- Saint Alphonsus Health System (Boise, Idaho): 134,906
- UPMC (Pittsburgh): 36,086 individuals affected
- Eastern Shore Rural Health System (Onancock, Va.): 23,282
- Baptist Health Arkansas (Little Rock): 16,765
- Monadnock Community Hospital (Petersborough, N.H.): 14,340
- UPMC St. Margaret (Pittsburgh): 11,135
- Bethesda Hospital (Boynton Beach, Fla.): 9,148
- Gifford Health Care (Randolph, Vt.): 6,777
- California Department of State Hospitals (Atascadero, Calif.): 4,933
- Lake Charles (La.) Memorial Health System: 3,802
- UT Southwestern Medical Center (Dallas): 3,640
- Huggins Hospital (Wolfeboro, N.H.): 3,616
- University Health (San Antonio): 2,704
- Jefferson Healthcare (Port Townsend, Wash.): 2,543 individuals affected
- Kaiser Foundation Hospitals, Northern California (Oakland): 2,121
- North Country Hospital (Newport, Vt.): 1,905
- Memorial Hermann Health System (Houston): 1,893
- Inova Health System (Falls Church, Va.): 1,680
- Orlando Health South Lake Hospital: 1,673
- Dallas County Hospital District Parkland Health & Hospital System: 1,594
- Jacobson Memorial Hospital Care Center (Elgin, N.D.): 1,545
- Montefiore Medical Center (New York City): 943
- Campbell County Hospital District (Gillette, Wyo.): 900
- Froedtert Health (Milwaukee): 760
- North Oaks Health System (Hammond, La.): 642
- Boston Children's Hospital: 506