<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Data breaches in healthcare · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/sector/health/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/sector/health/"/>
  <id>https://privacyunpacked.com/breaches/sector/health/feed.xml</id>
  <updated>2026-11-13T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>Centre hospitalier d&#39;Armentières data breach (France)</title>
    <link href="https://privacyunpacked.com/breaches/company/centre-hospitalier-d-armentieres/"/>
    <id>https://privacyunpacked.com/breaches/company/centre-hospitalier-d-armentieres/#centrehospitalierdarmentieres-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>frenchbreaches reported a data breach at Centre hospitalier d&#39;Armentières (France) on 13 November 2026. Exposed: Health and medical information.</summary>
  </entry>
  <entry>
    <title>MPOWERHealth Holdings data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/mpowerhealth-holdings/"/>
    <id>https://privacyunpacked.com/breaches/company/mpowerhealth-holdings/#mpowerhealth-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>MPOWERHealth Holdings (United States) notified the California Attorney General of a data breach on 13 November 2026. The breach began on 23 June 2025, 508 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Acadia Healthcare Company data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/acadia-healthcare/"/>
    <id>https://privacyunpacked.com/breaches/company/acadia-healthcare/#acadiahealthcare-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>Acadia Healthcare Company (United States) notified the California Attorney General of a data breach on 13 November 2026. The breach began on 25 March 2026, 233 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Access Dental Management data breach (United States): 341,039 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/access-dental-management/"/>
    <id>https://privacyunpacked.com/breaches/company/access-dental-management/#accessdentalmanagement-2026-11-12</id>
    <updated>2026-11-12T00:00:00Z</updated>
    <summary>Access Dental Management (TX, United States) notified the Vermont Attorney General and the Texas Attorney General of a data breach on 12 November 2026. It told the states about 341,039 Texas residents; the total can be higher. Exposed: Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses.</summary>
  </entry>
  <entry>
    <title>Bethany Nursing Home and Health Related Facility (Bethany Village) data breach (United States): 1 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/bethany-nursing-home-and-health-related-facility/"/>
    <id>https://privacyunpacked.com/breaches/company/bethany-nursing-home-and-health-related-facility/#bethanynursinghomeandhealthrelatedfacility-2026-11-11</id>
    <updated>2026-11-11T00:00:00Z</updated>
    <summary>Bethany Nursing Home and Health Related Facility (Bethany Village) (United States) notified the Vermont Attorney General of a data breach on 11 November 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Social Security numbers, Health and medical information and Financial account and card details.</summary>
  </entry>
  <entry>
    <title>Fullerton Health data breach (Singapore)</title>
    <link href="https://privacyunpacked.com/breaches/company/fullerton-health/"/>
    <id>https://privacyunpacked.com/breaches/company/fullerton-health/#fullertonhealth-2026-11-10</id>
    <updated>2026-11-10T00:00:00Z</updated>
    <summary>Yahoo News Singapore reported a data breach at Fullerton Health (Singapore) on 10 November 2026. Exposed: Personal data.</summary>
  </entry>
  <entry>
    <title>Rohto Pharmaceutical data breach (Japan): 2,797,545 people</title>
    <link href="https://privacyunpacked.com/breaches/company/rohto-pharmaceutical/"/>
    <id>https://privacyunpacked.com/breaches/company/rohto-pharmaceutical/#rohtopharmaceutical-2026-11-09</id>
    <updated>2026-11-09T00:00:00Z</updated>
    <summary>Security NEXT reported a data breach at Rohto Pharmaceutical (Japan) on 9 November 2026. It affected 2,797,545 people.</summary>
  </entry>
  <entry>
    <title>Telecare Health data breach (United States): 19,922 Washington residents</title>
    <link href="https://privacyunpacked.com/breaches/company/telecare-health/"/>
    <id>https://privacyunpacked.com/breaches/company/telecare-health/#telecarehealth-2026-11-09</id>
    <updated>2026-11-09T00:00:00Z</updated>
    <summary>Telecare Health (United States) notified the California Attorney General and the Washington Attorney General of a data breach on 9 November 2026. It told the states about 19,922 Washington residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Names. The breach began on 25 January 2026, 288 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Enara Health data breach (United States): 794 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/enara-health/"/>
    <id>https://privacyunpacked.com/breaches/company/enara-health/#enarahealth-2026-11-06</id>
    <updated>2026-11-06T00:00:00Z</updated>
    <summary>Enara Health (CA, United States) notified the California Attorney General and the Texas Attorney General of a data breach on 6 November 2026. It told the states about 794 Texas residents; the total can be higher. Exposed: Health and medical information, Dates of birth and Names. The breach began on 10 September 2026, 57 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Hollister Family Dental &amp; Implant Center data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/hollister-family-dental-and-implant-center/"/>
    <id>https://privacyunpacked.com/breaches/company/hollister-family-dental-and-implant-center/#hollisterfamilydentalimplantcenter-2026-11-06</id>
    <updated>2026-11-06T00:00:00Z</updated>
    <summary>Hollister Family Dental &amp; Implant Center (United States) notified the California Attorney General of a data breach on 6 November 2026. The breach began on 12 February 2026, 267 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Premise Health Holding data breach (United States): 261,654 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/premise-health-holding/"/>
    <id>https://privacyunpacked.com/breaches/company/premise-health-holding/#premisehealthholding-2026-11-06</id>
    <updated>2026-11-06T00:00:00Z</updated>
    <summary>Premise Health Holding (TN, United States) notified the Vermont Attorney General, the California Attorney General, the Texas Attorney General and the Washington Attorney General of a data breach on 6 November 2026. It told the states about 261,654 Texas residents; the total can be higher. Exposed: Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses. The breach began on 26 March 2026, 225 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Family Implant and Dentistry data breach (United States): 3 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/family-implant-and-dentistry/"/>
    <id>https://privacyunpacked.com/breaches/company/family-implant-and-dentistry/#familyimplantanddentistry-2026-11-06</id>
    <updated>2026-11-06T00:00:00Z</updated>
    <summary>Family Implant and Dentistry (United States) notified the Vermont Attorney General of a data breach on 6 November 2026. It told that state about 3 Vermont residents; the total can be higher. Exposed: Social Security numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>Royal Cornwall Hospitals Trust data breach (United Kingdom): 8,000 people</title>
    <link href="https://privacyunpacked.com/breaches/company/royal-cornwall-hospitals-trust/"/>
    <id>https://privacyunpacked.com/breaches/company/royal-cornwall-hospitals-trust/#royalcornwallhospitalstrust-2026-11-05</id>
    <updated>2026-11-05T00:00:00Z</updated>
    <summary>BBC, HR Magazine and Falmouth Packet reported a data breach at Royal Cornwall Hospitals Trust (United Kingdom) on 5 November 2026. It affected 8,000 people. Exposed: Health and medical information.</summary>
  </entry>
  <entry>
    <title>Hoag Memorial Hospital Presbyterian data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/hoag-memorial-hospital-presbyterian/"/>
    <id>https://privacyunpacked.com/breaches/company/hoag-memorial-hospital-presbyterian/#hoagmemorialhospitalpresbyterian-2026-11-04</id>
    <updated>2026-11-04T00:00:00Z</updated>
    <summary>Hoag Memorial Hospital Presbyterian (CA, United States) notified the California Attorney General of a data breach on 4 November 2026. The breach began on 8 October 2026, 27 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Sites Medical data breach (United States): 372 people</title>
    <link href="https://privacyunpacked.com/breaches/company/sites-medical/"/>
    <id>https://privacyunpacked.com/breaches/company/sites-medical/#sitesmedical-2026-11-02</id>
    <updated>2026-11-02T00:00:00Z</updated>
    <summary>Sites Medical (United States) notified the Indiana Attorney General of a data breach on 2 November 2026. It affected 372 people. The breach began on 3 August 2026, 91 days before it was reported.</summary>
  </entry>
  <entry>
    <title>University of Mississippi Medical Center (“UMMC”) data breach (United States): 2,778 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/university-of-mississippi-medical-center/"/>
    <id>https://privacyunpacked.com/breaches/company/university-of-mississippi-medical-center/#universityofmississippimedicalcenter-2026-11-02</id>
    <updated>2026-11-02T00:00:00Z</updated>
    <summary>University of Mississippi Medical Center (“UMMC”) (MS, United States) notified the California Attorney General, the Texas Attorney General and the Vermont Attorney General of a data breach on 2 November 2026. It told the states about 2,778 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Financial account and card details and more. The breach began on 11 February 2026, 264 days before it was reported.</summary>
  </entry>
  <entry>
    <title>El Camino Health data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/el-camino-health/"/>
    <id>https://privacyunpacked.com/breaches/company/el-camino-health/#elcaminohealth-2026-10-30</id>
    <updated>2026-10-30T00:00:00Z</updated>
    <summary>El Camino Health (CA, United States) notified the California Attorney General of a data breach on 30 October 2026. The breach began on 26 August 2026, 65 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Trimera Health data breach (United States): 1,343 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/trimera-health/"/>
    <id>https://privacyunpacked.com/breaches/company/trimera-health/#trimerahealth-2026-10-30</id>
    <updated>2026-10-30T00:00:00Z</updated>
    <summary>Trimera Health (TX, United States) notified the Texas Attorney General of a data breach on 30 October 2026. It told that state about 1,343 Texas residents; the total can be higher. Exposed: Health and medical information, Names and Addresses. The breach began on 24 September 2026, 36 days before it was reported.</summary>
  </entry>
  <entry>
    <title>HCA Healthcare data breach (United States): 15,096 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/hca-healthcare/"/>
    <id>https://privacyunpacked.com/breaches/company/hca-healthcare/#hcahealthcare-2026-10-30</id>
    <updated>2026-10-29T00:00:00Z</updated>
    <summary>HCA Healthcare (TN, United States) notified the Texas Attorney General and the California Attorney General of a data breach on 29 October 2026. It told the states about 15,096 Texas residents; the total can be higher. Exposed: Social Security numbers, Health insurance details and Health and medical information. The breach began on 12 August 2026, 78 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Marathon Health data breach (United States): 5,687,724 people</title>
    <link href="https://privacyunpacked.com/breaches/company/marathon-health/"/>
    <id>https://privacyunpacked.com/breaches/company/marathon-health/#marathonhealth-2026-10-30</id>
    <updated>2026-10-29T00:00:00Z</updated>
    <summary>Marathon Health (IN, United States) notified the Vermont Attorney General, the Texas Attorney General, the California Attorney General and the Indiana Attorney General of a data breach on 29 October 2026. It affected 5,687,724 people. Exposed: Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses. The breach began on 24 August 2026, 66 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The Research Foundation for Mental Health data breach (United States): 4 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/research-foundation-for-mental-health/"/>
    <id>https://privacyunpacked.com/breaches/company/research-foundation-for-mental-health/#researchfoundationformentalhealth-2026-10-29</id>
    <updated>2026-10-29T00:00:00Z</updated>
    <summary>The Research Foundation for Mental Health (United States) notified the Vermont Attorney General of a data breach on 29 October 2026. It told that state about 4 Vermont residents; the total can be higher. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>American Phytopathological Society data breach (United States): 1,325 people</title>
    <link href="https://privacyunpacked.com/breaches/company/american-phytopathological-society/"/>
    <id>https://privacyunpacked.com/breaches/company/american-phytopathological-society/#americanphytopathologicalsociety-2026-10-28</id>
    <updated>2026-10-28T00:00:00Z</updated>
    <summary>American Phytopathological Society (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 28 October 2026. It affected 1,325 people. Exposed: Financial account and card details.</summary>
  </entry>
  <entry>
    <title>Gator Town Pediatrics, Family and Urgent Care data breach (United States): 639 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/gator-town-pediatrics-family-and-urgent-care/"/>
    <id>https://privacyunpacked.com/breaches/company/gator-town-pediatrics-family-and-urgent-care/#gatortownpediatricsfamilyandurgentcare-2026-10-28</id>
    <updated>2026-10-28T00:00:00Z</updated>
    <summary>Gator Town Pediatrics, Family and Urgent Care (TX, United States) notified the Texas Attorney General of a data breach on 28 October 2026. It told the states about 639 Texas residents; the total can be higher. Exposed: Dates of birth and Names. The breach began on 10 July 2026, 110 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Southeast Colorado Hospital District data breach (United States): 375 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/southeast-colorado-hospital-district/"/>
    <id>https://privacyunpacked.com/breaches/company/southeast-colorado-hospital-district/#southeastcoloradohospitaldistrict-2026-10-28</id>
    <updated>2026-10-28T00:00:00Z</updated>
    <summary>Southeast Colorado Hospital District (CO, United States) notified the Texas Attorney General of a data breach on 28 October 2026. It told that state about 375 Texas residents; the total can be higher. Exposed: Social Security numbers, Health and medical information, Dates of birth and Names. The breach began on 2 December 2025, 330 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Quantum Health data breach (United States): 273,111 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/quantum-health/"/>
    <id>https://privacyunpacked.com/breaches/company/quantum-health/#quantumhealth-2026-10-28</id>
    <updated>2026-10-27T00:00:00Z</updated>
    <summary>Quantum Health (OH, United States) notified the Vermont Attorney General, the Texas Attorney General, the California Attorney General and the Washington Attorney General of a data breach on 27 October 2026. It told the states about 273,111 Texas residents; the total can be higher. Exposed: Social Security numbers, Health insurance details, Health and medical information and Names. The breach began on 29 May 2026, 151 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Johns Hopkins Bayview Medical Center data breach (United States): 3,100 patients</title>
    <link href="https://privacyunpacked.com/breaches/company/johns-hopkins-bayview-medical-center/"/>
    <id>https://privacyunpacked.com/breaches/company/johns-hopkins-bayview-medical-center/#johnshopkinsbayviewmedicalcenter-2026-10-27</id>
    <updated>2026-10-27T00:00:00Z</updated>
    <summary>Infobae reported a data breach at Johns Hopkins Bayview Medical Center (MD, United States) on 27 October 2026. It affected 3,100 patients. Exposed: Health and medical information, Financial account and card details, Admission dates, Treatment dates, Treatment areas and Medications.</summary>
  </entry>
  <entry>
    <title>Comprehensive Orthopaedics &amp; Musculoskeletel Care data breach (United States): 21,897 people</title>
    <link href="https://privacyunpacked.com/breaches/company/comprehensive-orthopaedics-and-musculoskeletel-care/"/>
    <id>https://privacyunpacked.com/breaches/company/comprehensive-orthopaedics-and-musculoskeletel-care/#comprehensiveorthopaedicsmusculoskeletelcare-2026-10-26</id>
    <updated>2026-10-26T00:00:00Z</updated>
    <summary>Comprehensive Orthopaedics &amp; Musculoskeletel Care (United States) notified the Indiana Attorney General of a data breach on 26 October 2026. It affected 21,897 people. The breach began on 23 January 2026, 276 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Alpha Omega Alpha Honor Medical Society data breach (United States): 729 people</title>
    <link href="https://privacyunpacked.com/breaches/company/alpha-omega-alpha-honor-medical-society/"/>
    <id>https://privacyunpacked.com/breaches/company/alpha-omega-alpha-honor-medical-society/#alphaomegaalphahonormedicalsociety-2026-10-26</id>
    <updated>2026-10-26T00:00:00Z</updated>
    <summary>Alpha Omega Alpha Honor Medical Society (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 26 October 2026. It affected 729 people. Exposed: Financial account and card details.</summary>
  </entry>
  <entry>
    <title>Brooklyn Counseling Services data breach (United States): 2 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/brooklyn-counseling-services/"/>
    <id>https://privacyunpacked.com/breaches/company/brooklyn-counseling-services/#brooklyncounselingservices-2026-10-24</id>
    <updated>2026-10-24T00:00:00Z</updated>
    <summary>Brooklyn Counseling Services (United States) notified the Vermont Attorney General of a data breach on 24 October 2026. It told that state about 2 Vermont residents; the total can be higher. Exposed: Health and medical information.</summary>
  </entry>
  <entry>
    <title>Northeastern Mental Health Center data breach (United States): 1 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/northeastern-mental-health-center/"/>
    <id>https://privacyunpacked.com/breaches/company/northeastern-mental-health-center/#northeasternmentalhealthcenter-2026-10-24</id>
    <updated>2026-10-24T00:00:00Z</updated>
    <summary>Northeastern Mental Health Center (United States) notified the Vermont Attorney General of a data breach on 24 October 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Social Security numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>Ritchie County Primary Care Association d/b/a Integrated Health Centers of West Viginia data breach (United States): 3 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/integrated-health-centers-of-west-viginia/"/>
    <id>https://privacyunpacked.com/breaches/company/integrated-health-centers-of-west-viginia/#ritchiecountyprimarycareassociation-2026-10-23</id>
    <updated>2026-10-23T00:00:00Z</updated>
    <summary>Ritchie County Primary Care Association d/b/a Integrated Health Centers of West Viginia (United States) notified the Vermont Attorney General of a data breach on 23 October 2026. It told that state about 3 Vermont residents; the total can be higher. Exposed: Social Security numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>BASS Medical Group data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/bass-medical-group/"/>
    <id>https://privacyunpacked.com/breaches/company/bass-medical-group/#bassmedical-2026-10-22</id>
    <updated>2026-10-22T00:00:00Z</updated>
    <summary>BASS Medical Group (United States) notified the California Attorney General of a data breach on 22 October 2026. The breach began on 4 September 2026, 48 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Alabama Board of Nursing data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/alabama-board-of-nursing/"/>
    <id>https://privacyunpacked.com/breaches/company/alabama-board-of-nursing/#alabamaboardofnursing-2026-10-21</id>
    <updated>2026-10-21T00:00:00Z</updated>
    <summary>Alabama Board of Nursing (United States) notified the Iowa Attorney General of a data breach on 21 October 2026.</summary>
  </entry>
  <entry>
    <title>Henry County Hospital data breach (United States): 63,562 people</title>
    <link href="https://privacyunpacked.com/breaches/company/henry-county-hospital/"/>
    <id>https://privacyunpacked.com/breaches/company/henry-county-hospital/#henrycountyhospital-2026-10-28</id>
    <updated>2026-10-21T00:00:00Z</updated>
    <summary>Henry County Hospital (OH, United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 21 October 2026. It affected 63,562 people. Exposed: Social Security numbers, Health and medical information, Dates of birth and Names. The breach began on 2 December 2025, 323 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Heritage Pediatrics data breach (United States): 2,876 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/heritage-pediatrics/"/>
    <id>https://privacyunpacked.com/breaches/company/heritage-pediatrics/#heritagepediatrics-2026-10-20</id>
    <updated>2026-10-20T00:00:00Z</updated>
    <summary>Heritage Pediatrics (United States) notified the Texas Attorney General of a data breach on 20 October 2026. It told that state about 2,876 Texas residents; the total can be higher. Exposed: Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses. The breach began on 12 April 2026, 191 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Iowa Department of Health and Human Services data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/iowa-department-of-health-and-human-services/"/>
    <id>https://privacyunpacked.com/breaches/company/iowa-department-of-health-and-human-services/#iowadepartmentofhealthandhumanservices-2026-10-19</id>
    <updated>2026-10-19T00:00:00Z</updated>
    <summary>Iowa Department of Health and Human Services (United States) notified the Iowa Attorney General of a data breach on 19 October 2026.</summary>
  </entry>
  <entry>
    <title>Roseburg Therapy dba Stronger Oregon data breach (United States): 1 Oregon residents</title>
    <link href="https://privacyunpacked.com/breaches/company/stronger-oregon/"/>
    <id>https://privacyunpacked.com/breaches/company/stronger-oregon/#roseburgtherapydbastrongeroregon-2026-10-19</id>
    <updated>2026-10-19T00:00:00Z</updated>
    <summary>Roseburg Therapy dba Stronger Oregon (United States) notified the Oregon Department of Justice of a data breach on 19 October 2026. It told that state about 1 Oregon residents; the total can be higher.</summary>
  </entry>
  <entry>
    <title>Rose Poney, LCMHC; Restoration Counseling data breach (United States): 662 patients</title>
    <link href="https://privacyunpacked.com/breaches/company/rose-poney-lcmhc-restoration-counseling/"/>
    <id>https://privacyunpacked.com/breaches/company/rose-poney-lcmhc-restoration-counseling/#roseponeylcmhcrestorationcounseling-2026-10-16</id>
    <updated>2026-10-16T00:00:00Z</updated>
    <summary>Rose Poney, LCMHC; Restoration Counseling (VT, United States) notified the US Department of Health and Human Services of a data breach on 16 October 2026. It affected 662 patients. Exposed: Health and medical information.</summary>
  </entry>
  <entry>
    <title>Mankato Clinic data breach (United States): 21,986 people</title>
    <link href="https://privacyunpacked.com/breaches/company/mankato-clinic/"/>
    <id>https://privacyunpacked.com/breaches/company/mankato-clinic/#mankatoclinic-2026-10-16</id>
    <updated>2026-10-16T00:00:00Z</updated>
    <summary>Mankato Clinic (United States) notified the Indiana Attorney General of a data breach on 16 October 2026. It affected 21,986 people. The breach began on 12 August 2026, 65 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Central Ohio Primary Care Physicians, Inc. (COPC) data breach (United States): 1,351,650 people</title>
    <link href="https://privacyunpacked.com/breaches/company/central-ohio-primary-care-physicians/"/>
    <id>https://privacyunpacked.com/breaches/company/central-ohio-primary-care-physicians/#centralohioprimarycarephysicians-2026-10-30</id>
    <updated>2026-10-16T00:00:00Z</updated>
    <summary>Central Ohio Primary Care Physicians, Inc. (COPC) (OH, United States) notified the Vermont Attorney General, the California Attorney General, the Indiana Attorney General and the US Department of Health and Human Services of a data breach on 16 October 2026. It affected 1,351,650 people. Exposed: Social Security numbers, Health and medical information and Financial account and card details.</summary>
  </entry>
</feed>
