The Biggest Healthcare Data Breaches of 2021

For anyone who needs a refresher on how things have gone, Healthcare IT News has compiled a list of the 10 largest data breaches reported to the U.S. Department of Health and Human Services' Office of Civil Rights this year so far:   An analysis found that "significant vulnerabilities" had been present on the children's health insurance program website since 2013 – potentially leading to the exposure of personal information such as Social Security numbers, dates of birth, names, addresses and financial information. Organization: 20/20 Eye Care Network, Inc. Date reported: 5/24/2021 The Wisconsin-based organization, which has locations in 21 states and the District of Columbia, reported that an intrusion resulted in unauthorized access to certain files on Forefront's IT system containing patient and employee information. An investigation determined that the relevant files contained first name, last name, date of birth and prescription information. Organization: Eskenazi Health Organization: The Kroger Co. Date reported: 2/19/2021 Organization: St. Joseph's/Candler Health System, Inc. Date reported: 8/10/2021 Although the incident only lasted a day, the attack – linked to the notorious REvil ransomware gang – compromised files containing protected health information and personally identifiable information. Organization: American Anesthesiology, Inc. Date reported: 1/8/2021 Organization: Professional Business Systems, Inc. Date reported: 7/1/2021