In the first six months of 2025, more than 29 million people were impacted by data breaches at health care organizations. Incidents involving Yale New Haven Health System and Episource, LLC each affected over 5.4 million individuals, according to The HIPAA Journal.
These events follow a major cyberattack in 2024 on Change Healthcare, Inc., which compromised the protected health information of approximately 190 million people. In response to that incident, the Drug Enforcement Administration released new guidance for pharmacies. This document outlines alternative procedures for handling electronic prescriptions for controlled substances.
The scale of these breaches highlights ongoing cybersecurity challenges in the health care sector as organizations work to protect sensitive patient information.
Alerts Sign-up