The healthcare sector reported 283 data breaches in the first half of 2025, up from 236 during the same period in 2024, according to a July 16 report from the Identity Theft Resource Center.
Here are four things to know from the report:
- The breaches affected 16,618,598 individuals, placing healthcare as the second-most compromised sector after financial services, which reported 387 incidents. Professional services, manufacturing and education followed.
- Nationwide, 1,732 data breaches were reported from January through June, affecting 165,745,452 individuals. Of those, 1,348 resulted from cyberattacks, which remain the leading cause of breaches.
- Yale New Haven (Conn.) Health reported one of the highest victim counts in healthcare, with 5,556,702 individuals affected. Other major breaches by victim count included Episource (5,418,866) and Blue Shield of California (4,700,000).
- Nearly 70% of all breach notices — 1,191 out of 1,732 — did not disclose the cause of the incident.
