Healthcare data breaches climbed to 281 in the first half of 2026, up from 270 during the same period last year, according to the nonprofit Identity Theft Resource Center. The sector ranked second among all industries by compromise count, trailing only financial services at 387.
The healthcare figures come inside a record-setting national picture. The U.S. recorded 1,803 total data compromises across all sectors in the first half of 2026, affecting an estimated 471.2 million individuals — a total that already exceeds all of 2025’s 297.5 million victim notices in just six months, per the July 22 report.
Healthcare’s own victim count, 11.7 million notices in the first half of 2026, is tracking below the sector’s full-year 2025 pace of 34.6 million, meaning no single event has yet matched the scale of 2024’s Change Healthcare breach. The report also flags a sharp rise in malicious insider activity nationwide, with 21 insider wrongdoing incidents recorded in the first half of 2026 alone, more than seven times the three events logged in all of 2025. Researchers tie the surge to tech-sector layoffs and North Korean operatives posing as remote IT workers.
The report also found that only 24% of all breach notices in the first half of 2026 disclosed how the breach occurred, down from 100% in 2020, a transparency gap the ITRC says limits organizations’ ability to defend against similar attacks.
The Identity Theft Resource Center has tracked public data breach notifications since 2005 and maintains one of the largest breach databases in the U.S.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.