Millions of users possibly at risk after Ascension healthcare reveals new data breach, potentially linked to Cl0p ransomware


One of the biggest private healthcare systems in the US, Ascension, has notified patients that personally identifiable information (PII) including health data, was stolen in a previously unannounced attack affecting a former business partner in December 2024.

The incident follows a previous ransomware attack in May 2024, in which the sensitive data of six million patients, forcing the company to take systems offline, divert ambulances, and pause elective care in some places. “On December 5, 2024, we learned that Ascension patient information may have been involved in a potential security incident. We immediately initiated an investigation to determine whether and how a security incident occurred,” Ascension confirmed in its breach notification.

Read more…
Source: TechRadar News


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • US healthcare AI platform Xsolis confirms data breach that affects 1.4 million individuals

    June 23, 2026

    Healthcare technology company Xsolis disclosed a cyberattack in which it lost sensitive data on almost 1.4 million customers. Xsolis is a company that uses AI to help healthcare organizations make faster and more consistent decisions about patient care and utilization management. Earlier this week, it published a data breach notification on its website, saying that it ...

  • Shadowbyt3$ claims Nintendo of America breach, stealing ~1GB of employee data from TinyPulse survey platform and demanding $2M ransom

    June 20, 2026

    Nintendo of America has confirmed suffering a third-party data breach incident, but played down its severity. An “extortion-as-a-service” hacking group called Shadowbyt3$ recently claimed to have breached Nintendo of America, a subsidiary of the Japanese gaming giant, operating in the United States, Canada, and some Latin America countries, and exfiltrated sensitive data on its employees. Read more… Source:  ...

  • Texas government data breach allowed hackers to steal 3 million driver’s licenses and passports

    June 18, 2026

    A data breach at a Texas state government department allowed hackers to take the driver’s license information and passport numbers of more than 3 million people, according to the state’s attorney general. The incident is one of the largest data breaches to affect the state this year. Read more… Source:  TechCrunch News Sign up for the Cyber Security Review Newsletter The latest ...

  • Kodak confirms breach as ShinyHunters’ leak threat reaches deadline

    June 18, 2026

    The Eastman Kodak Company (Kodak) confirmed to BleepingComputer that it is investigating a security breach after the ShinyHunters extortion group claimed responsibility for the incident. Kodak is the latest organization to land on the group’s leak site. ShinyHunters claims it stole more than 2.2 million records and threatened to publish the data unless the company responded by June ...

  • Attackers used social engineering to access third-party business apps and steal patient information

    June 16, 2026

    Heart monitoring biz iRhythm says thieves made off with patient health information and tried to turn it into a payday. The California-based cardiac monitoring specialist offers customers a wearable device that collects data, then analyzes it to create reports about heart health. The company said it detected unauthorized activity on June 8 and launched an investigation ...

  • Council of Europe hacked in ShinyHunters’ PeopleSoft heist

    June 15, 2026

    ShinyHunters claims to have breached the Council of Europe and stolen more than 297 GB of data after exploiting a zero-day flaw in Oracle PeopleSoft and abusing that hole to hack more than 100 organizations. According to a post on the extortion crew’s data-leak site, the 429,000 pilfered files contain HR and payroll records, payslips, purchase-order ...