Millions of users possibly at risk after Ascension healthcare reveals new data breach, potentially linked to Cl0p ransomware


One of the biggest private healthcare systems in the US, Ascension, has notified patients that personally identifiable information (PII) including health data, was stolen in a previously unannounced attack affecting a former business partner in December 2024.

The incident follows a previous ransomware attack in May 2024, in which the sensitive data of six million patients, forcing the company to take systems offline, divert ambulances, and pause elective care in some places. “On December 5, 2024, we learned that Ascension patient information may have been involved in a potential security incident. We immediately initiated an investigation to determine whether and how a security incident occurred,” Ascension confirmed in its breach notification.

Read more…
Source: TechRadar News


Sign up for our Newsletter
The latest news and insights delivered right to your inbox.


Related:

  • Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

    April 29, 2026

    Logistics technology company Pitney Bowes, which makes franking machines for US postage, is the latest scalp claimed by ShinyHunters and its ongoing spree of pay-or-leak attacks against major organizations. Data breach tracker Have I Been Pwned (HIBP) confirmed the breach on April 27, with 8.2 million unique email addresses included in the dump alongside names, phone ...

  • Medtronic says ShinyHunters hackers stole around 9 million medical records in latest attack

    April 28, 2026

    Medtronic, one of the biggest medical device manufacturers in the world, has confirmed suffering a cyberattack in which crooks “accessed data in certain Medtronic corporate IT systems.” In a security notification published on its website, Medtronic said the attack does not affect its customers or products, and also stressed it will continue operating as usual, without ...

  • ADT confirms cyber intrusion after ShinyHunters extortion attempt

    April 27, 2026

    A home security biz getting digitally burgled is not a great look – but that’s exactly where ADT finds itself. The company has confirmed a cyber intrusion following an extortion attempt by the ShinyHunters crew, which claims to have made off with more than 10 million records. US-based ADT is one of the world’s largest providers ...

  • Stolen medical data from 500,000 UK volunteers advertised for sale on a Chinese website

    April 23, 2026

    Health information belonging to 500,000 people in the United Kingdom has been stolen and offered for sale on the Chinese website Alibaba, the UK’s technology minister Ian Murray has confirmed. The medical data comes from participants of UK Biobank, the world’s most comprehensive dataset of biological, health, and lifestyle information, compiled from volunteers and used by ...

  • France confirms data breach at government agency that manages citizens’ IDs

    April 22, 2026

    The French government agency that handles the issuing and management of citizens’ identity documents, including national IDs, passports, and immigration documents, confirmed Wednesday that it experienced a data breach. In an announcement, the Agence Nationale des Titres Sécurisés (ANTS) said the data stolen in the breach could include full names, dates and places of birth, mailing ...

  • Adaptavist Group breach spawns imposter emails as ransomware crew claims mega-haul

    April 21, 2026

    UK enterprise software consultancy The Adaptavist Group is investigating a security breach after an intruder logged in with stolen credentials, while a ransomware crew claims it grabbed far more than the company is currently admitting. In a letter to customers, Adaptavist’s CEO Simon Haighton-Williams said the biz detected an “IT security incident” in late March after ...