Recent cyber attacks and data breaches

Aesto, LLC, a business associate in AL, reported a breach of health information affecting 9,540,683 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving network server.

Manning Regional Healthcare Center, a healthcare provider in IA, reported a breach of health information affecting 746 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving email.

A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons, a healthcare provider in AR, reported a breach of health information affecting 64,831 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving network server.

Interim HealthCare of Oklahoma City, Inc., a healthcare provider in OK, reported a breach of health information affecting 500 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving email, network server.

Amgen Inc. notified the California Attorney General of a data breach on August 17, 2026, with the breach dated July 1, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

SM Energy Company notified the California Attorney General of a data breach on July 30, 2026, with the breach dated May 15, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Microcode, Inc. (CommonSpirit Health) notified the Washington State Attorney General on July 30, 2026 of a data breach that occurred on January 19, 2026, affecting 4,096 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Passport Number, Medical Information.

Pennsylvanie Dermatology Partners, a healthcare provider in MD, reported a breach of health information affecting 500 people to the US Department of Health and Human Services on July 30, 2026. HHS records the breach type as hacking/it incident, involving network server.

MPS Enterprises, Inc., a health plan in TX, reported a breach of health information affecting 675 people to the US Department of Health and Human Services on July 30, 2026. HHS records the breach type as hacking/it incident, involving network server.

Clinical Registry Solutions notified the California Attorney General of a data breach on July 29, 2026, with the breach dated April 9, 2026. The notice covers more than 500 California residents; California does not publish the exact number.