patient data

A new report covering healthcare data breaches in the first half of 2026 has been published, compiling incident numbers, affected records and breach causes across the sector. Healthcare remains a frequent target for hackers, and such reports are used by providers and regulators to assess trends in ransomware, phishing and unauthorized access affecting patient data.

More than 44,000 people have lodged legal requests asking NHS England to remove their data from the health service's data platform operated under contract by Palantir. The campaign against the US software firm's role in handling NHS patient data is growing, with supporters now preparing for potential court battles over how patient information is used.

Northeast Rehabilitation Hospital Network is reported to be the subject of a possible data breach, raising concerns that patients' personal and medical information may have been exposed. Coverage so far focuses on the potential for legal action, with discussions of a class action investigation. Details about how many people were affected and what data was compromised have not yet been confirmed by the hospital network.

A medical records firm has deployed an AI tool to identify weaknesses that threaten patient privacy in health data systems. The company says the technology uncovers vulnerabilities in how sensitive medical records are stored and handled, raising fresh questions about data security across the healthcare industry as firms increasingly turn to artificial intelligence to audit and protect patient information.

The Mental Health Association has agreed to a settlement over a data breach. Details of the agreement, including any compensation for affected individuals and the number of people impacted, have not yet been fully disclosed. The settlement follows a reported breach that raised concerns over the protection of sensitive patient information held by the health organisation.

Health Access Network, a healthcare provider, is the subject of an investigation into a potential class action lawsuit following a data breach. Lawyers are examining whether patients whose personal and medical information was exposed can pursue legal claims. Patients affected by such healthcare breaches typically face risks of identity theft and fraud, and investigations like this often precede formal litigation.

Attorneys are looking into reports that Northern New Jersey Eye Institute may have experienced a data breach affecting patients' personal information. The investigation, announced via ClassAction.org, is in early stages and no lawsuit has been filed and no details on the number of affected individuals or type of data exposed have been confirmed.

Edelson Lechtzin LLP, a US class action law firm, says it is investigating potential legal claims against Saber Healthcare Group after a data breach exposed patient information. The announcement, issued via PR Newswire, invites affected patients to come forward as the firm weighs a class action lawsuit over the exposure of sensitive medical and personal data.

New commentary is examining whether CGRP-targeted migraine therapies influence depression and anxiety symptoms in people with migraine. Migraine patients commonly experience mood disorders, so clinicians and patients are asking whether blocking CGRP worsens, improves, or leaves mental health symptoms unchanged. The discussion highlights a gap in evidence, as trial data on psychiatric outcomes for these preventive treatments remains limited and mixed.

Aidoc chief executive Elad Walach appeared on the Data Book podcast to discuss how artificial intelligence is being used in medical imaging and improving patient care. The conversation covers Aidoc's role in helping hospitals prioritize radiology cases and the broader potential of AI tools in healthcare delivery.

Astrana Health, a US healthcare company, is set to file an SEC disclosure on September 22 regarding a hack. The filing is expected to detail the scope of the cybersecurity incident and any impact on patient data or operations. Attention is focused on what the disclosure will reveal about the breach.

A legal investigation has been launched into a data breach at Bright Smile Dental Care, with a law firm soliciting potential claimants for a possible class action lawsuit. Patients of the dental practice may have had personal information exposed. Affected individuals are being encouraged to come forward as the investigation determines whether the provider failed to adequately protect patient data.

UChicago Medicine has hired a genomics leader from the National Institutes of Health to fill its newly created chief data officer role. The appointment signals the health system's push to strengthen its use of data, genomics and analytics in research and patient care. Details on the executive's start date and priorities have not yet been announced.

Attorneys are investigating reports of a data breach at the Center for Kidney Care, a move that often precedes a class action lawsuit on behalf of patients whose personal or medical information may have been exposed. The investigation comes as healthcare providers across the United States face a rising number of cyberattacks targeting sensitive patient records. Details on how many people were affected have not yet been confirmed.

The European Medicines Agency has published a roadmap to address the underrepresentation of women in medicines development, from clinical trial participation to research design. The agency says data on how medicines work in women has long been insufficient, and it is setting out measures to improve evidence and health outcomes for female patients across the EU.

Moleculin Biotech has closed enrollment in its MIRACLE trial for acute myeloid leukemia, a step that shifts attention from recruiting patients to follow-up and data collection. Commentary around the milestone is focusing on what the trial's execution across clinical sites reveals about running complex AML studies. Observers in the oncology and biotech community are watching for next results.

Baptist Health, the hospital system based in Montgomery, Alabama, is dealing with an information technology outage caused by one of its vendors. The organization says all of its hospitals remain open and are continuing to treat patients while the issue is resolved. The extent of the disruption to records systems or appointments has not been detailed.

Astrana Health has filed a notification with the Securities and Exchange Commission disclosing a social engineering incident. The healthcare company, which manages care for large patient populations, informed investors and regulators of the event as required under disclosure rules. Social engineering attacks typically involve manipulating staff into revealing credentials or sensitive data, and healthcare firms are frequent targets. Details on the scope of the breach and any patient data exposure have not yet been made public.

Fast Company reports on how artificial intelligence is being used to tailor healthcare to individual patients, moving medicine away from one-size-fits-all treatment. The piece examines how AI tools can analyze personal data to customize diagnoses, therapies and care plans. It adds to a growing debate about how far personalized, algorithm-driven medicine should go in mainstream healthcare.