2025 Data Breach Trends in Healthcare and Education Sectors

Reporting on 2025 breach activity indicates incident volumes largely plateaued while impact varied by sector. In U.S. healthcare, HHS OCR portal data shows large breaches (affecting 500+ individuals) remained in the ~700–750 per year range, with an apparent 4.3% year-over-year decline in 2025 that may change as late reports are added; a late-2025 federal government shutdown is cited as a factor that could delay postings and inflate later totals. Despite relatively stable breach counts, the number of affected individuals dropped sharply year over year, from a record 289,162,330 in 2024 to at least 61,556,256 in 2025 (a reported 78% reduction).

In education, a Comparitech roundup cited in sector reporting attributes 251 claimed ransomware attacks against schools and universities globally in 2025 (vs. 247 in 2024), with 94 confirmed by victim organizations; while attack counts were steady, known exposed records across confirmed incidents rose to 3.9 million (up 27% from 3.1 million). Drivers highlighted include third-party software vulnerabilities and a small number of large higher-education breaches. Separately, general guidance for healthcare organizations reiterates HIPAA Breach Notification Rule obligations (45 CFR §§ 164.400–414), including notification timelines (no later than 60 days after discovery) and escalation requirements for larger incidents (e.g., 500+ affected individuals).