Loading story…
Black Hills Regional Eye Institute (BHREI) and Retina Group of Florida suffered separate cyberattacks, compromising sensitive data of nearly 260,000 patients and staff. The breaches exposed personal and medical information, including Social Security numbers and treatment details. Both incidents highlight the vulnerability of smaller healthcare providers to opportunistic cyberattacks due to limited cybersecurity resources.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
4 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcego.theregister.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Several U.S. healthcare organizations have disclosed significant data breaches involving unauthorized access to patient and employee information. MedStar Health reported that an unauthorized third party accessed internal systems containing sensitive patient data, including names, dates of birth, Social Security numbers, and medical information. The Rhysida threat group claimed responsibility for this attack, alleging the exfiltration and leak of over 7 million pieces of patient data. Brevard Skin and Cancer Center also confirmed a cyberattack in which the Pear threat group claimed to have stolen 1.8 terabytes of data, affecting both patient and employee records with information such as Social Security numbers, health conditions, and billing details. Both organizations have offered complimentary credit monitoring and identity theft protection to affected individuals and are reviewing their cybersecurity measures. Henry Ford Health in Michigan disclosed an insider data breach affecting nearly 2,000 patients, resulting in the termination of the responsible employee and notification to those impacted. While details on the specific data accessed were not provided, credit monitoring services have been offered. These incidents highlight the ongoing risks faced by healthcare providers from both external threat actors and insider threats, emphasizing the need for robust security policies and continuous evaluation of protective measures to safeguard sensitive health information.
Jun 29, 2026
Several US organizations have reported significant data breaches affecting thousands of individuals. Pearlman Aesthetic Surgery in New York disclosed a hacking incident compromising the protected health information of nearly 12,000 patients, though specific details remain undisclosed. Methodist Homes of Alabama and Northwest Florida notified residents and employees of a second breach within seven months, involving unauthorized access to an employee email account containing sensitive personal and medical information. Gulshan Management Services, which operates over 150 gas stations and convenience stores, confirmed a breach that exposed the personal data of more than 377,000 people, including Social Security numbers and financial information, with delayed notification to affected individuals. Community First Medical Center in Chicago reached a $1 million preliminary settlement following a 2023 breach that exposed the data of approximately 216,000 patients, with allegations of inadequate cybersecurity measures and delayed response. These incidents have led to regulatory filings, class action lawsuits, and increased scrutiny over the timeliness and adequacy of breach notifications. The breaches highlight ongoing challenges in protecting sensitive data across healthcare and retail sectors, with attackers exploiting both network vulnerabilities and email accounts. Organizations are facing legal and reputational consequences, emphasizing the need for robust cybersecurity practices and prompt communication with affected individuals.
Jun 29, 2026
VITAS Hospice Services, a Florida-based hospice care provider, and Tri Century Eye Care, a Pennsylvania-based eye care practice, have reported significant data breaches affecting nearly 520,000 individuals. Both organizations notified the U.S. Department of Health and Human Services after discovering that sensitive health information had been accessed and exfiltrated in separate hacking incidents. VITAS Hospice reported that the breach stemmed from a compromised vendor account, which allowed an unauthorized party to access its systems between September 21 and October 27, 2025, ultimately affecting 319,177 people. Tri Century Eye Care reported a separate incident impacting 200,000 individuals. The compromised data includes a range of sensitive personal and health information, such as names, addresses, dates of birth, phone numbers, Social Security numbers, driver's license numbers, and next of kin contact details. Both organizations are in the process of notifying affected patients and former patients about the breaches. These incidents highlight ongoing threats to specialty healthcare providers and the risks posed by third-party vendor access to critical systems.
Jun 29, 2026