DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

DEVELOPING: HCA Healthcare patient data for sale on hacking forum?

Posted on July 5, 2023August 2, 2025 by Dissent

A new user on a hacking forum has listed patient data from HCA Healthcare for sale.

“As of 2021, HCA Healthcare is ranked #62 on the Fortune 500 rankings of the largest United States corporations by total revenue.” the seller writes, adding

Data is grouped by division into 17 files totaling to 27,700,000 rows. More data is included in the sale.

HCA Healthcare have until the 10th to meet the demands.

The demands are not specified in the post.

The field headers in the sample are:

Encounter_Id|Person_DW_Id|EMPI_Text|MRec_dt|First_Name|Last_Name|City|State|Zip_Code|Phone|Decade|Email_Address|Date_of_Birth|Birthday_Month|Patient_Age_Months|Gender|Coid|Coid_Name|Division|Facility_DW_Id|Facility_Name|Next_Appt_Date|Next_Appt_Booked_Date|Tokenized_Campaign|Source_System_Name|MHO_Id

 

The Tennessee-headquartered healthcare provider did not reply immediately to an email asking them if they had experienced a breach and were aware that data allegedly from them was up for sale on a hacking forum.

This is a developing story that will be updated.

Update 1: The seller tells DataBreaches that they are also the hacker, and that they contacted HCA on July 4 to make contact. Whether HCA Healthcare responded is as yet unknown to DataBreaches.

Category: HackHealth DataU.S.

Post navigation

← Au: Atherfield Medical & Skin Cancer Clinic victim of cyberattack by Cyclops
Over 100 fertility patients had data breached by N.L. Health Services →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • From bad to worse: Doctor Alliance hacked again by same threat actor
  • Surveillance tech provider Protei was hacked, its data stolen, and its website defaced
  • Checkout.com Discloses Data Breach After Extortion Attempt
  • Washington Post hack exposes personal data of John Bolton, almost 10,000 others
  • Draft UK Cyber Security and Resilience Bill Enters UK Parliament
  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Surveillance tech provider Protei was hacked, its data stolen, and its website defaced
  • Once a Patient’s in Custody, ICE Can Be at Hospital Bedsides — But Detainees Have Rights
  • OpenAI fights order to turn over millions of ChatGPT conversations
  • Maryland Privacy Crackdown Raises Bar for Disclosure Compliance
  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.