Cherry Health Reports Data Breach Affecting Over 184,000 Individuals Michigan-based healthcare provider Cherry Health (operating as Cherry Street Services) has disclosed a data breach involving unauthorized access to its network. The incident, detected on or around April 19, 2026, coincided with a days-long network outage suspected to be the result of a ransomware attack. An investigation, supported by third-party cybersecurity specialists, confirmed that an unauthorized actor accessed and exfiltrated sensitive data from Cherry Health’s systems. The compromised information varies by individual but may include: - Personal details: Names, addresses, phone numbers, dates of birth, and Social Security numbers - Healthcare data: Health insurance IDs, patient ID numbers, provider names, and service dates Cherry Health has stated that over 184,000 individuals were potentially affected, though the full scope of the breach remains under review. The organization plans to notify impacted individuals in writing once its investigation concludes. Legal teams are currently assessing whether a class action lawsuit can be filed on behalf of affected individuals, with attorneys seeking input from those who received breach notifications or believe their data was exposed. The breach is distinct from a separate December 2023 incident that also impacted Cherry Health.

Multiple Healthcare Data Breaches Expose Sensitive Patient Information Across U.S. A series of cyberattacks targeting healthcare providers in 2025 and 2026 has compromised the personal and medical data of tens of thousands of patients nationwide. Blue Fish Pediatrics (Texas) In July 2025, Houston-based Blue Fish Pediatrics detected unauthorized access to its IT systems between July 11 and July 17. A forensic investigation revealed that threat actors accessed files containing sensitive patient data, including full names, dates of birth, Social Security numbers, driver’s license numbers, medical records, diagnoses, lab results, and treatment details. While the total number of affected individuals remains undisclosed, the Texas Attorney General reported that 41,485 Texas residents were impacted. Affected patients are being notified and offered complimentary credit monitoring if their Social Security numbers were exposed. Cherry Health (Michigan) Michigan’s largest non-profit Federally Qualified Health Center, Cherry Health, announced a breach on June 18, 2026, after detecting suspicious network activity on April 19, 2026. Unauthorized access led to the theft of patient data, including names, addresses, insurance details, and, in some cases, Social Security numbers. The organization has not reported any misuse of the stolen data but is implementing additional security measures. The full scope of the breach is still under review. Coastal Carolina Centers of Urology and Surgery (South Carolina) The Rivertown Surgery Center in Conway, South Carolina, reported a ransomware attack by the Qilin ransomware group, which accessed patient records on August 26, 2025. The breach exposed names and health records of 2,886 individuals, with the group posting stolen data on its dark web leak site on September 4, 2025. Notifications were sent to affected patients in May 2026. Regence (Oregon) Regence Blue Cross Blue Shield of Oregon disclosed a breach affecting 2,856 members after unauthorized actors accessed digital accounts between January 1 and April 15, 2026. The attackers redeemed wellness rewards for gift cards, potentially exposing account information. The incident was reported to federal authorities, though no further details on data exposure have been released. These breaches highlight ongoing vulnerabilities in healthcare cybersecurity, with attackers targeting sensitive patient data across multiple states.