MediCopy Data Breach Exposes Sensitive Patient Information in 2026 Incident In February 2026, MediCopy a health information management company specializing in secure data release for healthcare providers reported a data breach affecting patients of Deaconess Health System. The incident, disclosed to Deaconess on February 2, 2026, involved an unauthorized actor accessing MediCopy’s cloud-based file-sharing platform and downloading files on January 13, 2026. The breach did not compromise Deaconess’s internal IT or electronic medical record systems but exposed sensitive data for patients whose records were processed by MediCopy. Affected individuals were limited to those treated at Deaconess Henderson Hospital, Deaconess Union County Hospital, and associated clinics, specifically those whose records were part of a release-of-information request. Exposed data included: - Names - Social Security numbers - Dates of birth - Medical record numbers - Dates of service - Health insurance identification numbers - Medical records MediCopy, acquired by MRO Corp. in 2022, operates as a division of the company, focusing on compliant workflows for handling protected health information. The law firm Shamis & Gentile P.A. is investigating the breach, noting that affected individuals may be eligible for compensation under data protection laws. The incident underscores ongoing risks in third-party health data management.

The medical records of female patients of Deaconess Health System were accessed without authorization by a physician formerly employed here. The records contained personal information, contact information, and other information of six women. Deaconess Health System apologized for the breach and offered the woman complimentary online identity theft protection for 12 months.