Jupiter Medical Center Notifies Patients of Third-Party Data Breach Impacting Health Records On January 21, 2026, Jupiter Medical Center informed stakeholders about a data security incident involving Cerner Corporation, its third-party electronic health record (EHR) vendor. The breach did not compromise Jupiter Medical’s internal systems but exposed sensitive patient data held by Cerner. The medical center confirmed that affected individuals are being notified and provided with guidance on protecting their personal information. While details on the scope of the breach remain limited, the incident underscores the risks of third-party vendor vulnerabilities in healthcare cybersecurity. No further specifics on the number of impacted patients or the nature of the exposed data were disclosed at this time.

Columbia Medical Practice Hit by Qilin Ransomware Attack, Exposing Sensitive Data of 3,000 Patients Columbia Medical Practice, a multi-specialty healthcare provider based in Howard County, Maryland, suffered a ransomware attack on November 5, 2025, orchestrated by the Qilin ransomware group. The attackers infiltrated the organization’s network, encrypted files, and exfiltrated sensitive patient data before publicly claiming responsibility on the dark web on November 24, 2025. The breach was officially reported to the U.S. Department of Health and Human Services (HHS) on December 5, 2025, affecting approximately 3,000 individuals. Exposed information included personally identifiable data (names, addresses, Social Security numbers, driver’s license and passport details), health records (diagnoses, treatment history, prescription details, and physician assignments), and financial and insurance data (account numbers, insurance IDs, and payment information). Columbia Medical Practice, which operates under a Patient-Centered Medical Home (PCMH) model, has established a toll-free assistance line (1-833-974-3375) for affected individuals. The law firm Shamis & Gentile P.A. is investigating potential legal claims for those impacted, citing possible compensation for damages such as identity theft or financial losses. The incident underscores the growing threat of ransomware attacks targeting healthcare providers and the exposure of highly sensitive patient data.

Jupiter Medical Center Reports Third-Party Data Breach Affecting Patient Information Jupiter Medical Center disclosed a data breach stemming from a security incident at a third-party electronic health record (EHR) vendor, which may have exposed sensitive patient information. The hospital confirmed that its own systems were not compromised but is notifying potentially affected individuals. The breach was first detected on January 14, 2025, when the medical center received notice that an unauthorized party had accessed the vendor’s systems as early as January 22, 2024. Compromised data may include names, Social Security numbers, and medical records. The hospital is taking steps to inform impacted individuals and provide guidance on protecting their personal information. The full scope of the breach and the number of affected patients remain under review.