Two Major Healthcare Data Breaches Expose Patient Information in 2025-2026 Two healthcare providers Academic Urology & Urogynecology of Arizona and Livingston HealthCare recently disclosed cybersecurity incidents affecting thousands of patients, with unauthorized access to sensitive medical and personal data. ### Academic Urology & Urogynecology of Arizona Breach Arizona-based Academic Urology & Urogynecology, a division of Palo Verde Hematology and Oncology, detected unauthorized network access on May 22, 2025. A forensic investigation later confirmed that attackers had accessed its systems between May 18 and May 22, 2025, potentially exposing the data of 73,281 patients. Compromised information may include: - Full names, dates of birth, and Social Security numbers - Medical record numbers, diagnoses, treatment details, and prescription information - Health insurance and financial account data Notifications were sent to affected individuals on February 12, 2026, with no evidence of data misuse found at the time. As a precaution, the organization offered complimentary credit monitoring and identity theft protection. ### Livingston HealthCare Cybersecurity Incident Montana’s Livingston HealthCare, a critical access hospital serving Park County, reported a suspected cyberattack on February 13, 2026, disrupting phone systems and network operations. While some systems were taken offline for assessment, patient care remained uninterrupted. The phone system has since been restored, though network services remain limited. The extent of data exposure is still under investigation, but the organization warned patients about fraudulent communications claiming compensation for the incident, urging caution against sharing sensitive information. Both incidents highlight ongoing cybersecurity risks in the healthcare sector, with investigations continuing to assess the full impact.

Palo Verde Hospital reported a data breach on March 6, 2025, after discovering unauthorized access to its systems between March 3, 2025, and March 6, 2025. The breach potentially exposed sensitive patient information, including names, Social Security numbers, medical records, and financial account details. The number of affected individuals is currently unknown.