Three U.S. Healthcare Providers Hit by Cyberattacks, Exposing Data of 600,000 Individuals In 2024, three U.S. healthcare organizations fell victim to separate cyberattacks, compromising the personal and health data of approximately 600,000 individuals, according to the Department of Health and Human Services' breach tracker. The most severe breach targeted the North Texas Behavioral Health Authority, where attackers stole sensitive information including Social Security numbers from 285,000 people in an October 2024 incident. Meanwhile, Southern Illinois Dermatology reported that 160,000 individuals had their data exposed in a late November 2024 breach, with the Insomnia ransomware gang claiming responsibility for compromising 150,000 patients. Additionally, Saint Anthony Hospital in Illinois disclosed a February 2025 intrusion involving two employee email accounts, leading to the exposure of 146,000 individuals' personal and health records. While details on the attackers remain unclear, the hospital had previously been targeted by the LockBit ransomware gang. The incidents highlight ongoing cybersecurity risks in the healthcare sector, with ransomware groups continuing to exploit vulnerabilities in critical infrastructure.