Kettering Adventist Healthcare reports massive data breach — 1.7 million records affected
Kettering Adventist Healthcare, a healthcare provider in Ohio, filed a breach report with HHS OCR on July 21, 2025. The filing indicates a hacking/IT incident compromised data on a network server, affecting 1,695,382 individuals. This submission date is when the report was sent to regulators, not necessarily when the breach occurred or was discovered. As a covered entity, the provider is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for official notifications if they serve patients in this region or have data-sharing agreements with the organization.
Sources differ:
- The HHS OCR breach portal currently lists 1,695,382 individuals affected against the July 21, 2025 submission date; HIPAA Journal reports that the original July 21, 2025 filing used a placeholder estimate of 'at least 501 individuals,' with the total later revised upward to 1,695,382 as Kettering Health's file review progressed.