From ClingantryAI Health Regulator News

Nacogdoches Memorial Hospital, a healthcare provider in Texas, filed a breach report with HHS OCR on March 30, 2026, regarding a hacking/IT incident. The OCR portal lists 2,507,073 individuals affected. While some secondary sources cite a lower figure of 257,073, the federal record stands at 2.5 million with no documented correction. The breach involved data stored on a network server. As a covered entity, the hospital is responsible for notifying affected individuals. Healthcare administrators should monitor official notifications from the hospital to understand the specific scope of exposure for their own patients or partners, as the federal filing does not detail the specific types of data compromised.

Ascension Health, a healthcare provider, filed a breach report with HHS OCR on April 28, 2025. The filing describes a hacking/IT incident that compromised the protected health information of 437,329 individuals. The unauthorized access occurred on a network server. While the record lists the entity's state as Missouri, it does not limit the breach to Missouri operations. The submission date marks when the report was sent to regulators, not when the breach occurred. Healthcare administrators should monitor for further details regarding specific data elements exposed and notifications to affected patients.

If your organisation uses Ciox Health LLC (doing business as Datavant Group) for data services, you may be affected by a significant security incident. This Business Associate reported a hacking/IT incident to HHS OCR on 10/07/2024. The filing lists 320,702 individuals affected. Protected health information was exposed via email. Because Datavant is a Business Associate, your own compliance obligations depend on your specific contract and data flow. Verify if you share data with this entity and review your Business Associate Agreement for notification requirements.