HCA Healthcare discloses data breach

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

HCA Healthcare data breach overview: 

• Who: HCA Healthcare announced the contact information of an undetermined number of its patients’ had been compromised.
• Why: The HCA Healthcare data breach involved information such as names, email addresses and appointments but did not include patient’s health treatment records.
• Where: HCA Healthcare is based in Nashville, Tennessee, but has service locations in 20 states and the United Kingdom.

HCA Healthcare has announced a third party compromised the contact information of an undetermined number of HCA’s patients. The compromised information included names, email addresses and dates of birth but is not believed to include treatment or clinical information.

The information was taken from an external storage location and then was made accessible through an unnamed online forum. HCA Healthcare said it believes the data breached includes 27 million rows of data that may include information for approximately 11 million HCA Healthcare patients.

The full information believed to be compromised included: patient name, city, state, ZIP code, email address, telephone number, date of birth and gender, as well as patient service date, location and next appointment date.

The data is not believed to have included clinical information, such as treatment, diagnosis or condition; payment information, such as credit card or account numbers; or sensitive information such as passwords, driver’s license or Social Security number.

HCA Healthcare sai online claims that the data was deleted from the company’s system or that it can identify the treatment or condition of a patient are not true.

HCA Healthcare is still working to identify each patient who had information compromised and contact them directly about the HCA Healthcare data breach. The company also said it will be informing law enforcement agencies and government officials about the incident and comply with applicable legal and regulatory requirements.

HCA Healthcare will provide credit monitoring and identity protection services when necessary for those affected by data breach

HCA Healthcare has said it will provide credit monitoring and identity protection services where the company deems it is necessary due to the HCA Healthcare data breach.

Patients can call HCA Healthcare at 888-993-0010 from 8 a.m. to 8 p.m. CDT regarding general questions and to confirm the legitimacy of any HCA Healthcare communications.

Healthcare workers filed a lawsuit against the largest hospital employment firm, Service Employees International Union for United Healthcare Workers West, for not properly protecting them during the coronavirus outbreak.

Was your data breached at HCA Healthcare? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• U.S. sees record number of data breaches in first half of 2023
• Microsoft discloses breach of gov’t email accounts
• Johns Hopkins class action claims inadequate data security led to breach
• Nickelodeon reveals data breach, says no sensitive info stolen