Ascension security incident history
Hacking, data breaches and other security incidents involving Ascension, with related coverage.
Patient lawsuit over Ascension Health's 2024 data breach moves forward
A data breach occurred at Ascension Health in 2024. The lawsuit filed by affected patients has advanced in the proceedings; the specific scale of the breach and response measures have not been confirmed.
Read on Bloomberg Law News ↗Ascension Health announces data breach
Ascension Health announced a data breach. The timing of the incident, the types of data exposed, the scale of the damage and the specific response measures have not been confirmed.
Read on NBC 5 Chicago ↗Breach at former Ascension supplier exposes data of 437,329 patients
437.3kImpact: Personal information, Social Security numbers, and medical and insurance information of 437,329 patients
A data breach at a former supplier of Ascension exposed the information of 437,329 patients. The leaked data included personal information, Social Security numbers, and medical and insurance information, and exploitation of a software vulnerability at the supplier was identified as the cause. Ascension notified affected patients of the breach.
Related reports: 7 · last report →Ascension ransomware attack exposes medical data of 5.6 million
5.6mImpact: Medical information of 5.6 million people leaked and clinical operations disrupted
US healthcare organisation Ascension was hit by a ransomware attack in May 2024, disrupting clinical operations and access to electronic health records and forcing it to suspend some non-emergency procedures. It was confirmed that an employee had mistakenly downloaded a malicious file and that data had been leaked in a Black Basta ransomware attack. Access to electronic health records was restored in some regions in June, and it was later confirmed that the medical information of 5.6 million people had been leaked. In September 2025, a court ruled to allow a related class action to proceed.
Related reports: 107 · last report →