Breach at former Ascension vendor exposes data of 437,329 patients
A data breach at a former vendor of Ascension exposed the information of 437,329 patients. The leaked data included personal information, Social Security numbers, and medical and insurance information, and exploitation of a software vulnerability at the vendor was identified as the cause. Ascension notified affected patients of the breach.
Key facts
- Affected organization
- Ascension
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information, Social Security numbers, and medical and insurance information of 437,329 patients
- Cause / method
- Exploitation of a software vulnerability at a former vendor
- Location
- United States
If your data was exposed
Exposed dataNational ID numberHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- It was reported that the Ascension data breach affected patients in five states, including Michigan.
- Ascension notified about 437,000 patients regarding a data breach at a former vendor.
- Ascension disclosed the number of victims as 437,329, and the types of leaked data and the exploitation of a vendor software vulnerability were reported.
7 related reports
- Verizon 2025 DBIR: Third-Party Involvement in Confirmed Security Breaches Doubled
- Ascension data breach impacts patients in 5 states, including Michigan
- Ascension Health Notifying 437K Patients About Data Breach at Former Business Partner
- Ascension discloses multiple third-party data breaches
- Ascension says recent data breach affects over 430,000 patients
- US healthcare data breaches are out of control – over 400 million patient records have been exposed in the last two years
- Ascension healthcare data breach exposes 430,000 patient records
Other incidents at Ascension
Patient lawsuit over Ascension Health's 2024 data breach moves forward
A data breach occurred at Ascension Health in 2024. The lawsuit filed by affected patients has advanced in the proceedings; the specific scale of the breach and response measures have not been confirmed.
Read on Bloomberg Law News ↗Ascension Health announces data breach
Ascension Health announced a data breach. The timing of the incident, the types of data exposed, the scale of the damage and the specific response measures have not been confirmed.
Read on NBC 5 Chicago ↗Ascension ransomware attack exposes medical data of 5.6 million
5.6MImpact: Medical information of 5.6 million people leaked and clinical operations disrupted
US healthcare organization Ascension was hit by a ransomware attack in May 2024, disrupting clinical operations and access to electronic health records and forcing it to suspend some non-emergency procedures. It was confirmed that an employee had mistakenly downloaded a malicious file and that data had been leaked in a Black Basta ransomware attack. Access to electronic health records was restored in some regions in June, and it was later confirmed that the medical information of 5.6 million people had been leaked. In September 2025, a court ruled to allow a related class action lawsuit to proceed.
Related reports: 107 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.