Healthcare data breaches declined in first half of 2026

Reported healthcare breaches declined year-over-year in the first half of 2026, according to a recent report in the HIPAA Journal. In the first half of 2026, nearly 33.8 million individuals' personal health information (PHI) was disclosed, with 5.8 million being affected by the largest breach. While the number of reported breaches affecting 500 or more individuals involving unauthorized access and disclosure declined compared to 2025, the number of hacking and IT incidents increased for the third year in a row. Approximately 2.2 breaches are reported daily, and some, especially those affecting business associates, may be underreported due to notification and reporting requirements for business associates and the affected covered entities. For healthcare providers, which continue to be the most affected, the data indicates a continued need to build operational resiliency and prioritize cybersecurity.