Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

US critical infrastructure monitor

HCA Healthcare

Healthcare · TN (headquarters)

Monitoring
Not directly monitored. Shown from research findings only.
Public findings
1
Provider status posts on record
0

Cyber and operational findings

Analyst-reviewed records. The grade states how well the cause is established; event, first public observation and acknowledgement are separate dates.

A ConfirmedStatus: unknown

Older incident disclosed in window: unauthorized access 12 Aug 2026 to certain IT systems; resident HR files and some affiliated-facility patient data copied. CA AG listing reported 29 Oct; Texas AG lists 15,096 Texans. Total undisclosed.

Event: Aug 12
First public: Oct 29
Third-party report: Nov 4
Acknowledged: Oct 29

Other explanations considered: AG lists do not state cause; may be vendor breach, misdirected mail, or insider error rather than intrusion.

  1. Aug 12 · DIS
    Older incident disclosed in window: unauthorized access 12 Aug 2026 to certain IT systems; resident HR files and some affiliated-facility patient data copied. CA AG listing reported 29 Oct; Texas AG lists 15,096 Texans. Total undisclosed.
    Source
  2. Aug 12 · DIS
    State AG breach posting in window. Incident date 2026-08-12; posted 2026-10-29; records not stated on CA list; secondary source says TX and MA AG filings from 2026-10-30, mailing from 2026-11-02. Disclosure lag about 78 days.
    Source

Provider status posts

Collected from the organisation's own public status page. These are its words; DFX adds only the wording classification.

No status posts collected for this organisation.