Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Healthcare
Coverage is reduced: DFX is not reading 105 of 124 status feeds, because their robots.txt does not allow it or could not be read, while we move to the incident feeds providers publish.
1 providers with a collectable public status feed; latest successful collection Nov 7 00:30 UTC.
Findings
- University Hospitals ClevelandHealthcare · OH
Public incident page wording drift. Initial: 'On Thursday, Oct. 22, 2026, we detected unusual activity... out of an abundance of caution, disconnected our systems from the internet.' Oct 26 (Cleveland 19): investigating with outside experts, 'significant progress over the weekend in restoring its systems to full...
A ConfirmedOngoingEvent Oct 22First public Oct 22Acknowledged Oct 22University Hospitals - Marathon HealthHealthcare · IN (headquarters)
Older incident disclosed in window. Social engineering (attacker posed as IT) gave access to a cloud-hosted app; data exported within hours on 24 Aug. CA AG listing reported 29 Oct; HIPAA Journal 3 Nov cites Texas AG filing of 5,684,735 notified (conflicts with TX AG resident count 234,534 and other reports of about...
A ConfirmedunknownEvent Aug 24First public Oct 20Acknowledged Oct 20HIPAA Journal - Blossom HealthHealthcare · National or unlocated
EHR software accessed in Aug 2026 via phishing of a non-employee contractor; access blocked, user passwords changed, extra controls. Letters dated 29 Oct; CA AG 29 Oct; Texas AG 2,103 Texans.
A ConfirmedRecoveredEvent unknownFirst public Oct 29Acknowledged Oct 29HIPAA Journal - HCA HealthcareHealthcare · TN (headquarters)
Older incident disclosed in window: unauthorized access 12 Aug 2026 to certain IT systems; resident HR files and some affiliated-facility patient data copied. CA AG listing reported 29 Oct; Texas AG lists 15,096 Texans. Total undisclosed.
A ConfirmedunknownEvent Aug 12First public Oct 29Acknowledged Oct 29HIPAA Journal - El Camino HealthHealthcare · CA (headquarters)
State AG breach posting in window. Incident date 2026-08-26 / 2026-09-02; posted 2026-10-30; records not stated. Disclosure lag about 58 days.
A ConfirmedunknownEvent Aug 26First public Oct 30Acknowledged Oct 30California AG - UMMCHealthcare · MS (headquarters)
State AG breach posting in window. Incident date 2026-02-11 / 2026-02-19; posted 2026-11-02; records 17 VT residents. Disclosure lag about 256 days.
A ConfirmedunknownEvent Feb 11First public Nov 2Acknowledged Nov 2California AG - Central Ohio Primary CareHealthcare · OH (headquarters)
Voice-phishing access to files with PHI (Aug 2026), about 1.4M notified per press; CA AG listing reported 30 Oct (in window); lawsuits filed 20 to 21 Oct; MyChart not affected per company.
A ConfirmedRecoveredEvent Aug 17First public Oct 15Acknowledged Oct 15California Attorney General
Provider status posts
- HealthieHealthcarePosted Nov 5 15:43 UTC · resolved · minor impact
DoseSpot service degradation
Investigation mentioned - HealthieHealthcarePosted Oct 29 12:40 UTC · resolved
Degraded Site Performance
Service restricted or degradedSign-in disruptionInvestigation mentionedRestoration reported - HealthieHealthcarePosted Oct 27 18:41 UTC · resolved · minor impact
Login Errors on Staging
Sign-in disruptionInvestigation mentionedRestoration reported - HealthieHealthcarePosted Oct 26 20:29 UTC · resolved
Continued errors when sending or viewing faxes
Service restricted or degradedInvestigation mentionedRestoration reported - HealthieHealthcarePosted Oct 26 18:01 UTC · resolved
Faxes degradation
Investigation mentionedRestoration reported