HIPAA Journal's analysis of breaches affecting 500 or more individuals reported to HHS OCR in August 2026 records 52 data breaches — down 34% month-over-month and the second-lowest monthly total of the past year, against a 12-month average of 66. The breaches exposed the protected health information of at least 8,377,327 individuals, a 75% month-over-month decrease in affected people after an outsized July (33 million). Year to date, 593 large healthcare breaches have been reported, up 6.7% from 556 at the same point in 2025, with 78.6 million individuals affected so far in 2026 — a 14.8% year-over-year increase. The largest August incident, and the fourth-largest reported by a HIPAA-regulated entity this year, hit home-medical-equipment provider AdaptHealth, which ShinyHunters told in June had accessed and exfiltrated data affecting more than 4.1 million people. The report reinforces that ransomware and data-theft extortion, not opportunistic intrusion, remain the sector's dominant loss driver.

• Source article