HCA Healthcare, Blossom Health, El Camino Health and UMMC reported breaches. Some exposed Social Security numbers and medical details, so patients should watch for letters.
Four health systems have announced data breaches: HCA Healthcare, Blossom Health, El Camino Health and University of Mississippi Medical Center (UMMC). In some cases, hackers got Social Security numbers and medical details. If you have been a patient at any of them, a notice letter may be on its way.
HCA Healthcare runs 189 hospitals and about 2,600 outpatient sites in 19 states. It found suspicious activity on August 12, 2026. The hacker copied HR files on medical residents, including Social Security numbers and immigration information. Patient data tied to some affiliated facilities and physician offices was also taken. That included Social Security numbers, medical information and health insurance information.
Blossom Health, an online mental health provider, says a phishing attack on a contractor gave a hacker access to its patient records software. Phishing means tricking someone into handing over a login. Names, contact details and insurance information were exposed.
El Camino Health, which serves Santa Clara County and the Bay Area, says someone got into four Microsoft 365 accounts between August 26 and September 2, 2026. Documents were copied. They held Social Security numbers, driver's license numbers, diagnoses, prescriptions and insurance details. Some patients also had bank account numbers exposed.
UMMC says its network was accessed between February 11 and February 19, 2026. It confirmed this on October 20. A ransomware group called Medusa claimed the attack in March and demanded payment. The ransom was not paid.
If you have never used these providers, these incidents do not appear to involve you. Blossom Health says Social Security numbers and financial information were not accessible in its case. Its patients still had contact and insurance details exposed. At HCA, the patient data came from certain affiliated facilities and physician offices, not necessarily every location.
HCA, Blossom Health and El Camino Health have not said how many people were affected. Known figures are only for Texas: 15,096 residents for HCA and 2,103 for Blossom Health. UMMC has not said what types of data were involved or how many people were affected. It also has no public notice on its website yet.
Stolen details help scammers sound real. Be careful with any call, email or text that mentions your care or insurance and asks you to confirm personal information. Contact the provider or insurer using a number you already trust.
The steps in the alert box above cover the basics. HCA and El Camino Health are offering free credit monitoring. Blossom Health is offering single-bureau credit monitoring. If a letter arrives, do not toss it.
If a breach letter arrives from any of these providers, read it, take the free credit monitoring, and treat unexpected requests for personal details with suspicion.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
