A patient data breach is the unauthorized exposure, access, or disclosure of health-related personal information. This can include names, dates of birth, contact details, insurance information, medical record numbers, diagnoses, treatment notes, or billing data. Because these records are highly sensitive, even partial exposure can create privacy, legal, and safety risks.
In cyber security, patient data breaches matter because healthcare data is valuable to criminals and tightly regulated in many jurisdictions. They often happen through phishing, stolen credentials, misconfigured cloud storage, ransomware, or compromise of a third-party vendor that handles patient information. Defenders reduce the risk with least-privilege access, encryption, logging, vendor reviews, strong incident response plans, and rapid notification procedures. When a breach occurs, scope matters: organizations must determine what data was exposed, who can access it, and whether the exposure came from internal systems or an external partner.