Akumin Operating
Disclosed Dec 6, 20232 years ago7,127 affectedConfirmed
The covered entity (CE), Akumin Operating Corporation, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 7,127 individuals. The type of PHI affected included names, addresses, birthdates, drivers’ license and Social Security numbers, diagnoses, and health insurance and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE strengthened its administrative, technical, and security safeguards.
What is known
| People affected | 7,127 (as reported to HHS) |
|---|---|
| Disclosed | Dec 6, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-12-23 Akumin Operating Corp. Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Akumin Operating (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 6, 2023 | 7,127 |
| Vermont AGresidents of VT | Dec 23, 2024 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 7127 · backfill source
- 2026-09-25 · disclosed: 2024-12-23 to 2023-12-06 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Akumin Operating Corporation, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 7,127 individuals. The type of PHI affected included names, addresses, birthdate · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.