Ascension

Disclosed Dec 19, 2024437,329 affectedConfirmed

Ascension patient data stolen from former business partner

Ascension said patient data it inadvertently disclosed to a former business partner was likely stolen in December 2024 through a flaw in third-party software; it reported 437,329 affected patients to HHS.

What is known

People affected	437,329 (as reported by the organization)
Disclosed	Dec 19, 2024
Discovered	May 8, 2024
Happened	Feb 29, 2024
Attack	Vendor breach
Data exposed	NamesGovernment IDsHealthInsuranceCredentials and tokensBiometricsAddressesPhone numbersEmailsDates of birthSocial Security numbers
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Ascension

Newsbleepingcomputer.com

Ascension discloses new data breach after third-party hacking incident

Newsbleepingcomputer.com

Ascension says recent data breach affects over 430,000 patients

Newshipaajournal.com

April 2025 Healthcare Data Breach Report

Notices filed

Residents of DEDec 19, 2024

Delaware DOJ606 people

TotalApr 29, 2025

Research437,329 people

Other breaches at Ascension

Black Basta ransomware attack on Ascension exposes data of 5.6 million peopleRansomware exposed names, addresses, health records, insurance details, financial details, Social Security numbers and dates of birth.Ransomware5.6M affectedHealthcareUSUnverifiedMay 8, 2024

History of this record

sector2026-09-25

other to healthby seedSource

attack2026-09-25

unknown to third-partyby seedSource

data_types2026-09-25

["names","government-id","health","insurance","credentials","biometrics"] to ["names","government-id","health","insurance","credentials","biometrics","addresses","phone","emails","dob","ssn"]by seedSource

records2026-09-25

5599699 to 437329by seedSource

summary2026-09-25

empty to Ascension said patient data it inadvertently disclosed to a former business partner was likely stolen in December 2024 through a flaw in third-party software; it reported 437,329 affected patients to HHS.by seedSource

title2026-09-25

empty to Ascension patient data stolen from former business partnerby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.

Everything about Ascension