Moffitt Cancer Center and Research Institute
Disclosed Apr 23, 20242 years ago26,577 affectedConfirmed
The covered entity (CE), Moffitt Cancer Center and Research Institute, reported that an employee emailed the protected health information (PHI) of 756 individuals to their personal email account. The PHI involved included names, treatment information, dates of service, and health insurance information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE sanctioned the employee involved and retrained workforce members to better protect its PHI.
What is known
| People affected | 26,577 (as reported to HHS) |
|---|---|
| Disclosed | Apr 23, 2024 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-04-23 Moffitt Cancer Center and Research Institute Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Moffitt Cancer Center and Research Institute (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Apr 23, 2024 | |
| HHS archivetotal | Apr 24, 2024 | 26,577 |
| HHS archivetotal | May 24, 2024 | 756 |
History of this record
- 2026-09-25 · records: 756 to 26577 · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 756 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Moffitt Cancer Center and Research Institute, reported that an employee emailed the protected health information (PHI) of 756 individuals to their personal email account. The PHI involved included names, treatment i · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.
Everything about Moffitt Cancer Center and Research Institute