Moffitt Cancer Center and Research Institute

Disclosed Apr 23, 202426,577 affectedConfirmed

The covered entity (CE), Moffitt Cancer Center and Research Institute, reported that an employee emailed the protected health information (PHI) of 756 individuals to their personal email account. The PHI involved included names, treatment information, dates of service, and health insurance information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE sanctioned the employee involved and retrained workforce members to better protect its PHI.

What is known

People affected	26,577 (as reported to HHS)
Disclosed	Apr 23, 2024
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeago.vermont.gov

Vermont Attorney General: 2024-04-23 Moffitt Cancer Center and Research Institute Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Moffitt Cancer Center and Research Institute (Healthcare Provider, FL)

Notices filed

Residents of VTApr 23, 2024

Vermont AGCount not stated

TotalApr 24, 2024

HHS archive26,577 people

TotalMay 24, 2024

HHS archive756 people

History of this record

records2026-09-25

756 to 26577by backfillSource

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 756by backfillSource

summary2026-09-25

empty to The covered entity (CE), Moffitt Cancer Center and Research Institute, reported that an employee emailed the protected health information (PHI) of 756 individuals to their personal email account. The PHI involved included names, treatment iby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Moffitt Cancer Center and Research Institute