Norton Healthcare

Disclosed Jul 7, 20232,500,000 affectedConfirmed

Ransomware attack on Norton Healthcare exposes data of 2.5 million patients

Kentucky nonprofit Norton Healthcare said attackers accessed network storage devices between May 7 and May 9, 2023. Personal, health and insurance information including Social Security numbers of about 2.5 million patients plus employees and dependents was exposed; Norton said it did not pay a ransom.

What is known

People affected	2,500,000 (as reported by the organization)
Disclosed	Jul 7, 2023
Discovered	May 9, 2023
Happened	May 7, 2023
Attack	Ransomware
Data exposed	NamesDates of birthSocial Security numbersHealthInsurance
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Norton Healthcare

Official noticeatg.wa.gov

Washington Attorney General breach notice: Norton Healthcare

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Norton Healthcare

Regulatoroag.ca.gov

California AG data breach notice: Norton Healthcare, Inc.

Newstechcrunch.com

US healthcare giant Norton says hackers stole millions of patients' data during ransomware attack

Official noticeago.vermont.gov

Vermont Attorney General: 2023-12-08 Norton Healthcare Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Norton Healthcare (Healthcare Provider, KY)

Notices filed

TotalJul 7, 2023

HHS archive2,500,000 people

Residents of CADec 8, 2023

California AGCount not stated

Residents of WADec 8, 2023

Washington AG1,872 people

TotalDec 8, 2023

Research2,500,000 people

Residents of VTDec 8, 2023

Vermont AGCount not stated

Residents of ORDec 13, 2023

Oregon DOJ2,500,000 people

History of this record

disclosed2026-09-25

2023-12-08 to 2023-07-07by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-12-08-norton-healthcare-data-breach-notice-consumersby backfillSource

attack2026-09-25

hacking to ransomwareby seedSource

data_types2026-09-25

[] to ["names","dob","ssn","health","insurance"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 2500000by seedSource

summary2026-09-25

empty to Kentucky nonprofit Norton Healthcare said attackers accessed network storage devices between May 7 and May 9, 2023. Personal, health and insurance information including Social Security numbers of about 2.5 million patients plus employees anby seedSource

title2026-09-25

empty to Ransomware attack on Norton Healthcare exposes data of 2.5 million patientsby seedSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2023-05-09by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Norton Healthcare