Norton Healthcare
Disclosed Jul 7, 20233 years ago2,500,000 affectedConfirmed
Ransomware attack on Norton Healthcare exposes data of 2.5 million patients
Kentucky nonprofit Norton Healthcare said attackers accessed network storage devices between May 7 and May 9, 2023. Personal, health and insurance information including Social Security numbers of about 2.5 million patients plus employees and dependents was exposed; Norton said it did not pay a ransom.
What is known
| People affected | 2,500,000 (as reported by the organization) |
|---|---|
| Disclosed | Jul 7, 2023 |
| Discovered | May 9, 2023 |
| Happened | May 7, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Dates of birth, Social Security numbers, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Norton Healthcareoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Norton Healthcareatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Norton Healthcarejustice.oregon.gov · Official notice | Official notice |
| California AG data breach notice: Norton Healthcare, Inc.oag.ca.gov · Regulator | Regulator |
| US healthcare giant Norton says hackers stole millions of patients' data during ransomware attacktechcrunch.com · News | News |
| Vermont Attorney General: 2023-12-08 Norton Healthcare Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Norton Healthcare (Healthcare Provider, KY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 7, 2023 | 2,500,000 |
| California AGresidents of CA | Dec 8, 2023 | |
| Washington AGresidents of WA | Dec 8, 2023 | 1,872 |
| Researchtotal | Dec 8, 2023 | 2,500,000 |
| Vermont AGresidents of VT | Dec 8, 2023 | |
| Oregon DOJresidents of OR | Dec 13, 2023 | 2,500,000 |
History of this record
- 2026-09-25 · disclosed: 2023-12-08 to 2023-07-07 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-12-08-norton-healthcare-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: hacking to ransomware · seed source
- 2026-09-25 · data_types: [] to ["names","dob","ssn","health","insurance"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 2500000 · seed source
- 2026-09-25 · summary: empty to Kentucky nonprofit Norton Healthcare said attackers accessed network storage devices between May 7 and May 9, 2023. Personal, health and insurance information including Social Security numbers of about 2.5 million patients plus employees an · seed source
- 2026-09-25 · title: empty to Ransomware attack on Norton Healthcare exposes data of 2.5 million patients · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2023-05-09 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.