Independent public-records tracker. Not a government website.Facts from official state, HHS and SEC filings

Largest data breaches of 2023

The 11 data breaches first reported in 2023 with the most people affected, using official totals from the filings. Where no official total was filed, the number is the sum of state filings and is labelled "At least". Facts come from official filings with US state attorneys general, the U.S. Department of Health and Human Services (HHS) and the SEC; each breach page links its sources.

Updated Oct 21, 2026 · Showing 1–11 of 11

# Organization First filed People affected Information exposed Filed with
1 HCA HealthcareHCA Healthcare breach history 11,270,000Official total
  • Medical information
  • Date of birth
  • Name
  • +1 more
HHS, Washington AG, California AG
2 Perry Johnson & Associates, Inc. (PJ&A)Perry Johnson & Associates, Inc. breach history 9,302,588Official total
  • Social Security number
  • Medical information
  • Health insurance information
  • +3 more
Washington AG, HHS, California AG
3 Managed Care of North America, Inc.Managed Care of North America, Inc. breach history 8,627,242Official total
  • Social Security number
  • Medical information
  • Driver's license
  • +3 more
Washington AG, HHS, California AG
4 Colorado Department of Health Care Policy & FinancingColorado Department of Health Care Policy & Financing breach history 4,091,794Official total
  • Medical information
HHS, California AG
5 Cerebral, IncCerebral, Inc breach history 3,179,835Official total
  • Medical information
  • Date of birth
  • Name
  • +1 more
HHS, Washington AG, California AG
6 Comcast Cable Communications LLCComcast Cable Communications LLC breach history At least 3,100,608Sum of state filings
  • Social Security number
  • Date of birth
  • Username and password
  • +1 more
Washington AG, California AG
7 NationsBenefits Holdings, LLCNationsBenefits Holdings, LLC breach history 3,099,502Official total
  • Medical information
HHS, California AG
8 ESO Solutions, Inc.ESO Solutions, Inc. breach history 2,700,000Official total
  • Social Security number
  • Medical information
  • Date of birth
  • +1 more
HHS, California AG, Washington AG
9 Postmeds, Inc.Postmeds, Inc. breach history 2,369,026Official total
  • Social Security number
  • Medical information
  • Name
Washington AG, HHS, California AG
10 Pension Benefit Information, LLCPension Benefit Information, LLC breach history 1,866,694Official total
  • Social Security number
  • Medical information
  • Date of birth
  • +2 more
California AG, Washington AG, HHS
11 Retina Group of Washington, PLLCRetina Group of Washington, PLLC breach history 455,935Official total
  • Medical information
HHS

Other years

People affected is the official total from a filing, or “At least” the sum of state filings where no total was filed. Spotted an error? Report a correction.