As patients in Chicago's hospital systems navigate the World Cup infectious disease preparedness posture, a parallel crisis in healthcare cybersecurity is producing harm of a different but equally serious kind: in 2024, healthcare data breaches exposed the records of more than 289 million individuals in the United States — equivalent to 85% of the entire U.S. population — in a single year.
That figure, documented by the HIPAA Journal's comprehensive 2026 breach statistics compilation, represents a 58% increase in affected individuals from 2023, which itself was up 193% from 2022. The number of individual large healthcare data breaches is increasing by single-digit percentages per year, but the number of affected individuals is exploding — because the breaches that are occurring are targeting the largest healthcare organizations and health insurance systems, extracting records at a scale previously unimagined.
