--- title: More than 44 Million Patient Health Records Compromised in 2019 in the US description: Data breaches in the healthcare industry are on the rise in the United States, and more people are affected each year. While the number of breaches is rising, the number of affected patient records is soaring, having tripled since 2018. image: https://businessinsights.bitdefender.com/hubfs/hush-naidoo-yo01Z-9HQAw-unsplash.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Silviu Stahie**](https://businessinsights.bitdefender.com/author/silviu-stahie) / Feb 19, 2020 # More than 44 Million Patient Health Records Compromised in 2019 in the US Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us&utm_medium=social&utm_source=facebook) Data breaches in the healthcare industry are on the rise in the United States, and more people are affected each year. While the number of breaches is rising, the number of affected patient records is soaring, having tripled since 2018. The healthcare industry doesn’t limit itself to clinics, hospitals and the like, but includes business associates as well, which is an umbrella term for all the people and organizations that deal with protected health information. And that protected information is what hackers want. Private medical records can sell for up to $1,000 on the dark web, especially when they include details such as real names, Social Security numbers, addresses, and so on. Hackers will either look to compromise this data and hold it for ransom or try to exfiltrate it and sell it on the dark market. Sometimes, criminals do both. **A conservative estimate** Tallying all of data breaches in 2019 is not possible, for a couple of reasons. First of all, not all data breaches are reported to the proper authorities or made public. Secondly, it’s highly likely that some data breaches have yet to be discovered. Whatever the reason, it’s an underestimate to say only 41,404,022 patient records were affected by data breaches in 2019. All in all, the number of patient records affected tripled in 2019 from 2018, according to the research, which is interesting because the healthcare industry has been trying to better adopt good practices. For now, it’s unclear whether any of this data has hit the dark web, but it’s not unlikely. **Insiders and hackers are to blame** Two vectors need to be considered when it comes to compromised patient records. Insiders are a problem, whether through errors or malice, but most records are lost to hacking incidents. Insiders are people who work in the industry, and since they have direct access to the data, they could expose it by mistake. In fact, 3.65 million records were exposed just because of human mistakes. By comparison, insider wrongdoing is responsible for 136,566 compromised records. Hacking is where the healthcare industry is the most vulnerable. The criminals adapt their methods to evolutions in protection and other trends in cybersecurity. Until recently, a ransomware attack would block the activity of a company and data breaches were used to steal data. Now, these two events can happen at the same time, with some ransomware gangs stealing private data after compromising the network. Making matters worse, some criminals use the stolen data to extort individual users, threatening to publish their photos and medical information. 2019 saw 330 hacking incidents, a clear increase from the 220 registered in 2018 and 176 in 2017. This meant that, in 2019, almost 37 million patient records were breached. ![Credits: Protenus](https://businessinsights.bitdefender.com/hs-fs/hubfs/Capture-49.jpg?width=600&name=Capture-49.jpg)   And all of these incidents are not all that clear cut because healthcare organizations take a very long time to discover a beach -- an average of 224 days. Pragmatically, this translates into a simple fact. Right now, there are ongoing data breaches, with hackers accessing private information, and nobody knows about it. There’s no reason to believe the wave of attacks on the healthcare industry will slow down. If anything, the trend shows there will be even more in 2020. Clinics, hospitals, and other players in the health field have to beef up their cybersecurity and better train people directly working with patient data. The information about compromised patient records were collated by [Protenus](https://www.protenus.com/resources/2020-breach-barometer/) from the US Department of Health and Human Services (HHS), the media, and other sources. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Equifax - the second largest data breach in history: 143 million people could be affected](https://businessinsights.bitdefender.com/equifax-breach-security-incident?hsLang=en-us) ### [Bitdefender’s Response to FireEye and SolarWinds Breaches and Recommendations for Organizations](https://businessinsights.bitdefender.com/bitdefenders-response-to-recent-breaches-and-recommendations-for-organizations?hsLang=en-us) ### [The Stakes Are High for Data Breaches – Most Organizations Believe Hackers Can Penetrate Their Network](https://businessinsights.bitdefender.com/the-stakes-are-high-for-data-breaches-most-organizations-believe-hackers-can-penetrate-their-network?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Silviu Stahie", "url" : "https://businessinsights.bitdefender.com/author/silviu-stahie" }, "dateModified" : "2020-02-19T13:25:57.313Z", "datePublished" : "2020-02-19T13:25:18.000Z", "headline" : "More than 44 Million Patient Health Records Compromised in 2019 in the US", "image" : [ "https://businessinsights.bitdefender.com/hubfs/hush-naidoo-yo01Z-9HQAw-unsplash.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/more-than-44-million-patient-health-records-compromised-in-2019-in-the-us", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```