Date of Breach
Allegation
Institution Type
Number Impacted
If you received a letter or email about a data breach from HCA Healthcare, Inc. (“HCA”), a major healthcare facilities operator based in Nashville, Tennessee, your personal and protected health information may be at risk from a data breach. Our firm is investigating this incident and can help you understand your rights and legal options.
On August 12, 2026, HCA Healthcare identified suspicious activity involving its IT systems. In response, HCA took steps to secure the affected systems, notified law enforcement, and began an investigation with the help of outside cybersecurity experts. The investigation determined that an unknown unauthorized party gained access to HCA’s systems on August 12, 2026. The breach seems to have affected two groups of people. One is patients who received care from an HCA-affiliated provider, and the other is medical resident employees whose HR files were accessed.
On October 29, 2026, HCA reported the data breach to the Massachusetts Office of Consumer Affairs and Business Regulation, indicating that 55 Massachusetts residents were affected. On October 30, 2026, HCA reported the breach to the Office of the Attorney General of Texas, indicating that over 15,000 Texas residents were affected. Affected individuals are being sent notice letters via U.S. Mail.
Based on HCA Healthcare’ public disclosures, the following categories of information were involved in the breach:
Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice letter or email from HCA Healthcare, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.
HCA Healthcare (historically known as Hospital Corporation of America) is a major global operator of healthcare facilities with its headquarters in Nashville, Tennessee.
UNDER THE RULES OF CERTAIN JURISDICTIONS, THIS WEBSITE MAY CONSTITUTE ATTORNEY ADVERTISING.
