2025 final tally: ~710 large breaches affecting approximately 62 million individuals (preliminary). The Conduent breach alone — now confirmed at 25M+ — will push this figure significantly higher when fully tabulated.
North Korea Enters Healthcare Ransomware.** The Lazarus Group has been confirmed operating as a Medusa ransomware affiliate, targeting U.S. healthcare and non-profit organizations since November 2025. This marks a significant convergence of nation-state and criminal operations.
46 large healthcare data breaches were reported to OCR in January (the most recent complete month) — continuing the trend of suppressed reporting that began during the government shutdown.
Subscriber content
Subscribe to Cybersecurity Analysis & Insight
Quarterly reports, breach advisories, threat actor tracking, and compliance calendars — all sectors included.
$795/year individual
or $69/month · Organization plans at $4,500/year ($375/month)