NASCO announced a data breach. NASCO utilized MOVEit software, which was accessed in late May and the breach was discovered in mid-July.

23andMe announced that customer profile information was accessed without user consent, including DNA Relatives profiles for individual accounts.

Amerity and parent company announced a data breach that exposed personal information after learning of suspicious activity on their computer network.

Hospitals and telehealth providers have been warned by the FTC and the Office for Civil Rights (OCR) regarding online tracking technology.

iHealth has settled with the Office for Civil Rights over potential Health Insurance Portability and Accountability Act (HIPAA) privacy violations.

Philadelphia healthcare facility Vincera has issued a notice following a ransomware attack in April of 2023 that compromised patient data.

Genetic testing firm 1Health has been charged by the Federal Trade Commission (FTC) for leaving personal genetic and health data unsecured. 

Fertility app Premom was charged by the FTC for sharing users' sensitive information with third parties, and sharing sensitive health data to Google.

An unauthorized user accessed online prescription company PillPack's customer email addresses and passwords to log into their online accounts.

As abortion access is debated within the United States, concerns have risen over the ability to protect patient privacy, including on mobile devices.