How many data breaches has Mayo Clinic had?

Mayo Clinic has been involved in 3 reported healthcare data breaches affecting a total of 123,021 patients. The earliest breach was reported in 2023 and the most recent in 2025.

Was I affected by a Mayo Clinic data breach?

If you received healthcare services from Mayo Clinic, you may have been affected by one of their 3 reported breaches. Check your mail for breach notification letters, review your medical records for unauthorized changes, and use our breach checker tool to search for specific incidents.

How many data breaches has Mayo Clinic had?

Mayo Clinic has been involved in 3 reported healthcare data breaches affecting a total of 123,021 patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Unauthorized Access/Disclosure, Hacking/IT Incident.

Was my data affected by the Mayo Clinic breach?

If you were a patient of Mayo Clinic during the breach period, your data may have been compromised. Check your mail for breach notification letters. You can also contact Mayo Clinic directly or file a records request to verify what data was accessed.

What data was exposed in the Mayo Clinic breach?

Healthcare data breaches can expose names, dates of birth, Social Security numbers, medical records, insurance information, and financial data. The specific data types vary by incident. Review the breach notification from Mayo Clinic for details on what was compromised.

Can I sue Mayo Clinic for a data breach?

Whether you can bring or join a claim depends on the incident, governing law, documented harm, filing deadlines, and any court-approved settlement terms. Review current court materials and consult a licensed healthcare data breach attorney for advice about your circumstances.

How many data breaches has Mayo Clinic had?

Mayo Clinic has been involved in 3 reported healthcare data breaches affecting a total of 123K patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Unauthorized Access/Disclosure, Hacking/IT Incident. If you received care from Mayo Clinic, review the timeline below to check if your data may have been compromised.

Mayo Clinic Data Breaches (3 Incidents)

2025

Mayo Clinic

2025-03-28 · Minnesota

medium

2K affectedUnauthorized Access/DisclosureEmail

Protected health information (PHI) contained in email communications, which may have included: patient names, dates of birth, medical record numbers, Social Security numbers, insurance information, clinical notes and diagnoses, medication lists, test results and lab values, appointment information, healthcare provider names and contact information, billing and payment information, and other sensitive health-related communications between patients and healthcare providers.

2024

Mayo Clinic

2024-06-05 · Minnesota

critical

120K affectedHacking/IT IncidentNetwork Server

While Mayo Clinic has not publicly disclosed the specific types of protected health information compromised in this breach, network server incidents involving business associates typically expose multiple categories of sensitive patient data. The compromised information likely includes patient names, dates of birth, addresses, phone numbers, and email addresses as basic demographic identifiers. Medical information such as diagnoses, treatment information, medication lists, laboratory results, physician notes, and medical record numbers may have been accessed. Insurance information including policy numbers, group numbers, insurance company names, and claims data was potentially exposed, particularly if the business associate provided billing or claims processing services. Depending on the business associate's specific functions, the breach may have also exposed Social Security numbers, driver's license numbers, financial account information, or payment card data if these were collected for billing, identity verification, or payment processing purposes. Patient portal login credentials, appointment information, and other healthcare service details may have been compromised. The full scope of exposed data types should be detailed in individual notification letters sent to affected patients.

2023

Mayo Clinic

2023-11-03 · Minnesota

medium

1K affectedUnauthorized Access/DisclosureNetwork Server

While the specific data elements exposed in this incident were not detailed in the breach submission, unauthorized access to a healthcare network server typically results in exposure of some or all of the following protected health information: patient names, dates of birth, Social Security numbers, medical record numbers, insurance information, clinical diagnoses and treatment information, medication records, laboratory and imaging results, healthcare provider names and contact information, and billing/financial account information. The actual scope of exposed data depends on what information was stored on the compromised network server and what access permissions the unauthorized user obtained.

Mayo Clinic Data Breach History

How many data breaches has Mayo Clinic had?

Breach Timeline

Related resources

Mayo Clinic Data Breach History

How many data breaches has Mayo Clinic had?

Breach Timeline

Related resources