Frederick Health data breach impacts nearly 1 million patients

Frederick Health Medical Group experienced a ransomware event detected on January 27, 2025, that led to the unauthorized copying and exfiltration of files from a file share server. The breach exposed sensitive PII and PHI—including names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical record numbers, insurance and clinical information—and affected 934,326 patients according to an HHS breach report; the organization notified law enforcement, hired a forensic firm, and is notifying impacted individuals. No ransomware group publicly claimed the incident, which the report suggests may indicate the provider paid the ransom.