HCA Healthcare has one hundred eighty-two (182) hospitals and 2,200 care centers spanning the United States and the United Kingdom, effectively making them one of the largest healthcare facility owners and operators. On July 5th, 2023, a threat actor began posting samples of alleged stolen HCA Healthcare data on a leaked and stolen data forum. The post claimed that the stolen database consisted of seventeen (17) files and 27.7 million records, having patient records that spanned from 2021 to 2023. The threat actor didn’t initially post the database for sale, posting it more so for credibility and as a way to financially pressure HCA. After the database and samples were posted, the threat actor stated that HCA had until July 10th, 2023, to meet their demands. After not hearing back, the full database was posted for sale by the threat actor. The same day, HCA confirmed that they had indeed been compromised, disclosing the data breach and estimating that it had impacted 11 million patients. HCA vocalized that “there has been no disruption to the care and services HCA Healthcare provides.” The data was allegedly stolen from an “external storage location” used to format patient email messages that gave the hacker access to data including patients’ full name, city, state, and ZIP code, email address, telephone number, date of birth, gender, service date and location, as well as next appointment date. It’s not believed that the stolen data included any clinical information such as patients’ conditions, diagnosis, or treatment, nor credit card or bank account numbers and other sensitive information. While the data stolen is on the less sensitive side, it could still be valuable to threat actors for phishing attacks, scams, and social engineering attacks.