2026 Blue Fish Pediatrics — 62,150+ patients notified after July 2025 PHI breach
Data compromised
Names, dates of birth, Social Security numbers, and protected health information per Texas AG reporting and HIPAA Journal
Technical writeup
Verified healthcare data breach — disclosed June–July 2026. Houston-based Blue Fish Pediatrics notified patients of a data breach occurring July 11–17, 2025, with consumer notification arriving nearly a year later. DataBreaches.net initially reported 41,485 Texas residents notified June 18, 2026; subsequent HIPAA Journal reporting and the U.S. HHS OCR breach portal list 62,150 individuals affected (submission June 18, 2026). Exposed categories include full names, dates of birth, Social Security numbers, and protected health information.
Root cause
Unauthorized access to Houston pediatric group systems (July 11–17, 2025); delayed consumer notification