The biggest health care data breaches you should know about in Georgia

It starts with an often-paralyzing attack on computer systems. Doctors scramble to notify patients awaiting surgery that their procedures have been delayed due to a ransomware attack.

Sometimes a single cyberattack can impact hospitals across multiple states, as was the case when hackers targeted CommonSpirit Health in October 2022. Just one reported case of ransomware has allegedly led to the death of a patient. More often, patients' sensitive information is served up to a market of seedy individuals around the world ready to cash in on someone else's identity.

Health care institutions are among the most targeted businesses in the world, chiefly because they hold such sensitive information about the patients they serve. Hospitals, home health agencies, and other institutions store patients' phone numbers, Social Security numbers, addresses, and other things that would allow any would-be criminal to pose as a patient and open new credit cards or bank accounts in their name.

Drata analyzed Department of Health and Human Services data to determine which health care data breaches reported in 2022 affected the most residents in Georgia. Breaches that did not include locations were not included in this analysis.

Read on to see which institutions reported data breaches to the federal government in your state and explore the largest across the nation here.

1. Urology of Greater Atlanta, LLC network server, other breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 79,795
- Date reported: 10/07/2022

2. Ascension St. Vincent's Coastal Cardiology network server breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 71,227
- Date reported: 10/14/2022

3. AU Health electronic medical record, other breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 50,631
- Date reported: 05/27/2022

4. Creative Hospice Care, Inc. dba Homestead Hospice & Palliative Care email, laptop breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 28,332
- Date reported: 05/23/2022

5. Bako Diagnostics network server breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 25,745
- Date reported: 02/25/2022

6. Employee Group Insurance Benefits Plan of Acuity Brands, Inc. network server breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 20,849
- Date reported: 12/06/2022

7. NorthStar HealthCare Consulting LLC email breach
- Type of breach: Unauthorized Access/Disclosure
- Individuals affected: 18,354
- Date reported: 08/26/2022

8. Wayne Family Practice Associates, PC network server breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 5,944
- Date reported: 04/19/2022

9. Smith, Gambrell & Russell, LLP network server breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 4,688
- Date reported: 09/28/2022

10. The Multiple Sclerosis Center of Atlanta email breach
- Type of breach: Hacking/IT Incident
- Individuals affected: 2,820
- Date reported: 05/25/2022