Change Healthcare (Optum / UnitedHealth Group)
The largest health-data breach on record in the US.
Unassigned
Companies
Company records matching your filters, worst first. Rows marked unverified have not been checked against a primary source.
Results
Practice Fusion (Veradigm)
In January 2020 Practice Fusion, a free, ad-supported EHR used heavily by small practices, agreed to pay $145 million to resolve criminal and civil…
Unassigned
eClinicalWorks (incl. healow)
In May 2017 eClinicalWorks (eCW) and three of its founders agreed to pay $155 million.
Unassigned
Epic Systems (corporate EHR)
Epic is the software company behind the medical records at a very large share of US hospitals, and through its Cosmos research database it pools de-identified…
Unassigned
Greenway Health
In February 2019 Greenway Health agreed to pay $57.25 million to settle False Claims Act allegations over its Prime Suite EHR.
Unassigned
ModMed (Modernizing Medicine)
In November 2022 Modernizing Medicine (ModMed), the specialty EHR common in dermatology, ophthalmology and orthopedic practices, agreed to pay $45 million to…
Unassigned
NextGen Healthcare
Two separate problems. First, in July 2023 NextGen agreed to pay $31 million to settle False Claims Act allegations.
Unassigned
Oracle Health (formerly Cerner)
Oracle Health, the hospital records business Oracle bought when it acquired Cerner, had patient data stolen from old Cerner data-migration servers in early…
Unassigned
Veradigm (formerly Allscripts; incl. Practice Fusion)
Veradigm, the company formerly called Allscripts, owns the Practice Fusion records system, which in January 2020 agreed to pay $145 million to resolve federal…
Unassigned
Apple Health Records (Apple Inc.)
The Health Records feature on iPhone and iPad lets you download your records directly from participating hospitals and clinics onto your phone.
Unassigned
Carequality (The Sequoia Project)
Carequality isn't a database. It's a shared rulebook that lets EHR vendors and data networks such as Epic, Particle Health and Health Gorilla request patient…
Unassigned
Health Gorilla
Health Gorilla is one of the ten federally designated QHINs and also runs a consumer 'Patient Access' service that lets individuals pull their own records…
Unassigned
Particle Health
Particle Health sells API access to patient records pulled from the national exchange networks to digital-health companies, payers, health systems and…
Unassigned
PointClickCare
PointClickCare is the dominant records system in US nursing homes.
Unassigned
TEFCA / QHINs (federal framework)
TEFCA is the federal government's framework for nationwide health-record exchange.
Unassigned
athenahealth
In January 2021 athenahealth agreed to pay $18.25 million to resolve allegations that it paid illegal kickbacks to sell its EHR.
Unassigned
AdvancedMD
Nothing confirmed
Unassigned
Altera Digital Health (formerly Allscripts hospital business)
Nothing confirmed
Unassigned
CommonWell Health Alliance
CommonWell is a nationwide record-exchange network founded by EHR companies, and it is one of the ten federally designated QHINs under TEFCA.
Unassigned
CureMD
Nothing confirmed
Unassigned
DrChrono (EverHealth / EverCommerce)
No DOJ, OCR, FTC, state AG, information-blocking or breach finding against DrChrono was verified this pass.
Unassigned
Elation Health
Nothing confirmed
Unassigned
MEDITECH (Medical Information Technology, Inc.)
Nothing confirmed
Unassigned
Netsmart Technologies
Netsmart makes records software for behavioral health, addiction treatment, human services and post-acute care, so it holds some of the most sensitive records…
Unassigned
Tebra (formerly Kareo / PatientPop)
No breach, DOJ, OCR, FTC or state AG action against Tebra was verified this pass.
Unassigned
WellSky
Nothing confirmed
Unassigned
Try fewer filters, or clear them all.