An estimated 5.6 million people had personal information leaked during a May cyberattack against health care provider Ascension, according to the organization. That makes the incident the third-largest breach of health care data reported in 2024.

More than seven months after a ransomware attack disrupted clinical operations at hospitals across the U.S., Ascension submitted a report showing the scope of the cybercrime. The report to federal regulators showed about 5.

Ascension, one of the largest private U.S. healthcare systems, is notifying nearly 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation.

Ascension Health says the personal, medical, and payment information of 5.6 million people was stolen in a May 2024 ransomware attack.

Healthcare provider Ascension has revealed the sensitive data of 5.6 million patients was compromised in a massive cyberattack earlier this year. The ransomware attack occurred in May and threw the company into turmoil,