By HFT Staff

HCA Healthcare has notified individuals of a cybersecurity incident involving unauthorized access to certain IT systems and files containing personal information provided in connection with employment. 

The organization identified suspicious activity on Aug. 12, 2026, and took steps to secure the affected systems. HCA Healthcare launched an investigation with the assistance of outside cybersecurity experts and notified law enforcement. The investigation determined that an unauthorized party accessed the systems that day and obtained copies of certain files containing medical resident personal information. 

The compromised files contained human resources information, including names, Social Security numbers, dates of birth, personal email addresses, phone numbers and immigration information, where applicable. 

HCA Healthcare said it currently has no indication that the information has been published, further disclosed or used for unauthorized transactions or identity theft. 

In response, the organization is offering affected individuals two years of complimentary identity theft protection services through IDX. The services include credit and dark web monitoring, a $1 million insurance reimbursement policy and identity restoration assistance. 

HCA Healthcare also encouraged affected individuals to review account statements and available credit reports for suspicious activity as a precaution.