Correction: Our Biggest Data Breach Article Was Wrong
Matthew Leo · Published April 14, 2026 · Last updated September 29, 2026 · News
Correction: The original version of this article described an unnamed breach involving 140 million patient records and called it the largest healthcare breach in U.S. history. It did not identify the affected company, provide dates or link to evidence. Mapletechie has been unable to verify the event or several related claims in the article. Those claims are withdrawn.
The comparison was also wrong. In January 2025, UnitedHealth Group said the 2024 attack on Change Healthcare affected about 190 million people. That confirmed figure alone was larger than the unsupported 140-million figure used here. The U.S. Department of Health and Human Services has maintained an official Change Healthcare incident page, and Reuters reported UnitedHealth's updated count on January 24, 2025.
What we could not verify
We found no reliable basis for the original article's claim that a 140-million-record healthcare breach had just occurred. We also could not substantiate its statements that a vulnerability had been disclosed 23 months earlier, that an internal audit had raised the issue 14 months earlier, or that executives had chosen not to act. Because the article never named an organization or cited a source, readers had no way to check those assertions.
The original advice telling every American who had interacted with the healthcare system to assume their data was included was also too broad. People should rely on a notice from the affected organization, an official government breach record or another source that identifies the incident and the data involved.
What readers should do
If you receive a breach notice, confirm it through the organization's official website rather than following a link in an unexpected email or text. The notice should explain what information was involved and whether identity monitoring is available. U.S. readers can also review the Federal Trade Commission's IdentityTheft.gov guidance. Canadian readers who suspect identity fraud can consult the Canadian Anti-Fraud Centre.
This page remains online so the correction is attached to the original URL. The unsupported breach narrative has been removed rather than quietly rewritten as if it had been accurate.
Tags: data breach, Healthcare, privacy, security