✅ Official notice on file. HCA Healthcare, Inc. filed this data breach notice with the California Attorney General on Oct 29, 2026. Compare it with the letter you received: the official copy is linked below.
HCA Healthcare, Inc. reported a data breach caused by unauthorized access to its computer network. The information involved includes Social Security number, date of birth, email address, phone number.
Key facts
| Discovered | Aug 12, 2026 |
|---|---|
| Incident type | Network intrusion |
| Data exposed | Social Security number, Date of birth, Email address, Phone number |
| Letter sent | Nov 2, 2026 |
| Reported to California AG | Oct 29, 2026 |
| Company helpline | 1-866-200-0915 |
Free credit monitoring
HCA Healthcare, Inc. is offering 12 months of IDX at no cost to people who received the letter. Enroll at app.idx.us/account-creation/protect using the activation code printed on your letter.
What to do now
- Freeze your credit for free at Equifax, Experian and TransUnion, and request an IRS Identity Protection PIN at irs.gov to block fraudulent tax returns in your name.
- Your date of birth is often used to verify identity: add a fraud alert to your credit file so lenders must confirm it is really you.
- Expect targeted phishing that mentions this incident: do not click links in unexpected emails about the breach.
- Be wary of calls or texts that mention this incident and ask for codes or payment.
- Get your free credit reports at AnnualCreditReport.com and look for accounts you do not recognize.
- Call the HCA Healthcare, Inc. helpline at 1-866-200-0915 if you have questions about your letter.
Timeline
- Aug 12, 2026 — HCA Healthcare, Inc. discovers the incident
- Oct 29, 2026 — Breach reported to the California Attorney General
- Nov 2, 2026 — Notification letters sent
Previous breaches at HCA Healthcare, Inc.
- Aug 1, 2023 (notice)
Other recent data breaches
- RevSpring, Inc. data breach
- Hoag Memorial Hospital Presbyterian data breach
- University of Mississippi Medical Center data breach
- El Camino Health data breach
- EyeMed Vision Care, LLC data breach
Source: notification letter and filing submitted by HCA Healthcare, Inc. to the California Attorney General. BreachLetter is not affiliated with HCA Healthcare, Inc.. Details extracted from the official letter; always follow the instructions in your own copy.