57 Million Healthcare Records Breached in 2025. Most Were in Places Nobody Knew to Look.
Most breached PHI was in places nobody inventoried—forgotten file servers, legacy backups, shadow IT. HIPAA-covered entities need to scan beyond clinical systems before OCR asks where patient data actually lived.