Almeida Law Group is investigating a data breach at University of Miami. If you were affected, contact Almeida Law Group.
About University of Miami
The University of Miami Health System (UHealth) is South Florida’s only university-based academic health system, affiliated with the University of Miami Leonard M. Miller School of Medicine. Based in Miami, Florida, it operates a flagship hospital, nearly 40 outpatient facilities, and a network of more than 2,700 physicians and healthcare providers across South Florida. Because UHealth functions as a healthcare provider, it maintains electronic medical records and other sensitive patient information, making data security incidents particularly significant for the patients it serves.
What Happened?
University of Miami was listed in an HHS Office for Civil Rights breach portal report submitted on June 17th, 2026. The filing classifies the incident as an unauthorized access or disclosure affecting electronic medical records and network servers. A total of 6,721 individuals were affected. No business associate was involved. The specific data types exposed in this incident were not identified in the HHS filing or any available supplemental reporting.
This appears to be a new, distinct incident from prior University of Miami data security events. The health system has experienced a documented pattern of breaches over more than a decade. In 2013, billing records for more than 13,000 patients stored by an off-site vendor went missing, exposing names, dates of birth, Social Security numbers, and medical information — that incident led to the class action Carsten v. University of Miami (Case No. 1:14-cv-20497, S.D. Fla.), which was settled. In 2021, the Clop ransomware gang exploited the Accellion file transfer vulnerability and posted patient medical records and demographic information on its dark web leak site. Most recently, a 2025 insider breach involved an employee who accessed more than 2,000 patient records without authorization between September 2022 and May 2025, affecting approximately 2,928 individuals; that incident was under investigation by Federman & Sherwood as of August 2025. No litigation specific to this June 2026 breach has been identified.
Key Facts at a Glance
- Company or Organization: University of Miami (UHealth)
- Industry: Healthcare / Academic Medical System
- Location: Miami, Florida
- Incident type: Unauthorized Access/Disclosure
- Total persons affected: 6,721
- Prior breach: Yes — multiple prior incidents (2013, 2021, 2025)
- Litigation status: No litigation identified for this incident; prior incidents resulted in a settled class action (2013) and an ongoing law firm investigation (2025 insider breach)
- Source: HHS Office for Civil Rights breach portal report; Healthcare Facilities Today – 2025 insider breach; Federman & Sherwood investigation; HIPAA Journal – 2021 Accellion breach; Winston & Strawn – 2013 settlement
What Should You Do?
If you believe you may have been affected by this breach, start by placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Request your free credit reports at AnnualCreditReport.com and review them carefully for unfamiliar activity. Because this incident involved electronic medical records, you should also review any Explanation of Benefits statements from your health insurer and request a copy of your medical records to check for errors or services you did not receive. If you find signs of identity theft, report them at IdentityTheft.gov, which provides a personalized recovery plan. Stay alert for phishing emails or calls that reference your medical care, as those can follow health data breaches.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
