Back to all incidents

CrowdStrike

crowdstrike.com

CONFIRMED

Healthcare data breach disclosure submitted to federal regulators by CrowdStrike.

Observable Status CONFIRMED

Industry / Sector Healthcare

Incident Classification Protected Health Information (PHI) Breach

Attributed Threat Actor Unattributed / Unknown

Affected Population 8,500,000 records

First Seen 2024-08-08

Last Updated 2026-10-30

Compromised Data Classes:

Protected Health Information (PHI) Patient Medical Records Windows Kernel Driver Configuration Global Infrastructure Availability

Statutory Regulatory Filings:

HHS OCR: HIPAA Breach Portal Disclosure

OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

100% CONFIDENCE

1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%

2. Evidence Specificity +23% Statutory Filing Verified

3. Corroboration Curve +21% 4 independent domains

4. Timeline & Staleness +3% 4 milestones logged

Corroborated Source Domains:

hipaajournal.com infosecurity-magazine.com thehackernews.com cyberscoop.com

STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing

Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, FTC, FCC, EU/UK DPAs). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.

HHS OCR

HIPAA Breach Portal Disclosure

CONFIRMED BY REGULATOR

Docket / Accession ID Statutory Public Notice

Statutory Filing Date 2024-08-08

Disclosed Impact 8,500,000 records

Evidence Standard Regulatory Ground Truth

Statutory Filing Details & Summary (Preserved As Filed):

As promised, CrowdStrike has published the root cause analysis of the faulty Falcon Sensor software update that caused Windows devices […] The post CrowdStrike Confirms Root Cause of Falcon Sensor Outage; Healthcare Losses Anticipated to be $1.94B appeared first on The HIPAA Journal .

View Official Regulatory Filing Document https://www.hipaajournal.com/crowdstrike-issues-update-on-outage-cause-healthcare-hit-hardest-with-estimated-1-94b-in-losses/

Technical Forensic Briefing

Incident Overview

CrowdStrike, operating within the Healthcare sector, has been subject to a cybersecurity incident classified as Protected Health Information (PHI) Breach. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Healthcare data breach disclosure submitted to federal regulators by CrowdStrike.

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include crowdstrike.com.

Identified categories of compromised data and impacted assets include:

Protected Health Information (PHI)
Patient Medical Records

Statutory Disclosures & Compliance

HHS OCR Filing: HIPAA Breach Portal Disclosure (2024-08-08) - Filing Link

Milestone Timeline (4 events logged)

2024-08-08 15:00 UTC

CONFIRMED BY REGULATOR

HHS OCR Healthcare Data Breach Disclosure: CrowdStrike Confirms Root Cause of Falcon Sensor Outage; Healthcare Losses Anticipated to be $1.94B

Source: HHS OCR Regulatory Healthcare Breach Report

2026-09-07 08:28 UTC

Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Researcher Publishes CrowdStrike Privilege Escalation Zero Day

Source: Infosecurity Magazine Report

2026-10-29 06:22 UTC

Media Pickup GOVERNMENT ADVISORY

Press Coverage: China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

Source: The Hacker News Report

2026-10-30 21:30 UTC

Media Pickup INDEPENDENT VERIFICATION

Press Coverage: China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

Source: CyberScoop Report

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub