Two of the three largest healthcare data breaches ever recorded happened at business associates, meaning third-party vendors rather than hospitals or health plans. That pattern is intensifying. In the first half of 2026, business associates were involved in 43 percent of all large healthcare breaches reported to federal regulators, up from an average of 20…
