QRS Healthcare Data Breach
The 2021 QRS Healthcare data breach occurred in August 2021 when QRS Healthcare (qrshealth.com), a US-based electronic health records (EHR) and clinical management technology provider, suffered unauthorized network intrusion leading to the compromise of patient database repositories subsequently leaked on BreachForums.
Exposed Data Types
1 sensitive6- Health records
- Email addresses
- Names
- Phone numbers
- Physical addresses
- Dates of birth
About This Breach
What information was compromised in the QRS Healthcare incident?
The leaked databases encompass over 11.2 million clinical, billing, and patient profile records. Compromised data classes include:
- Demographic Identifiers: Patient legal names, dates of birth, and residential mailing addresses.
- Contact Credentials: Primary email addresses and telephone numbers of patients and clinical providers.
- Clinical & Medical Data: Diagnosis descriptions, clinical encounter codes, prescription records, and healthcare service history.
How many accounts were affected?
Standardized RFC 5322 ASCII canonical verification confirmed 178,014 unique valid email addresses across 11,289,087 total patient encounter records.
Security advisory & medical identity safeguards
The exposure of Protected Health Information (PHI) elevates risks of medical identity theft and targeted healthcare phishing. Impacted individuals should:
- Routinely review health insurance Explanation of Benefits (EOB) statements for unrecognized medical claims.
- Exercise heightened caution regarding unsolicited calls or emails requesting personal health or insurance updates.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
