---
schema_version: "secwatch.filing_event.v1"
accession: "0001193125-23-184269"
form_type: "8-K"
ticker: "HCA"
cik: "0000860730"
company_name: "HCA Healthcare, Inc."
filed_at: "2023-07-10T23:59:59+00:00"
generated_at: "2026-06-13T10:48:56.728731+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.55
calibrated_materiality_score: 0.55
confidence: "high"
source: SEC EDGAR
---

# HCA Healthcare reports data security incident affecting patient contact and appointment information

## Summary
- Unknown unauthorized party posted patient names, email, phone, birth date, gender, service date, and appointment location on an online forum.
- Excluded data: clinical treatment/diagnosis, payment info, passwords, driver's license, and Social Security numbers.
- Theft occurred from an external storage location used to format email messages; no disruption to patient care or operations.
- Company reported incident to law enforcement, retained forensic advisors, disabled access, and will offer credit monitoring to impacted patients.
- HCA believes the incident will not materially impact its business, operations, or financial results based on current information.

## SEC filing metadata
- accession: 0001193125-23-184269
- form_type: 8-K
- ticker: HCA
- cik: 0000860730
- company_name: HCA Healthcare, Inc.
- filed_at: 2023-07-10T23:59:59+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.55
- calibrated_materiality_score: 0.55
- confidence: high
- sec_items: 8.01, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/860730/000119312523184269/0001193125-23-184269-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/860730/000119312523184269/d522417d8k.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0001193125-23-184269
- JSON: https://secwatch.observer/filing/0001193125-23-184269.json
- Plain text: https://secwatch.observer/filing/0001193125-23-184269.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.
