HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 1 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Universal Dermatology & Vein Care | FL | Healthcare Provider | 35,295 | Sep 30, 2026 | Hacking/IT Incident | Under investigation |
| Indiana University Health, Affiliated Covered Entity | IN | Healthcare Provider | 2,080 | Sep 29, 2026 | Hacking/IT Incident | Under investigation |
| Center for bone and Joint Surgery of the Palm Beaches | FL | Healthcare Provider | 5,461 | Sep 25, 2026 | Hacking/IT Incident | Under investigation |
| Source Care Management, LLC d/b/a NextStep Care | GA | Healthcare Provider | 685 | Sep 25, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Vascular Associates of South Alabama | AL | Healthcare Provider | 623 | Sep 25, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Kostelic and Associates 3PLLC | NC | Healthcare Provider | 535 | Sep 25, 2026 | Hacking/IT Incident | Under investigation |
| Imagine the Possibilities | IA | Health Plan | 1,693 | Sep 21, 2026 | Hacking/IT Incident | Archive (closed) |
| Woodlawn Hospital | IN | Healthcare Provider | 742 | Sep 21, 2026 | Hacking/IT Incident | Under investigation |
| Applied Healthcare Nursing Division, Inc. d/b/a Doctor's Choice Home Care | TX | Healthcare Provider | 14,333 | Sep 19, 2026 | Hacking/IT Incident | Archive (closed) |
| OU Medicine, Inc. | OK | Healthcare Provider | 854 | Sep 18, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Three Oaks Hospice, Incorporated | TX | Business Associate | 36,622 | Sep 17, 2026 | Hacking/IT Incident | Under investigation |
| Project Belle, LLC | NH | Healthcare Provider | 840 | Sep 17, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| AngMar Management Services | TX | Business Associate | 126,196 | Sep 16, 2026 | Hacking/IT Incident | Under investigation |
| WindRose Health Network | IN | Healthcare Provider | 33,158 | Sep 16, 2026 | Hacking/IT Incident | Under investigation |
| At Home Medical, Inc. | NJ | Healthcare Provider | 1,091 | Sep 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Advanced Radiology Services, P.C. | MI | Healthcare Provider | 826 | Sep 16, 2026 | Hacking/IT Incident | Under investigation |
| Leggett & Platt, Incorporated Employee Benefit Plan | MO | Health Plan | 61,702 | Sep 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Bacon County Health Services, Inc. | GA | Healthcare Provider | 501 | Sep 15, 2026 | Hacking/IT Incident | Under investigation |
| Camden-on-Gauley Medical Center | WV | Healthcare Provider | 501 | Sep 15, 2026 | Hacking/IT Incident | Under investigation |
| Clover Health | MN | Health Plan | 138,677 | Sep 14, 2026 | Hacking/IT Incident | Under investigation |
| Lakes Region Visiting Nursing Association | NH | Healthcare Provider | 1,274 | Sep 14, 2026 | Hacking/IT Incident | Under investigation |
| Comprehensive Orthopedics & Musculoskeletal Care, LLC | CT | Healthcare Provider | 21,897 | Sep 10, 2026 | Hacking/IT Incident | Under investigation |
| Vernon & Waldrep OB-Gyn Associates | TX | Healthcare Provider | 17,435 | Sep 10, 2026 | Hacking/IT Incident | Under investigation |
| Persona Dental | MN | Healthcare Provider | 3,386 | Sep 10, 2026 | Hacking/IT Incident | Under investigation |
| Alma Family Services | CA | Healthcare Provider | 2,753 | Sep 10, 2026 | Hacking/IT Incident | Under investigation |
| Interim HealthCare Inc. | FL | Healthcare Provider | 1,283 | Sep 10, 2026 | Hacking/IT Incident | Under investigation |
| Azle Cube Smiles PLLC | TX | Healthcare Provider | 3,280 | Sep 9, 2026 | Hacking/IT Incident | Under investigation |
| Novocure Inc. | PA | Healthcare Provider | 1,464 | Sep 9, 2026 | Hacking/IT Incident | Under investigation |
| Next Level Medical, LLC | TX | Healthcare Provider | 501 | Sep 9, 2026 | Hacking/IT Incident | Under investigation |
| Lexington Hospital Corporation | TN | Healthcare Provider | 67,000 | Sep 8, 2026 | Hacking/IT Incident | Archive (closed) |
| L.A. Care Health Plan | CA | Health Plan | 4,553 | Sep 8, 2026 | Hacking/IT Incident | Archive (closed) |
| Hamaspik (Choice and Inc.) | NY | Health Plan | 8,181 | Sep 6, 2026 | Hacking/IT Incident | Under investigation |
| Provident Behavioral Health | IL | Healthcare Provider | 25,086 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| Life Unlimited, Inc. | MO | Healthcare Provider | 1,530 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| Partnership HealthPlan of California | CA | Health Plan | 1,526 | Sep 4, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Minuteman Press Macon | GA | Business Associate | 1,489 | Sep 4, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Beaver County Behavioral Health | PA | Healthcare Provider | 501 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| COMHAR, Inc. | PA | Healthcare Provider | 501 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| LHC Group, Inc. | LA | Healthcare Provider | 500 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| District of Columbia, Department of Health Care Finance | MD | Health Plan | 399,086 | Sep 3, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Capital Family Physicians | NC | Healthcare Provider | 2,545 | Sep 3, 2026 | Hacking/IT Incident | Under investigation |
| Oculus Pathology | TX | Healthcare Provider | 20,040 | Sep 2, 2026 | Hacking/IT Incident | Under investigation |
| Craneware, Inc. | FL | Business Associate | 501 | Sep 2, 2026 | Hacking/IT Incident | Under investigation |
| The Foot and Ankle Wellness Center of Western Pennsylvania | PA | Healthcare Provider | 653 | Aug 31, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Vista Del Mar Child and Family Services | CA | Healthcare Provider | 500 | Aug 29, 2026 | Hacking/IT Incident | Under investigation |
| White River Junction VA Medical Center | VT | Healthcare Provider | 1,408 | Aug 28, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Kim Knobbe | MO | Business Associate | 11,927 | Aug 27, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Psychiatry of Texas PLLC | TX | Healthcare Provider | 5,902 | Aug 27, 2026 | Hacking/IT Incident | Under investigation |
| AnMed Health | SC | Healthcare Provider | 501 | Aug 27, 2026 | Hacking/IT Incident | Under investigation |
| McDermott Will & Schulte LLP | IL | Business Associate | 5,427 | Aug 26, 2026 | Unauthorized Access/Disclosure | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.