HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 100 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Roper St. Francis Healthcare | SC | Healthcare Provider | 1,634 | Jan 17, 2020 | Improper Disposal | Archive (closed) |
| Solara Medical Supplies, LLC | CA | Healthcare Provider | 1,531 | Jan 17, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's Hope Alliance | NC | Healthcare Provider | 4,564 | Jan 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Phoenix Children’s Hospital | AZ | Healthcare Provider | 1,860 | Jan 14, 2020 | Hacking/IT Incident | Archive (closed) |
| PIH Health | CA | Healthcare Provider | 199,548 | Jan 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Spectrum Healthcare Partners | ME | Healthcare Provider | 11,308 | Jan 10, 2020 | Hacking/IT Incident | Archive (closed) |
| InterMed, PA | ME | Healthcare Provider | 33,000 | Jan 8, 2020 | Hacking/IT Incident | Archive (closed) |
| RCM Enterprise Services, Inc. | FL | Business Associate | 5,965 | Jan 6, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CAH Holdings, Inc. | AL | Business Associate | 1,158 | Jan 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Douglas County Hospital dba Alomere Health | MN | Healthcare Provider | 49,859 | Jan 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Native American Rehabilitation Association of the Northwest, Inc. | OR | Healthcare Provider | 25,187 | Jan 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Lawrenceville Internal Medicine Associates | NJ | Healthcare Provider | 8,031 | Jan 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| SEES Group, LLC | TN | Healthcare Provider | 13,000 | Dec 31, 2019 | Hacking/IT Incident | Archive (closed) |
| Life Line Screening of America, Ltd. | TX | Healthcare Provider | 2,802 | Dec 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Ann & Robert H. Lurie Children's Hospital of Chicago | IL | Healthcare Provider | 4,195 | Dec 26, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| The Center for Facial Restoration, Inc. | FL | Healthcare Provider | 3,600 | Dec 26, 2019 | Hacking/IT Incident | Archive (closed) |
| btyDENTAL | AK | Healthcare Provider | 2,008 | Dec 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Baylor Miraca Genetics Laboratories, LLC d/b/a Baylor Genetics | TX | Business Associate | 1,240 | Dec 24, 2019 | Hacking/IT Incident | Archive (closed) |
| PediHealth, PLLC, dba Children's Choice Pediatrics | TX | Healthcare Provider | 12,689 | Dec 20, 2019 | Hacking/IT Incident | Archive (closed) |
| Roosevelt General Hospital | NM | Healthcare Provider | 28,847 | Dec 19, 2019 | Hacking/IT Incident | Archive (closed) |
| Texas Family Psychology Associates, P.C. dba Compass Psychological Associates | TX | Healthcare Provider | 12,000 | Dec 17, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| INTEGRIS Health, Inc. | OK | Healthcare Provider | 1,245,218 | Dec 16, 2019 | Loss | Archive (closed) |
| Colorado Department of Human Services | CO | Healthcare Provider | 12,230 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| North Ottawa Community Health System | MI | Healthcare Provider | 4,013 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| AFLAC | GA | Health Plan | 1,601 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| San Francisco Department of Public Health - Zuckerberg SF General Hospital | CA | Healthcare Provider | 1,174 | Dec 16, 2019 | Improper Disposal | Archive (closed) |
| Texas Children's Hospital | TX | Healthcare Provider | 597 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Sinai Health System | IL | Healthcare Provider | 12,578 | Dec 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Aetna affiliated covered entity (ACE) | CT | Health Plan | 5,991 | Dec 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Prestige Health Choice | FL | Health Plan | 4,665 | Dec 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Vimly Benefit Solutions, Inc. | WA | Business Associate | 2,675 | Dec 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Therapeutic Oasis of the Palm Beaches LLC | FL | Healthcare Provider | 1,100 | Dec 13, 2019 | Theft | Archive (closed) |
| Western Health Advantage | CA | Health Plan | 869 | Dec 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Marion Eye Center, LTD. | IL | Healthcare Provider | 811 | Dec 13, 2019 | Loss | Archive (closed) |
| Service Benefit Plan Administrative Services Corporation | DC | Business Associate | 11,536 | Dec 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Jewish Social Services Agency | MD | Healthcare Provider | 3,145 | Dec 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Cheyenne Regional Medical Center | WY | Healthcare Provider | 17,549 | Dec 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Starmount Life Insurance Company | LA | Health Plan | 630 | Dec 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Anwan Wellness LLC | GA | Healthcare Provider | 530 | Dec 9, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Care Medical Specialists Group, Inc. | CA | Healthcare Provider | 2,490 | Dec 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Adventist Health Simi Valley | CA | Healthcare Provider | 54,708 | Dec 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Beech Brook | OH | Healthcare Provider | 2,636 | Dec 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Speight Family Medical, LLC | TN | Healthcare Provider | 2,000 | Dec 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Equinox, Inc. | NY | Healthcare Provider | 1,021 | Dec 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Children’s Hope Alliance | NC | Healthcare Provider | 1,002 | Dec 6, 2019 | Theft | Archive (closed) |
| Truman Medical Center, Incorporated | MO | Healthcare Provider | 114,466 | Dec 5, 2019 | Theft | Archive (closed) |
| Sunrise Community Health | CO | Healthcare Provider | 18,404 | Dec 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Conway Medical Center | SC | Healthcare Provider | 2,550 | Dec 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Healthcare Administrative Partners | PA | Business Associate | 17,693 | Dec 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Children's Hope Alliance | NC | Business Associate | 4,564 | Dec 3, 2019 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.