HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 101 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Walgreen Company | IL | Healthcare Provider | 3,700 | Dec 3, 2019 | Hacking/IT Incident | Archive (closed) |
| RiverKids Pediatric Home Health | TX | Healthcare Provider | 10,000 | Dec 2, 2019 | Hacking/IT Incident | Archive (closed) |
| Sunshine Behavioral Health Group, LLC | CA | Business Associate | 3,638 | Dec 2, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Katherine Shaw Bethea Hospital | IL | Healthcare Provider | 3,983 | Nov 30, 2019 | Hacking/IT Incident | Archive (closed) |
| San Francisco VA Health Care System | CA | Healthcare Provider | 735 | Nov 29, 2019 | Theft | Archive (closed) |
| Beer Industry - Local Union No. 703 Health and Welfare Fund | IL | Health Plan | 9,279 | Nov 28, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC") | VA | Healthcare Provider | 15,575 | Nov 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Nebraska Medicine | NE | Healthcare Provider | 1,149 | Nov 27, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Ivy Rehab Network, Inc. and its affiliated companies | NY | Healthcare Provider | 125,000 | Nov 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Illinois Gastroenterology Group, LLC | IL | Healthcare Provider | 1,481 | Nov 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Upper Peninsula Health Plan | MI | Health Plan | 812 | Nov 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Penn-Mar Human Services | MD | Healthcare Provider | 536 | Nov 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Southeastern Minnesota Oral & Maxillofacial Surgery | MN | Healthcare Provider | 80,000 | Nov 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Elizabeth Family Health | CO | Healthcare Provider | 28,375 | Nov 22, 2019 | Theft | Archive (closed) |
| La Clinica de La Raza, Inc. | CA | Healthcare Provider | 2,477 | Nov 22, 2019 | Theft | Archive (closed) |
| GeneDx, Inc. | NJ | Healthcare Provider | 851 | Nov 22, 2019 | Hacking/IT Incident | Archive (closed) |
| OmniSeq, Inc. | NY | Healthcare Provider | 3,977 | Nov 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Ronald E. Rosenbaum DMD, PA | FL | Healthcare Provider | 1,522 | Nov 21, 2019 | Hacking/IT Incident | Archive (closed) |
| VA St. Louis Health Care System | MO | Healthcare Provider | 595 | Nov 21, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Saint Francis Medical Center | MO | Healthcare Provider | 107,054 | Nov 20, 2019 | Hacking/IT Incident | Archive (closed) |
| Human Services, Inc. | PA | Healthcare Provider | 1,559 | Nov 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Medical Park Family Care, Inc. | AK | Healthcare Provider | 500 | Nov 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Choice Cancer Care | TX | Healthcare Provider | 14,673 | Nov 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Ascension Borgess Hospital | MI | Healthcare Provider | 996 | Nov 14, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Gateway Health Plan LP | PA | Health Plan | 753 | Nov 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Solara Medical Supplies, LLC | CA | Healthcare Provider | 114,007 | Nov 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Select Health Network | IN | Business Associate | 56,790 | Nov 13, 2019 | Hacking/IT Incident | Archive (closed) |
| SALIH M MAYALIDAG DENTAL CORP | CA | Healthcare Provider | 6,000 | Nov 12, 2019 | Hacking/IT Incident | Archive (closed) |
| University of North Carolina at Chapel Hill School of Medicine | NC | Healthcare Provider | 3,716 | Nov 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Starling Physicians, P.C. | CT | Healthcare Provider | 977 | Nov 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Outreach Health Services | TX | Healthcare Provider | 60,414 | Nov 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Arizona Dental Insurance Services, Inc. d.b.a. Delta Dental of Arizona | AZ | Health Plan | 24,769 | Nov 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Main Street Clinical Associates | NC | Healthcare Provider | 3,031 | Nov 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Aegis Medical Group | FL | Healthcare Provider | 9,800 | Nov 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan (Kaiser Permanente) | CA | Health Plan | 515 | Nov 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| The Brooklyn Hospital Center | NY | Healthcare Provider | 26,312 | Nov 1, 2019 | Hacking/IT Incident | Archive (closed) |
| Utah Valley Eye Center | UT | Healthcare Provider | 20,418 | Nov 1, 2019 | Hacking/IT Incident | Archive (closed) |
| Evergreen Psychological Services | TX | Healthcare Provider | 4,174 | Nov 1, 2019 | Theft | Archive (closed) |
| Washington University School of Medicine | MO | Healthcare Provider | 3,237 | Nov 1, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Prisma Health - Midlands | SC | Healthcare Provider | 19,060 | Oct 28, 2019 | Hacking/IT Incident | Archive (closed) |
| The Guidance Center | CA | Healthcare Provider | 1,189 | Oct 28, 2019 | Hacking/IT Incident | Archive (closed) |
| Betty Jean Kerr People's Health Centers | MO | Healthcare Provider | 152,000 | Oct 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Children's Minnesota | MN | Healthcare Provider | 37,942 | Oct 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Delta Dental of Illinois | IL | Health Plan | 15,466 | Oct 25, 2019 | Hacking/IT Incident | Archive (closed) |
| The Kroger Co., for itself and its affiliates and subsidiaries | OH | Healthcare Provider | 4,812 | Oct 25, 2019 | Loss | Archive (closed) |
| The Kroger Co., for itself and its affiliates and subsidiaries | OH | Healthcare Provider | 2,752 | Oct 25, 2019 | Loss | Archive (closed) |
| Virginia Department of Behavioral Health & Developmental Services | VA | Healthcare Provider | 1,442 | Oct 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Corpus Christi Tots & Teens Pediatrics | TX | Healthcare Provider | 31,787 | Oct 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Wheatland Dental Care | IL | Business Associate | 955 | Oct 24, 2019 | Hacking/IT Incident | Archive (closed) |
| The Affiliated Sante Group | MD | Healthcare Provider | 679 | Oct 24, 2019 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.