HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 102 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Greater Cincinnati Pathologists, Inc. | OH | Healthcare Provider | 7,725 | Oct 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Kalispell Regional Healthcare | MT | Healthcare Provider | 149,661 | Oct 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Texas Health Harris Methodist Hospital Fort Worth | TX | Healthcare Provider | 14,881 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Presbyterian Hospital Dallas | TX | Healthcare Provider | 12,415 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Presbyterian Hospital Plano | TX | Healthcare Provider | 9,678 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Southwest Fort Worth | TX | Healthcare Provider | 7,478 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Presbyterian Hospital Denton | TX | Healthcare Provider | 6,688 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Arlington Memorial | TX | Healthcare Provider | 6,187 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Hurst-Euless-Bedford | TX | Healthcare Provider | 4,804 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Presbyterian Hospital Rockwall | TX | Healthcare Provider | 4,789 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Alliance | TX | Healthcare Provider | 3,784 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Presbyterian Hospital Allen | TX | Healthcare Provider | 2,993 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Cleburne | TX | Healthcare Provider | 2,737 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Kaufman | TX | Healthcare Provider | 2,157 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Azle | TX | Healthcare Provider | 2,113 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Hospital Stephenville | TX | Healthcare Provider | 1,348 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Harris Methodist Southlake | TX | Healthcare Provider | 525 | Oct 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Self Regional Healthcare | SC | Healthcare Provider | 52,327 | Oct 21, 2019 | Hacking/IT Incident | Archive (closed) |
| United States Medical Supply, LLC. | FL | Healthcare Provider | 674 | Oct 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Roswell Park Comprehensive Cancer Center | NY | Healthcare Provider | 584 | Oct 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 4,211 | Oct 17, 2019 | Loss | Archive (closed) |
| Buckhead Smile Center, P.C. | GA | Healthcare Provider | 1,655 | Oct 17, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Artesia General Hospital | NM | Healthcare Provider | 858 | Oct 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Chronic Care Management Inc. | OH | Business Associate | 612 | Oct 17, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| LaBorde Therapy Center LLC | LA | Healthcare Provider | 7,000 | Oct 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Seattle Cancer Care Alliance | WA | Healthcare Provider | 944 | Oct 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Southern New Mexico Neurosurgery LLC | NM | Healthcare Provider | 11,754 | Oct 14, 2019 | Improper Disposal | Archive (closed) |
| Hamlin & Burton Liability Management, Inc. | FL | Business Associate | 1,500 | Oct 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Central Valley Regional Center | CA | Business Associate | 15,975 | Oct 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Monterey Health Center | OR | Healthcare Provider | 5,400 | Oct 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Abdul Memon, MD PLLC | AZ | Business Associate | 1,000 | Oct 11, 2019 | Theft | Archive (closed) |
| Magnolia Pediatrics | LA | Healthcare Provider | 11,100 | Oct 9, 2019 | Hacking/IT Incident | Archive (closed) |
| South Texas Dermatopathology Laboratory | TX | Healthcare Provider | 15,982 | Oct 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Arkansas Health Group | AR | Healthcare Provider | 903 | Oct 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| The Methodist Hospitals, Inc. | IN | Healthcare Provider | 68,039 | Oct 4, 2019 | Hacking/IT Incident | Archive (closed) |
| Defense Health Headquarters | VA | Health Plan | 3,500 | Oct 4, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Gary Smith and assoc inc DBA gary smith agency | MS | Health Plan | 2,000 | Oct 4, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Euphemia R. Brumskine, MD, LLC | MD | Healthcare Provider | 850 | Oct 4, 2019 | Hacking/IT Incident | Archive (closed) |
| University of Alabama at Birmingham | AL | Healthcare Provider | 19,557 | Oct 3, 2019 | Hacking/IT Incident | Archive (closed) |
| San Francisco Department of Public Health | CA | Healthcare Provider | 622 | Oct 3, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | KY | Health Plan | 756 | Oct 2, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Sioux Falls VA Health Care System | SD | Healthcare Provider | 564 | Oct 1, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| CHI Health Orthopedics Clinic -Lakeside | NE | Healthcare Provider | 48,000 | Sep 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Goshen Health | IN | Healthcare Provider | 9,160 | Sep 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Telecare Corporation | CA | Healthcare Provider | 823 | Sep 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center | GA | Healthcare Provider | 3,290 | Sep 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Calibre CPA Group | MD | Business Associate | 912 | Sep 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Beatitudes Campus | AZ | Healthcare Provider | 514 | Sep 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Choctaw Nation Health Service Authority | OK | Healthcare Provider | 500 | Sep 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Kaiser Permanente | CA | Healthcare Provider | 990 | Sep 26, 2019 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.