HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 103 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Women's Care Florida, LLC | FL | Healthcare Provider | 527,310 | Sep 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Perfect Teeth Yale, P.C. | CO | Healthcare Provider | 15,000 | Sep 19, 2019 | Loss | Archive (closed) |
| Chirobody | WA | Healthcare Provider | 525 | Sep 19, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Little Rock Plastic Surgery, P.A. | AR | Healthcare Provider | 6,300 | Sep 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Wood Ranch Medical | CA | Healthcare Provider | 5,835 | Sep 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Premier Gastroenterology Specialists | OH | Healthcare Provider | 1,260 | Sep 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Magellan Healthcare | MD | Business Associate | 55,637 | Sep 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Medico of South Carolina, Inc. | SC | Business Associate | 6,489 | Sep 17, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| National Imaging Associates | MD | Business Associate | 589 | Sep 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Intramural Practice Plan - Medical Sciences Campus - University of Puerto Rico | Healthcare Provider | 439,753 | Sep 16, 2019 | Hacking/IT Incident | Archive (closed) | |
| Paragon Health, P.C. | MI | Healthcare Provider | 4,674 | Sep 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Kilgore Vision Center | AR | Healthcare Provider | 46,353 | Sep 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Sweetser | ME | Healthcare Provider | 22,000 | Sep 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Bates Technical College | WA | Healthcare Provider | 2,112 | Sep 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Sarrell Dental | AL | Healthcare Provider | 363,617 | Sep 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Peoples Injury Network Northwest | WA | Healthcare Provider | 27,000 | Sep 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Health Maintenance Organization, Inc. | CO | Health Plan | 1,835 | Sep 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Pima County | AZ | Health Plan | 1,498 | Sep 12, 2019 | Hacking/IT Incident | Archive (closed) |
| June E. Nylen Cancer Center | IA | Healthcare Provider | 927 | Sep 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Cristo Rey Community Center - Family Health Center | MI | Healthcare Provider | 1,500 | Sep 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Lindner Center of Hope | OH | Healthcare Provider | 3,537 | Sep 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Berry Family Services | TX | Healthcare Provider | 1,751 | Sep 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Premier Family Medical | UT | Healthcare Provider | 320,000 | Sep 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Shore Specialty Consultants Pulmonology Group | NJ | Healthcare Provider | 9,700 | Sep 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Prisma - Midlands | SC | Healthcare Provider | 2,770 | Sep 6, 2019 | Theft | Archive (closed) |
| Simmons Family Chiropractic | GA | Healthcare Provider | 2,000 | Sep 6, 2019 | Theft | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 998 | Sep 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Rural Health Access Corporation dba Coalfield Health Center | WV | Healthcare Provider | 874 | Sep 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Alive Hospice | TN | Healthcare Provider | 533 | Sep 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| UC Health | OH | Healthcare Provider | 95,339 | Sep 4, 2019 | Hacking/IT Incident | Archive (closed) |
| East Central Indiana School Trust | IN | Health Plan | 3,259 | Sep 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Fraser | MN | Healthcare Provider | 2,890 | Aug 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Source 1 Healthcare Solutions LLC | PA | Business Associate | 15,450 | Aug 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Fedcap Rehabilitation Services, Inc. | NY | Healthcare Provider | 2,158 | Aug 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Artesia General Hospital | NM | Healthcare Provider | 13,905 | Aug 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Employers and Laborers Locals 100 and 397 Health & Welfare Fund | MO | Health Plan | 560 | Aug 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Conway Regional Health System | AR | Healthcare Provider | 37,000 | Aug 23, 2019 | Hacking/IT Incident | Archive (closed) |
| The Cardiovascular Group | GA | Healthcare Provider | 2,168 | Aug 23, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Lyons Companies | PA | Business Associate | 1,982 | Aug 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Navicent Health, Inc. | GA | Healthcare Provider | 634 | Aug 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Choctaw Nation Health Services Authority | OK | Healthcare Provider | 550 | Aug 23, 2019 | Hacking/IT Incident | Archive (closed) |
| NorthStar Anesthesia, P.A. | TX | Healthcare Provider | 19,807 | Aug 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Massachusetts General Hospital | MA | Healthcare Provider | 9,900 | Aug 22, 2019 | Hacking/IT Incident | Archive (closed) |
| The Carle Foundation Hospital | IL | Healthcare Provider | 1,653 | Aug 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Regence BlueShield Washington | OR | Business Associate | 684 | Aug 21, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Wilson County Memorial Hospital District dba Connally Memorial Medical Center | TX | Healthcare Provider | 7,358 | Aug 19, 2019 | Theft | Archive (closed) |
| Western Connecticut Health Network | CT | Healthcare Provider | 1,293 | Aug 19, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Cleveland Clinic Foundation | OH | Healthcare Provider | 604 | Aug 19, 2019 | Loss | Archive (closed) |
| Hospice of San Joaquin | CA | Healthcare Provider | 13,000 | Aug 16, 2019 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 5,466 | Aug 16, 2019 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.