HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 105 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Security Health Plan of Wisconsin, Inc. | WI | Health Plan | 3,657 | Jul 19, 2019 | Hacking/IT Incident | Archive (closed) |
| City of Philadelphia | PA | Health Plan | 1,458 | Jul 19, 2019 | Loss | Archive (closed) |
| Imperial Health, LLP | LA | Healthcare Provider | 116,262 | Jul 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Rockville Eye Surgery Center LLC dba Palisades Eye Surgery Center | MD | Healthcare Provider | 2,696 | Jul 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Associates in Dermatology, PLLC | KY | Healthcare Provider | 9,020 | Jul 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwood, Inc. | MI | Business Associate | 3,881 | Jul 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Comprehensive Cancer Centers of Nevada | NV | Healthcare Provider | 2,251 | Jul 16, 2019 | Theft | Archive (closed) |
| Brewer Porch Children's Center / The University of Alabama | AL | Healthcare Provider | 727 | Jul 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwood, Inc. | MI | Business Associate | 583 | Jul 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Clinical Pathology Laboratories, Inc. | TX | Healthcare Provider | 1,733,836 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Memphis Pathology Laboratory d/b/a American Esoteric Laboratories | TN | Healthcare Provider | 417,146 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Sunrise Medical Laboratories, Inc. | NY | Healthcare Provider | 401,901 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| CBLPath, Inc. | NY | Healthcare Provider | 141,956 | Jul 15, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwood, Inc | MI | Business Associate | 5,563 | Jul 15, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Eye Center | CO | Healthcare Provider | 4,478 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Natera, Inc. | CA | Healthcare Provider | 3,035 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Laboratory Corporation of America Holdings dba LabCorp | NC | Healthcare Provider | 10,251,784 | Jul 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Wise Health System | TX | Healthcare Provider | 35,899 | Jul 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Penobscot Community Health Center, Inc. | ME | Healthcare Provider | 13,299 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwood, Inc. | MI | Business Associate | 5,000 | Jul 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center | GA | Healthcare Provider | 4,559 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Cancer Treatment Centers of America (CTCA) at Eastern Regional Medical Center | PA | Healthcare Provider | 3,904 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Hunt Regional Medical Center | TX | Healthcare Provider | 3,700 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| CentraCare Health System | MN | Healthcare Provider | 2,085 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Rogerson House, Inc. | MA | Healthcare Provider | 500 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| CareCentrix, Inc. | CT | Healthcare Provider | 467,621 | Jul 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Essentia Health - Duluth | MN | Healthcare Provider | 1,377 | Jul 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Benefitfocus.com, Inc. | SC | Business Associate | 827 | Jul 10, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Croix Hospice | MN | Healthcare Provider | 21,407 | Jul 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Ameritas Life Insurance Corp. | NE | Health Plan | 39,675 | Jul 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Nemadji Research Corporation d/b/a California Reimbursement Enterprises | MN | Business Associate | 14,591 | Jul 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Multnomah County Department of Human Services | OR | Business Associate | 713 | Jul 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| RGH Enterprises, Inc. d/b/a Edgepark Medical Supplies | OH | Healthcare Provider | 6,572 | Jul 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Alive Hospice | TN | Healthcare Provider | 608 | Jul 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Adirondacks ACO, LLC | NY | Business Associate | 39,649 | Jul 2, 2019 | Hacking/IT Incident | Archive (closed) |
| Mercy Health System Corporation | WI | Healthcare Provider | 5,946 | Jul 2, 2019 | Hacking/IT Incident | Archive (closed) |
| Memorial Hermann Health System | TX | Healthcare Provider | 507 | Jul 2, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Optum360, LLC | MN | Business Associate | 11,500,000 | Jul 1, 2019 | Hacking/IT Incident | Archive (closed) |
| Henderson County Urgent Care Centers, Inc. dba Margaret R. Pardee Memorial Hospital | NC | Healthcare Provider | 590 | Jul 1, 2019 | Theft | Archive (closed) |
| Summa Health | OH | Healthcare Provider | 7,989 | Jun 28, 2019 | Hacking/IT Incident | Archive (closed) |
| Summa Health | OH | Healthcare Provider | 2,904 | Jun 28, 2019 | Hacking/IT Incident | Archive (closed) |
| Southwest Gastroenterology | IL | Healthcare Provider | 1,600 | Jun 28, 2019 | Theft | Archive (closed) |
| Byham's Insurance Services Inc. | PA | Healthcare Clearing House | 1,600 | Jun 27, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Wyoming Department of Health | WY | Health Plan | 2,154 | Jun 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Iowa Hospitals & Clinics | IA | Healthcare Provider | 950 | Jun 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Addison County Home Health & Hospice | VT | Healthcare Provider | 758 | Jun 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Franciscan Alliance, Inc. | IN | Healthcare Provider | 2,180 | Jun 24, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Dominion Dental Services, Inc., Dominion National Insurance Company, and Dominion Dental Services USA, Inc. | VA | Health Plan | 2,964,778 | Jun 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Adventist Health Physician Services | CA | Healthcare Provider | 3,797 | Jun 21, 2019 | Improper Disposal | Archive (closed) |
| Community Physicians Group | AR | Healthcare Provider | 5,400 | Jun 20, 2019 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.