HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 106 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Boulevard Surgical Associates | CA | Healthcare Provider | 542 | Jun 20, 2019 | Theft | Archive (closed) |
| EyeCare Partners, LLC | MO | Healthcare Provider | 141,165 | Jun 19, 2019 | Hacking/IT Incident | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 1,404 | Jun 19, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Huntridge Family Clinic | NV | Healthcare Provider | 2,000 | Jun 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Healthlink | MA | Healthcare Provider | 4,598 | Jun 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Clear Dermatology and Aesthetics Center | AZ | Healthcare Provider | 1,282 | Jun 17, 2019 | Theft | Archive (closed) |
| Inform Diagnostics, Inc. | TX | Healthcare Provider | 173,617 | Jun 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Desert Healthcare Services, LLC | AZ | Healthcare Provider | 8,000 | Jun 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Kansas City VAMC | MO | Healthcare Provider | 534 | Jun 11, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| TenX Systems, LLC d/b/a ResiDex Software | MN | Business Associate | 90,000 | Jun 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Worcester Eye Consultants | MA | Healthcare Provider | 2,634 | Jun 7, 2019 | Loss | Archive (closed) |
| Elim Care | MN | Healthcare Provider | 2,500 | Jun 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Sunshine State Health Plan, Inc. | FL | Health Plan | 2,000 | Jun 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| CAPITOL CARDIOLOGY ASSOCIATES | MD | Healthcare Provider | 1,980 | Jun 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| SOUTHERN MARYLAND MEDICAL GROUP LLC | MD | Healthcare Provider | 1,400 | Jun 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Kingman Healthcare Incorporated | AZ | Healthcare Provider | 1,100 | Jun 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Shingle Springs Health and Wellness Center | CA | Healthcare Provider | 21,513 | Jun 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Rosenbaum Dental Group | FL | Healthcare Provider | 1,200 | Jun 4, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 863 | Jun 3, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Quest Systems, Inc. | NY | Healthcare Provider | 372,043 | May 31, 2019 | Hacking/IT Incident | Archive (closed) |
| The Union Labor Life Insurance Company | MD | Health Plan | 87,400 | May 31, 2019 | Hacking/IT Incident | Archive (closed) |
| Broome County, New York | NY | Healthcare Provider | 7,048 | May 31, 2019 | Hacking/IT Incident | Archive (closed) |
| Cerpassrx, LLC | TX | Health Plan | 2,513 | May 31, 2019 | Hacking/IT Incident | Archive (closed) |
| Capital City Paincare | OH | Healthcare Provider | 1,012 | May 31, 2019 | Hacking/IT Incident | Archive (closed) |
| City of Georgetown Fire Department | TX | Healthcare Provider | 719 | May 31, 2019 | Loss | Archive (closed) |
| Takai, Hoover, and Hsu, P.A. | MD | Healthcare Provider | 16,542 | May 29, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Sunshine Family Dentistry | TX | Healthcare Provider | 800 | May 27, 2019 | Theft | Archive (closed) |
| Monroe County Hospital | GA | Healthcare Provider | 10,970 | May 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Talley Medical Surgical Eyecare Associates, PC | IN | Healthcare Provider | 106,000 | May 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Farmacia La Amistad Inc. | Healthcare Provider | 2,500 | May 24, 2019 | Hacking/IT Incident | Archive (closed) | |
| TriHealth Physician Practices | OH | Healthcare Provider | 2,433 | May 24, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthfirst | NY | Health Plan | 1,811 | May 24, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Mercy Health Saint Mary's | MI | Healthcare Provider | 976 | May 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Huggins Insurance Services, Inc. | OR | Business Associate | 667 | May 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Maranatha Village Inc. | MO | Healthcare Provider | 520 | May 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Centura Health | CO | Healthcare Provider | 7,515 | May 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Hematology Oncology Associates, PC | OR | Healthcare Provider | 16,073 | May 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwestern Health Sciences University | MN | Healthcare Provider | 1,198 | May 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Penn Medicine | PA | Healthcare Provider | 917 | May 21, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Special Health Resources for Texas, Inc. | TX | Healthcare Provider | 567 | May 21, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Acadia Montana Treatment Center | MT | Healthcare Provider | 14,794 | May 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Aeroflow Inc. | NC | Healthcare Provider | 4,450 | May 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Cigna | CT | Health Plan | 3,720 | May 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Communities Connected for Kids, Inc. | FL | Business Associate | 192,041 | May 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Aging Disability and Transit Services of Rockingham County | NC | Healthcare Provider | 14,000 | May 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Youth Opportunity Center, Inc. | IN | Healthcare Provider | 1,150 | May 14, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Net, LLC. | CA | Health Plan | 2,404 | May 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Professional Dental Alliance of Florida PLLC d/b/a All Smiles Dentistry | FL | Healthcare Provider | 1,505 | May 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Hermann Health System | TX | Healthcare Provider | 604 | May 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Encompass Family and internal medicine group | CA | Healthcare Provider | 507 | May 13, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.