HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 107 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cancer Treatment Centers of America® (CTCA) at Southeastern Regional Medical Center | GA | Healthcare Provider | 16,819 | May 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Midwest Medical Center | IL | Healthcare Provider | 8,010 | May 10, 2019 | Hacking/IT Incident | Archive (closed) |
| University Medical Center Physicians | TX | Healthcare Provider | 3,300 | May 10, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| United Seating and Mobility LLC dba Numotion | CT | Healthcare Provider | 3,578 | May 9, 2019 | Theft | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | MN | Health Plan | 20,536 | May 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Fort HealthCare, Inc. | WI | Healthcare Provider | 19,000 | May 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Independent Health Association, Inc. | NY | Health Plan | 7,605 | May 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Bloodworks Northwest | WA | Healthcare Provider | 1,893 | May 8, 2019 | Loss | Archive (closed) |
| Inmediata Health Group | Healthcare Clearing House | 1,565,338 | May 7, 2019 | Unauthorized Access/Disclosure | Archive (closed) | |
| American Baptist Homes of the Midwest | MN | Healthcare Provider | 10,993 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| American Medical Response, Inc. | TX | Healthcare Provider | 4,300 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| American Indian Health & Services, Inc. | CA | Healthcare Provider | 3,784 | May 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Health Network, Inc. | IN | Healthcare Provider | 3,600 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Hospice Care Plus, Inc. | KY | Healthcare Provider | 2,033 | May 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Spectrum Health Lakeland | MI | Healthcare Provider | 1,100 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Kelsey Research Foundation | TX | Business Associate | 1,228 | May 3, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Verity Health System of California, Inc. | CA | Business Associate | 662 | May 3, 2019 | Hacking/IT Incident | Archive (closed) |
| OS, Inc. | WI | Business Associate | 7,880 | May 2, 2019 | Hacking/IT Incident | Archive (closed) |
| Inspira Behavioral Care, Corp | Healthcare Provider | 4,246 | May 2, 2019 | Theft | Archive (closed) | |
| The Southeastern Council on Alcoholism and Drug Dependence | CT | Healthcare Provider | 25,148 | May 1, 2019 | Hacking/IT Incident | Archive (closed) |
| AA OBGYN PLLC | TX | Healthcare Provider | 930 | Apr 30, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| The City of Fort Lauderdale | FL | Health Plan | 757 | Apr 29, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical Oncology Hematology Consultants, PA | DE | Healthcare Provider | 8,591 | Apr 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Partners In Care | OR | Healthcare Provider | 3,048 | Apr 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 1,182 | Apr 24, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Logansport Memorial Hospital | IN | Healthcare Provider | 7,877 | Apr 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Doctors Management Services, Inc. | MA | Business Associate | 206,695 | Apr 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Area Agency on Aging and Disabilities of Southwest Washington | WA | Health Plan | 7,000 | Apr 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| LISA ROSE DURSO, M.D. PLLC | NY | Healthcare Provider | 537 | Apr 22, 2019 | Hacking/IT Incident | Archive (closed) |
| EmCare, Inc. | FL | Healthcare Provider | 31,236 | Apr 20, 2019 | Hacking/IT Incident | Archive (closed) |
| KIM P. KORNEGAY, DMD | AL | Healthcare Provider | 27,000 | Apr 19, 2019 | Theft | Archive (closed) |
| Blue Cross of Idaho Health Service, Inc. | ID | Health Plan | 6,045 | Apr 19, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners For Quality, Inc. | PA | Healthcare Provider | 3,673 | Apr 19, 2019 | Hacking/IT Incident | Archive (closed) |
| Bodybuilding.com LLC, operated by Vitalize, LLC (“Vitalize, LLC”) | ID | Health Plan | 3,193 | Apr 19, 2019 | Hacking/IT Incident | Archive (closed) |
| People, Inc. | NY | Healthcare Provider | 970 | Apr 19, 2019 | Hacking/IT Incident | Archive (closed) |
| Pediatric Orthopedic Specialties, PA, dba ActivYouth Orthopaedics | NJ | Healthcare Provider | 24,176 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| AltaMed Health Services Corporation | CA | Healthcare Provider | 5,500 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Center for Sight & Hearing | IL | Healthcare Provider | 5,319 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Gary W Peer MD | CA | Healthcare Provider | 3,400 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Alana Healthcare | TN | Healthcare Provider | 2,691 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Madison Parish Hospital Service District | LA | Healthcare Provider | 1,436 | Apr 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| ELENA MARIA BURUIANA PHYSICIAN P.C. | NY | Healthcare Provider | 1,308 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Delta Dental of Illinois | IL | Business Associate | 4,216 | Apr 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Centrelake Medical Group, Inc. | CA | Healthcare Provider | 197,661 | Apr 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Delta Dental of Illinois | IL | Health Plan | 5,092 | Apr 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Gardner Family Health Network | CA | Healthcare Provider | 5,064 | Apr 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Minnesota Eye Consultants | MN | Healthcare Provider | 4,556 | Apr 16, 2019 | Improper Disposal | Archive (closed) |
| Tower Imaging, LLC | FL | Healthcare Provider | 810 | Apr 16, 2019 | Theft | Archive (closed) |
| National Seating & Mobility, Inc. | TN | Healthcare Provider | 3,800 | Apr 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Metro Santurce, Inc. d/b/a Hospital Pavia Santurce and Metro Hato Rey, Inc. d/b/a Hospital Pavia Hato Rey | Healthcare Provider | 305,737 | Apr 13, 2019 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.