HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 109 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Direct Scripts | OH | Healthcare Provider | 9,319 | Mar 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Covenant Care California, LLC, on behalf of relevant affiliated nursing facilities | CA | Healthcare Provider | 7,678 | Mar 6, 2019 | Hacking/IT Incident | Archive (closed) |
| St. Francis Physician Services | SC | Healthcare Provider | 32,178 | Mar 4, 2019 | Hacking/IT Incident | Archive (closed) |
| RSC Insurance Brokerage, Inc. | MA | Business Associate | 2,088 | Mar 1, 2019 | Theft | Archive (closed) |
| Arthritis and Rheumatism Associates, P.C. | MD | Healthcare Provider | 500 | Mar 1, 2019 | Hacking/IT Incident | Archive (closed) |
| Rush University Medical Center | IL | Healthcare Provider | 44,924 | Feb 28, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Pasquotank-Camden Emergency Medical Service | NC | Healthcare Provider | 20,420 | Feb 28, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 5,569 | Feb 27, 2019 | Hacking/IT Incident | Archive (closed) |
| West Virginia Public Employees Insurance Agency | WV | Health Plan | 1,400 | Feb 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Delaware Guidance Services for Children and Youth, Inc. | DE | Healthcare Provider | 50,000 | Feb 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Molina Healthcare | CA | Health Plan | 895 | Feb 22, 2019 | Hacking/IT Incident | Archive (closed) |
| UConn Health | CT | Healthcare Provider | 326,629 | Feb 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Rocky Boy Health Center | MT | Healthcare Provider | 6,000 | Feb 21, 2019 | Theft | Archive (closed) |
| UW Medicine | WA | Healthcare Provider | 973,024 | Feb 20, 2019 | Hacking/IT Incident | Archive (closed) |
| Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center | VT | Healthcare Provider | 72,224 | Feb 20, 2019 | Hacking/IT Incident | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 5,590 | Feb 20, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Columbia Surgical Specialist of Spokane | WA | Healthcare Provider | 400,000 | Feb 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Memorial Hospital at Gulfport | MS | Healthcare Provider | 30,642 | Feb 15, 2019 | Hacking/IT Incident | Archive (closed) |
| California Physicians' Service d/b/a Blue Shield of California | CA | Health Plan | 18,416 | Feb 15, 2019 | Hacking/IT Incident | Archive (closed) |
| AltaMed Health Services Corporation | CA | Healthcare Provider | 6,000 | Feb 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Kids Central Inc. | FL | Business Associate | 3,250 | Feb 15, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| OneDigital/Digital Insurance, LLC | GA | Business Associate | 2,763 | Feb 15, 2019 | Theft | Archive (closed) |
| Blue Cross Blue Shield of Massachusetts | MA | Health Plan | 1,262 | Feb 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Portsmouth Community Health Center | VA | Healthcare Provider | 12,000 | Feb 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Kentucky Counseling Center, LLC | KY | Healthcare Provider | 16,440 | Feb 11, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Green Ridge Behavioral Health, LLC | MD | Healthcare Provider | 14,000 | Feb 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Sharecare Health Data Services, LLC | CA | Business Associate | 7,300 | Feb 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Crawford Wellness Center, Inc | TX | Healthcare Provider | 1,500 | Feb 11, 2019 | Theft | Archive (closed) |
| Rocky Mountain Health Care Services | CO | Healthcare Provider | 971 | Feb 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Rush University Medical Center | IL | Healthcare Provider | 908 | Feb 11, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| AZ Plastic Surgery Center | AZ | Healthcare Provider | 5,524 | Feb 8, 2019 | Hacking/IT Incident | Archive (closed) |
| USR Holdings, LLC | FL | Business Associate | 2,903 | Feb 8, 2019 | Hacking/IT Incident | Archive (closed) |
| AdventHealth Medical Group | FL | Healthcare Provider | 42,161 | Feb 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Rainbow Dental Care PLLC | TX | Healthcare Provider | 7,186 | Feb 4, 2019 | Hacking/IT Incident | Archive (closed) |
| United Hospital District, Inc. | MN | Healthcare Provider | 2,143 | Feb 4, 2019 | Hacking/IT Incident | Archive (closed) |
| Lakeland Care, Inc. | WI | Healthcare Provider | 1,300 | Feb 4, 2019 | Hacking/IT Incident | Archive (closed) |
| Reproductive Medicine and Infertility Associates, P.A. | MN | Healthcare Provider | 40,000 | Feb 1, 2019 | Hacking/IT Incident | Archive (closed) |
| Anesthesia Associates of Kansas City | KS | Healthcare Provider | 3,472 | Feb 1, 2019 | Theft | Archive (closed) |
| CHI - Lakewood Health | MN | Healthcare Provider | 885 | Jan 31, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| CVS Pharmacy | RI | Healthcare Provider | 5,645 | Jan 30, 2019 | Theft | Archive (closed) |
| Aetna | CT | Health Plan | 2,030 | Jan 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Schroder's I.T., Inc. | OH | Business Associate | 85,874 | Jan 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Roper St. Francis Healthcare | SC | Healthcare Provider | 35,253 | Jan 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Cambridge Healthcare Services, LLC | CA | Business Associate | 10,866 | Jan 29, 2019 | Theft | Archive (closed) |
| Lanier Family & Cosmetic Dentistry, P.C. | GA | Healthcare Provider | 1,950 | Jan 29, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Pawnee County Memorial Hospital | NE | Healthcare Provider | 7,175 | Jan 28, 2019 | Hacking/IT Incident | Archive (closed) |
| Verity Health System of California, Inc. | CA | Business Associate | 2,988 | Jan 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Dr. DeLuca Dr. Marciano & Associates, P.C. | CT | Healthcare Provider | 23,578 | Jan 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Valley Professionals Community Health Center | IN | Healthcare Provider | 12,029 | Jan 25, 2019 | Hacking/IT Incident | Archive (closed) |
| HealthFitness | IL | Business Associate | 1,808 | Jan 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.