HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 11 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| EyeCare Partners, LLC, including The Ophthalmology Group, Ophthalmology Consultants, and Ophthalmology Associates. | MO | Healthcare Provider | 17,622 | Feb 3, 2026 | Hacking/IT Incident | Archive (closed) |
| Ko-Kwel Wellness Center | OR | Healthcare Provider | 543 | Feb 3, 2026 | Hacking/IT Incident | Archive (closed) |
| MCS, P.C. | MD | Business Associate | 3,478 | Feb 2, 2026 | Hacking/IT Incident | Archive (closed) |
| Fair Oaks Ortho P.C. | VA | Healthcare Provider | 1,544 | Feb 2, 2026 | Hacking/IT Incident | Under investigation |
| Pafford Medical Services | AR | Healthcare Provider | 1,000 | Feb 2, 2026 | Hacking/IT Incident | Archive (closed) |
| Mindoula Health, Inc. | MD | Business Associate | 626 | Feb 2, 2026 | Hacking/IT Incident | Archive (closed) |
| LifeLong Medical Care | CA | Healthcare Provider | 70,000 | Jan 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Wakefield & Associates, LLC | TN | Business Associate | 31,751 | Jan 30, 2026 | Hacking/IT Incident | Archive (closed) |
| High Point Treatment Center, Inc. | MA | Healthcare Provider | 25,832 | Jan 30, 2026 | Hacking/IT Incident | Under investigation |
| BAYADA Home Health Care, Inc. | NJ | Healthcare Provider | 9,526 | Jan 30, 2026 | Hacking/IT Incident | Archive (closed) |
| Chattanooga C.A.R.E.S. d/b/a Cempa Community Care | TN | Healthcare Provider | 1,341 | Jan 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| EDINGER MEDICAL GROUP | CA | Healthcare Provider | 1,246 | Jan 30, 2026 | Hacking/IT Incident | Archive (closed) |
| 180 Health Partners, Inc. | MD | Business Associate | 1,167 | Jan 30, 2026 | Hacking/IT Incident | Archive (closed) |
| Lincoln National Corporation d/b/a/ Lincoln Financial | IN | Health Plan | 998 | Jan 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Health and Hospital Corporation of Marion County | IN | Healthcare Provider | 792 | Jan 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Wound Technology Network, Inc. | FL | Healthcare Provider | 139,830 | Jan 28, 2026 | Hacking/IT Incident | Under investigation |
| Clinic Service Corporation | CO | Business Associate | 82,331 | Jan 28, 2026 | Hacking/IT Incident | Under investigation |
| Axis Healthcare Group P.C. | MD | Healthcare Provider | 3,537 | Jan 28, 2026 | Hacking/IT Incident | Archive (closed) |
| Baltimore City Health Department | MD | Healthcare Provider | 2,597 | Jan 28, 2026 | Hacking/IT Incident | Archive (closed) |
| CashFlow Solutions, LLC | PA | Healthcare Provider | 1,007 | Jan 28, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| WindRose Health Network | IN | Healthcare Provider | 9,087 | Jan 27, 2026 | Hacking/IT Incident | Under investigation |
| Pecan Tree Dental, PLLC | TX | Healthcare Provider | 13,300 | Jan 26, 2026 | Hacking/IT Incident | Archive (closed) |
| Central States Dermatology Services, LLC | IL | Healthcare Provider | 4,626 | Jan 26, 2026 | Hacking/IT Incident | Under investigation |
| Jefferson-Blount-St. Clair Mental Health Authority | AL | Healthcare Provider | 30,434 | Jan 23, 2026 | Hacking/IT Incident | Under investigation |
| Precipio, Inc. | CT | Healthcare Provider | 22,739 | Jan 23, 2026 | Hacking/IT Incident | Under investigation |
| Surgery Center of Oak Ridge, LLC dba Advanced Family Surgery Center | TN | Healthcare Provider | 10,320 | Jan 23, 2026 | Hacking/IT Incident | Under investigation |
| La Clinica de La Raza, Inc. (La Clinica) | CA | Healthcare Provider | 11,403 | Jan 22, 2026 | Hacking/IT Incident | Archive (closed) |
| Deschutes County Health Services | OR | Healthcare Provider | 1,305 | Jan 22, 2026 | Hacking/IT Incident | Archive (closed) |
| Middlesex Sheriff's Office | MA | Healthcare Provider | 19,080 | Jan 20, 2026 | Hacking/IT Incident | Under investigation |
| True RCM, a Rapid Care Transcription, Inc., Company | MD | Business Associate | 1,247 | Jan 20, 2026 | Hacking/IT Incident | Under investigation |
| AdventHealth Daytona Beach | FL | Healthcare Provider | 821 | Jan 20, 2026 | Loss | Archive (closed) |
| Insightin Health, Inc. | MD | Business Associate | 1,949,534 | Jan 16, 2026 | Hacking/IT Incident | Under investigation |
| Minnesota Department of Human Services | MN | Health Plan | 303,965 | Jan 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Texas MHMR Center dba Center for Life Resource | TX | Healthcare Provider | 26,055 | Jan 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Providence | WA | Healthcare Provider | 22,701 | Jan 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Bay Area Community Health | CA | Healthcare Provider | 9,912 | Jan 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Axis Community Health | CA | Healthcare Provider | 3,579 | Jan 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Benton County Health | OR | Healthcare Provider | 1,476 | Jan 16, 2026 | Hacking/IT Incident | Under investigation |
| Superior Care Plus LLC d/b/a Supportive Home Health LLC | OH | Healthcare Provider | 1,415 | Jan 16, 2026 | Hacking/IT Incident | Under investigation |
| 360 Dental PC | PA | Healthcare Provider | 11,273 | Jan 15, 2026 | Hacking/IT Incident | Under investigation |
| Southern Immediate Care, LLC | AL | Healthcare Provider | 7,447 | Jan 15, 2026 | Hacking/IT Incident | Under investigation |
| Administrators of the Tulane Educational Fund d/b/a Tulane University Medical Group | LA | Healthcare Provider | 6,556 | Jan 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Community Health Clinics, Inc. dba Terry Reilly Health Services | ID | Healthcare Provider | 5,421 | Jan 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Florence County Commission on Alcohol & Drug Abuse - dba Circle Park Behavioral Health Services (“Circle Park”) | SC | Healthcare Provider | 7,020 | Jan 14, 2026 | Hacking/IT Incident | Under investigation |
| Native American Health Center | CA | Health Plan | 2,451 | Jan 14, 2026 | Hacking/IT Incident | Archive (closed) |
| Health Center of Southeast Texas | TX | Healthcare Provider | 2,389 | Jan 14, 2026 | Hacking/IT Incident | Archive (closed) |
| Pinnacle Holdings, LTD | PA | Business Associate | 18,313 | Jan 13, 2026 | Hacking/IT Incident | Under investigation |
| FullBeauty Brands, Inc. Associate Benefits Plan | NY | Health Plan | 4,725 | Jan 13, 2026 | Hacking/IT Incident | Under investigation |
| TMG Health, Inc. | TX | Business Associate | 2,076 | Jan 13, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| EXCEL HEALTHCARE RECEIVABLE MANAGEMENT & CONSULTING CORP. | FL | Healthcare Provider | 500 | Jan 13, 2026 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.