HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 110 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Sunflower State Health Plan | KS | Health Plan | 1,625 | Jan 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Youssef M Aoun DPM PLLC | MI | Healthcare Provider | 700 | Jan 24, 2019 | Theft | Archive (closed) |
| Unum Group, on behalf of its subsidiaries - Unum Life Insurance and Colonial Life & Accident Insurance | TN | Health Plan | 532 | Jan 24, 2019 | Hacking/IT Incident | Archive (closed) |
| EyeSouth Partners | GA | Business Associate | 24,113 | Jan 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Stonehaven Dental | TX | Healthcare Provider | 6,289 | Jan 22, 2019 | Theft | Archive (closed) |
| Critical Care, Pulmonary and Sleep Associates, PLLP | CO | Healthcare Provider | 23,377 | Jan 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Las Colinas Orthopedic Surgery & Sports Medicine, PA | TX | Healthcare Provider | 76,000 | Jan 18, 2019 | Theft | Archive (closed) |
| Valley Hope Association | KS | Healthcare Provider | 70,799 | Jan 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Integrity, Inc. d/b/a Integrity House | NJ | Healthcare Provider | 7,206 | Jan 18, 2019 | Theft | Archive (closed) |
| ABB Inc. Active Employee Group Benefit Plan | NC | Health Plan | 6,877 | Jan 18, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| FABEN Obstetrics and Gynecology, LLC | FL | Healthcare Provider | 6,092 | Jan 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Tri-Cities Chaplaincy | WA | Healthcare Provider | 1,086 | Jan 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Lebanon VA Medical Center | PA | Healthcare Provider | 1,002 | Jan 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc. | KY | Health Plan | 598 | Jan 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Premier Specialties, Incorporated | TX | Healthcare Provider | 1,300 | Jan 14, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Sacred Heart Rehabilitation Center | MI | Healthcare Provider | 2,266 | Jan 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 1,211 | Jan 9, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Physicians of Winter Park, Inc. | KY | Healthcare Provider | 8,429 | Jan 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Dermacare Brickell | FL | Healthcare Provider | 1,800 | Jan 7, 2019 | Improper Disposal | Archive (closed) |
| NORTH ATLANTA MEDICAL CLINIC | GA | Healthcare Provider | 2,800 | Jan 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Centerstone Insurance and Financial Services (d/b/a BenefitMall) | TX | Business Associate | 111,589 | Jan 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Managed Health Services | IN | Health Plan | 31,300 | Jan 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Managed Health Services | IN | Health Plan | 576 | Jan 3, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | KY | Health Plan | 684 | Dec 31, 2018 | Theft | Archive (closed) |
| Choice Rehabilitation | MO | Business Associate | 4,309 | Dec 29, 2018 | Hacking/IT Incident | Archive (closed) |
| Wolverine Solutions Group | MI | Business Associate | 1,024,731 | Dec 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Dental Center of Northwest Ohio | OH | Healthcare Provider | 85,874 | Dec 28, 2018 | Hacking/IT Incident | Archive (closed) |
| WEA Insurance Corporation | WI | Health Plan | 850 | Dec 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Kent County Community Mental Health Authority | MI | Healthcare Provider | 2,284 | Dec 21, 2018 | Hacking/IT Incident | Archive (closed) |
| SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund | PA | Health Plan | 911 | Dec 21, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| DePaul University | IL | Health Plan | 656 | Dec 21, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Warby Parker Inc. (f/k/a JAND Inc. d/b/a Warby Parker) | NY | Healthcare Provider | 197,986 | Dec 20, 2018 | Hacking/IT Incident | Archive (closed) |
| The Podiatric Offices of Bobby Yee | CA | Healthcare Provider | 24,000 | Dec 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Dermatologists of Southwest Ohio | OH | Healthcare Provider | 733 | Dec 20, 2018 | Improper Disposal | Archive (closed) |
| Virtual Radiologic Professionals, LLC | MN | Healthcare Provider | 2,568 | Dec 19, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| VIRTUAL RADIOLOGIC PROFESSIONALS, LLC | MN | Healthcare Provider | 846 | Dec 19, 2018 | Hacking/IT Incident | Archive (closed) |
| Barnes-Jewish Hospital | MO | Healthcare Provider | 5,850 | Dec 18, 2018 | Hacking/IT Incident | Archive (closed) |
| Tift Regional Medical Center | GA | Healthcare Provider | 1,045 | Dec 18, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Vermont Health Network - Elizabethtown Community Hospital | NY | Healthcare Provider | 32,470 | Dec 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Fort Defiance Indian Hospital | AZ | Healthcare Provider | 1,000 | Dec 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis Mammography | AZ | Healthcare Provider | 500 | Dec 16, 2018 | Theft | Archive (closed) |
| Massachusetts General Hospital | MA | Healthcare Provider | 588 | Dec 14, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Smile Designs by Sandwick | MN | Healthcare Provider | 900 | Dec 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Contra Costa Health Plan | CA | Health Plan | 862 | Dec 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC | AZ | Healthcare Provider | 1,000 | Dec 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Adams County | WI | Healthcare Provider | 258,120 | Dec 11, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Ramsey County | MN | Healthcare Provider | 117,905 | Dec 11, 2018 | Hacking/IT Incident | Archive (closed) |
| Leon A Cohen MM.,PA | FL | Healthcare Provider | 2,122 | Dec 8, 2018 | Improper Disposal | Archive (closed) |
| Butler County Board of County Commissioners | OH | Health Plan | 1,912 | Dec 4, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Georgia Department of Human Services | GA | Business Associate | 435,339 | Nov 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.