Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 111 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Mind and Motion, LLCGAHealthcare Provider16,000Nov 30, 2018Hacking/IT IncidentArchive (closed)
Prairie Fields Family Medicine, PCNEHealthcare Provider6,450Nov 30, 2018Unauthorized Access/DisclosureArchive (closed)
CCRM Dallas-Fort WorthTXHealthcare Provider1,117Nov 30, 2018Hacking/IT IncidentArchive (closed)
CHI Health Care, Inc.MDHealthcare Provider722Nov 30, 2018Unauthorized Access/DisclosureArchive (closed)
Thielen Student Health CenterIAHealthcare Provider599Nov 30, 2018Unauthorized Access/DisclosureArchive (closed)
Steward Medical GroupMAHealthcare Provider16,276Nov 28, 2018Hacking/IT IncidentArchive (closed)
OrthoTexas Physicians and Surgeons, PLLCTXHealthcare Provider2,172Nov 28, 2018Unauthorized Access/DisclosureArchive (closed)
AccuDoc Solutions, Inc.NCBusiness Associate2,652,537Nov 27, 2018Hacking/IT IncidentArchive (closed)
Baylor Scott & White Medical Center - FriscoTXHealthcare Provider47,984Nov 26, 2018Hacking/IT IncidentArchive (closed)
Cancer Treatment Centers of America (CTCA) at Western Regional Medical CenterAZHealthcare Provider41,948Nov 26, 2018Hacking/IT IncidentArchive (closed)
Mercy Medical Center- North IowaIAHealthcare Provider1,971Nov 26, 2018Unauthorized Access/DisclosureArchive (closed)
Tandigm HealthPABusiness Associate7,376Nov 21, 2018Hacking/IT IncidentArchive (closed)
East End Disability Associates, Inc.NYHealthcare Provider896Nov 20, 2018Hacking/IT IncidentArchive (closed)
Episcopal Health ServicesNYHealthcare Provider218,055Nov 19, 2018Hacking/IT IncidentArchive (closed)
James R. Etzkorn, MDMOHealthcare Provider6,845Nov 19, 2018Unauthorized Access/DisclosureArchive (closed)
Inova Health SystemVABusiness Associate1,265Nov 19, 2018Hacking/IT IncidentArchive (closed)
HealthEquity, Inc.UTBusiness Associate165,800Nov 17, 2018Hacking/IT IncidentArchive (closed)
New York Oncology Hematology, P.C.NYHealthcare Provider128,400Nov 16, 2018Hacking/IT IncidentArchive (closed)
Center for Vitreo-Retinal DiseasesILHealthcare Provider20,371Nov 16, 2018Hacking/IT IncidentArchive (closed)
Georgia Spine & Orthopaedics of Atlanta, LLCGAHealthcare Provider7,012Nov 16, 2018Hacking/IT IncidentArchive (closed)
Texas VSI, LLCTXBusiness Associate500Nov 16, 2018Hacking/IT IncidentArchive (closed)
San Mateo Medical CenterCAHealthcare Provider5,000Nov 13, 2018Unauthorized Access/DisclosureArchive (closed)
James R. Etzkorn, MDMOHealthcare Provider6,845Nov 9, 2018Hacking/IT IncidentArchive (closed)
Arthritis & Osteoporosis Consultants of the CarolinasNCHealthcare Provider3,930Nov 9, 2018Improper DisposalArchive (closed)
SUNY Upstate Medical UniversityNYHealthcare Provider1,216Nov 9, 2018Unauthorized Access/DisclosureArchive (closed)
American Medical Response, Inc.TXHealthcare Provider912Nov 9, 2018Hacking/IT IncidentArchive (closed)
Utah Healing CenterUTHealthcare Provider543Nov 7, 2018Unauthorized Access/DisclosureArchive (closed)
Veterans Health AdministrationDCHealthcare Provider19,254Nov 6, 2018Unauthorized Access/DisclosureArchive (closed)
Southwest Washington Regional Surgery Center, LLCWAHealthcare Provider2,393Nov 6, 2018Hacking/IT IncidentArchive (closed)
FHN Family Counseling CenterILHealthcare Provider4,458Nov 3, 2018TheftArchive (closed)
Oprex Surgery (Baytown), L.P. d/b/a Altus Baytown HospitalTXHealthcare Provider40,000Nov 2, 2018Hacking/IT IncidentArchive (closed)
Inova Health SystemVAHealthcare Provider12,331Nov 2, 2018Hacking/IT IncidentArchive (closed)
AdventHealth Rollins Brook HospitalTXHealthcare Provider5,019Nov 2, 2018LossArchive (closed)
Summit Medical GroupNJHealthcare Provider525Nov 2, 2018LossArchive (closed)
Dallas County Mental Health Mental Retardation Center dba Metrocare ServicesTXHealthcare Provider1,804Nov 1, 2018Hacking/IT IncidentArchive (closed)
HealthFitnessILBusiness Associate614Oct 28, 2018Unauthorized Access/DisclosureArchive (closed)
Raley's/Bel Air Mart/Nob Hill General Store, Inc.CAHealthcare Provider10,124Oct 26, 2018TheftArchive (closed)
CNO ACEINHealth Plan566,217Oct 25, 2018Hacking/IT IncidentArchive (closed)
Missouri Department of Mental HealthMOHealthcare Provider9,000Oct 24, 2018Unauthorized Access/DisclosureArchive (closed)
The Children's Hospital of PhiladelphiaPAHealthcare Provider5,368Oct 23, 2018Hacking/IT IncidentArchive (closed)
Jones Eye Center, P.C.IAHealthcare Provider39,605Oct 22, 2018Hacking/IT IncidentArchive (closed)
CJ Elmwood Partners, L.P.IAHealthcare Provider22,416Oct 22, 2018Hacking/IT IncidentArchive (closed)
Day Kimball HealthcareCTHealthcare Provider698Oct 22, 2018Unauthorized Access/DisclosureArchive (closed)
Smith Dental CareTXHealthcare Provider5,000Oct 17, 2018Hacking/IT IncidentArchive (closed)
Yale UniversityCTHealthcare Provider1,102Oct 17, 2018Unauthorized Access/DisclosureArchive (closed)
Employees Retirement System of TexasTXHealth Plan1,248,263Oct 15, 2018Unauthorized Access/DisclosureArchive (closed)
HealthFitnessILBusiness Associate20,790Oct 15, 2018Unauthorized Access/DisclosureArchive (closed)
HealthFitnessILBusiness Associate550Oct 15, 2018Unauthorized Access/DisclosureArchive (closed)
Catawba Valley Medical CenterNCHealthcare Provider20,000Oct 12, 2018Hacking/IT IncidentArchive (closed)
FirstCare Health PlansTXHealth Plan8,056Oct 12, 2018Unauthorized Access/DisclosureArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.