HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 112 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The May Eye Care Center | PA | Healthcare Provider | 30,000 | Oct 11, 2018 | Hacking/IT Incident | Archive (closed) |
| West Sound Treatment Center | WA | Healthcare Provider | 2,300 | Oct 11, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| West Sound Treatment Center | WA | Healthcare Provider | 2,300 | Oct 11, 2018 | Theft | Archive (closed) |
| Indiana University School of Medicine | IN | Healthcare Provider | 1,431 | Oct 11, 2018 | Theft | Archive (closed) |
| Blue Cross and Blue Shield of North Carolina (Blue Cross NC) | NC | Health Plan | 631 | Oct 11, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Cigna | CT | Health Plan | 3,500 | Oct 10, 2018 | Hacking/IT Incident | Archive (closed) |
| Hormone Logics | FL | Healthcare Provider | 3,000 | Oct 10, 2018 | Theft | Archive (closed) |
| Minnesota Department of Human Services | MN | Health Plan | 20,800 | Oct 9, 2018 | Hacking/IT Incident | Archive (closed) |
| Oklahoma Department of Human Services | OK | Health Plan | 813 | Oct 8, 2018 | Hacking/IT Incident | Archive (closed) |
| Dr. Amy Woodruff | TX | Healthcare Provider | 10,862 | Oct 7, 2018 | Hacking/IT Incident | Archive (closed) |
| Dr. Robert Carpenter | TX | Healthcare Provider | 3,000 | Oct 7, 2018 | Hacking/IT Incident | Archive (closed) |
| Health First, Inc | FL | Healthcare Provider | 42,000 | Oct 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Gold Coast Health Plan | CA | Business Associate | 37,005 | Oct 5, 2018 | Hacking/IT Incident | Archive (closed) |
| National Ambulatory Hernia Institute | CA | Healthcare Provider | 15,974 | Oct 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Northwest Surgical Specialists, P.C. | WA | Healthcare Provider | 2,050 | Oct 5, 2018 | Hacking/IT Incident | Archive (closed) |
| University Of Missouri Health | MO | Healthcare Provider | 706 | Oct 5, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Tillamook Chiropractic, PC | OR | Healthcare Provider | 4,058 | Oct 3, 2018 | Hacking/IT Incident | Archive (closed) |
| New Mexico Retiree Health Care Authority | NM | Health Plan | 586 | Oct 2, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan | IN | Health Plan | 19,320 | Sep 28, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 3,624 | Sep 28, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Reichert Prosthetics & Orthotics, LLC | WI | Healthcare Provider | 3,380 | Sep 28, 2018 | Theft | Archive (closed) |
| Gentle Dentistry Group PC | NJ | Healthcare Provider | 831 | Sep 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Ransom Memorial Hospital | KS | Healthcare Provider | 16,366 | Sep 25, 2018 | Hacking/IT Incident | Archive (closed) |
| J&J MEDICAL SERVICE NETWORK INC | TX | Business Associate | 2,500 | Sep 25, 2018 | Hacking/IT Incident | Archive (closed) |
| Personal Assistance Services of Colorado, LLC | CO | Healthcare Provider | 1,839 | Sep 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Pulse Systems, Inc. | KS | Business Associate | 722 | Sep 19, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Southwest Oregon IPA | OR | Health Plan | 1,449 | Sep 18, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| The University of Texas Health Science Center at Houston | TX | Healthcare Provider | 500 | Sep 18, 2018 | Theft | Archive (closed) |
| Independence Blue Cross, LLC | PA | Business Associate | 16,762 | Sep 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| WellCare Health Plans, Inc. | FL | Health Plan | 26,942 | Sep 14, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Guardant Health, Inc. | CA | Healthcare Provider | 1,112 | Sep 14, 2018 | Hacking/IT Incident | Archive (closed) |
| Blue Cross & Blue Shield of Rhode Island | RI | Health Plan | 1,567 | Sep 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Leominster Dermatology LLP | MA | Healthcare Provider | 500 | Sep 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Total Diagnostix II, LLC | TX | Healthcare Provider | 855 | Sep 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Simonian Sports Medicine Clinic, A Medical Corporation | CA | Healthcare Provider | 1,541 | Sep 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Ohio Living | OH | Healthcare Provider | 6,510 | Sep 7, 2018 | Hacking/IT Incident | Archive (closed) |
| TMC HealthCare | AZ | Healthcare Provider | 1,776 | Sep 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Rockdale Blackhawk, LLC d/b/a Little River Healthcare | TX | Healthcare Provider | 1,494 | Sep 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Boston Health Care for the Homeless Program | MA | Healthcare Provider | 861 | Sep 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Catholic Charities Neighborhood Services, Inc. | NY | Healthcare Provider | 565 | Sep 7, 2018 | Hacking/IT Incident | Archive (closed) |
| J.A. Stokes Ltd. | NV | Healthcare Provider | 3,200 | Sep 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Nebraska Department of Health and Human Services | NE | Health Plan | 516 | Sep 4, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Reliable Respiratory | MA | Healthcare Provider | 21,311 | Sep 1, 2018 | Hacking/IT Incident | Archive (closed) |
| Carpenters Benefit Funds of Philadelphia | PA | Health Plan | 20,015 | Aug 31, 2018 | Hacking/IT Incident | Archive (closed) |
| David G. Simon, DMD, PA, d/b/a Simon Orthodontics | FL | Healthcare Provider | 15,129 | Aug 31, 2018 | Hacking/IT Incident | Archive (closed) |
| Port City Operating Company doing business as St. Joseph's Medical Center | CA | Healthcare Provider | 4,984 | Aug 31, 2018 | Loss | Archive (closed) |
| Hopebridge | IN | Healthcare Provider | 1,411 | Aug 31, 2018 | Hacking/IT Incident | Archive (closed) |
| United Methodist Homes | NY | Healthcare Provider | 843 | Aug 31, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Greigh I. Hirata M.D. Inc, dba. Fetal Diagnostic Institute of the Pacific | HI | Healthcare Provider | 40,800 | Aug 30, 2018 | Hacking/IT Incident | Archive (closed) |
| South Alamo Medical Group P.A | TX | Healthcare Provider | 2,180 | Aug 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.