HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 113 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Family Tree Relief Nursery | OR | Healthcare Provider | 2,000 | Aug 30, 2018 | Hacking/IT Incident | Archive (closed) |
| Crossroads Behavioral Health | IA | Healthcare Provider | 5,000 | Aug 28, 2018 | Improper Disposal | Archive (closed) |
| First coast podiatric surgery and wound | FL | Business Associate | 500 | Aug 27, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Management Concepts, Inc. | FL | Business Associate | 502,416 | Aug 22, 2018 | Hacking/IT Incident | Archive (closed) |
| Family Medical Group Northeast PC | OR | Healthcare Provider | 2,077 | Aug 22, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Legacy Health | OR | Healthcare Provider | 38,000 | Aug 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Acadiana Computer Systems, Inc. | LA | Business Associate | 31,151 | Aug 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Chapman & Chapman, Inc. | OH | Business Associate | 2,032 | Aug 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Authentic Recovery Center, LLC | CA | Healthcare Provider | 1,790 | Aug 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Monroe Operations, LLC d/b/a Newport Academy and Center for Families | TN | Healthcare Provider | 1,165 | Aug 17, 2018 | Hacking/IT Incident | Archive (closed) |
| AU Medical Center, INC | GA | Healthcare Provider | 472,413 | Aug 16, 2018 | Hacking/IT Incident | Archive (closed) |
| University Medical Center Physicians | TX | Healthcare Provider | 18,500 | Aug 16, 2018 | Hacking/IT Incident | Archive (closed) |
| Wardell Orthopaedics, P.C. | VA | Healthcare Provider | 552 | Aug 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Wells Pharmacy Network | FL | Healthcare Provider | 10,000 | Aug 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Gordon Schanzlin New Vision Institute | CA | Healthcare Provider | 1,130 | Aug 10, 2018 | Theft | Archive (closed) |
| Anne Arundel Dermatology, P.A. | MD | Healthcare Provider | 1,310 | Aug 9, 2018 | Theft | Archive (closed) |
| InterAct of Michigan, Inc. | MI | Healthcare Provider | 1,290 | Aug 7, 2018 | Hacking/IT Incident | Archive (closed) |
| CoreLink Administrative Solutions, LLC | ND | Business Associate | 1,813 | Aug 6, 2018 | Hacking/IT Incident | Archive (closed) |
| Central Colorado Dermatology, PC | CO | Healthcare Provider | 4,065 | Aug 3, 2018 | Hacking/IT Incident | Archive (closed) |
| Don White, RN, DC, PC dba Canyon Rd Chiropractic and Massage | OR | Healthcare Provider | 2,900 | Aug 3, 2018 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of Colorado | CO | Health Plan | 900 | Aug 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| CoreSource, Inc. | IL | Business Associate | 769 | Aug 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Lane County Health & Human Services | OR | Healthcare Provider | 715 | Aug 1, 2018 | Loss | Archive (closed) |
| Southwestern Eye Center | AZ | Healthcare Provider | 667 | Aug 1, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Iowa Health System d/b/a UnityPoint Health | IA | Business Associate | 1,421,107 | Jul 30, 2018 | Hacking/IT Incident | Archive (closed) |
| SSM Health St. Mary's Hospital - Jefferson City | MO | Healthcare Provider | 301,000 | Jul 30, 2018 | Improper Disposal | Archive (closed) |
| Confluence Health | WA | Healthcare Provider | 33,821 | Jul 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Longwood Orthopedic Associates, Inc. | MA | Healthcare Provider | 10,000 | Jul 27, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Ambercare Corporation, Inc. | NM | Healthcare Provider | 2,284 | Jul 27, 2018 | Theft | Archive (closed) |
| Boys Town National Research Hospital | NE | Healthcare Provider | 105,309 | Jul 20, 2018 | Hacking/IT Incident | Archive (closed) |
| NorthStar Anesthesia | TX | Healthcare Provider | 19,807 | Jul 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Orlando Orthopaedic Center | FL | Healthcare Provider | 19,101 | Jul 20, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| MedSpring of Texas, PA | TX | Healthcare Provider | 13,034 | Jul 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Institute on Aging | CA | Healthcare Provider | 3,907 | Jul 20, 2018 | Hacking/IT Incident | Archive (closed) |
| StatCare Group LLC | MD | Healthcare Provider | 679 | Jul 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Fairbanks North Star Borough | AK | Healthcare Provider | 6,346 | Jul 19, 2018 | Hacking/IT Incident | Archive (closed) |
| Family Physicians of Old Town Fairfax PC | VA | Healthcare Provider | 500 | Jul 19, 2018 | Hacking/IT Incident | Archive (closed) |
| Ruben U. Carvajal, MD | NY | Healthcare Provider | 3,775 | Jul 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Sunspire Health | NJ | Healthcare Provider | 6,737 | Jul 16, 2018 | Hacking/IT Incident | Archive (closed) |
| PA Dept. of Human Services | PA | Healthcare Provider | 2,130 | Jul 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New England Dermatology, P.C. | MA | Healthcare Provider | 16,154 | Jul 13, 2018 | Improper Disposal | Archive (closed) |
| Billings Clinic | MT | Healthcare Provider | 9,417 | Jul 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Health Care Services | CO | Healthcare Provider | 2,442 | Jul 13, 2018 | Theft | Archive (closed) |
| Alive Hospice | TN | Healthcare Provider | 1,868 | Jul 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Central New York Cardiology | NY | Healthcare Provider | 824 | Jul 13, 2018 | Loss | Archive (closed) |
| Charles Cole Memorial Hospital | PA | Healthcare Provider | 790 | Jul 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Midwestern Regional Medical Center, Inc. | IL | Healthcare Provider | 2,675 | Jul 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| MedEvolve | AR | Business Associate | 205,434 | Jul 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Springs Family Care, P.C. | MO | Healthcare Provider | 44,979 | Jul 10, 2018 | Hacking/IT Incident | Archive (closed) |
| GOLDEN HEART ADMINISTRATIVE PROFESSIONALS | AK | Business Associate | 44,600 | Jul 9, 2018 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.