HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 114 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The Terteling Co., Inc., Group Benefit Plan | ID | Health Plan | 4,824 | Jul 6, 2018 | Hacking/IT Incident | Archive (closed) |
| VCU Health System | VA | Healthcare Provider | 4,686 | Jul 6, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Overlake arthritis and Osteoporosis Center | WA | Healthcare Provider | 627 | Jul 6, 2018 | Hacking/IT Incident | Archive (closed) |
| Health Alliance Plan | MI | Health Plan | 2,814 | Jul 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Home for Little Wanderers | MA | Healthcare Provider | 861 | Jul 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Physician Associates, LLC | FL | Healthcare Provider | 710 | Jul 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Advanced Orthopedic Center | FL | Healthcare Provider | 1,647 | Jul 2, 2018 | Hacking/IT Incident | Archive (closed) |
| Arkansas Children's Hospital | AR | Healthcare Provider | 4,521 | Jun 29, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Hunt Memorial Hospital District | TX | Healthcare Provider | 1,887 | Jun 29, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Planned Parenthood of the Heartland | IA | Healthcare Provider | 515 | Jun 29, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Associated Dermatology & Skin Cancer Clinic of Helena, PC | MT | Healthcare Provider | 1,254 | Jun 28, 2018 | Theft | Archive (closed) |
| State of Alaska Department of Health and Social Services | AK | Health Plan | 501 | Jun 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Children's Mercy Hospital | MO | Healthcare Provider | 1,463 | Jun 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Progressions Behavioral Health Services, Inc. | PA | Healthcare Provider | 1,303 | Jun 25, 2018 | Hacking/IT Incident | Archive (closed) |
| San Francisco Department of Public Health | CA | Healthcare Provider | 900 | Jun 25, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 871 | Jun 25, 2018 | Theft | Archive (closed) |
| InfuSystem, Inc. | MI | Healthcare Provider | 3,882 | Jun 22, 2018 | Hacking/IT Incident | Archive (closed) |
| VA Long Beach Healthcare System | CA | Healthcare Provider | 1,030 | Jun 22, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Peter J Parker, M.D., Inc. | CA | Healthcare Provider | 628 | Jun 19, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Healthcare of Lake Norman | NC | Healthcare Provider | 500 | Jun 19, 2018 | Hacking/IT Incident | Archive (closed) |
| David S. Ng, O.D. | CA | Healthcare Provider | 758 | Jun 16, 2018 | Theft | Archive (closed) |
| CHRISTUS Spohn Hospital Corpus Christi-Shoreline | TX | Healthcare Provider | 1,805 | Jun 15, 2018 | Theft | Archive (closed) |
| Dean Health Plan | WI | Health Plan | 1,311 | Jun 15, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New Jersey Department of Human Services | NJ | Health Plan | 1,263 | Jun 15, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Med Associates, Inc. | NY | Business Associate | 276,057 | Jun 14, 2018 | Hacking/IT Incident | Archive (closed) |
| Gwenn S Robinson MD | NM | Healthcare Provider | 2,500 | Jun 14, 2018 | Hacking/IT Incident | Archive (closed) |
| Black River Medical Center | MO | Healthcare Provider | 13,443 | Jun 13, 2018 | Hacking/IT Incident | Archive (closed) |
| WellCare Health Plans, Inc. | FL | Health Plan | 1,101 | Jun 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| HealthEquity, Inc. | UT | Business Associate | 16,000 | Jun 12, 2018 | Hacking/IT Incident | Archive (closed) |
| Denise M. Bowden, LAc | CA | Healthcare Provider | 538 | Jun 11, 2018 | Theft | Archive (closed) |
| Healthland Inc. | MN | Business Associate | 614 | Jun 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New England Baptist Health | MA | Healthcare Provider | 7,582 | Jun 8, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Massac County Surgery Center dba Orthopaedic Institute Surgery Center | IL | Healthcare Provider | 2,000 | Jun 8, 2018 | Hacking/IT Incident | Archive (closed) |
| RISE Wisconsin, Inc. | WI | Healthcare Provider | 3,731 | Jun 7, 2018 | Hacking/IT Incident | Archive (closed) |
| Benefit Outsourcing Solutions | MI | Business Associate | 1,144 | Jun 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Terros Incorporated | AZ | Healthcare Provider | 1,618 | Jun 5, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Utah Health | UT | Healthcare Provider | 607 | Jun 2, 2018 | Theft | Archive (closed) |
| Florida Agency for Persons with Disabilities | FL | Health Plan | 1,951 | Jun 1, 2018 | Hacking/IT Incident | Archive (closed) |
| SimplyWell | TX | Business Associate | 597 | Jun 1, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Dignity Health | CA | Healthcare Provider | 55,947 | May 31, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| The University of Texas MD Anderson Cancer Center | TX | Healthcare Provider | 1,266 | May 31, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Dino-Peds | CO | Healthcare Provider | 1,357 | May 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| AFLAC | GA | Health Plan | 10,396 | May 29, 2018 | Hacking/IT Incident | Archive (closed) |
| Aultman Hospital | OH | Healthcare Provider | 42,625 | May 25, 2018 | Hacking/IT Incident | Archive (closed) |
| BioIQ Inc. | CA | Business Associate | 4,059 | May 25, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| The Trustees of Purdue University | IN | Healthcare Provider | 1,711 | May 25, 2018 | Hacking/IT Incident | Archive (closed) |
| Care Partners Hospice and Palliative Care | OR | Healthcare Provider | 600 | May 25, 2018 | Hacking/IT Incident | Archive (closed) |
| MSK Group | TN | Healthcare Provider | 566,236 | May 22, 2018 | Hacking/IT Incident | Archive (closed) |
| Muir Medical Group, IPA, Inc. | CA | Business Associate | 5,485 | May 22, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Elmcroft Senior Living, Inc. | TX | Healthcare Provider | 10,000 | May 21, 2018 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.