HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 115 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Echo Canyon Healthcare, Incorporated dba Heritage Court Post Acute of Scottsdale | AZ | Healthcare Provider | 1,765 | May 21, 2018 | Theft | Archive (closed) |
| Holland Eye Surgery and Laser Center | MI | Healthcare Provider | 42,200 | May 18, 2018 | Hacking/IT Incident | Archive (closed) |
| Associates in Psychiatry and Psychology | MN | Healthcare Provider | 6,546 | May 18, 2018 | Hacking/IT Incident | Archive (closed) |
| UT Physicians | TX | Healthcare Provider | 2,793 | May 18, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Hancock County Board of Developmental Disabilities | OH | Healthcare Provider | 607 | May 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| LifeBridge Health, Inc | MD | Healthcare Provider | 538,127 | May 15, 2018 | Hacking/IT Incident | Archive (closed) |
| OrthoWest, Ltd. | OH | Healthcare Provider | 2,300 | May 14, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Highmark Delaware | DE | Business Associate | 508 | May 14, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New York City Human Resources Administration/Department of Social Services | NY | Health Plan | 2,078 | May 11, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Capitol Administrators, Inc | CA | Business Associate | 1,733 | May 11, 2018 | Hacking/IT Incident | Archive (closed) |
| Dignity Health St. Rose Dominican Hospitals-DeLIma | NV | Healthcare Provider | 2,174 | May 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Dignity Health St. Rose Dominican Hospitals - Siena | NV | Healthcare Provider | 2,098 | May 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Dignity Health St. Rose Dominican Hospitals - San Martin | NV | Healthcare Provider | 1,764 | May 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Cambridge Dental Consulting Group | NV | Business Associate | 3,758 | May 9, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Boys Town National Research Hospital | NE | 2,182 | May 9, 2018 | Hacking/IT Incident | Archive (closed) | |
| The Oregon Clinic, P.C. (“The Oregon Clinic”) | OR | Healthcare Provider | 64,487 | May 8, 2018 | Hacking/IT Incident | Archive (closed) |
| USACS Management Group, Ltd. | OH | Business Associate | 15,552 | May 8, 2018 | Hacking/IT Incident | Archive (closed) |
| Cerebral Palsy Research Foundation of Kansas, Inc. | KS | Healthcare Provider | 8,300 | May 8, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Baptist Health | AR | Healthcare Provider | 3,453 | May 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Baystate Family Dental, Inc. | MA | Healthcare Provider | 500 | May 4, 2018 | Theft | Archive (closed) |
| Florida Hospital | FL | Healthcare Provider | 12,724 | May 3, 2018 | Hacking/IT Incident | Archive (closed) |
| Medical Center Ophthalmology Associates | TX | Healthcare Provider | 3,017 | Apr 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Worldwide Insurance Services, LLC | PA | Business Associate | 1,692 | Apr 30, 2018 | Hacking/IT Incident | Archive (closed) |
| Complete Family Medicine, LLC | NE | Healthcare Provider | 1,331 | Apr 30, 2018 | Theft | Archive (closed) |
| MedWatch LLC | FL | Business Associate | 40,621 | Apr 27, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Knoxville Heart Group, Inc. | TN | Healthcare Provider | 15,995 | Apr 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Eye Care Surgery Center, Inc. | LA | Healthcare Provider | 2,553 | Apr 27, 2018 | Theft | Archive (closed) |
| Tiger Vision, LLC | LA | Healthcare Provider | 2,553 | Apr 27, 2018 | Theft | Archive (closed) |
| Billings Clinic | MT | Healthcare Provider | 949 | Apr 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 703 | Apr 27, 2018 | Theft | Archive (closed) |
| Carolina Digestive Health Associates, PA | NC | Healthcare Provider | 10,988 | Apr 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Illinois Department of Healthcare and Family Services | IL | Health Plan | 8,000 | Apr 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| CareFirst Blue Cross Blue Shield | MD | Health Plan | 6,200 | Apr 26, 2018 | Hacking/IT Incident | Archive (closed) |
| Scenic Bluffs Health Center Inc | WI | Healthcare Provider | 2,889 | Apr 24, 2018 | Hacking/IT Incident | Archive (closed) |
| Capital Digestive Care, Inc. | MD | Healthcare Provider | 17,639 | Apr 23, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Gruber Dental | NJ | Healthcare Provider | 4,624 | Apr 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Capital District Physicians’ Health Plan | NY | Health Plan | 839 | Apr 20, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Riverside Medical Center | IL | Healthcare Provider | 501 | Apr 20, 2018 | Theft | Archive (closed) |
| Center for Orthopaedic Specialists - Providence Medical Institute (PMI) | CA | Healthcare Provider | 81,550 | Apr 18, 2018 | Hacking/IT Incident | Archive (closed) |
| Inogen, Inc. | CA | Healthcare Provider | 29,528 | Apr 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Kansas Department for Aging and Disability Services | KS | Healthcare Provider | 11,000 | Apr 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| MAXIMUS, Inc. / Business Ink, Co. | VA | Business Associate | 3,029 | Apr 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Iowa Health System d/b/a UnityPoint Health | IA | Business Associate | 16,429 | Apr 16, 2018 | Hacking/IT Incident | Archive (closed) |
| Athens Heart Center, P.C. | GA | Healthcare Provider | 12,158 | Apr 16, 2018 | Hacking/IT Incident | Archive (closed) |
| Cornerstone Foot & Ankle | NJ | Healthcare Provider | 533 | Apr 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Physicians Group | TX | Healthcare Provider | 3,808 | Apr 13, 2018 | Hacking/IT Incident | Archive (closed) |
| ATI Holdings, LLC | IL | Business Associate | 2,645 | Apr 13, 2018 | Hacking/IT Incident | Archive (closed) |
| California Physicians Service d/b/a Blue Shield of California | CA | Health Plan | 1,717 | Apr 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| MorshedEye, PLLC | KY | Healthcare Provider | 1,100 | Apr 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Polk County Health Services, Inc | IA | Health Plan | 1,071 | Apr 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.