HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 116 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Atchison Hospital Association | KS | Healthcare Provider | 667 | Apr 11, 2018 | Hacking/IT Incident | Archive (closed) |
| ViaTech Publishing Solutions, Inc. | MN | Health Plan | 2,431 | Apr 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 1,658 | Apr 10, 2018 | Loss | Archive (closed) |
| UnitedHealth Group | MN | Health Plan | 896 | Apr 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Integrated Rehab Consultants | IL | Healthcare Provider | 4,292 | Apr 9, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| CA Department of Developmental Services | CA | Health Plan | 582,174 | Apr 6, 2018 | Theft | Archive (closed) |
| Chesapeake Regional Medical Center | VA | Healthcare Provider | 2,100 | Apr 6, 2018 | Theft | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 910 | Apr 6, 2018 | Theft | Archive (closed) |
| Diagnostic Radiology & Imaging, LLC | NC | Healthcare Provider | 800 | Apr 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Wisconsin Department of Health Services | WI | Health Plan | 779 | Apr 3, 2018 | Theft | Archive (closed) |
| Fondren Orthopedic Group L.L.P. | TX | Healthcare Provider | 11,552 | Apr 2, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| QUALITY-CARE PHARMACY | CA | Healthcare Provider | 2,000 | Apr 2, 2018 | Theft | Archive (closed) |
| West Kendall Baptist Hospital | FL | Healthcare Provider | 1,480 | Apr 2, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Guardian Pharmacy of Jacksonville | FL | Healthcare Provider | 11,521 | Mar 30, 2018 | Hacking/IT Incident | Archive (closed) |
| Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group | CA | Healthcare Provider | 2,640 | Mar 30, 2018 | Theft | Archive (closed) |
| Children’s National Medical Center | DC | Healthcare Provider | 722 | Mar 30, 2018 | Theft | Archive (closed) |
| Sonoma County Indian Health Project, Inc | CA | Healthcare Provider | 662 | Mar 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Middletown Medical P.C. | NY | Healthcare Provider | 63,551 | Mar 29, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New York City Health and Hospitals Corporation - Harlem Hospital | NY | Healthcare Provider | 595 | Mar 29, 2018 | Theft | Archive (closed) |
| Cambridge Health Alliance | MA | Healthcare Provider | 2,280 | Mar 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Mississippi State Department of Health | MS | Healthcare Provider | 30,799 | Mar 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| VA Palo Alto Health Care System | CA | Healthcare Provider | 1,600 | Mar 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 741 | Mar 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Houston Medical Plan | TX | Health Plan | 34,637 | Mar 22, 2018 | Theft | Archive (closed) |
| CareMeridian, LLC | MA | Healthcare Provider | 1,922 | Mar 21, 2018 | Loss | Archive (closed) |
| Center for Comprehensive Services, Inc. | MA | Healthcare Provider | 1,176 | Mar 21, 2018 | Loss | Archive (closed) |
| National Mentor Healthcare, LLC. | MA | Healthcare Provider | 1,015 | Mar 21, 2018 | Loss | Archive (closed) |
| Mentor ABI, LLC | MA | Healthcare Provider | 994 | Mar 21, 2018 | Loss | Archive (closed) |
| Prestera Center for Mental Health Services, Inc. | WV | Healthcare Provider | 670 | Mar 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Primary Health Care, Inc. | IA | Healthcare Provider | 10,313 | Mar 16, 2018 | Hacking/IT Incident | Archive (closed) |
| North Texas Medical Center | TX | Healthcare Provider | 3,350 | Mar 15, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| UnitedHealth Group | MN | Health Plan | 1,755 | Mar 15, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Serene Sedation, LLC | MD | Healthcare Provider | 5,207 | Mar 14, 2018 | Hacking/IT Incident | Archive (closed) |
| Saint Francis Hospital | GA | Healthcare Provider | 1,412 | Mar 14, 2018 | Improper Disposal | Archive (closed) |
| Special Agents Mutual Benefit Association | MD | Health Plan | 13,942 | Mar 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| ATI Holdings, LLC | IL | Healthcare Provider | 45,800 | Mar 12, 2018 | Hacking/IT Incident | Archive (closed) |
| Barnes-Jewish Hospital | MO | Healthcare Provider | 18,436 | Mar 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Barnes-Jewish St. Peters Hospital | MO | Healthcare Provider | 15,046 | Mar 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| RoxSan Pharmacy, Inc. | CA | Healthcare Provider | 1,049 | Mar 12, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| The Arc of Erie County | NY | Healthcare Provider | 3,751 | Mar 9, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| inSite Digestive Health Care | CA | Healthcare Provider | 1,424 | Mar 9, 2018 | Theft | Archive (closed) |
| John J. Pershing VA Medical Center | MO | Healthcare Provider | 1,843 | Mar 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Front Range Dermatology Associates, P.C. | CO | Healthcare Provider | 1,070 | Mar 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Agency for Persons with Disabilities | FL | Health Plan | 63,627 | Mar 1, 2018 | Hacking/IT Incident | Archive (closed) |
| Esther V. Rettig, M.D., P.A. | KS | Healthcare Provider | 12,974 | Mar 1, 2018 | Hacking/IT Incident | Archive (closed) |
| St. Peter's Ambulatory Surgery Center LLC - d/b/a St. Peter's Surgery & Endoscopy Center | NY | Healthcare Provider | 134,512 | Feb 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Union Lake Supermarket, LLC | NJ | Healthcare Provider | 9,956 | Feb 28, 2018 | Improper Disposal | Archive (closed) |
| Memorial Hospital at Gulfport | MS | Healthcare Provider | 1,512 | Feb 28, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| FastHealth Corporation | AL | Business Associate | 18,192 | Feb 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Rhode Island Executive Office of Health and Human Services | RI | Health Plan | 5,600 | Feb 27, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.