Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 117 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Rhode Island Executive Office of Health and Human ServicesRIHealth Plan1,100Feb 27, 2018Unauthorized Access/DisclosureArchive (closed)
Artesia General HospitalNMHealthcare Provider864Feb 27, 2018Hacking/IT IncidentArchive (closed)
Center for Sports Medicine and OrthopedicsTNHealthcare Provider800Feb 26, 2018Unauthorized Access/DisclosureArchive (closed)
California College of ArtsCAHealth Plan623Feb 26, 2018TheftArchive (closed)
Walmart, Inc.ARHealthcare Provider735Feb 22, 2018Unauthorized Access/DisclosureArchive (closed)
University of Virginia Medical CenterVAHealthcare Provider1,882Feb 21, 2018Hacking/IT IncidentArchive (closed)
ConnectiCareCTHealth Plan1,834Feb 21, 2018Unauthorized Access/DisclosureArchive (closed)
Missouri Dept. of Mental HealthMOHealthcare Provider1,000Feb 21, 2018Unauthorized Access/DisclosureArchive (closed)
Tufts Associated Health Maintenance Organization, Inc.MAHealth Plan70,320Feb 16, 2018Unauthorized Access/DisclosureArchive (closed)
Jemison Internal Medicine, PCALHealth Plan6,550Feb 16, 2018Hacking/IT IncidentArchive (closed)
Flexible Benefit Service CorporationILBusiness Associate5,123Feb 16, 2018Hacking/IT IncidentArchive (closed)
CarePlus Health Plan [case #HU1800066]KYHealth Plan11,248Feb 5, 2018Unauthorized Access/DisclosureArchive (closed)
Partners HealthCare System, Inc.MAHealthcare Provider2,450Feb 5, 2018Hacking/IT IncidentArchive (closed)
City of DetroitMIHealthcare Provider544Feb 5, 2018LossArchive (closed)
Triple-S Advantage, Inc.Health Plan36,305Feb 2, 2018Unauthorized Access/DisclosureArchive (closed)
Ron's Pharmacy ServicesCAHealthcare Provider6,781Feb 2, 2018Hacking/IT IncidentArchive (closed)
Eastern Maine Medical CenterMEHealthcare Provider660Feb 2, 2018TheftArchive (closed)
Forrest General HospitalMSHealthcare Provider1,670Feb 1, 2018Hacking/IT IncidentArchive (closed)
Coastal Cape Fear Eye Associates, P.A.NCHealthcare Provider925Feb 1, 2018Hacking/IT IncidentArchive (closed)
Children's Mercy HospitalMOHealthcare Provider65,930Jan 31, 2018Hacking/IT IncidentArchive (closed)
QuadMed, LLC (Whirlpool)WIHealthcare Provider4,549Jan 29, 2018Unauthorized Access/DisclosureArchive (closed)
Decatur County General HospitalTNHealthcare Provider24,000Jan 26, 2018Hacking/IT IncidentArchive (closed)
Steven Yang, D.D.S., INC.CAHealthcare Provider3,202Jan 26, 2018TheftArchive (closed)
Zachary E. Adkins, DDSNMHealthcare Provider3,677Jan 25, 2018TheftArchive (closed)
Rocky Mountain Women's Health Center, Inc.UTHealthcare Provider1,123Jan 25, 2018Improper DisposalArchive (closed)
Central States Southeast and Southwest Areas Health and Welfare FundILHealth Plan634Jan 23, 2018Unauthorized Access/DisclosureArchive (closed)
RGH Enterprises, Inc.OHHealthcare Provider4,586Jan 22, 2018Unauthorized Access/DisclosureArchive (closed)
Robert Smith DMD, PCTNHealthcare Provider1,500Jan 22, 2018Hacking/IT IncidentArchive (closed)
Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc.MDHealthcare Provider5,228Jan 19, 2018Hacking/IT IncidentArchive (closed)
Gillette Medical ImagingWYHealthcare Provider4,476Jan 18, 2018Unauthorized Access/DisclosureArchive (closed)
The Pediatric Endocrinology and Diabetes SpecialistsNVHealthcare Provider1,021Jan 18, 2018Hacking/IT IncidentArchive (closed)
High Plains Surgical AssociatesWYHealthcare Provider607Jan 15, 2018Unauthorized Access/DisclosureArchive (closed)
Onco360 and CareMed Specialty PharmacyKYHealthcare Provider53,173Jan 12, 2018Hacking/IT IncidentArchive (closed)
Pedes Orange County, Inc.CAHealthcare Provider917Jan 12, 2018Unauthorized Access/DisclosureArchive (closed)
Western Washington Medical Group Inc.WAHealthcare Provider842Jan 12, 2018Improper DisposalArchive (closed)
Alicia Ann OswaldCAHealthcare Provider800Jan 9, 2018Unauthorized Access/DisclosureArchive (closed)
Charles River Medical Associates, pcMAHealthcare Provider9,387Jan 8, 2018LossArchive (closed)
Palomar Health (Palomar Medical Center (Escondido)CAHealthcare Provider1,309Jan 8, 2018Unauthorized Access/DisclosureArchive (closed)
DJO, LLCCAHealthcare Provider1,203Jan 6, 2018LossArchive (closed)
Oklahoma State UniversityOKHealthcare Provider279,865Jan 5, 2018Hacking/IT IncidentArchive (closed)
Agency for Health Care AdministrationFLHealth Plan30,000Jan 5, 2018Hacking/IT IncidentArchive (closed)
Penn MedicinePAHealthcare Provider1,050Jan 2, 2018TheftArchive (closed)
Coplin Health SystemsWVHealthcare Provider43,000Dec 29, 2017TheftArchive (closed)
SSM HealthMOHealthcare Provider29,579Dec 28, 2017Unauthorized Access/DisclosureArchive (closed)
Miracle-Ear, Inc. and Amplifon (USA), Inc.MNBusiness Associate554Dec 28, 2017Hacking/IT IncidentArchive (closed)
Longs Peak Family Practice, P.C.COHealthcare Provider16,238Dec 27, 2017Hacking/IT IncidentArchive (closed)
Colorado Department of Human ServicesCOHealthcare Provider639Dec 27, 2017Hacking/IT IncidentArchive (closed)
UnitedHealthcare Community Plan of PennsylvaniaPABusiness Associate614Dec 27, 2017Unauthorized Access/DisclosureArchive (closed)
Blue Cross Blue Shield of MassachusettsMAHealth Plan1,843Dec 26, 2017Unauthorized Access/DisclosureArchive (closed)
SAY San DiegoCAHealthcare Provider1,272Dec 22, 2017LossArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.