HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 118 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Kaiser Foundation Health Plan, Inc. | CA | Health Plan | 638 | Dec 22, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare | FL | Health Plan | 1,380 | Dec 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| BEE Reno Dental, LLC | NV | Healthcare Provider | 3,898 | Dec 20, 2017 | Hacking/IT Incident | Archive (closed) |
| Absolute Dental Hygiene, LLC | OR | Healthcare Provider | 871 | Dec 20, 2017 | Hacking/IT Incident | Archive (closed) |
| Sheldon M. Golden O.D., Optometric Corporation | CA | Healthcare Provider | 7,583 | Dec 19, 2017 | Hacking/IT Incident | Archive (closed) |
| Dignity Health Medical Foundation | CA | Healthcare Provider | 2,189 | Dec 19, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| MidMichigan Medical Center-Alpena | MI | Healthcare Provider | 1,900 | Dec 19, 2017 | Loss | Archive (closed) |
| Emory Healthcare | GA | Healthcare Provider | 24,000 | Dec 15, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Chilton Medical Center | NJ | Healthcare Provider | 4,600 | Dec 15, 2017 | Theft | Archive (closed) |
| NYU School of Medicine - Pediatric Surgery Associates | NY | Healthcare Provider | 2,158 | Dec 15, 2017 | Improper Disposal | Archive (closed) |
| Kaiser Foundation Health Plan, Inc. | CA | Health Plan | 4,389 | Dec 14, 2017 | Hacking/IT Incident | Archive (closed) |
| Compassion Care Hospice Las Vegas, LLC | NV | Healthcare Provider | 1,128 | Dec 14, 2017 | Hacking/IT Incident | Archive (closed) |
| Memphis Pathology Laboratory d/b/a American Esoteric Laboratory | TN | Healthcare Provider | 500 | Dec 14, 2017 | Theft | Archive (closed) |
| Pharmacy Innovations | NY | Healthcare Provider | 1,205 | Dec 12, 2017 | Hacking/IT Incident | Archive (closed) |
| Midland County Hospital District d/b/a Midland Memorial Hospital | TX | Healthcare Provider | 1,160 | Dec 12, 2017 | Hacking/IT Incident | Archive (closed) |
| University of South Florida, USF Health Care | FL | Healthcare Provider | 1,279 | Dec 11, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Franciscan Physician Network of Illinois and Specialty Physicians of Illinois, LLC (formerly known as WellGroup Health Partners, LLC) | IL | Healthcare Provider | 23,000 | Dec 9, 2017 | Loss | Archive (closed) |
| UNC Health Care System | NC | Healthcare Provider | 27,113 | Dec 8, 2017 | Theft | Archive (closed) |
| Mount Carmel Health System | OH | Healthcare Provider | 836 | Dec 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Iowa Hospital Corporation d/b/a Blank Children's Hospital | IA | Healthcare Provider | 557 | Dec 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Columbus Surgery Center, LLC | NE | Healthcare Provider | 7,221 | Dec 7, 2017 | Hacking/IT Incident | Archive (closed) |
| Eye Physicians, P.C. | NE | Healthcare Provider | 2,620 | Dec 7, 2017 | Hacking/IT Incident | Archive (closed) |
| Austin Manual Therapy Associates | TX | Healthcare Provider | 1,750 | Dec 6, 2017 | Hacking/IT Incident | Archive (closed) |
| Oklahoma Department of Human Services | OK | Health Plan | 47,000 | Dec 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Bronson Healthcare Group | MI | Healthcare Provider | 8,256 | Dec 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Eclectic Chiropractic Rehab | MI | Healthcare Provider | 650 | Dec 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Golden Rule Insurance Company | IN | Health Plan | 9,305 | Dec 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 43,563 | Dec 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Sinai Health System | IL | Healthcare Provider | 11,347 | Dec 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Washington Health System Greene | PA | Healthcare Provider | 4,145 | Dec 1, 2017 | Theft | Archive (closed) |
| CCRM Minneapolis, P.C. | MN | Healthcare Provider | 3,280 | Dec 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Hackensack Sleep and Pulmonary Center | NJ | Healthcare Provider | 16,474 | Nov 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Alere Toxicology | MA | Healthcare Provider | 2,146 | Nov 28, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Pulmonary Specialists of Louisville, PSC | KY | Healthcare Provider | 32,000 | Nov 27, 2017 | Hacking/IT Incident | Archive (closed) |
| University of Alabama at Birmingham | AL | Healthcare Provider | 652 | Nov 27, 2017 | Loss | Archive (closed) |
| Sutter Valley Medical Foundation d/b/a Sutter Medical Foundation | CA | Healthcare Provider | 1,303 | Nov 22, 2017 | Theft | Archive (closed) |
| Humana Inc | KY | Health Plan | 5,764 | Nov 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Baptist Health Louisville | KY | Healthcare Provider | 880 | Nov 21, 2017 | Hacking/IT Incident | Archive (closed) |
| Dallas County Mental Health Mental Retardation Center dba Metrocare Services | TX | Healthcare Provider | 120,259 | Nov 17, 2017 | Hacking/IT Incident | Archive (closed) |
| The Medical College of Wisconsin, Inc. | WI | Healthcare Provider | 9,500 | Nov 17, 2017 | Hacking/IT Incident | Archive (closed) |
| Clinical Pathology Laboratories Southeast | FL | Healthcare Provider | 500 | Nov 17, 2017 | Theft | Archive (closed) |
| Rocky Mountain Health Care Services | CO | Healthcare Provider | 909 | Nov 16, 2017 | Theft | Archive (closed) |
| Washington State Department of Social and Health Services | WA | Healthcare Provider | 515 | Nov 16, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| UPMC Susquehanna | PA | Healthcare Provider | 1,208 | Nov 15, 2017 | Hacking/IT Incident | Archive (closed) |
| Sports Medicine & Rehabilitation Therapy, Inc. | MA | Healthcare Provider | 8,800 | Nov 14, 2017 | Hacking/IT Incident | Archive (closed) |
| Family & Cosmetic Dentistry of the Rockies | CO | Healthcare Provider | 1,850 | Nov 13, 2017 | Improper Disposal | Archive (closed) |
| Otolaryngology Associates of Central New Jersey, P.C. | NJ | Healthcare Provider | 1,551 | Nov 10, 2017 | Theft | Archive (closed) |
| The Lowell General Hospital | MA | Healthcare Provider | 769 | Nov 10, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Aetna Inc. | CT | Health Plan | 1,600 | Nov 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| The Center For Health Care Services | TX | Healthcare Provider | 501 | Nov 8, 2017 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.