HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 120 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Premier Medical Associates | PA | Healthcare Provider | 876 | Sep 15, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Family Care Medical Group IPA, Inc. | CA | Healthcare Provider | 763 | Sep 13, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Indiana Health Centers, Inc. | IN | Healthcare Provider | 1,697 | Sep 12, 2017 | Theft | Archive (closed) |
| ABB, Inc. | NC | Healthcare Provider | 28,012 | Sep 11, 2017 | Hacking/IT Incident | Archive (closed) |
| Network Health | WI | Health Plan | 51,232 | Sep 8, 2017 | Hacking/IT Incident | Archive (closed) |
| Children's Hospital Colorado | CO | Healthcare Provider | 3,370 | Sep 8, 2017 | Hacking/IT Incident | Archive (closed) |
| Ridgeview Medical Center | MN | Healthcare Provider | 1,074 | Sep 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan | CA | Health Plan | 609 | Sep 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Healthy Kids Corporation | FL | Health Plan | 2,000 | Sep 7, 2017 | Hacking/IT Incident | Archive (closed) |
| University of Wisconsin - Madison | WI | Healthcare Provider | 1,000 | Sep 7, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Department of Human Services, Commonwealth of Pennsylvania | PA | Health Plan | 517 | Sep 7, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| CBS Consolidated dba Cornerstone Business and Management Solutions | NE | Business Associate | 21,856 | Sep 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Community Memorial Health System | CA | Healthcare Provider | 959 | Sep 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Med-Cert, Inc. | FL | Business Associate | 7,253 | Sep 2, 2017 | Hacking/IT Incident | Archive (closed) |
| MetroPlus Health Plan, Inc. | NY | Health Plan | 15,212 | Sep 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| The Neurology Foundation, Inc. | RI | Healthcare Provider | 12,861 | Sep 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists | CA | Healthcare Provider | 12,806 | Sep 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Adult Internal Medicine of North Scottsdale | AZ | Healthcare Provider | 11,798 | Sep 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Consultants Choice, P.A. | FL | Healthcare Provider | 1,458 | Sep 1, 2017 | Hacking/IT Incident | Archive (closed) |
| State of Alaska Department of Health and Social Services | AK | Healthcare Provider | 501 | Sep 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Mercy Hospital Logan County | OK | Healthcare Provider | 629 | Aug 30, 2017 | Loss | Archive (closed) |
| Medical Oncology Hematology Consultants,PA | DE | Healthcare Provider | 19,203 | Aug 29, 2017 | Hacking/IT Incident | Archive (closed) |
| Aetna Inc. | CT | Health Plan | 11,887 | Aug 29, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Waco Otolaryngology Associates d/b/a Waco Ear, Nose, & Throat | TX | Healthcare Provider | 500 | Aug 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Kaleida Health | NY | Healthcare Provider | 744 | Aug 25, 2017 | Hacking/IT Incident | Archive (closed) |
| McLaren Medical Group, Mid-Michigan Physicians Imaging Center | MI | Healthcare Provider | 106,008 | Aug 24, 2017 | Hacking/IT Incident | Archive (closed) |
| Oncology Consultants, P.A. | TX | Healthcare Provider | 19,114 | Aug 22, 2017 | Hacking/IT Incident | Archive (closed) |
| Feinstein and Roe Mds Inc. | CA | Healthcare Provider | 6,642 | Aug 21, 2017 | Hacking/IT Incident | Archive (closed) |
| Institute for Women's Health | TX | Healthcare Provider | 15,761 | Aug 18, 2017 | Hacking/IT Incident | Archive (closed) |
| Northeast OB/GYN Associates | TX | Healthcare Provider | 10,198 | Aug 18, 2017 | Hacking/IT Incident | Archive (closed) |
| South Bend Orthopaedic Associates Inc | IN | Healthcare Provider | 1,272 | Aug 18, 2017 | Theft | Archive (closed) |
| Salina Family Healthcare Center | KS | Healthcare Provider | 77,337 | Aug 16, 2017 | Hacking/IT Incident | Archive (closed) |
| Centura Health, Mercy Family Medicine | CO | Healthcare Provider | 2,069 | Aug 16, 2017 | Loss | Archive (closed) |
| Lake Hospital System, Inc. dba Lake Health | OH | Healthcare Provider | 750 | Aug 15, 2017 | Loss | Archive (closed) |
| TRUEbenefits LLC | WA | Business Associate | 17,309 | Aug 14, 2017 | Hacking/IT Incident | Archive (closed) |
| Silver Cross Hospital | IL | Healthcare Provider | 8,862 | Aug 11, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| MJHS Home Care | NY | Healthcare Provider | 8,413 | Aug 11, 2017 | Hacking/IT Incident | Archive (closed) |
| WellCare Health Plans, Inc. | FL | Health Plan | 1,214 | Aug 11, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Pacific Alliance Medical Center | CA | Healthcare Provider | 266,123 | Aug 10, 2017 | Hacking/IT Incident | Archive (closed) |
| MDeverywhere, Inc. | TX | Business Associate | 1,396 | Aug 10, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Mark's Surgical Center, LLC | FL | Healthcare Provider | 33,877 | Aug 9, 2017 | Hacking/IT Incident | Archive (closed) |
| National DCP Health Plan | GA | Health Plan | 1,190 | Aug 8, 2017 | Hacking/IT Incident | Archive (closed) |
| Elderplan, Inc. | NY | Health Plan | 65,235 | Aug 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Surgical Dermatology Group | AL | Healthcare Provider | 13,308 | Aug 5, 2017 | Hacking/IT Incident | Archive (closed) |
| City of Hope | CA | Healthcare Provider | 3,400 | Aug 3, 2017 | Hacking/IT Incident | Archive (closed) |
| Spectrum Health System | MI | Healthcare Provider | 902 | Aug 3, 2017 | Theft | Archive (closed) |
| Bluetail Medical Group | MO | Healthcare Provider | 11,000 | Aug 2, 2017 | Hacking/IT Incident | Archive (closed) |
| Sport and Spine Rehab | MD | Healthcare Provider | 31,120 | Aug 1, 2017 | Hacking/IT Incident | Archive (closed) |
| Daniel Drake Center for Post-Acute Care | OH | Healthcare Provider | 4,721 | Aug 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwest Rheumatology | AZ | Healthcare Provider | 7,468 | Jul 31, 2017 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.