Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 121 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Braun Dermatology & Skin Cancer CenterDCHealthcare Provider1,200Jul 28, 2017Unauthorized Access/DisclosureArchive (closed)
Plastic Surgery Associates of South DakotaSDHealthcare Provider10,229Jul 27, 2017Hacking/IT IncidentArchive (closed)
Christine D. Collins, APC & Ann Hofstadter, MD Inc.CAHealthcare Provider1,500Jul 27, 2017Hacking/IT IncidentArchive (closed)
Northwest Behavioral Healthcare ServicesORHealthcare Provider500Jul 27, 2017Unauthorized Access/DisclosureArchive (closed)
Anthem, Inc.INHealth Plan18,580Jul 24, 2017Unauthorized Access/DisclosureArchive (closed)
Kaleida HealthNYHealthcare Provider2,789Jul 21, 2017Hacking/IT IncidentArchive (closed)
The University of Vermont Medical CenterVTHealthcare Provider2,300Jul 21, 2017Hacking/IT IncidentArchive (closed)
BlueCross BlueShield of TN, Inc.TNHealth Plan2,117Jul 21, 2017Unauthorized Access/DisclosureArchive (closed)
Massachusetts Department of Public Health - Tewksbury HospitalMAHealthcare Provider1,176Jul 21, 2017Unauthorized Access/DisclosureArchive (closed)
Performance Physical Therapy and WellnessCTHealthcare Provider571Jul 21, 2017Hacking/IT IncidentArchive (closed)
Vision Care Specialists, Inc.COHealthcare Provider703Jul 20, 2017TheftArchive (closed)
SAGE DENTAL MANAGEMENT, LLCFLBusiness Associate5,000Jul 19, 2017TheftArchive (closed)
Metropolitan Life Insurance CompanyNYHealth Plan4,220Jul 19, 2017Unauthorized Access/DisclosureArchive (closed)
Women's Health Care Group of PA, LLCPAHealthcare Provider300,000Jul 15, 2017Hacking/IT IncidentArchive (closed)
Braun Internal Medicine, P.C.GAHealthcare Provider680Jul 14, 2017Unauthorized Access/DisclosureArchive (closed)
Professional Counseling & Medical AssociatesTNHealthcare Provider2,500Jul 13, 2017Hacking/IT IncidentArchive (closed)
Detroit Medical CenterMIHealthcare Provider1,529Jul 13, 2017TheftArchive (closed)
LC&Z General and Cosmetic DentistryFLHealthcare Provider4,391Jul 11, 2017Unauthorized Access/DisclosureArchive (closed)
White Coats WellnessFLBusiness Associate10,000Jul 10, 2017Hacking/IT IncidentArchive (closed)
Andrea Yaley, DDSCAHealthcare Provider1,200Jul 10, 2017Hacking/IT IncidentArchive (closed)
Rosalind Franklin University of MedicineILHealthcare Provider859Jul 9, 2017Hacking/IT IncidentArchive (closed)
Ledet Family Chiropractic CenerPAHealthcare Provider530Jul 9, 2017Hacking/IT IncidentArchive (closed)
Peachtree Neurological Clinic, P.C.GAHealthcare Provider183,505Jul 7, 2017Hacking/IT IncidentArchive (closed)
University of Mississippi Medical CenterMSHealthcare Provider7,492Jul 7, 2017Hacking/IT IncidentArchive (closed)
Unconditional Love, IncorporatedFLHealthcare Provider643Jul 7, 2017Unauthorized Access/DisclosureArchive (closed)
University of California Davis HealthCAHealthcare Provider14,900Jul 6, 2017Hacking/IT IncidentArchive (closed)
Walnut PlaceTXHealthcare Provider5,000Jul 5, 2017Hacking/IT IncidentArchive (closed)
The Dermatology Center of Raleigh PANCHealthcare Provider3,000Jul 5, 2017Unauthorized Access/DisclosureArchive (closed)
PVHS-ICM Employee Health and Wellness, LLC as covered entity and business associateCOHealthcare Provider10,143Jul 3, 2017Hacking/IT IncidentArchive (closed)
Kennebunk Center for DentistryMEHealthcare Provider1,900Jul 3, 2017Unauthorized Access/DisclosureArchive (closed)
Community Link IncWIHealth Plan5,524Jun 30, 2017Hacking/IT IncidentArchive (closed)
California Pacific Orthopaedics and Sports MedicineCAHealthcare Provider2,271Jun 30, 2017TheftArchive (closed)
Enterprise Services LLCCOBusiness Associate822Jun 30, 2017Hacking/IT IncidentArchive (closed)
White Blossom Care CenterCAHealthcare Provider800Jun 30, 2017Unauthorized Access/DisclosureArchive (closed)
Baptist Medical Center SouthFLHealthcare Provider531Jun 30, 2017LossArchive (closed)
FastHealth CorporationALBusiness Associate18,192Jun 29, 2017Hacking/IT IncidentArchive (closed)
Paul C. Gering, Jr., M.D.ORHealthcare Provider2,000Jun 29, 2017TheftArchive (closed)
Pediatric Healthcare Solutions, P.C.NYHealthcare Provider6,932Jun 28, 2017Hacking/IT IncidentArchive (closed)
Enterprise Services LLCINBusiness Associate56,075Jun 27, 2017Unauthorized Access/DisclosureArchive (closed)
GI Care for Kids Endoscopy CenterGAHealthcare Provider1,923Jun 27, 2017Hacking/IT IncidentArchive (closed)
Henry Ford Health SystemMIHealthcare Provider596Jun 26, 2017TheftArchive (closed)
Pharma Medica Research Inc.MOHealthcare Provider2,718Jun 23, 2017Unauthorized Access/DisclosureArchive (closed)
Southern Illinois Hospital ServicesILHealthcare Provider613Jun 23, 2017Unauthorized Access/DisclosureArchive (closed)
University of Iowa Hospitals & ClinicsIAHealthcare Provider5,292Jun 22, 2017Unauthorized Access/DisclosureArchive (closed)
Saint Thomas Rutherford HospitalTNHealthcare Provider2,837Jun 22, 2017Improper DisposalArchive (closed)
Atchafalaya Internal Medicine AssociatesLAHealthcare Provider2,000Jun 22, 2017Hacking/IT IncidentArchive (closed)
Adams Industries, Inc.NEHealth Plan647Jun 21, 2017Hacking/IT IncidentArchive (closed)
Tampa Bay Surgery CenterFLHealthcare Provider25,848Jun 20, 2017Hacking/IT IncidentArchive (closed)
Cleveland Medical Associates, PLLCTNHealthcare Provider22,000Jun 20, 2017Hacking/IT IncidentArchive (closed)
Aetna Inc.CTHealth Plan5,002Jun 20, 2017Unauthorized Access/DisclosureArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.