HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 122 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Torrance Memorial Medical Center | CA | Healthcare Provider | 46,632 | Jun 19, 2017 | Hacking/IT Incident | Archive (closed) |
| Family Tree Health Clinic | TX | Healthcare Provider | 13,402 | Jun 19, 2017 | Hacking/IT Incident | Archive (closed) |
| Airway Oxygen, Inc. | MI | Healthcare Provider | 500,000 | Jun 16, 2017 | Hacking/IT Incident | Archive (closed) |
| Rutland Regional Medical Center | VT | Healthcare Provider | 665 | Jun 16, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Little River Healthcare | TX | Healthcare Provider | 542 | Jun 16, 2017 | Theft | Archive (closed) |
| Texas Health and Human Services | TX | Health Plan | 1,842 | Jun 15, 2017 | Improper Disposal | Archive (closed) |
| Bay Area Pain and Wellness Center | CA | Healthcare Provider | 548 | Jun 14, 2017 | Theft | Archive (closed) |
| Cove Family and Sports Medicine, LLC | AL | Healthcare Provider | 4,300 | Jun 12, 2017 | Hacking/IT Incident | Archive (closed) |
| SSM Health (Dr. Syed Khader) | MO | Healthcare Provider | 836 | Jun 9, 2017 | Theft | Archive (closed) |
| Tennessee Rural Health Improvement Association | TN | Health Plan | 588 | Jun 8, 2017 | Loss | Archive (closed) |
| Southwest Community Health Center | CT | Healthcare Provider | 6,000 | Jun 7, 2017 | Theft | Archive (closed) |
| Durango Family Medicine, P.C. | CO | Healthcare Provider | 18,790 | Jun 6, 2017 | Theft | Archive (closed) |
| Toth Enterprises II d/b/a Victory Medical | TX | Healthcare Provider | 2,000 | Jun 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| LKM ENTERPRISES, INC. | OK | Healthcare Provider | 3,400 | Jun 1, 2017 | Theft | Archive (closed) |
| North Dakota Department of Human Services | ND | Health Plan | 2,452 | Jun 1, 2017 | Improper Disposal | Archive (closed) |
| Advanced ENT Head & Neck Surgery | CA | Healthcare Provider | 15,000 | May 31, 2017 | Theft | Archive (closed) |
| N. Fred Eaglstein, D.O. d/b/a Dermatology and Laser Center | FL | Healthcare Provider | 2,000 | May 30, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| AU Medical Center, Inc. | GA | Healthcare Provider | 5,600 | May 26, 2017 | Hacking/IT Incident | Archive (closed) |
| Mississippi Division of Medicaid | MS | Health Plan | 5,220 | May 26, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Arizona Department of Health Services | AZ | Healthcare Provider | 2,500 | May 26, 2017 | Loss | Archive (closed) |
| Sound Community Services, Inc. | CT | Healthcare Provider | 1,278 | May 26, 2017 | Hacking/IT Incident | Archive (closed) |
| Beacon Health System | IN | Healthcare Provider | 1,239 | May 26, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| UW Health | WI | Healthcare Provider | 2,036 | May 25, 2017 | Hacking/IT Incident | Archive (closed) |
| D. Andrew Loomis MD, Paula Schulze MD,Tammara Stefanelli MD, Christen Vu DO, Anja Crider MD | WA | Healthcare Provider | 9,000 | May 24, 2017 | Hacking/IT Incident | Archive (closed) |
| Children's Mercy Hospital | MO | Healthcare Provider | 5,511 | May 19, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Neeley-Nemeth, LLP d/b/a Barton Oaks Dental Group | TX | Healthcare Provider | 17,090 | May 18, 2017 | Hacking/IT Incident | Archive (closed) |
| Kennewick General Hospital dba Trios Health | WA | Healthcare Provider | 569 | May 18, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Pacific Ocean Pediatrics | CA | Healthcare Provider | 18,637 | May 15, 2017 | Theft | Archive (closed) |
| Elizabeth L. Brown, MD, PLLC | WV | Healthcare Provider | 8,436 | May 12, 2017 | Hacking/IT Incident | Archive (closed) |
| Walnut Place | TX | Healthcare Provider | 5,000 | May 12, 2017 | Hacking/IT Incident | Archive (closed) |
| New York City Health and Hospitals Corporation - Coney Island Hospital | NY | Healthcare Provider | 3,494 | May 9, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Clinton County Board of Developmental Disabilities | OH | Healthcare Provider | 1,243 | May 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Jones Family Practice, P.A. | NC | Healthcare Provider | 742 | May 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross and Blue Shield of Kansas City | MO | Health Plan | 725 | May 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| LSU Healthcare Network | LA | Healthcare Provider | 2,200 | May 4, 2017 | Theft | Archive (closed) |
| Mecklenburg County, North Carolina | NC | Healthcare Provider | 2,000 | May 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| AeroCare Holdings | FL | Healthcare Provider | 860 | May 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Capital Nephrology | MD | Healthcare Provider | 4,000 | May 2, 2017 | Hacking/IT Incident | Archive (closed) |
| Nova Southeastern University | FL | Healthcare Provider | 1,086 | May 2, 2017 | Theft | Archive (closed) |
| Harrisburg Gastroenterology Ltd | PA | Healthcare Provider | 93,323 | Apr 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Diamond Institute for Fertility and Menopause, LLC | NJ | Healthcare Provider | 14,633 | Apr 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Harrisburg Endoscopy and Surgery Center | PA | Healthcare Provider | 9,092 | Apr 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Michigan Facial Aesthetic Surgeons d/b/a University Physician Group | MI | Healthcare Provider | 3,467 | Apr 28, 2017 | Theft | Archive (closed) |
| Spine Specialist | NJ | Healthcare Provider | 600 | Apr 28, 2017 | Theft | Archive (closed) |
| Deering Therapy Services, Ltd. | NJ | Business Associate | 1,710 | Apr 26, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Hospital Clinic South | TX | Healthcare Provider | 842 | Apr 26, 2017 | Hacking/IT Incident | Archive (closed) |
| Memorial Hospital Clinic West | TX | Healthcare Provider | 521 | Apr 26, 2017 | Hacking/IT Incident | Archive (closed) |
| Orthodontic Specialists of Green Bay | WI | Healthcare Provider | 742 | Apr 24, 2017 | Hacking/IT Incident | Archive (closed) |
| Lifespan Corporation | RI | Healthcare Provider | 20,431 | Apr 21, 2017 | Theft | Archive (closed) |
| Hill Country Memorial Hospital | TX | Healthcare Provider | 8,449 | Apr 21, 2017 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.