HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 123 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Behavioral Health Center | ME | Healthcare Provider | 4,229 | Apr 21, 2017 | Hacking/IT Incident | Archive (closed) |
| Iowa Veterans Home | IA | Healthcare Provider | 2,969 | Apr 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Atlantic Digestive Specialists | NH | Healthcare Provider | 2,081 | Apr 21, 2017 | Hacking/IT Incident | Archive (closed) |
| Valley Women's Health, S.C. | IL | Healthcare Provider | 5,155 | Apr 19, 2017 | Hacking/IT Incident | Archive (closed) |
| Humana Inc [case # HU17001CC] | KY | Health Plan | 3,831 | Apr 18, 2017 | Hacking/IT Incident | Archive (closed) |
| Western Health Screening | MT | Business Associate | 15,326 | Apr 14, 2017 | Theft | Archive (closed) |
| BioReference Laboratories, Inc. | NJ | Healthcare Provider | 1,772 | Apr 14, 2017 | Improper Disposal | Archive (closed) |
| MVP Health Care, Inc. | NY | Health Plan | 951 | Apr 14, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Area Agency of Aging 1-B | MI | Healthcare Provider | 1,741 | Apr 13, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Area Agency of Aging 1-B | MI | Healthcare Provider | 1,741 | Apr 13, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Madison Street Provider Network | CO | Business Associate | 9,129 | Apr 12, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Amedisys West Virginia, LLC | WV | Healthcare Provider | 611 | Apr 11, 2017 | Improper Disposal | Archive (closed) |
| Cardiology Center of Acadiana | LA | Healthcare Provider | 9,681 | Apr 7, 2017 | Hacking/IT Incident | Archive (closed) |
| Ashland Women's Health | KY | Healthcare Provider | 19,727 | Apr 4, 2017 | Hacking/IT Incident | Archive (closed) |
| Carson Valley Medical Center | NV | Healthcare Provider | 11,368 | Apr 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Oklahoma, OU Physicians | OK | Healthcare Provider | 1,637 | Apr 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Healthcare | MI | Healthcare Provider | 685 | Apr 3, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Skin Cancer Specialists, P.C. | GA | Healthcare Provider | 3,365 | Mar 31, 2017 | Hacking/IT Incident | Archive (closed) |
| Women's Care of Somerset | KY | Healthcare Provider | 1,806 | Mar 31, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Apex EDI, Inc. | UT | Business Associate | 1,132 | Mar 31, 2017 | Hacking/IT Incident | Archive (closed) |
| ABCD Pediatrics, P.A. | TX | Healthcare Provider | 55,447 | Mar 26, 2017 | Hacking/IT Incident | Archive (closed) |
| Washington University School of Medicine | MO | Healthcare Provider | 80,270 | Mar 25, 2017 | Hacking/IT Incident | Archive (closed) |
| Lane Community College Health Clinic | OR | Healthcare Provider | 1,911 | Mar 25, 2017 | Hacking/IT Incident | Archive (closed) |
| Specialty Dental Partners of Philadelphia, PLLC.- DBA Rich Orthodontics | PA | Healthcare Provider | 960 | Mar 23, 2017 | Theft | Archive (closed) |
| WellSpan Health | PA | Health Plan | 732 | Mar 23, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Urology Austin, PLLC | TX | Healthcare Provider | 279,663 | Mar 22, 2017 | Hacking/IT Incident | Archive (closed) |
| UNC Health Care | NC | Healthcare Provider | 1,298 | Mar 20, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Highland Rivers Community Service Board | GA | Healthcare Provider | 967 | Mar 20, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Houston Methodist Hospital | TX | Healthcare Provider | 1,417 | Mar 17, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Rocky Mountain Health Maintenance Organization, Inc. | CO | Health Plan | 1,320 | Mar 17, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Estill County Chiropractic, PLLC | KY | Healthcare Provider | 5,335 | Mar 16, 2017 | Hacking/IT Incident | Archive (closed) |
| St. Charles Health System | OR | Healthcare Provider | 2,459 | Mar 16, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Local 693 Plumbers & Pipefitters Health & Welfare Fund | VT | Health Plan | 1,291 | Mar 13, 2017 | Theft | Archive (closed) |
| Denton Heart Group - Affiliate of HealthTexas Provider Network | TX | Healthcare Provider | 21,665 | Mar 10, 2017 | Theft | Archive (closed) |
| Metropolitan Urology Group | WI | Business Associate | 17,634 | Mar 10, 2017 | Hacking/IT Incident | Archive (closed) |
| Virginia Commonwealth University Health System | VA | Healthcare Provider | 2,716 | Mar 10, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Primary Care Specialists, Inc. | TN | Healthcare Provider | 65,000 | Mar 9, 2017 | Hacking/IT Incident | Archive (closed) |
| St. Louis Children's Hospital | MO | Healthcare Provider | 643 | Mar 9, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| CVS Health | RI | Healthcare Provider | 724 | Mar 8, 2017 | Theft | Archive (closed) |
| American Home Patient | TN | Healthcare Provider | 13,709 | Mar 6, 2017 | Theft | Archive (closed) |
| Tarleton Medical | CA | Healthcare Provider | 3,929 | Mar 6, 2017 | Hacking/IT Incident | Archive (closed) |
| Saliba's Extended Care Pharmacy | AZ | Healthcare Provider | 6,599 | Mar 3, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| VisionQuest Eyecare | IN | Healthcare Provider | 85,995 | Mar 2, 2017 | Hacking/IT Incident | Archive (closed) |
| Orange County Global Medical Center | CA | Healthcare Provider | 677 | Mar 2, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Commonwealth Health Corporation | KY | Healthcare Provider | 697,800 | Mar 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Stephen P. Courtney, M.D. | TX | Healthcare Provider | 1,140 | Mar 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| VA St. Louis Health Care System | MO | Healthcare Provider | 724 | Mar 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Memphis VA Medical Center | TN | Healthcare Provider | 687 | Mar 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Leo Edwards, Jr., M.D. | TX | Healthcare Provider | 19,564 | Feb 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Sharp Memorial Hospital | CA | Healthcare Provider | 754 | Feb 28, 2017 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.