Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 124 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
West Virginia University Hospitals-East, Inc. DBA University HealthcareWVHealthcare Provider7,445Feb 24, 2017TheftArchive (closed)
Vanderbilt University Medical CenterTNHealthcare Provider3,247Feb 24, 2017Unauthorized Access/DisclosureArchive (closed)
North Carolina Department of Health and Human ServicesNCHealth Plan12,731Feb 23, 2017Unauthorized Access/DisclosureArchive (closed)
Allina Health SystemMNHealthcare Provider776Feb 23, 2017Improper DisposalArchive (closed)
Syed Ahmed, MD PATXHealthcare Provider500Feb 23, 2017TheftArchive (closed)
Emory HealthcareGAHealthcare Provider79,930Feb 21, 2017Hacking/IT IncidentArchive (closed)
Chadron Community Hospital and Health ServicesNEHealthcare Provider702Feb 19, 2017Unauthorized Access/DisclosureArchive (closed)
Family Service RochesterMNHealthcare Provider17,037Feb 17, 2017Hacking/IT IncidentArchive (closed)
Robert E Torti, MD, PA dba Retina SpecialistsTXHealthcare Provider887Feb 17, 2017TheftArchive (closed)
Emblem Health - GHINYHealth Plan703Feb 17, 2017Unauthorized Access/DisclosureArchive (closed)
Hillsborough County Aging Services DepartmentFLHealthcare Provider650Feb 16, 2017LossArchive (closed)
2020 On-Site OptometryMABusiness Associate15,400Feb 13, 2017Hacking/IT IncidentArchive (closed)
St. Joseph's Hospital and Medical CenterAZHealthcare Provider623Feb 13, 2017Unauthorized Access/DisclosureArchive (closed)
Universal Care, Inc. DBA Brand New DayCAHealth Plan14,005Feb 10, 2017Unauthorized Access/DisclosureArchive (closed)
Capital Prosthetic and Orthotic Center, Inc.OHBusiness Associate1,134Feb 10, 2017TheftArchive (closed)
Medical Information Management Systems, LLCFLBusiness Associate11,707Feb 9, 2017Hacking/IT IncidentArchive (closed)
California Correctional Health Care ServicesCAHealthcare Provider738Feb 9, 2017Unauthorized Access/DisclosureArchive (closed)
Bloom Physical Therapy, LLC dba Physicians Physical Therapy ServiceAZHealthcare Provider500Feb 9, 2017Unauthorized Access/DisclosureArchive (closed)
Mo. Dept. of Mental HealthMOHealthcare Provider5,685Feb 7, 2017Hacking/IT IncidentArchive (closed)
Family Medicine East, CharteredKSHealthcare Provider6,800Feb 3, 2017TheftArchive (closed)
Walgreen Co.ILHealthcare Provider4,500Feb 3, 2017Unauthorized Access/DisclosureArchive (closed)
Catalina Post-Acute Care and RehabilitationAZHealthcare Provider2,953Feb 2, 2017Improper DisposalArchive (closed)
Jeffrey D. Rice, O.D., L.L.C.OHHealthcare Provider1,586Feb 2, 2017TheftArchive (closed)
Vertiv Co. Health & Welfare PlanOHHealth Plan955Jan 31, 2017Unauthorized Access/DisclosureArchive (closed)
The Affiliated Sante GroupMDHealthcare Provider550Jan 31, 2017Unauthorized Access/DisclosureArchive (closed)
WellCare Health Plans, Inc.FLHealth Plan24,809Jan 27, 2017Hacking/IT IncidentArchive (closed)
Princeton Pain ManagementNJHealthcare Provider4,668Jan 27, 2017Hacking/IT IncidentArchive (closed)
Shiel SextonINHealth Plan710Jan 27, 2017Unauthorized Access/DisclosureArchive (closed)
Synergy Specialists Medical Group, Inc / Jay S. Berenter, DPMCAHealthcare Provider569Jan 27, 2017Hacking/IT IncidentArchive (closed)
MultiCare Health SystemWAHealthcare Provider1,249Jan 26, 2017Hacking/IT IncidentArchive (closed)
THE R.O.A.D.S. Foundation Inc. DBA R.O.A.D.S. Community Care ClinicCAHealthcare Provider670Jan 26, 2017LossArchive (closed)
Roper St. Francis HealthcareSCHealthcare Provider576Jan 24, 2017LossArchive (closed)
Stephenville Medical & Surgical ClinicTXHealthcare Provider75,000Jan 23, 2017Unauthorized Access/DisclosureArchive (closed)
Covenant Medical Center, Inc.MIHealthcare Provider6,197Jan 20, 2017Unauthorized Access/DisclosureArchive (closed)
Wonderful Center For Health InnovationCAHealthcare Provider3,358Jan 20, 2017TheftArchive (closed)
Multnomah CountyORHealthcare Provider1,700Jan 20, 2017Unauthorized Access/DisclosureArchive (closed)
Associated Catholic Charities IncorporatedMDHealthcare Provider1,145Jan 20, 2017Unauthorized Access/DisclosureArchive (closed)
TriHealth, Inc.OHHealthcare Provider1,126Jan 19, 2017Unauthorized Access/DisclosureArchive (closed)
Sentara HealthcareVAHealthcare Provider5,454Jan 16, 2017Hacking/IT IncidentArchive (closed)
St. Luke's Medical CenterNDHealthcare Provider600Jan 16, 2017Hacking/IT IncidentArchive (closed)
Childrens Hospital of Los AngelesCAHealthcare Provider3,594Jan 13, 2017TheftArchive (closed)
University of Maryland Orthopaedic Associates, P.A.MDHealthcare Provider1,320Jan 13, 2017Hacking/IT IncidentArchive (closed)
Escambia County Alabama Community Hospitals, Inc. D/B/A Atmore Community HospitalALHealthcare Provider1,090Jan 12, 2017Unauthorized Access/DisclosureArchive (closed)
Verity Medical FoundationCAHealthcare Provider10,164Jan 11, 2017Hacking/IT IncidentArchive (closed)
SSM Dean Medical GroupWIHealthcare Provider4,800Jan 10, 2017Unauthorized Access/DisclosureArchive (closed)
Office of Dr. David ElbaumCAHealthcare Provider500Jan 9, 2017TheftArchive (closed)
Complete WellnessMDHealthcare Provider600Jan 6, 2017LossArchive (closed)
American Urgent Care Center, PSCKYHealthcare Provider822Jan 5, 2017TheftArchive (closed)
Community Health Plan of WashingtonWAHealth Plan1,375Jan 3, 2017Hacking/IT IncidentArchive (closed)
MetroPlus Health PlanNYHealth Plan808Jan 3, 2017Unauthorized Access/DisclosureArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.