HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 125 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Horizon Healthcare Services Inc. doing business as Horizon Blue Cross Blue Shield of New Jersey and its affiliates | NJ | Health Plan | 55,700 | Dec 30, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| State of New Hampshire, Department of Health and Human Services | NH | Healthcare Provider | 14,947 | Dec 30, 2016 | Hacking/IT Incident | Archive (closed) |
| Bryan Myers, MD PC, Ashley DeWitt, DO PC, Michael Nobles, MD PC | TN | Healthcare Provider | 13,150 | Dec 30, 2016 | Hacking/IT Incident | Archive (closed) |
| PrimeWest Health | MN | Health Plan | 2,441 | Dec 29, 2016 | Hacking/IT Incident | Archive (closed) |
| PathGroup | TN | Health Plan | 1,443 | Dec 29, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Maryland Medical Center/Dr. Morrill | MD | Healthcare Provider | 10,000 | Dec 28, 2016 | Hacking/IT Incident | Archive (closed) |
| Susan M Hughes Center | NJ | Healthcare Provider | 11,400 | Dec 27, 2016 | Hacking/IT Incident | Archive (closed) |
| Brandywine Pediatrics, P.A. | DE | Healthcare Provider | 26,873 | Dec 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Waiting Room Solutions Limited Liability Limited Partnership | NY | Business Associate | 700 | Dec 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| ADVANTAGE Health Solutions | IN | Health Plan | 2,387 | Dec 22, 2016 | Hacking/IT Incident | Archive (closed) |
| Stephen J. Helvie, M.D. | CA | Healthcare Provider | 2,013 | Dec 22, 2016 | Theft | Archive (closed) |
| Community Health Plan of Washington | WA | Health Plan | 381,504 | Dec 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Henry County Health Department | OH | Healthcare Provider | 574 | Dec 21, 2016 | Theft | Archive (closed) |
| Alliant Health Plans, Inc. | GA | Health Plan | 1,042 | Dec 20, 2016 | Hacking/IT Incident | Archive (closed) |
| Desert Care Family and Sports Medicine | AZ | Healthcare Provider | 500 | Dec 20, 2016 | Hacking/IT Incident | Archive (closed) |
| Brodhead Dental Center | PA | Healthcare Provider | 5,872 | Dec 19, 2016 | Hacking/IT Incident | Archive (closed) |
| Humana Inc. [case #HU16004F3] | KY | Health Plan | 3,674 | Dec 19, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| County of Los Angeles Departments of Health and Mental Health | CA | Healthcare Provider | 749,017 | Dec 16, 2016 | Hacking/IT Incident | Archive (closed) |
| Southcentral Foundation | AK | Healthcare Provider | 14,719 | Dec 16, 2016 | Hacking/IT Incident | Archive (closed) |
| Fairbanks Hospital | IN | Healthcare Provider | 12,994 | Dec 16, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| East Valley Community Health Center, Inc. | CA | Healthcare Provider | 65,000 | Dec 15, 2016 | Hacking/IT Incident | Archive (closed) |
| Oak Cliff Orthopaedic Associates | TX | Healthcare Provider | 1,057 | Dec 14, 2016 | Theft | Archive (closed) |
| Quest Diagnostics | NJ | Healthcare Provider | 34,055 | Dec 12, 2016 | Hacking/IT Incident | Archive (closed) |
| Charles Stamitoles | FL | Healthcare Provider | 5,600 | Dec 11, 2016 | Improper Disposal | Archive (closed) |
| Appalachian Gastroenterology, P.A. | NC | Healthcare Provider | 11,000 | Dec 10, 2016 | Hacking/IT Incident | Archive (closed) |
| Black Hawk College | IL | Health Plan | 1,000 | Dec 8, 2016 | Hacking/IT Incident | Archive (closed) |
| Preventice Services, LLC | TX | Healthcare Provider | 6,800 | Dec 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Dr. Melissa D. Selke | NJ | Healthcare Provider | 4,277 | Dec 5, 2016 | Hacking/IT Incident | Archive (closed) |
| Meigs County EMS | OH | Healthcare Provider | 817 | Dec 5, 2016 | Hacking/IT Incident | Archive (closed) |
| CVS Health | RI | Healthcare Provider | 626 | Dec 5, 2016 | Theft | Archive (closed) |
| Washington Health System | PA | Healthcare Provider | 544 | Dec 2, 2016 | Theft | Archive (closed) |
| Advanced Fertility Center of Chicago | IL | Healthcare Provider | 19,000 | Dec 1, 2016 | Hacking/IT Incident | Archive (closed) |
| Seguin Dermatology, Office of Robert J. Magnon, MD | TX | Healthcare Provider | 29,969 | Nov 30, 2016 | Hacking/IT Incident | Archive (closed) |
| Louisiana Health Cooperative, Inc. in Rehabilitation | LA | Health Plan | 8,000 | Nov 30, 2016 | Hacking/IT Incident | Archive (closed) |
| Managed Health Services | IN | Health Plan | 5,500 | Nov 29, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Aetna Inc. | CT | Business Associate | 18,854 | Nov 28, 2016 | Loss | Archive (closed) |
| CHI Franciscan Health Hospice-Tacoma | WA | Healthcare Provider | 12,413 | Nov 28, 2016 | Theft | Archive (closed) |
| Young Adult Institute, Inc. | NY | Healthcare Provider | 913 | Nov 28, 2016 | Theft | Archive (closed) |
| Glendale Adventist Medical Center | CA | Healthcare Provider | 528 | Nov 28, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| New Mexico Heart Institute | NM | Healthcare Provider | 4,185 | Nov 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Berkshire Medical Center | MA | Healthcare Provider | 1,745 | Nov 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Akron General Medical Center | OH | Healthcare Provider | 730 | Nov 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Emblem Health - GHI | NY | Health Plan | 81,122 | Nov 22, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Stony Brook Internists, University Faculty Practice Corporation (UFPC) | NY | Healthcare Provider | 1,878 | Nov 22, 2016 | Theft | Archive (closed) |
| United Health Group Single Affiliated Covered Entity | MN | Health Plan | 1,408 | Nov 22, 2016 | Hacking/IT Incident | Archive (closed) |
| LCS Westminster Partnership IV, LLP d/b/a Sagewood | AZ | Healthcare Provider | 863 | Nov 22, 2016 | Hacking/IT Incident | Archive (closed) |
| North Texas Heart Center, P.A. | TX | Healthcare Provider | 4,210 | Nov 21, 2016 | Theft | Archive (closed) |
| Camas Center Clinic, Kalispel Tribe of Indians | WA | Healthcare Provider | 504 | Nov 21, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Peachtree Orthopaedic Clinic | GA | Healthcare Provider | 531,000 | Nov 18, 2016 | Hacking/IT Incident | Archive (closed) |
| Pinellas County Board of County Commissioners | FL | Health Plan | 2,800 | Nov 18, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.