HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 126 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| OptumHealth New Mexico | MN | Health Plan | 2,006 | Nov 18, 2016 | Loss | Archive (closed) |
| Washington National Insurance Company | IN | Health Plan | 1,458 | Nov 18, 2016 | Theft | Archive (closed) |
| Luque Chiropractic, Inc. | CA | Healthcare Provider | 1,341 | Nov 17, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Watsonville Chiropractic, Inc. | CA | Healthcare Provider | 829 | Nov 17, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Vision Care Florida, LLC | FL | Healthcare Provider | 7,500 | Nov 16, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| The Biomechanics LLC | AZ | Healthcare Provider | 1,049 | Nov 16, 2016 | Hacking/IT Incident | Archive (closed) |
| Lebanon Cardiology Associates, PC | PA | Healthcare Provider | 537 | Nov 14, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Vascular Surgical Associates | GA | Healthcare Provider | 36,496 | Nov 10, 2016 | Hacking/IT Incident | Archive (closed) |
| Best Health Physical Therapy, LLC | CT | Healthcare Provider | 1,100 | Nov 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Briar Hill Management | MS | Business Associate | 2,000 | Nov 9, 2016 | Loss | Archive (closed) |
| Lister Healthcare | AL | Healthcare Provider | 1,349 | Nov 9, 2016 | Theft | Archive (closed) |
| VA Eastern Colorado Health Care System | CO | Healthcare Provider | 2,130 | Nov 8, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Consultants in Neurological Surgery, LLP | FL | Healthcare Provider | 800 | Nov 8, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Permanente Health Plan, Inc of Northern California | CA | Health Plan | 4,432 | Nov 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| HP Enterprise Services, LLC | TX | Business Associate | 1,235 | Nov 7, 2016 | Theft | Archive (closed) |
| Austin Pulmonary Consultants | TX | Healthcare Provider | 889 | Nov 7, 2016 | Improper Disposal | Archive (closed) |
| Kaiser Foundation Healthplan, Inc. of Southern California | CA | Health Plan | 3,044 | Nov 6, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan of the Northwest | OR | Health Plan | 544 | Nov 6, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Wal-Mart Stores, Inc. | AR | Healthcare Provider | 771 | Nov 4, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Kinetorehab Physical Therapy, PLLC | NY | Healthcare Provider | 665 | Nov 4, 2016 | Theft | Archive (closed) |
| Anthem, Inc. | IN | Health Plan | 3,525 | Oct 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Silver Creek Fitness & Physical Therapy, Silver Creek Physical Therapy Gilroy, Silver Creek Physical Therapy Sunnyvale, Silver Creek Physical Therapy | CA | Healthcare Provider | 8,009 | Oct 24, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Dr. Dennis T. Myers, D.D.S., P.A. | MO | Healthcare Provider | 3,364 | Oct 24, 2016 | Hacking/IT Incident | Archive (closed) |
| Singh and Arora Oncology Hematology, P.C. | MI | Healthcare Provider | 22,000 | Oct 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Baystate Health, Inc. | MA | Healthcare Provider | 13,112 | Oct 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Florida Hospital Medical Group | FL | Healthcare Provider | 6,786 | Oct 21, 2016 | Loss | Archive (closed) |
| The Finley Center | NV | Healthcare Provider | 3,000 | Oct 20, 2016 | Theft | Archive (closed) |
| You and Your Health Family Care, Inc. | FL | Healthcare Provider | 3,000 | Oct 20, 2016 | Hacking/IT Incident | Archive (closed) |
| Harrisonburg OB GYN Associates, P.C. | VA | Healthcare Provider | 800 | Oct 20, 2016 | Theft | Archive (closed) |
| MGA Home Healthcare Colorado, Inc. | AZ | Healthcare Provider | 3,119 | Oct 19, 2016 | Loss | Archive (closed) |
| Four Star Drug of Bethany, Inc. | NE | Healthcare Provider | 647 | Oct 18, 2016 | Improper Disposal | Archive (closed) |
| Integrity Transitional Hospital | TX | Healthcare Provider | 29,514 | Oct 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Gibson Insurance Agency, Inc. | IN | Business Associate | 7,242 | Oct 14, 2016 | Theft | Archive (closed) |
| Peabody Retirement Community | IN | Healthcare Provider | 1,466 | Oct 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Mercy Hospital and Medical Center | IL | Healthcare Provider | 547 | Oct 13, 2016 | Loss | Archive (closed) |
| Baxter Healthcare | IL | Healthcare Provider | 992 | Oct 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Warren Clinic | OK | Healthcare Provider | 2,938 | Oct 7, 2016 | Hacking/IT Incident | Archive (closed) |
| Genesis Physical Therapy, Inc. | CA | Healthcare Provider | 2,245 | Oct 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwest Community Healthcare | IL | Healthcare Provider | 540 | Oct 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| The Seattle Indian Health Board | WA | Healthcare Provider | 793 | Oct 6, 2016 | Hacking/IT Incident | Archive (closed) |
| Napa Valley Dentistry | CA | Healthcare Provider | 4,262 | Oct 5, 2016 | Theft | Archive (closed) |
| Baxter Regional Medical Center - Home Health Facility | AR | Healthcare Provider | 2,124 | Oct 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Francisco Jaume, D.O. | AZ | Healthcare Provider | 14,236 | Oct 4, 2016 | Hacking/IT Incident | Archive (closed) |
| Apria Healthcare | CA | Healthcare Provider | 1,987 | Oct 4, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Rainbow Children's Clinic | TX | Healthcare Provider | 33,698 | Oct 3, 2016 | Hacking/IT Incident | Archive (closed) |
| Urgent Care Clinic of Oxford | MS | Healthcare Provider | 64,000 | Sep 30, 2016 | Hacking/IT Incident | Archive (closed) |
| University of Wisconsin Hospitals and Clinics Authority | WI | Healthcare Provider | 6,923 | Sep 30, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Fred's Stores of Tennessee, Incorporated | TN | Healthcare Provider | 9,624 | Sep 29, 2016 | Theft | Archive (closed) |
| San Juan Oncology Associates | NM | Healthcare Provider | 500 | Sep 29, 2016 | Hacking/IT Incident | Archive (closed) |
| Thomasville Eye Center | GA | Healthcare Provider | 10,891 | Sep 28, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.