HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 127 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Marin Healthcare District | CA | Healthcare Provider | 2,292 | Sep 27, 2016 | Hacking/IT Incident | Archive (closed) |
| Prima Medical Foundation | CA | Healthcare Provider | 2,933 | Sep 26, 2016 | Hacking/IT Incident | Archive (closed) |
| Central Ohio Urology Group, Inc. | OH | Healthcare Provider | 300,000 | Sep 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Hal Meadows, M.D. | CA | Healthcare Provider | 6,000 | Sep 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Jennie Stuart Medical Center | KY | Healthcare Provider | 1,500 | Sep 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Group Health | WA | Health Plan | 668 | Sep 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| New Jersey Spine Center | NJ | Healthcare Provider | 28,000 | Sep 22, 2016 | Hacking/IT Incident | Archive (closed) |
| USC Keck and Norris Hospitals | CA | Healthcare Provider | 16,000 | Sep 21, 2016 | Hacking/IT Incident | Archive (closed) |
| McLaren Greater Lansing Cardiovascular Group | MI | Healthcare Provider | 1,000 | Sep 21, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Ventura County Health Care Agency | CA | Healthcare Provider | 777 | Sep 20, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| KidsPeace | PA | Healthcare Provider | 1,456 | Sep 19, 2016 | Loss | Archive (closed) |
| CHI Franciscan Health, St. Clare Hospital and St. Joseph Medical Center | WA | Healthcare Provider | 2,818 | Sep 16, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Heritage Medical Partners, LLC | SC | Healthcare Provider | 812 | Sep 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| King of Prussia Dental Associates | PA | Healthcare Provider | 16,228 | Sep 13, 2016 | Hacking/IT Incident | Archive (closed) |
| Codman Square Health Center | MA | Healthcare Provider | 3,840 | Sep 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Pratap S. Kurra, M.D. | CA | Healthcare Provider | 2,029 | Sep 12, 2016 | Loss | Archive (closed) |
| Yuba Sutter Medical Clinic | CA | Business Associate | 1,500 | Sep 12, 2016 | Hacking/IT Incident | Archive (closed) |
| Asante | OR | Healthcare Provider | 2,400 | Sep 9, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| U.S. HealthWorks | CA | Healthcare Provider | 1,400 | Sep 9, 2016 | Theft | Archive (closed) |
| Public Education Employees' Health Insurance Plan | AL | Health Plan | 1,349 | Sep 9, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Martin Army Community Hospital | GA | Healthcare Provider | 1,000 | Sep 9, 2016 | Theft | Archive (closed) |
| University Gastroenterology, Inc. | RI | Healthcare Provider | 15,478 | Sep 8, 2016 | Hacking/IT Incident | Archive (closed) |
| Man Alive, Inc. and Lane Treatment Center, LLC | MD | Healthcare Provider | 860 | Sep 8, 2016 | Hacking/IT Incident | Archive (closed) |
| Geisinger Health Plan | PA | Health Plan | 2,814 | Sep 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Decatur Health Systems | KS | Healthcare Provider | 707 | Sep 7, 2016 | Theft | Archive (closed) |
| Santa Cruz County Health Services Agency | CA | Healthcare Provider | 25,000 | Sep 2, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Burrell Behavioral Health | MO | Healthcare Provider | 7,748 | Sep 2, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical College of Wisconsin | WI | Healthcare Provider | 3,179 | Sep 2, 2016 | Hacking/IT Incident | Archive (closed) |
| Franciscan Health, Highline Medical Center | WA | Healthcare Provider | 18,399 | Sep 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Center for Neurosurgical & Spine Disorders, LLC | LA | Healthcare Provider | 824 | Aug 31, 2016 | Hacking/IT Incident | Archive (closed) |
| Willow Bend Dental | TX | Healthcare Provider | 625 | Aug 31, 2016 | Theft | Archive (closed) |
| Howard R. Jarvis, D.M.D., L.L.C. dba Southwest Portland Dental | OR | Healthcare Provider | 1,980 | Aug 30, 2016 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles | CA | Healthcare Provider | 743 | Aug 30, 2016 | Theft | Archive (closed) |
| Planned Parenthood of Greater Washington and North Idaho | WA | Healthcare Provider | 10,700 | Aug 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Summit Medical Group, Inc. dba St. Elizabeth Physicians | KY | Healthcare Provider | 674 | Aug 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| SCAN Health Plan | CA | Health Plan | 87,069 | Aug 22, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| CalOptima | CA | Health Plan | 1,000 | Aug 22, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Orleans Medical Clinic | IN | Healthcare Provider | 6,890 | Aug 19, 2016 | Hacking/IT Incident | Archive (closed) |
| The Outer Banks Hospital | NC | Healthcare Provider | 1,000 | Aug 19, 2016 | Loss | Archive (closed) |
| Village of Oak Park, Illinois | IL | Health Plan | 688 | Aug 18, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| New York State Office of Mental Health | NY | Healthcare Provider | 21,880 | Aug 15, 2016 | Hacking/IT Incident | Archive (closed) |
| Phoenix Dental Care | TN | Healthcare Provider | 500 | Aug 15, 2016 | Theft | Archive (closed) |
| John E. Gonzalez DDS | CA | Healthcare Provider | 1,025 | Aug 14, 2016 | Theft | Archive (closed) |
| Valley Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain Consultants | AZ | Healthcare Provider | 882,590 | Aug 12, 2016 | Hacking/IT Incident | Archive (closed) |
| Bon Secours Health System Incorporated | MD | Healthcare Provider | 651,971 | Aug 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Rotech Healthcare Inc. | FL | Healthcare Provider | 957 | Aug 11, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Cardiology Associates | MD | Healthcare Provider | 907 | Aug 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Autism Home Support Services | IL | Healthcare Provider | 533 | Aug 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Newkirk Products, Inc. | NY | Business Associate | 3,466,120 | Aug 9, 2016 | Hacking/IT Incident | Archive (closed) |
| Professional Dermatology Care, P.C. | VA | Healthcare Provider | 13,237 | Aug 9, 2016 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.