Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 128 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Prosthetic & Orthotic Care, Inc.MOHealthcare Provider23,015Aug 7, 2016Hacking/IT IncidentArchive (closed)
Center for Minimmally Invasive Bariatric and General SurgeryPAHealthcare Provider992Aug 5, 2016Unauthorized Access/DisclosureArchive (closed)
The Carle FoundationILHealthcare Provider1,185Aug 4, 2016Unauthorized Access/DisclosureArchive (closed)
Banner HealthAZHealthcare Provider3,620,000Aug 3, 2016Hacking/IT IncidentArchive (closed)
Athens Orthopedic Clinic, P.A.GAHealthcare Provider201,000Jul 29, 2016Unauthorized Access/DisclosureArchive (closed)
Jefferson Medical Associates, P.A.MSHealthcare Provider10,401Jul 29, 2016Hacking/IT IncidentArchive (closed)
Athletes' Performance Los Angeles, LLCAZHealthcare Provider854Jul 28, 2016TheftArchive (closed)
Midwest Orthopedic Pain and SpineMOHealthcare Provider29,153Jul 26, 2016Hacking/IT IncidentArchive (closed)
American Family Care, Inc.ALHealthcare Provider7,200Jul 25, 2016Unauthorized Access/DisclosureArchive (closed)
StarCare Speciality Health SystemTXHealthcare Provider2,844Jul 25, 2016TheftArchive (closed)
Ambucor Health Solutions, an unincorporated division of The ScottCare CorporationDEBusiness Associate1,679Jul 22, 2016Unauthorized Access/DisclosureArchive (closed)
Caring for Women, PATXHealthcare Provider697Jul 22, 2016Unauthorized Access/DisclosureArchive (closed)
Sunbury Plaza DentalOHBusiness Associate7,784Jul 21, 2016TheftArchive (closed)
Memorial Hermann Health System, reporting on behalf of Memorial Hermann Health System Employee Group Health PlanTXHealth Plan12,061Jul 20, 2016Unauthorized Access/DisclosureArchive (closed)
Neurology Physicians LLCMDHealthcare Provider4,831Jul 20, 2016Hacking/IT IncidentArchive (closed)
Brian Halevie-GoldmanCAHealthcare Provider2,000Jul 20, 2016TheftArchive (closed)
Premier Family Care I, Inc.TXHealthcare Provider1,326Jul 20, 2016Unauthorized Access/DisclosureArchive (closed)
Access Health Care Physicians, LLCFLHealthcare Provider2,500Jul 19, 2016TheftArchive (closed)
Providence Medical Group- Gateway ClinicsORHealthcare Provider5,978Jul 15, 2016Unauthorized Access/DisclosureArchive (closed)
Lee Rice D.O., Medical Corp DBA Lifewellness InstituteCAHealthcare Provider2,473Jul 15, 2016Hacking/IT IncidentArchive (closed)
Blaine Chiropractic CenterMNHealthcare Provider1,945Jul 14, 2016Hacking/IT IncidentArchive (closed)
SUNSHINE STATE HEALTH PLAN, INC.FLHealth Plan1,479Jul 14, 2016Unauthorized Access/DisclosureArchive (closed)
Cefalu Eye-Tech of Green, Inc.OHHealthcare Provider850Jul 14, 2016Unauthorized Access/DisclosureArchive (closed)
Kaiser Permanente Northern CaliforniaCAHealth Plan1,136Jul 12, 2016TheftArchive (closed)
Dr. Q Pain and Spine d/b/a Arkansas Spine and PainARHealthcare Provider17,100Jul 11, 2016Hacking/IT IncidentArchive (closed)
Lasair Aesthetic Health, P.C.COHealthcare Provider1,835Jul 11, 2016Unauthorized Access/DisclosureArchive (closed)
Health Incent, LLCTNHealthcare Provider1,100Jul 11, 2016Hacking/IT IncidentArchive (closed)
The Ambulatory Surgery Center at St. Mary (ACASM)PAHealthcare Provider13,000Jul 7, 2016Hacking/IT IncidentArchive (closed)
Heart Center of Southern Maryland, L.L.P.MDHealthcare Provider1,350Jul 7, 2016Hacking/IT IncidentArchive (closed)
Planned Parenthood of the HeartlandIAHealthcare Provider2,506Jul 1, 2016Unauthorized Access/DisclosureArchive (closed)
Massachusetts General HospitalMAHealthcare Provider4,293Jun 29, 2016Hacking/IT IncidentArchive (closed)
Mercy Medical Center ReddingCAHealthcare Provider520Jun 29, 2016Unauthorized Access/DisclosureArchive (closed)
Linda J White, DDS, PCVAHealthcare Provider2,000Jun 27, 2016Improper DisposalArchive (closed)
Ceaton C FalgianoNYHealthcare Provider650Jun 27, 2016Unauthorized Access/DisclosureArchive (closed)
Uncommon Care, P.A.NCHealthcare Provider13,674Jun 21, 2016Hacking/IT IncidentArchive (closed)
Allergy, Asthma & Immunology of the Rockies, PCCOHealthcare Provider6,851Jun 17, 2016Hacking/IT IncidentArchive (closed)
Midland Women's ClinicTXHealthcare Provider717Jun 17, 2016Unauthorized Access/DisclosureArchive (closed)
Laser & Dermatologic Surgery CenterMOHealthcare Provider31,000Jun 14, 2016Hacking/IT IncidentArchive (closed)
Kern County Mental HealthCAHealth Plan1,212Jun 14, 2016Improper DisposalArchive (closed)
Texas Health and Human Services CommissionTXHealth Plan600Jun 14, 2016LossArchive (closed)
EDWARD G. MYERS D.O. INCOHHealthcare Provider6,441Jun 10, 2016Hacking/IT IncidentArchive (closed)
Saints Mary and Elizabeth HospitalKYHealthcare Provider1,682Jun 10, 2016Unauthorized Access/DisclosureArchive (closed)
Riverside Health SystemVAHealthcare Provider578Jun 10, 2016Unauthorized Access/DisclosureArchive (closed)
North Ottawa Medical GroupMIHealthcare Provider22,000Jun 9, 2016Unauthorized Access/DisclosureArchive (closed)
PruittHealth Hospice BeaufortSCHealthcare Provider1,437Jun 9, 2016Unauthorized Access/DisclosureArchive (closed)
Wal-Mart Stores, Inc.ARHealthcare Provider27,393Jun 8, 2016Unauthorized Access/DisclosureArchive (closed)
Grace Primary Care, PCTNHealthcare Provider6,853Jun 7, 2016Hacking/IT IncidentArchive (closed)
Vincent Vein CenterCOHealthcare Provider2,250Jun 7, 2016Hacking/IT IncidentArchive (closed)
Midland County Hospital District d/b/a Midland Memorial HospitalTXHealthcare Provider1,468Jun 7, 2016Unauthorized Access/DisclosureArchive (closed)
The Vein DoctorMOHealthcare Provider3,000Jun 3, 2016Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.