HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 129 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The University of New Mexico | NM | Healthcare Provider | 2,827 | Jun 3, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| My Pediatrician, PA | FL | Business Associate | 2,500 | Jun 1, 2016 | Hacking/IT Incident | Archive (closed) |
| ENT and Allergy Center | AR | Healthcare Provider | 16,200 | May 31, 2016 | Hacking/IT Incident | Archive (closed) |
| Washington DC VA Medical Center | DC | Healthcare Provider | 1,062 | May 31, 2016 | Theft | Archive (closed) |
| Orchid MPS Holdings, LLC Welfare Benefit Plan | MI | Health Plan | 771 | May 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Stamford Podiatry Group .P.C | CT | Healthcare Provider | 40,491 | May 25, 2016 | Hacking/IT Incident | Archive (closed) |
| Integrated Health Solutions PC | PA | Healthcare Provider | 19,776 | May 25, 2016 | Hacking/IT Incident | Archive (closed) |
| California Health & Longevity Institute | CA | Healthcare Provider | 4,386 | May 25, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Berkeley Endocrine Clinic | CA | Business Associate | 1,370 | May 24, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Keystone Rural Health Consortia, Inc. | PA | Healthcare Provider | 800 | May 24, 2016 | Theft | Archive (closed) |
| Aflac | GA | Health Plan | 930 | May 20, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Coordinated Health Mutual, Inc. | OH | Health Plan | 591 | May 20, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Tallahassee Memorial HealthCare, Inc. | FL | Healthcare Provider | 505 | May 20, 2016 | Hacking/IT Incident | Archive (closed) |
| Emergency Room Associates doing business as Emergency Medicine Associates | AZ | Healthcare Provider | 1,067 | May 19, 2016 | Theft | Archive (closed) |
| San Juan County New Mexico | NM | Healthcare Provider | 12,500 | May 17, 2016 | Hacking/IT Incident | Archive (closed) |
| Complete Chiropractic & Bodywork Therapies | MI | Healthcare Provider | 4,082 | May 17, 2016 | Hacking/IT Incident | Archive (closed) |
| Surgical Care Affiliates | AL | Business Associate | 9,009 | May 16, 2016 | Theft | Archive (closed) |
| Associates In EyeCare, P.S.C. | KY | Healthcare Provider | 971 | May 16, 2016 | Theft | Archive (closed) |
| California Correctional Health Care Services | CA | Healthcare Provider | 400,000 | May 15, 2016 | Theft | Archive (closed) |
| Imperial Valley Family Care Medical Group, APC | CA | Healthcare Provider | 649 | May 13, 2016 | Theft | Archive (closed) |
| Pulaski County Special School District-Employee Benefits Division | AR | Health Plan | 2,602 | May 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical Colleagues of Texas, LLP | TX | Healthcare Provider | 68,631 | May 11, 2016 | Hacking/IT Incident | Archive (closed) |
| HeartCare Consultants | FL | Healthcare Provider | 16,000 | May 11, 2016 | Hacking/IT Incident | Archive (closed) |
| Northwest Oncology & Hematology, S.C. | IL | Healthcare Provider | 1,625 | May 11, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| UnityPoint Health Affiliated Covered Entity | IA | Healthcare Provider | 1,620 | May 11, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Medicine of Weston | FL | Healthcare Provider | 500 | May 11, 2016 | Hacking/IT Incident | Archive (closed) |
| Lafayette Pain Care PC | IN | Healthcare Provider | 7,500 | May 9, 2016 | Hacking/IT Incident | Archive (closed) |
| Southeast Eye Institute, P.A. dba eye Associates of Pinellas | FL | Healthcare Provider | 87,314 | May 5, 2016 | Hacking/IT Incident | Archive (closed) |
| UnitedHealth Group Single Affiliated Covered Entity (SACE) | MN | Health Plan | 5,330 | May 4, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Medical Clinic, PA | FL | Healthcare Provider | 1,000 | May 4, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Managed Health Services | IN | Health Plan | 610 | May 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| PruittHealth Home Health -- Low Country | SC | Healthcare Provider | 1,500 | Apr 29, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Northstar Healthcare Acquisitions LLC | TX | Healthcare Provider | 19,898 | Apr 28, 2016 | Theft | Archive (closed) |
| Family & Children's Services of Mid Michigan, Inc. | MI | Healthcare Provider | 981 | Apr 27, 2016 | Hacking/IT Incident | Archive (closed) |
| Children's National Medical Center | DC | Healthcare Provider | 4,107 | Apr 25, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Comanche County Hospital Authority | OK | Healthcare Provider | 2,199 | Apr 25, 2016 | Hacking/IT Incident | Archive (closed) |
| Mayfield Clinic Inc | OH | Healthcare Provider | 23,341 | Apr 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Ohio Department of Mental Health and Addiction Services | OH | Healthcare Provider | 59,000 | Apr 22, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan, Inc. | CA | Business Associate | 2,451 | Apr 22, 2016 | Theft | Archive (closed) |
| Edwin Shaw Rehabilitation | OH | Healthcare Provider | 975 | Apr 22, 2016 | Loss | Archive (closed) |
| Wyoming Medical Center | WY | Healthcare Provider | 3,184 | Apr 20, 2016 | Hacking/IT Incident | Archive (closed) |
| Lake Pulmonary Critical PA | FL | Healthcare Provider | 648 | Apr 20, 2016 | Theft | Archive (closed) |
| Lake Pulmonary Critical Care PA | FL | Healthcare Provider | 648 | Apr 20, 2016 | Theft | Archive (closed) |
| Quarles & Brady, LLP | WI | Business Associate | 1,032 | Apr 19, 2016 | Theft | Archive (closed) |
| Florida Hospital Medical Group | FL | Healthcare Provider | 1,906 | Apr 18, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Vail Clinic, Inc. dba Vail Valley Medical Center, and dba Howard Head Sports Medicine | CO | Healthcare Provider | 3,118 | Apr 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Oneida Tribe of Indians of Wisconsin | WI | Healthcare Provider | 2,734 | Apr 15, 2016 | Theft | Archive (closed) |
| Atique Orthodontics | OR | Healthcare Provider | 1,506 | Apr 15, 2016 | Hacking/IT Incident | Archive (closed) |
| American Fidelity Assurance Company | OK | Health Plan | 2,664 | Apr 13, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Department of Health | FL | Healthcare Provider | 1,076 | Apr 13, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.