HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 130 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| OptumRx, Inc. | CA | Healthcare Provider | 6,229 | Apr 12, 2016 | Theft | Archive (closed) |
| United Community & Family Services | CT | Healthcare Provider | 1,000 | Apr 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Mark Anthony Quintero, M.D., L.L.C. | FL | Healthcare Provider | 650 | Apr 12, 2016 | Hacking/IT Incident | Archive (closed) |
| Sacred Heart Health System, Inc | FL | Healthcare Provider | 532 | Apr 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Pain Treatment Centers of America | AR | Healthcare Provider | 19,397 | Apr 11, 2016 | Hacking/IT Incident | Archive (closed) |
| BioReference Laboratories, Inc | NJ | Healthcare Provider | 3,563 | Apr 8, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Indian Health Service Northern Navajo Medical Center | NM | Health Plan | 7,421 | Apr 7, 2016 | Theft | Archive (closed) |
| RMA Medical Centers of Florida | FL | Healthcare Provider | 3,906 | Apr 7, 2016 | Theft | Archive (closed) |
| Pacific Gas and Electric Company | CA | Business Associate | 2,426 | Apr 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Target Corporation Health Plan | MN | Business Associate | 719 | Apr 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Sisters of Charity of Leavenworth Health System Health Benefits Plan | CO | Business Associate | 540 | Apr 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Einstein Healthcare Network | PA | Healthcare Provider | 2,939 | Apr 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Pointe Medical Services, Inc. | FL | Healthcare Provider | 2,000 | Apr 1, 2016 | Theft | Archive (closed) |
| Aurora Health Care, Inc. | WI | Healthcare Provider | 869 | Apr 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Mercy Iowa City | IA | Healthcare Provider | 15,625 | Mar 25, 2016 | Hacking/IT Incident | Archive (closed) |
| Morton Medical Center, PLLC | WA | Healthcare Provider | 3,000 | Mar 24, 2016 | Hacking/IT Incident | Archive (closed) |
| Northgate Medical PC | MA | Business Associate | 2,500 | Mar 24, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Excel Plus Home Health, Incorporated | TX | Healthcare Provider | 524 | Mar 23, 2016 | Theft | Archive (closed) |
| Metropolitan Jewish Health System, Inc. d/b/a MJHS | NY | Business Associate | 50,000 | Mar 22, 2016 | Hacking/IT Incident | Archive (closed) |
| National Counseling Group | VA | Healthcare Provider | 23,000 | Mar 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Bozeman Health Deaconess Hospital | MT | Healthcare Provider | 1,124 | Mar 21, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Val Verde Regional Medical Center | TX | Healthcare Provider | 2,000 | Mar 18, 2016 | Hacking/IT Incident | Archive (closed) |
| Lindsay House Surgery Center, LLC | NY | Healthcare Provider | 773 | Mar 18, 2016 | Theft | Archive (closed) |
| W. Christopher Bryant DDS PC | MI | Healthcare Provider | 2,200 | Mar 17, 2016 | Loss | Archive (closed) |
| Hospital for Special Surgery | NY | Healthcare Provider | 647 | Mar 17, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Laborers Funds Administrative Office of Northern California, Inc. | CA | Health Plan | 2,373 | Mar 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| JASACare | NY | Healthcare Provider | 1,154 | Mar 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Virtua Medical Group | NJ | Healthcare Provider | 1,654 | Mar 11, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Vibrant Body Wellness | CA | Healthcare Provider | 726 | Mar 11, 2016 | Theft | Archive (closed) |
| Karmanos Cancer Center | MI | Healthcare Provider | 2,808 | Mar 10, 2016 | Loss | Archive (closed) |
| Vidant Health | NC | Healthcare Provider | 897 | Mar 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| UHHS Geauga Medical Center | OH | Healthcare Provider | 677 | Mar 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Cromwell Fire District | CT | Healthcare Provider | 500 | Mar 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Illinois Valley Podiatry Group | IL | Healthcare Provider | 26,588 | Mar 8, 2016 | Hacking/IT Incident | Archive (closed) |
| Complete Family Foot Care | NE | Healthcare Provider | 5,883 | Mar 7, 2016 | Hacking/IT Incident | Archive (closed) |
| 21st Century Oncology | FL | Healthcare Provider | 2,213,597 | Mar 4, 2016 | Hacking/IT Incident | Archive (closed) |
| Premier Healthcare, LLC | IN | Healthcare Provider | 205,748 | Mar 4, 2016 | Theft | Archive (closed) |
| Cardiology Associates of Jonesboro, Inc. | AR | Healthcare Provider | 1,669 | Mar 4, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Hope | CA | Healthcare Provider | 1,024 | Mar 4, 2016 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 880 | Mar 4, 2016 | Theft | Archive (closed) |
| Centers Plan for Healthy Living | NY | Health Plan | 6,893 | Mar 3, 2016 | Theft | Archive (closed) |
| Walmart Stores, Inc. | AR | Healthcare Provider | 4,800 | Mar 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Group Life Hospital and Medical Program | CT | Health Plan | 3,000 | Feb 29, 2016 | Hacking/IT Incident | Archive (closed) |
| Mind Springs Health | CO | Healthcare Provider | 2,147 | Feb 27, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Valley Hope Association | KS | Healthcare Provider | 52,076 | Feb 26, 2016 | Theft | Archive (closed) |
| Eye Institute of Corpus Christi | TX | Healthcare Provider | 43,961 | Feb 26, 2016 | Theft | Archive (closed) |
| Nintendo of America Inc. | WA | Health Plan | 6,248 | Feb 26, 2016 | Hacking/IT Incident | Archive (closed) |
| Locust Fork Pharmacy | AL | Healthcare Provider | 5,000 | Feb 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| BJC HealthCare ACO, LLC | MO | Healthcare Provider | 2,393 | Feb 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Ecolab Health and Welfare Benefits Plan | MN | Health Plan | 1,550 | Feb 26, 2016 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.