HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 131 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Freeport Memorial Hospital | IL | Healthcare Provider | 1,349 | Feb 26, 2016 | Theft | Archive (closed) |
| Vancouver Radiologists, PC | WA | Healthcare Provider | 603 | Feb 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| ELLIOT J MARTIN CHIROPRACTIC PC | NY | Healthcare Provider | 1,200 | Feb 24, 2016 | Hacking/IT Incident | Archive (closed) |
| Public Health Trust of Miami-Dade County, Florida | FL | Healthcare Provider | 24,188 | Feb 19, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Roark's Pharmacy | TN | Healthcare Provider | 3,000 | Feb 19, 2016 | Theft | Archive (closed) |
| Alliance Health Networks, LLC | UT | Healthcare Provider | 42,372 | Feb 15, 2016 | Hacking/IT Incident | Archive (closed) |
| Radiology Regional Center, PA | FL | Healthcare Provider | 483,063 | Feb 12, 2016 | Loss | Archive (closed) |
| BlueCross BlueShield of South Carolina | SC | Business Associate | 998 | Feb 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| DataStat, Inc. | MI | Business Associate | 552 | Feb 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Washington State Health Care Authority (HCA) | WA | Health Plan | 91,187 | Feb 9, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| SEIM JOHNSON, LLP | NE | Business Associate | 30,972 | Feb 8, 2016 | Theft | Archive (closed) |
| Borgess Medical Center d/b/a Borgess Rheumatology | MI | Healthcare Provider | 700 | Feb 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Rite Aid Store 01617 | NY | Healthcare Provider | 976 | Feb 3, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Louisiana Healthcare Connections | LA | Health Plan | 13,086 | Feb 2, 2016 | Theft | Archive (closed) |
| Grx Holdings, LLC dba Medicap Pharmacy | IA | Healthcare Provider | 2,300 | Feb 2, 2016 | Loss | Archive (closed) |
| Crown Point Health Center | IN | Healthcare Provider | 1,854 | Jan 29, 2016 | Improper Disposal | Archive (closed) |
| Community Mercy Health Partners | OH | Healthcare Provider | 113,528 | Jan 25, 2016 | Improper Disposal | Archive (closed) |
| Livongo Health, Inc. | IL | Healthcare Provider | 1,950 | Jan 25, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| The University of Texas System Administration | TX | Health Plan | 794 | Jan 21, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| New West Health Services d/b/a New West Medicare | MT | Health Plan | 28,209 | Jan 15, 2016 | Loss | Archive (closed) |
| Hawai‘i Medical Service Association | HI | Health Plan | 10,179 | Jan 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| CDC/NIOSH/ World Trade Center Health Program (WTCHP) | GA | Health Plan | 597 | Jan 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Shield of California | CA | Health Plan | 20,764 | Jan 14, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| G&S Medical Associates, LLC | NJ | Healthcare Provider | 3,000 | Jan 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Felicia Lewis, MD Lakewood Hills Internal Medicine | TX | Healthcare Provider | 1,500 | Jan 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Brigham and Women's Hospital | MA | Healthcare Provider | 1,009 | Jan 11, 2016 | Hacking/IT Incident | Archive (closed) |
| AHRC Nassau | NY | Healthcare Provider | 1,200 | Jan 6, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Elite Imaging | FL | Healthcare Provider | 1,457 | Jan 4, 2016 | Theft | Archive (closed) |
| Pittman Family Dental | OH | Healthcare Provider | 8,830 | Dec 31, 2015 | Hacking/IT Incident | Archive (closed) |
| St. Luke's Cornwall Hospital | NY | Healthcare Provider | 29,156 | Dec 30, 2015 | Theft | Archive (closed) |
| Hillsides | CA | Healthcare Provider | 502 | Dec 30, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Michael Benjamin, M.D., Inc. | CA | Healthcare Provider | 1,300 | Dec 28, 2015 | Theft | Archive (closed) |
| HealthSouth Rehabilitation Hospital of Round Rock | TX | Healthcare Provider | 1,359 | Dec 24, 2015 | Theft | Archive (closed) |
| Allina Health | MN | Healthcare Provider | 6,195 | Dec 23, 2015 | Improper Disposal | Archive (closed) |
| WhiteGlove Health | TX | Healthcare Provider | 975 | Dec 23, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| ST Psychotherapy, LLC | WI | Healthcare Provider | 509 | Dec 23, 2015 | Theft | Archive (closed) |
| Oceans Acquisition, Inc. | TX | Healthcare Provider | 659 | Dec 22, 2015 | Theft | Archive (closed) |
| Physicians Health Plan of Northern Indiana, Inc. | IN | Health Plan | 1,708 | Dec 18, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Belgrade Regional Health Center | ME | Healthcare Provider | 854 | Dec 18, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Fidelis Care | NY | Health Plan | 738 | Dec 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Fidelis Care | NY | Health Plan | 687 | Dec 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| New Mexico Department of Health | NM | Healthcare Provider | 561 | Dec 15, 2015 | Theft | Archive (closed) |
| Mary Ruth Buchness, MD, Dermatologist, P.C. | NY | Healthcare Provider | 14,910 | Dec 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwest Primary Care Group | OR | Healthcare Provider | 5,327 | Dec 11, 2015 | Theft | Archive (closed) |
| Maine General Health | ME | Healthcare Provider | 500 | Dec 8, 2015 | Hacking/IT Incident | Archive (closed) |
| Middlesex Hospital | CT | Healthcare Provider | 946 | Dec 4, 2015 | Hacking/IT Incident | Archive (closed) |
| Blue Cross and Blue Shield of Nebraska | NE | Health Plan | 1,872 | Dec 3, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Camelback Women's Health | AZ | Healthcare Provider | 810 | Dec 3, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Colorado Health | CO | Healthcare Provider | 827 | Dec 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Keenan & Associates | CA | Business Associate | 35,404 | Dec 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.