HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 132 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cottage Health | CA | Healthcare Provider | 11,000 | Dec 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Centegra Health System | IL | Healthcare Provider | 2,929 | Dec 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Carolyn B Lyde, MD, PA | TX | Healthcare Provider | 1,500 | Nov 30, 2015 | Theft | Archive (closed) |
| PeaceHealth | WA | Healthcare Provider | 1,407 | Nov 30, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| New Dimension Group, LLC | NC | Healthcare Provider | 1,275 | Nov 25, 2015 | Loss | Archive (closed) |
| Pathways Professional Counseling | AL | Healthcare Provider | 986 | Nov 24, 2015 | Theft | Archive (closed) |
| Cigna Home Delivery Pharmacy | CT | Healthcare Provider | 592 | Nov 23, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Alaska Orthopedic Specialists, Inc. | AK | Healthcare Provider | 553 | Nov 19, 2015 | Theft | Archive (closed) |
| UC Health, LLC | OH | Healthcare Provider | 1,064 | Nov 14, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| OH Muhlenberg, LLC | KY | Healthcare Provider | 84,681 | Nov 13, 2015 | Hacking/IT Incident | Archive (closed) |
| Midlands Orthopaedics, P.A. | SC | Healthcare Provider | 3,902 | Nov 13, 2015 | Hacking/IT Incident | Archive (closed) |
| HealthPoint | WA | Healthcare Provider | 1,300 | Nov 13, 2015 | Theft | Archive (closed) |
| North Carolina Department of Health and Human Services | NC | Health Plan | 524 | Nov 13, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Good Care Pediatric, LLP | NY | Healthcare Provider | 2,300 | Nov 12, 2015 | Hacking/IT Incident | Archive (closed) |
| Dean Health Plan | WI | Health Plan | 960 | Nov 11, 2015 | Loss | Archive (closed) |
| Rush University Medical Center | IL | Healthcare Provider | 1,529 | Nov 6, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's Medical Clinics of East Texas | TX | Healthcare Provider | 16,000 | Oct 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| LTC Dental, P.C. | AL | Healthcare Provider | 1,680 | Oct 28, 2015 | Theft | Archive (closed) |
| Bon Secours Saint Francis | SC | Healthcare Provider | 1,997 | Oct 26, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| EnvisionRx | OH | Business Associate | 540 | Oct 23, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Department of Health, Children's Medical Services | FL | Healthcare Provider | 500 | Oct 23, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Indian Territory Home Health and Hospice | OK | Healthcare Provider | 4,500 | Oct 22, 2015 | Hacking/IT Incident | Archive (closed) |
| Huntington Medical Research Institutes | CA | Healthcare Provider | 4,300 | Oct 20, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| OsteoMed LP | TX | Health Plan | 1,134 | Oct 20, 2015 | Theft | Archive (closed) |
| North Carolina Department of Health and Human Services | NC | Health Plan | 1,615 | Oct 19, 2015 | Hacking/IT Incident | Archive (closed) |
| Woodhull Medical and Mental Health Center | NY | Healthcare Provider | 1,581 | Oct 19, 2015 | Theft | Archive (closed) |
| BeHealthy Florida, Inc. | FL | Health Plan | 835 | Oct 19, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Robert D. Chatlos DMD & Assoc | PA | Business Associate | 2,900 | Oct 18, 2015 | Theft | Archive (closed) |
| Emergence Health Network | TX | Healthcare Provider | 11,100 | Oct 16, 2015 | Hacking/IT Incident | Archive (closed) |
| Nephropathology Associates, PLC | AR | Healthcare Provider | 1,260 | Oct 16, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Centene Management Corporation | MO | Health Plan | 8,208 | Oct 15, 2015 | Theft | Archive (closed) |
| University of Oklahoma Department of Urology | OK | Healthcare Provider | 9,300 | Oct 10, 2015 | Theft | Archive (closed) |
| Aspire Home Care and Hospice | OK | Healthcare Provider | 4,278 | Oct 9, 2015 | Hacking/IT Incident | Archive (closed) |
| SSM Health Cancer Care | MO | Healthcare Provider | 643 | Oct 9, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| The Johns Hopkins Hospital | MD | Healthcare Provider | 571 | Oct 9, 2015 | Theft | Archive (closed) |
| Insurance Data Services | MI | Business Associate | 2,918 | Oct 8, 2015 | Theft | Archive (closed) |
| Anne Arundel Health System | MD | Healthcare Provider | 2,208 | Oct 8, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| CarePlus Health Plans [case 18772] | KY | Health Plan | 2,873 | Oct 6, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Healthcare | VA | Healthcare Provider | 1,040 | Oct 2, 2015 | Theft | Archive (closed) |
| Baptist Health and Arkansas Health Group | AR | Healthcare Provider | 6,500 | Oct 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc [Case 18652] | KY | Health Plan | 2,815 | Sep 30, 2015 | Theft | Archive (closed) |
| Kindred Nursing Centers West, L.L.C. | CA | Healthcare Provider | 1,125 | Sep 25, 2015 | Theft | Archive (closed) |
| Silverberg Surgical and Medical Group | CA | Healthcare Provider | 857 | Sep 25, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Sunquest Information Systems | AZ | Business Associate | 2,100 | Sep 24, 2015 | Theft | Archive (closed) |
| Horizon Healthcare Services, Inc., doing business as Horizon Blue Cross Blue Shield of New Jersey, and its affiliates | NJ | Health Plan | 1,173 | Sep 24, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Barrington Orthopedic Specialists, Ltd | IL | Healthcare Provider | 1,009 | Sep 24, 2015 | Theft | Archive (closed) |
| Heartland Health Clinic | VA | Healthcare Provider | 3,650 | Sep 21, 2015 | Hacking/IT Incident | Archive (closed) |
| Skin and Cancer Center of Arizona | AZ | Healthcare Provider | 3,311 | Sep 21, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare | CA | Health Plan | 54,203 | Sep 18, 2015 | Theft | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 501 | Sep 17, 2015 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.