HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 133 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Daniel A. Sheldon, M.D., P.A. | FL | Healthcare Provider | 2,075 | Sep 16, 2015 | Hacking/IT Incident | Archive (closed) |
| Louisiana State University Health Sciences Center-New Orleans | LA | Healthcare Provider | 14,500 | Sep 15, 2015 | Theft | Archive (closed) |
| Affinity Health Plan, Inc. | NY | Health Plan | 721 | Sep 14, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Sutter Medical Foundation | CA | Healthcare Provider | 2,302 | Sep 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross Blue Shield of North Carolina | NC | Health Plan | 1,530 | Sep 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross Blue Shield of North Carolina | NC | Health Plan | 807 | Sep 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Excellus Health Plan, Inc. | NY | Health Plan | 9,358,891 | Sep 9, 2015 | Hacking/IT Incident | Archive (closed) |
| Oakland Family Services | MI | Healthcare Provider | 16,107 | Sep 9, 2015 | Hacking/IT Incident | Archive (closed) |
| Lee Memorial Health System | FL | Healthcare Provider | 1,508 | Sep 7, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| University of California, Los Angeles Health | CA | Healthcare Provider | 1,242 | Sep 1, 2015 | Theft | Archive (closed) |
| Minneapolis Clinic of Neurology, Ltd. | MN | Healthcare Provider | 1,450 | Aug 31, 2015 | Theft | Archive (closed) |
| Metropolitan Atlanta Rapid Transit Authority | GA | Health Plan | 800 | Aug 27, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's Hospital Medical Center of Akron | OH | Healthcare Provider | 7,664 | Aug 26, 2015 | Loss | Archive (closed) |
| ROBERT SOPER, M.D. | CA | Healthcare Provider | 2,000 | Aug 26, 2015 | Theft | Archive (closed) |
| Merit Health Northwest Mississippi | MS | Healthcare Provider | 846 | Aug 26, 2015 | Theft | Archive (closed) |
| Pediatric Gastroenterology, Hepatology & Nutrition of Florida, P.A. | FL | Healthcare Provider | 13,000 | Aug 24, 2015 | Theft | Archive (closed) |
| Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinic | CA | Healthcare Provider | 1,200 | Aug 24, 2015 | Theft | Archive (closed) |
| Pediatric Group LLC | IL | Healthcare Provider | 10,000 | Aug 21, 2015 | Hacking/IT Incident | Archive (closed) |
| PT Northwest, LLC | OR | Healthcare Provider | 1,500 | Aug 21, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Empi Inc and DJO, LLC | MN | Healthcare Provider | 160,000 | Aug 20, 2015 | Theft | Archive (closed) |
| Colorado Department of Health Care Policy and Financing | CO | Health Plan | 1,622 | Aug 18, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Cancer Care Northwest | WA | Healthcare Provider | 1,426 | Aug 17, 2015 | Loss | Archive (closed) |
| Endocrinology Associates, Inc. | OH | Healthcare Provider | 1,400 | Aug 14, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 8,345 | Aug 7, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| T.J. Samson Community Hospital | KY | Healthcare Provider | 2,060 | Aug 7, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Max M Bayard MD, PC | VT | Healthcare Provider | 2,000 | Aug 7, 2015 | Theft | Archive (closed) |
| Baylor College of Medicine | TX | Healthcare Provider | 1,004 | Aug 7, 2015 | Theft | Archive (closed) |
| Lawrence General Hospital | MA | Healthcare Provider | 2,071 | Aug 5, 2015 | Loss | Archive (closed) |
| VA Black Hills Health Care System | SD | Healthcare Provider | 1,168 | Aug 4, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Orlantino Dyoco, M.D. | CA | Healthcare Provider | 9,000 | Aug 3, 2015 | Theft | Archive (closed) |
| North East Medical Services (NEMS) | CA | Healthcare Provider | 69,246 | Jul 31, 2015 | Theft | Archive (closed) |
| Siouxland Anesthesiology, Ltd. | SD | Healthcare Provider | 13,000 | Jul 31, 2015 | Hacking/IT Incident | Archive (closed) |
| Sioux Falls VA Health Care System | SD | Healthcare Provider | 1,111 | Jul 30, 2015 | Loss | Archive (closed) |
| Prima CARE, PC | MA | Healthcare Provider | 1,651 | Jul 29, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| East Bay Perinatal Medical Associates | CA | Business Associate | 1,494 | Jul 29, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| The McLean Hospital Corporation | MA | Healthcare Provider | 12,673 | Jul 28, 2015 | Loss | Archive (closed) |
| Urology Associates, Professional Corporation | MT | Healthcare Provider | 6,500 | Jul 24, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthfirst Affiliates that include Healthfirst PHSP, Inc., Managed Health, Inc., HF Management Services, LLC, and Senior Health Partners | NY | Health Plan | 5,338 | Jul 24, 2015 | Hacking/IT Incident | Archive (closed) |
| OhioHealth | OH | Healthcare Provider | 1,006 | Jul 24, 2015 | Loss | Archive (closed) |
| Advanced Radiology Consultants, LLC | CT | Healthcare Provider | 855 | Jul 24, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical Informatics Engineering | IN | Business Associate | 3,500,000 | Jul 23, 2015 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 12,517 | Jul 22, 2015 | Theft | Archive (closed) |
| Special Agents Mutual Benefit Association | MD | Health Plan | 1,475 | Jul 20, 2015 | Hacking/IT Incident | Archive (closed) |
| University of California, Los Angeles Health | CA | Healthcare Provider | 4,500,000 | Jul 17, 2015 | Hacking/IT Incident | Archive (closed) |
| Maricopa Special Health Care District - Maricopa Integrated Health System | AZ | Healthcare Provider | 633 | Jul 14, 2015 | Loss | Archive (closed) |
| Arkansas Blue Cross and Blue Shield | AR | Health Plan | 560 | Jul 14, 2015 | Theft | Archive (closed) |
| Mayo Clinic Health System- Red Wing | MN | Healthcare Provider | 601 | Jul 13, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Integral Health Plan, Inc. | FL | Health Plan | 7,549 | Jul 10, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Howard University | DC | Healthcare Provider | 1,445 | Jul 10, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Amsterdam Nursing Home Corporation (1992) | NY | Healthcare Provider | 621 | Jul 10, 2015 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.