HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 134 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Georgia Department of Human Services | GA | Health Plan | 2,983 | Jul 8, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Massachusetts General Hospital | MA | Healthcare Provider | 648 | Jul 8, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Oklahoma, Department of Obstetrics and Gynecology | OK | Healthcare Provider | 7,693 | Jul 3, 2015 | Theft | Archive (closed) |
| FireKeepers Casino Hotel | MI | Health Plan | 7,666 | Jul 3, 2015 | Hacking/IT Incident | Archive (closed) |
| Orlando Health | FL | Healthcare Provider | 3,421 | Jul 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| UPMC Health Plan | PA | Health Plan | 722 | Jul 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| CVS Health | RI | Healthcare Provider | 12,914 | Jun 26, 2015 | Theft | Archive (closed) |
| Meritus Medical Center, Inc. | MD | Healthcare Provider | 1,029 | Jun 26, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Episcopal Health Services Inc. d/b/a St. John's Episcopal Hospital | NY | Healthcare Provider | 509 | Jun 25, 2015 | Theft | Archive (closed) |
| Heartland Dental, LLC | IL | Business Associate | 2,860 | Jun 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Central Brooklyn Medical Group, PC | NY | Healthcare Provider | 4,223 | Jun 19, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| University of California Irvine Medical Center | CA | Healthcare Provider | 4,859 | Jun 17, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Martin Parish School Based Health Centers | LA | Healthcare Provider | 3,000 | Jun 15, 2015 | Theft | Archive (closed) |
| Global Care Delivery, Inc. | TX | Business Associate | 18,213 | Jun 12, 2015 | Theft | Archive (closed) |
| National Seating & Mobility, Inc. | TN | Healthcare Provider | 9,627 | Jun 12, 2015 | Theft | Archive (closed) |
| The Department of Aging and Disability Services | TX | Health Plan | 6,600 | Jun 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Implants, Dentures & Dental | NV | Healthcare Provider | 12,000 | Jun 10, 2015 | Theft | Archive (closed) |
| United Seating and Mobility, LLC d/b/a Numotion | CT | Healthcare Provider | 2,722 | Jun 10, 2015 | Theft | Archive (closed) |
| California Physicians' Service d/b/a Blue Shield of California | CA | Health Plan | 843 | Jun 9, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Truman Medical Center, Incorporated | MO | Healthcare Provider | 503 | Jun 9, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Keystone Pharmacy, Inc. | MD | Healthcare Provider | 500 | Jun 9, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Fred Finch Youth Center | CA | Healthcare Provider | 6,871 | Jun 5, 2015 | Theft | Archive (closed) |
| Lancaster County EMS | SC | Healthcare Provider | 50,000 | Jun 4, 2015 | Improper Disposal | Archive (closed) |
| Stanislaus Surgical Hospital | CA | Healthcare Provider | 1,170 | Jun 4, 2015 | Theft | Archive (closed) |
| Rite Aid Corporation | PA | Healthcare Provider | 2,345 | Jun 3, 2015 | Theft | Archive (closed) |
| Gallant Risk & Insurance Services, Inc. | CA | Business Associate | 995 | Jun 3, 2015 | Theft | Archive (closed) |
| Oregon's Health CO-OP | OR | Health Plan | 14,000 | Jun 1, 2015 | Theft | Archive (closed) |
| New York City Health and Hospitals Corporation - Metropolitan Hospital Center | NY | Healthcare Provider | 3,957 | Jun 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| BUFFALO HEART GROUP | NY | Healthcare Provider | 567 | May 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Beacon Health System | IN | Healthcare Provider | 306,789 | May 22, 2015 | Hacking/IT Incident | Archive (closed) |
| University of Rochester Medical Center and Affiliates | NY | Healthcare Provider | 3,403 | May 22, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Thomas H. Boyd Memorial Hospital | IL | Healthcare Provider | 8,300 | May 21, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| CareFirst Blue Cross Blue Shield | MD | Health Plan | 1,300,000 | May 20, 2015 | Hacking/IT Incident | Archive (closed) |
| Success 4 Kids & Families, Inc. | FL | Healthcare Provider | 506 | May 20, 2015 | Theft | Archive (closed) |
| Sharon J. Jones, M.D. | CA | Business Associate | 1,342 | May 19, 2015 | Theft | Archive (closed) |
| Alexian Brothers Medical Center | IL | Healthcare Provider | 632 | May 19, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Associated Dentists-Roseville Office | MN | Healthcare Provider | 4,725 | May 18, 2015 | Theft | Archive (closed) |
| Medical Management, LLC (MML) | NC | Business Associate | 20,512 | May 15, 2015 | Theft | Archive (closed) |
| Aflac | GA | Health Plan | 6,166 | May 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| UPMC | PA | Healthcare Provider | 2,259 | May 15, 2015 | Theft | Archive (closed) |
| Duke LifePoint Conemaugh Memorial Medical Center | PA | Healthcare Provider | 1,551 | May 15, 2015 | Theft | Archive (closed) |
| The MetroHealth System | OH | Healthcare Provider | 981 | May 15, 2015 | Hacking/IT Incident | Archive (closed) |
| Unity Recovery Group, Inc.,Starting Point Detox LLC, Lakeside Treatment Center LLC, Changing Tides Transitional Living LLC, Unity Recovery Center, Inc | FL | Healthcare Provider | 1,000 | May 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Ventura County Health Care Agency | CA | Healthcare Provider | 1,339 | May 6, 2015 | Loss | Archive (closed) |
| Partners HealthCare System, Inc. | MA | Healthcare Provider | 3,321 | May 1, 2015 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 1,138 | May 1, 2015 | Loss | Archive (closed) |
| County of Los Angeles | CA | Healthcare Provider | 880 | Apr 29, 2015 | Theft | Archive (closed) |
| Jacobi Medical Center | NY | Healthcare Provider | 90,060 | Apr 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Consolidated Tribal Health Project, Inc. | CA | Healthcare Provider | 4,885 | Apr 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Bellevue Hospital Center | NY | Healthcare Provider | 3,334 | Apr 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.