HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 135 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| University of Illinois at Chicago | IL | Healthcare Provider | 3,000 | Apr 28, 2015 | Theft | Archive (closed) |
| Clinical Reference Laboratory, Inc. | KS | Healthcare Provider | 864 | Apr 28, 2015 | Loss | Archive (closed) |
| Community Mercy Health Partners | OH | Healthcare Provider | 2,000 | Apr 27, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| CEMEX, Inc. | TX | Health Plan | 880 | Apr 27, 2015 | Hacking/IT Incident | Archive (closed) |
| Seton Family of Hospitals | TX | Healthcare Provider | 39,000 | Apr 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Saint Agnes Health Care, Inc. | MD | Healthcare Provider | 24,967 | Apr 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Wellmont Health System | TN | Healthcare Provider | 1,726 | Apr 24, 2015 | Improper Disposal | Archive (closed) |
| CompuNet Clinical Laboratories | OH | Healthcare Provider | 2,584 | Apr 23, 2015 | Loss | Archive (closed) |
| Puerto Rico Department of Heatlh - Medicaid Program | Health Plan | 500 | Apr 22, 2015 | Theft | Archive (closed) | |
| Jersey City Medical Center | NJ | Healthcare Provider | 1,447 | Apr 17, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Concordia Plan Services on behalf of the Concordia Health Plan | MO | Health Plan | 12,500 | Apr 16, 2015 | Hacking/IT Incident | Archive (closed) |
| American Sleep Medicine | CA | Healthcare Provider | 1,787 | Apr 16, 2015 | Theft | Archive (closed) |
| Suburban Lung Associates | IL | Healthcare Provider | 2,984 | Apr 13, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| St.Vincent Medical Group, Inc. | IN | Healthcare Provider | 756 | Apr 10, 2015 | Hacking/IT Incident | Archive (closed) |
| New York State Office of Mental Health | NY | Healthcare Provider | 563 | Apr 10, 2015 | Loss | Archive (closed) |
| International Union of Operating Engineers Local Unions 181, 320 & TVA Health and Welfare Trust Fund | KY | Health Plan | 5,440 | Apr 9, 2015 | Hacking/IT Incident | Archive (closed) |
| Denton County Health Department | TX | Healthcare Provider | 874 | Apr 9, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| ADT LLC Group Health & Welfare Plan | FL | Health Plan | 3,074 | Apr 7, 2015 | Hacking/IT Incident | Archive (closed) |
| Allina Health | MN | Healthcare Provider | 838 | Apr 6, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| SUPERVALU Group Health Plan | MN | Health Plan | 10,946 | Apr 3, 2015 | Hacking/IT Incident | Archive (closed) |
| Children's Heart Center | NV | Healthcare Provider | 8,791 | Apr 3, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Elizabeth Kerner, M.D. | TX | Healthcare Provider | 873 | Apr 3, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Plan sponsored by Covenant Ministries of Benevolance | IL | Health Plan | 782 | Apr 3, 2015 | Hacking/IT Incident | Archive (closed) |
| City of Philadelphia Fire Department Emergency Medical Services Unit | PA | Healthcare Provider | 81,463 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Western Montana Clinic | MT | Healthcare Provider | 7,038 | Apr 2, 2015 | Hacking/IT Incident | Archive (closed) |
| CDC/NIOSH World Trade Center Health Program (WTCHP) | GA | Health Plan | 958 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Cigna-HealthSpring | TN | Health Plan | 862 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Tulare County Health & Human Services Agency | CA | Healthcare Provider | 845 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| PIH Health Hospital - Whittier | CA | Healthcare Provider | 826 | Apr 2, 2015 | Theft | Archive (closed) |
| Schaeffler Group USA | SC | Health Plan | 550 | Apr 2, 2015 | Hacking/IT Incident | Archive (closed) |
| VA Eastern Colorado Health Care System(ECHCS) | CO | Healthcare Provider | 508 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Triple S Advantage, Inc | PR | Health Plan | 1,458 | Mar 31, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Project Vida Health Center | TX | Healthcare Provider | 7,700 | Mar 27, 2015 | Theft | Archive (closed) |
| New | FL | Health Plan | 500 | Mar 27, 2015 | Hacking/IT Incident | Archive (closed) |
| 7-Eleven, Inc. Comprehensive Welfare Benefits Plan No. 525 | TX | Health Plan | 1,688 | Mar 25, 2015 | Hacking/IT Incident | Archive (closed) |
| Freelancers Insurance Company | NY | Health Plan | 43,068 | Mar 24, 2015 | Hacking/IT Incident | Archive (closed) |
| McDermott Will & Emery LLP is the plan sponsor for the McDermott medical plan | IL | Health Plan | 880 | Mar 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Pediatric Associates | FL | Healthcare Provider | 627 | Mar 24, 2015 | Loss | Archive (closed) |
| AT&T Group Health Plan | TX | Health Plan | 50,000 | Mar 23, 2015 | Hacking/IT Incident | Archive (closed) |
| Florida Hospital | FL | Healthcare Provider | 8,700 | Mar 20, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Life Care Center of Attleboro | MA | Healthcare Provider | 2,473 | Mar 20, 2015 | Loss | Archive (closed) |
| Mount Sinai Medical Center | FL | Healthcare Provider | 1,406 | Mar 20, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Health Network | IN | Healthcare Provider | 650 | Mar 20, 2015 | Loss | Archive (closed) |
| Career Education Corporation | IL | Health Plan | 2,743 | Mar 19, 2015 | Hacking/IT Incident | Archive (closed) |
| Kane Hall Barry Neurology | TX | Healthcare Provider | 600 | Mar 19, 2015 | Theft | Archive (closed) |
| Advantage Consolidated LLC | OR | Healthcare Provider | 151,626 | Mar 18, 2015 | Hacking/IT Incident | Archive (closed) |
| Premera Blue Cross | WA | Health Plan | 11,000,000 | Mar 17, 2015 | Hacking/IT Incident | Archive (closed) |
| Blue Cross Blue Shield of Michigan | MI | Health Plan | 3,903 | Mar 17, 2015 | Theft | Archive (closed) |
| Sacred Heart Health System, Inc. | FL | Healthcare Provider | 14,177 | Mar 16, 2015 | Hacking/IT Incident | Archive (closed) |
| EyeCare of Bartlesville | OK | Healthcare Provider | 4,000 | Mar 13, 2015 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.