HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 136 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Virginia Department of Medical Assistance Services (VA-DMAS) | VA | Health Plan | 697,586 | Mar 12, 2015 | Hacking/IT Incident | Archive (closed) |
| Dr. Anthony T. R. Green DDS | NY | Healthcare Provider | 7,448 | Mar 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Indiana State Medical Association | IN | Health Plan | 38,351 | Mar 6, 2015 | Theft | Archive (closed) |
| San Franciso General Hospital and Trauma Center | CA | Healthcare Provider | 2,500 | Mar 6, 2015 | Theft | Archive (closed) |
| Valley COmmunity Healthcare | CA | Healthcare Provider | 1,233 | Mar 6, 2015 | Loss | Archive (closed) |
| St. Mary's Health | IN | Healthcare Provider | 3,952 | Mar 5, 2015 | Hacking/IT Incident | Archive (closed) |
| Mosaic Medical | OR | Healthcare Provider | 2,207 | Mar 5, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Sharon J. Jones M.D. | CA | Healthcare Provider | 1,342 | Mar 5, 2015 | Theft | Archive (closed) |
| Clinical Reference Laboratory, Inc. | KS | Healthcare Provider | 4,668 | Mar 3, 2015 | Loss | Archive (closed) |
| Georgia Department of Community Health | GA | Health Plan | 557,779 | Mar 2, 2015 | Hacking/IT Incident | Archive (closed) |
| Georgia Department of Community Health | GA | Health Plan | 355,127 | Mar 2, 2015 | Hacking/IT Incident | Archive (closed) |
| Advance Rehabilitation & Consulting LTD | GA | Healthcare Provider | 570 | Mar 2, 2015 | Hacking/IT Incident | Archive (closed) |
| Amedisys | LA | Healthcare Provider | 6,909 | Mar 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| St.Vincent Hospital and Health Care Center, Inc. | IN | Healthcare Provider | 63,325 | Feb 27, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Cathrine Steinborn, DDS | CA | Healthcare Provider | 3,224 | Feb 27, 2015 | Theft | Archive (closed) |
| Aventura Hospital and Medical Center | FL | Healthcare Provider | 686 | Feb 27, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Raymond Mark Turner, M.D. | NV | Healthcare Provider | 2,153 | Feb 26, 2015 | Theft | Archive (closed) |
| Children's National Medical Center | DC | Healthcare Provider | 18,000 | Feb 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Marketing Clique | TX | Health Plan | 8,700 | Feb 20, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Hunt Regional Medical Partners | TX | Healthcare Provider | 3,000 | Feb 18, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Anthem Inc. | IN | Health Plan | 78,800,000 | Feb 13, 2015 | Hacking/IT Incident | Archive (closed) |
| Pathway to Hope | FL | Healthcare Provider | 600 | Feb 12, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Courier Corporation of Hawaii | HI | Business Associate | 2,809 | Feb 11, 2015 | Loss | Archive (closed) |
| Haywood County NC | NC | Healthcare Provider | 955 | Feb 9, 2015 | Loss | Archive (closed) |
| Tomas, Arturo | IL | Business Associate | 680 | Feb 9, 2015 | Loss | Archive (closed) |
| Senior Health Partners, a Healthfirst company | NY | Health Plan | 2,772 | Feb 6, 2015 | Theft | Archive (closed) |
| Planned Parenthood Southwest Ohio | OH | Healthcare Provider | 5,000 | Feb 5, 2015 | Improper Disposal | Archive (closed) |
| South Sunflower County Hospital | MS | Healthcare Provider | 19,000 | Feb 4, 2015 | Improper Disposal | Archive (closed) |
| Boston Baskin Cancer Foundation | TN | Healthcare Provider | 56,694 | Feb 2, 2015 | Theft | Archive (closed) |
| UMass Memorial Medical Group, Inc. | MA | Healthcare Provider | 14,100 | Jan 30, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Riverside County Regional Medical Center | CA | Healthcare Provider | 7,925 | Jan 29, 2015 | Theft | Archive (closed) |
| David E. Hansen DDS PS | WA | Healthcare Provider | 2,000 | Jan 29, 2015 | Theft | Archive (closed) |
| North Dallas Urogynecology, PLLC. | TX | Healthcare Provider | 678 | Jan 29, 2015 | Theft | Archive (closed) |
| Kaiser Foundation Health Plan of the Mid-Atlantic States, Inc. | MD | Health Plan | 630 | Jan 29, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Diana S. Guth DBA Home Respiratory Care | CA | Healthcare Provider | 1,285 | Jan 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Peter's Health Partners | NY | Healthcare Provider | 5,117 | Jan 23, 2015 | Theft | Archive (closed) |
| Ronald D. Garrett-Roe, MD | TX | Healthcare Provider | 1,600 | Jan 23, 2015 | Hacking/IT Incident | Archive (closed) |
| California Pacific Medical Center | CA | Healthcare Provider | 845 | Jan 23, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Rainier Surgical, Incorporated | TX | Healthcare Provider | 4,920 | Jan 16, 2015 | Theft | Archive (closed) |
| University Hospitals | OH | Healthcare Provider | 848 | Jan 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| National Pain Institute | FL | Healthcare Provider | 500 | Jan 15, 2015 | Improper Disposal | Archive (closed) |
| Tennessee Rural Health Improvement Association | TN | Health Plan | 79,000 | Jan 13, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's Eyewear Sight | CA | Healthcare Provider | 1,030 | Jan 12, 2015 | Theft | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 2,336 | Jan 9, 2015 | Loss | Archive (closed) |
| Aspire Indiana, Inc. | IN | Healthcare Provider | 43,890 | Jan 7, 2015 | Theft | Archive (closed) |
| VA Corporate Data Center Operations/Austin Information Technology Center | TX | Healthcare Provider | 7,029 | Jan 7, 2015 | Hacking/IT Incident | Archive (closed) |
| Saint Louis County Department of Health | MO | Healthcare Provider | 4,000 | Jan 7, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| mdINR LLC | FL | Healthcare Provider | 1,859 | Jan 5, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Murali Menon, Privacy Manager Breach | CA | Healthcare Provider | 2,855 | Dec 30, 2014 | Theft | Archive (closed) |
| Independence Blue Cross and AmeriHealth New Jersey | PA | Health Plan | 12,450 | Dec 26, 2014 | Improper Disposal | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.