HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 137 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Northwestern Memorial HealthCare | IL | Healthcare Provider | 2,813 | Dec 23, 2014 | Theft | Archive (closed) |
| Mercy Medical Center Redding - Oncology Clinic, Privacy Manager Breach | CA | Healthcare Provider | 616 | Dec 22, 2014 | Hacking/IT Incident | Archive (closed) |
| The Corvallis Clinic, P.C. | OR | Healthcare Provider | 41,000 | Dec 19, 2014 | Theft | Archive (closed) |
| Pediatric Gastroenterology Consultants | CO | Healthcare Provider | 5,000 | Dec 19, 2014 | Theft | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 160,000 | Dec 15, 2014 | Other | Archive (closed) |
| Sony Pictures Entertainment Health and Welfare Benefits Plan (the Plan) | CA | Health Plan | 30,000 | Dec 12, 2014 | Hacking/IT Incident | Archive (closed) |
| Clay County Hospital | IL | Healthcare Provider | 12,621 | Dec 12, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Mary Mercy Hospital | MI | Healthcare Provider | 1,488 | Dec 12, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| District Medical Group, Privacy Manager Breach | AZ | Healthcare Provider | 616 | Dec 12, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Highlands Cashier Hospital | NC | Healthcare Provider | 26,115 | Dec 11, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| ReachOut Home Care [Case #16687] | KY | Healthcare Provider | 4,500 | Dec 9, 2014 | Theft | Archive (closed) |
| Florida Department of Health | FL | Healthcare Provider | 2,477 | Dec 8, 2014 | Other | Archive (closed) |
| The Hearing Zone | UT | Healthcare Provider | 623 | Dec 5, 2014 | Theft | Archive (closed) |
| North Big Horn Hospital | WY | Healthcare Provider | 1,607 | Dec 1, 2014 | Loss | Archive (closed) |
| Computer Programs and Systems, Inc. | AL | Business Associate | 25,764 | Nov 26, 2014 | Theft | Archive (closed) |
| AdminisTEP | TX | Business Associate | 4,469 | Nov 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Northfield Hospital & Clinics | MN | Healthcare Provider | 1,778 | Nov 25, 2014 | Improper Disposal | Archive (closed) |
| Visionworks Inc. | TX | Health Plan | 47,683 | Nov 21, 2014 | Theft | Archive (closed) |
| True Vision Eyecare | OH | Healthcare Provider | 542 | Nov 21, 2014 | Theft | Archive (closed) |
| MetroPlus Health Plan, Inc. | NY | Health Plan | 31,980 | Nov 20, 2014 | Other | Archive (closed) |
| Baptist Primary Care, Inc. | FL | Healthcare Provider | 1,449 | Nov 20, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Kirkbride Center | PA | Healthcare Provider | 860 | Nov 19, 2014 | Theft | Archive (closed) |
| Brigham and Women's Hospital | MA | Healthcare Provider | 999 | Nov 17, 2014 | Theft | Archive (closed) |
| REEVE-WOODS EYE CENTER | CA | Healthcare Provider | 30,000 | Nov 15, 2014 | Theft | Archive (closed) |
| Loi Luu | CA | Healthcare Provider | 13,177 | Nov 14, 2014 | Theft | Archive (closed) |
| Iron Mountain | CA | Business Associate | 2,691 | Nov 14, 2014 | Theft | Archive (closed) |
| Colorado River Indian Tribes | AZ | Healthcare Provider | 1,296 | Nov 14, 2014 | Other | Archive (closed) |
| Indian Health Service, Aberdeen Area Office | SD | Health Plan | 1,632 | Nov 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Visionworks Inc. | TX | Health Plan | 74,944 | Nov 10, 2014 | Loss | Archive (closed) |
| Central Dermatology Center, P.A. | NC | Healthcare Provider | 76,258 | Nov 7, 2014 | Theft | Archive (closed) |
| Weill Cornell Medical College | NY | Healthcare Provider | 3,936 | Nov 7, 2014 | Theft | Archive (closed) |
| Jessie Trice Community Health Center, Inc. | FL | Healthcare Provider | 7,888 | Nov 3, 2014 | Theft | Archive (closed) |
| Coordinated Health | PA | Healthcare Provider | 13,907 | Oct 31, 2014 | Theft | Archive (closed) |
| Memorial Healthcare System | FL | Healthcare Provider | 1,782 | Oct 31, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Healthcare System | FL | Healthcare Provider | 1,782 | Oct 30, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Portland VA Medical Center | OR | Healthcare Provider | 1,740 | Oct 29, 2014 | Theft | Archive (closed) |
| Multilingual Psychotherapy Centers, Inc | FL | Healthcare Provider | 3,500 | Oct 28, 2014 | Theft | Archive (closed) |
| Burlington Northern Santa Fe Group Benefits Plan | TX | Health Plan | 507 | Oct 28, 2014 | Loss | Archive (closed) |
| MD Manage (Vcarve LLC) | NJ | Business Associate | 35,357 | Oct 22, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Quraishi, Nisar A | NY | Healthcare Provider | 20,000 | Oct 22, 2014 | Theft | Archive (closed) |
| Seven Counties Services, Inc. | KY | Healthcare Provider | 727 | Oct 22, 2014 | Improper Disposal, Unauthorized Access/Disclosure | Archive (closed) |
| Heard County EMA | GA | Business Associate | 672 | Oct 22, 2014 | Theft | Archive (closed) |
| Cone Health Medical Group | NC | Healthcare Provider | 1,872 | Oct 15, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Graybill Medical Group | CA | Healthcare Provider | 1,863 | Oct 15, 2014 | Theft | Archive (closed) |
| City of Dallas Fire-Rescue Department | TX | Healthcare Provider | 1,000 | Oct 15, 2014 | Theft | Archive (closed) |
| Colorado Department of Health Care Policy & Financing | CO | Health Plan | 15,380 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| New York City Health & Hospitals Corporation | NY | Healthcare Provider | 10,058 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| M&M Computer Services | TX | Business Associate | 4,500 | Oct 10, 2014 | Hacking/IT Incident | Archive (closed) |
| NYU Urology Associates | NY | Healthcare Provider | 835 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Southwest Virginia Physicians for Women | VA | Healthcare Provider | 568 | Oct 10, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.