HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 138 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| South Texas Veterans Health Care System | TX | Healthcare Provider | 4,000 | Oct 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Region Six of the Georgia Department of Behavioral Health and Developmental Disabilities | GA | Healthcare Provider | 3,397 | Oct 9, 2014 | Theft | Archive (closed) |
| Cone Health Medical Group | NC | Healthcare Provider | 1,872 | Oct 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| UC Davis Medical Center, Privacy Manager Breach | CA | Healthcare Provider | 1,326 | Oct 8, 2014 | Hacking/IT Incident | Archive (closed) |
| vonica chau DDS PA | TX | Healthcare Provider | 810 | Oct 8, 2014 | Theft | Archive (closed) |
| VARO Healthcare | PA | Business Associate | 1,667 | Oct 7, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Albertina Kerr Centers | OR | Healthcare Provider | 1,320 | Oct 6, 2014 | Theft | Archive (closed) |
| Vcarve LLC d/b/a MD Manage | NJ | Business Associate | 585 | Oct 6, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Touchstone Medical Imaging, LLC | TN | Healthcare Provider | 307,528 | Oct 3, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Mount Sinai Beth Israel | NY | Healthcare Provider | 10,793 | Oct 3, 2014 | Theft | Archive (closed) |
| U.S. Health Holdings, Ltd. o/b/o Macomb County, Michigan | MI | Health Plan | 6,302 | Oct 1, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| American Family Care, Inc. | AL | Healthcare Provider | 2,588 | Sep 30, 2014 | Theft | Archive (closed) |
| Compassionate Care Hospice of Central Louisiana, LLC | LA | Healthcare Provider | 707 | Sep 26, 2014 | Theft | Archive (closed) |
| Madison Street Provider Network | CO | Healthcare Provider | 523 | Sep 26, 2014 | Theft | Archive (closed) |
| Owensboro Medical Practice, PLLC | KY | Healthcare Provider | 4,077 | Sep 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Research Integrity, LLC | KY | Business Associate | 4,077 | Sep 22, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| New Mexico VA Health Care System | NM | Healthcare Provider | 2,657 | Sep 18, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| South Suburban HIV/AIDS Regional Clinics | IL | Business Associate | 767 | Sep 17, 2014 | Other | Archive (closed) |
| Cook County Health and Hospitals System | IL | Healthcare Provider | 767 | Sep 15, 2014 | Hacking/IT Incident | Archive (closed) |
| Santa Fe Medical Group | NM | Healthcare Provider | 843 | Sep 12, 2014 | Theft | Archive (closed) |
| Emdeon | TN | Business Associate | 800 | Sep 12, 2014 | Theft | Archive (closed) |
| Tampa General Hospital | FL | Healthcare Provider | 675 | Sep 12, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Aventura Hospital and Medical Center | FL | Healthcare Provider | 82,601 | Sep 11, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Xerox State Healthcare, LLC | TX | Business Associate | 2,000,000 | Sep 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Cedars-Sinai Health System | CA | Healthcare Provider | 33,136 | Sep 10, 2014 | Theft | Archive (closed) |
| Wm. Jennings Bryan Dorn VA Medical Center | SC | Healthcare Provider | 3,637 | Sep 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Kmart Corporation | IL | Healthcare Provider | 1,866 | Sep 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Valesco Ventures | FL | Business Associate | 82,601 | Sep 9, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Thomas Cristello, Chiropractor PC | NY | Healthcare Provider | 914 | Sep 9, 2014 | Loss | Archive (closed) |
| ENT Partners of Texas (legally known as Irving-Coppell Ear, Nose and Throat) | TX | Healthcare Provider | 789 | Sep 9, 2014 | Loss, Theft | Archive (closed) |
| Bon Secours Kentucky | KY | Healthcare Provider | 697 | Sep 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| The WellPoint Affiliated Covered Entities | IN | Health Plan | 1,464 | Sep 8, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Temple University Physicians | PA | Healthcare Provider | 3,780 | Sep 5, 2014 | Theft | Archive (closed) |
| Bulloch Pediatric Group, LLC | GA | Healthcare Provider | 10,000 | Sep 4, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Emdeon | TN | Business Associate | 566 | Sep 4, 2014 | Theft | Archive (closed) |
| Duke University Health System | NC | Healthcare Provider | 10,993 | Aug 29, 2014 | Theft | Archive (closed) |
| Memorial Hermann Health System | TX | Healthcare Provider | 10,604 | Aug 29, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| AltaMed Health Services Corporation | CA | Healthcare Provider | 3,206 | Aug 29, 2014 | Theft | Archive (closed) |
| Metropolitan Government of Nashville and Davidson County (Metro) Public Health Department | TN | Health Plan | 1,717 | Aug 29, 2014 | Other | Archive (closed) |
| The Longstreet Clinic, P. C. | GA | Healthcare Provider | 720 | Aug 28, 2014 | Improper Disposal | Archive (closed) |
| Group Health Incorporated | NY | Health Plan | 802 | Aug 27, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Midwest Womens Healthcare Specialist | MO | Healthcare Provider | 1,376 | Aug 26, 2014 | Improper Disposal | Archive (closed) |
| Aventura Hospital and Medical Center | FL | Healthcare Provider | 948 | Aug 26, 2014 | Theft | Archive (closed) |
| St. Elizabeth's Medical Center | MA | Healthcare Provider | 595 | Aug 26, 2014 | Theft | Archive (closed) |
| Specialty Clinics Of Georgia - Orthopaedics | GA | Healthcare Provider | 2,350 | Aug 25, 2014 | Theft | Archive (closed) |
| Steven A. Goldman, MD Inc. | OH | Healthcare Provider | 6,141 | Aug 22, 2014 | Theft | Archive (closed) |
| Oklahoma City Indian Clinic | OK | Healthcare Provider | 6,000 | Aug 22, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Health Systems Professional Services Corporations | TN | Healthcare Provider | 6,121,158 | Aug 21, 2014 | Hacking/IT Incident | Archive (closed) |
| Community Health Systems Professional Services Corporation | TN | Business Associate | 4,500,000 | Aug 20, 2014 | Theft | Archive (closed) |
| Dennis Flynn MD | IL | Healthcare Provider | 13,646 | Aug 19, 2014 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.