Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 139 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Tri-City Medical CenterCAHealthcare Provider500Aug 18, 2014TheftArchive (closed)
State of Tennessee State Insurance PlanTNHealth Plan60,582Aug 15, 2014Hacking/IT IncidentArchive (closed)
Iron MountainCABusiness Associate49,714Aug 15, 2014Improper Disposal, Loss, TheftArchive (closed)
24 ON Physicians PCGABusiness Associate10,104Aug 15, 2014Hacking/IT IncidentArchive (closed)
Iron Mountain IncorporatedMABusiness Associate10,000Aug 15, 2014Loss, TheftArchive (closed)
University HealthLAHealthcare Provider6,073Aug 15, 2014Hacking/IT IncidentArchive (closed)
Children's Mercy HospitalMOBusiness Associate4,067Aug 15, 2014Hacking/IT IncidentArchive (closed)
24 ON Physicians, PC/In Compass Health,Inc.GABusiness Associate520Aug 14, 2014Hacking/IT Incident, OtherArchive (closed)
Iron Mountain Records ManagementCABusiness Associate1,674Aug 13, 2014Improper Disposal, Loss, TheftArchive (closed)
CareAll Management, LLCTNHealthcare Provider28,300Aug 12, 2014Improper DisposalArchive (closed)
Kaiser Foundation Health Plan of ColoradoCOHealth Plan11,551Aug 12, 2014Other, Unauthorized Access/DisclosureArchive (closed)
Apple Valley Care CenterCAHealthcare Provider1,251Aug 12, 2014Hacking/IT IncidentArchive (closed)
Onsite Health Diagnostics (OHD)TXBusiness Associate60,582Aug 8, 2014Hacking/IT IncidentArchive (closed)
PST Services Inc, a McKesson Co.GABusiness Associate10,104Aug 8, 2014Hacking/IT IncidentArchive (closed)
Jersey City Medical CenterNJHealthcare Provider36,400Aug 7, 2014LossArchive (closed)
Central Utah ClinicUTHealthcare Provider31,677Aug 7, 2014Hacking/IT IncidentArchive (closed)
Diamond Computing CompanyGABusiness Associate7,016Aug 7, 2014Unauthorized Access/DisclosureArchive (closed)
MobilexUSAOHHealthcare Provider605Aug 6, 2014LossArchive (closed)
StayWell Health Management, LLCMNBusiness Associate4,487Jul 31, 2014Hacking/IT IncidentArchive (closed)
Cancer Specialists of TidewaterVAHealthcare Provider2,318Jul 31, 2014TheftArchive (closed)
Midwest Urological GroupILHealthcare Provider982Jul 30, 2014TheftArchive (closed)
Rite Aid Store 5256WAHealthcare Provider522Jul 30, 2014TheftArchive (closed)
PRN Medical Services, LLC dba Symbius Medical, LLCAZHealthcare Provider13,877Jul 29, 2014Other, Theft, Unauthorized Access/DisclosureArchive (closed)
Dr. Veronica Joann BarberCABusiness Associate4,000Jul 28, 2014Unauthorized Access/DisclosureArchive (closed)
Self Regional HealthcareSCHealthcare Provider38,906Jul 25, 2014TheftArchive (closed)
Urological Associates of Southern Arizona, P.C.AZHealthcare Provider3,529Jul 25, 2014Improper DisposalArchive (closed)
BioReference Laboratories IncNJ3,334Jul 23, 2014Unauthorized Access/DisclosureArchive (closed)
Midwest Orthopaedic Center SCILBusiness Associate680Jul 23, 2014Unauthorized Access/DisclosureArchive (closed)
Administracion de Seguros de Salud - Triple S Salud Inc (BA)PRHealth Plan7,911Jul 18, 2014Unauthorized Access/DisclosureArchive (closed)
Minneapolis VA Health Care SystemMNHealth Plan500Jul 17, 2014Unauthorized Access/DisclosureArchive (closed)
Bay Area Pain Medical AssociatesCAHealthcare Provider2,780Jul 16, 2014TheftArchive (closed)
University of Pennsylvania Health SystemPAHealthcare Provider661Jul 16, 2014TheftArchive (closed)
Indian Health Service -RosebudMDHealthcare Provider620Jul 15, 2014LossArchive (closed)
Western Regional Center for Brain and Spine SurgeryNVHealthcare Provider12,000Jul 12, 2014TheftArchive (closed)
InSync Computer Solutions, Inc.ALBusiness Associate50,918Jul 11, 2014OtherArchive (closed)
St. Vincent Hospital and Health Care Center, Inc.INBusiness Associate63,325Jul 9, 2014Unauthorized Access/DisclosureArchive (closed)
Haley Chiropractic ClinicWAHealthcare Provider6,000Jul 8, 2014TheftArchive (closed)
Highmark Inc.PABusiness Associate2,589Jul 8, 2014TheftArchive (closed)
Montana Department of Public Health & Human ServicesMTHealth Plan1,062,509Jul 7, 2014Hacking/IT IncidentArchive (closed)
D&J Optical Inc.ALHealth Plan1,100Jul 7, 2014Hacking/IT IncidentArchive (closed)
VA Long Beach Healthcare SystemCAHealthcare Provider592Jul 4, 2014Unauthorized Access/DisclosureArchive (closed)
The Union Labor Life Insurance CompanyMDHealthcare Provider42,713Jun 27, 2014TheftArchive (closed)
Alabama Department of Public HealthALHealthcare Provider1,200Jun 26, 2014TheftArchive (closed)
Rady Children's Hospital - San DiegoCAHealthcare Provider6,307Jun 25, 2014Unauthorized Access/DisclosureArchive (closed)
Rady Children's Hospital - San DiegoCAHealthcare Provider14,121Jun 24, 2014Unauthorized Access/DisclosureArchive (closed)
Sloane Stecker Physical Therapy, PCNYHealthcare Provider2,000Jun 24, 2014TheftArchive (closed)
Riverside County Regional Medical CenterCAHealthcare Provider563Jun 24, 2014TheftArchive (closed)
Colorado Neurodiagnostics, PLLCCOHealthcare Provider750Jun 23, 2014TheftArchive (closed)
NRAD Medical Associates, P.C.NYHealthcare Provider97,000Jun 20, 2014Hacking/IT Incident, Unauthorized Access/DisclosureArchive (closed)
Abrham Tekola, M.D.,INCCAHealthcare Provider5,471Jun 20, 2014TheftArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.