HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 140 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| NYU Hospitals Center | NY | Healthcare Provider | 872 | Jun 20, 2014 | Theft | Archive (closed) |
| David DiGiallorenzo, D.M.D. | PA | Healthcare Provider | 11,000 | Jun 19, 2014 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| IHS | MD | Health Plan | 620 | Jun 19, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Group Health Plan of Hurley Medical Center | MI | Health Plan | 2,289 | Jun 16, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Santa Rosa Memorial Hospital, Privacy Manager Breach | CA | Healthcare Provider | 33,702 | Jun 13, 2014 | Theft | Archive (closed) |
| Baylor Medical Center at Carrollton | TX | Healthcare Provider | 2,874 | Jun 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Doctors First Choice Billings, Inc. | FL | Business Associate | 1,831 | Jun 12, 2014 | Hacking/IT Incident | Archive (closed) |
| Doctors First Choice Billings, Inc | FL | Business Associate | 9,255 | Jun 11, 2014 | Theft | Archive (closed) |
| St. Francis Hospital | GA | Healthcare Provider | 1,175 | Jun 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Mark A. Gillispie | CA | Healthcare Provider | 5,845 | Jun 6, 2014 | Theft | Archive (closed) |
| Penn State Milton S. Hershey Medical Center | PA | Healthcare Provider | 1,801 | Jun 6, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 540 | Jun 6, 2014 | Theft | Archive (closed) |
| Salina Health Education dba Salina Healthcare Center | KS | Healthcare Provider | 9,640 | Jun 5, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Open Cities Health Center | MN | Healthcare Provider | 1,304 | Jun 5, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| NFP Maschino, Hudelson & Associates | OK | Business Associate | 3,814 | May 30, 2014 | Theft | Archive (closed) |
| Triple-S Salud | PR | Health Plan | 56,853 | May 29, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Bay Park Hospital | OH | Healthcare Provider | 594 | May 28, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Jamaica Hospital Medical Center | NY | Healthcare Provider | 26,162 | May 23, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc [case #15381] | KY | Health Plan | 2,962 | May 23, 2014 | Theft | Archive (closed) |
| Sutherland Healthcare Solutions, Inc. | NJ | Business Associate | 342,197 | May 22, 2014 | Theft | Archive (closed) |
| Elliot Health System | NH | Healthcare Provider | 1,208 | May 21, 2014 | Theft | Archive (closed) |
| Central City Concern | OR | Healthcare Provider | 17,914 | May 19, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross Blue Shield of Michigan Blue Care Network | MI | Business Associate | 502 | May 19, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| American Health Inc. | PR | Health Plan | 11,531 | May 18, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare of New Mexico, Inc. | NM | Business Associate | 4,744 | May 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Howard L. Weinstein D.P.M. | TX | Healthcare Provider | 1,000 | May 10, 2014 | Theft | Archive (closed) |
| Options Counseling Center | NJ | Healthcare Provider | 2,828 | May 9, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| KEYSTONE INSURERS GROUP | IN | Business Associate | 1,008 | May 6, 2014 | Other | Archive (closed) |
| Porter, MD, Steven | UT | Healthcare Provider | 500 | May 6, 2014 | Improper Disposal | Archive (closed) |
| UMass Memorial Medical Center | MA | Healthcare Provider | 2,387 | May 5, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| OptumRx | IL | Business Associate | 5,696 | Apr 30, 2014 | Theft | Archive (closed) |
| Boston Medical Center | MA | 15,265 | Apr 29, 2014 | Unauthorized Access/Disclosure | Archive (closed) | |
| Reading Health System | PA | Healthcare Provider | 1,845 | Apr 29, 2014 | Loss | Archive (closed) |
| HealthTexas Provider Network | TX | Healthcare Provider | 2,742 | Apr 25, 2014 | Hacking/IT Incident | Archive (closed) |
| Baylor Medical Center at Irving | TX | Healthcare Provider | 2,308 | Apr 25, 2014 | Hacking/IT Incident | Archive (closed) |
| Baylor Regional Medical Center at Plano | TX | Healthcare Provider | 1,981 | Apr 25, 2014 | Hacking/IT Incident | Archive (closed) |
| Ferguson Advertising, Inc. | IN | Business Associate | 1,361 | Apr 25, 2014 | Hacking/IT Incident | Archive (closed) |
| Baylor Medical Center at McKinney | TX | Healthcare Provider | 1,253 | Apr 25, 2014 | Hacking/IT Incident | Archive (closed) |
| Iowa Medicaid Enterprise | IA | Health Plan | 862 | Apr 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Flowers Hospital | AL | Healthcare Provider | 629 | Apr 25, 2014 | Theft | Archive (closed) |
| Sorenson Communications/CaptionCall Group Health Plan | UT | Health Plan | 9,800 | Apr 24, 2014 | Hacking/IT Incident | Archive (closed) |
| Tufts Associated Health Maintenance Organization, Inc. and Tufts Insurance Company | MA | Health Plan | 8,830 | Apr 24, 2014 | Theft | Archive (closed) |
| Willis North America Inc. Medical Expense Benefit Plan | NY | Health Plan | 4,830 | Apr 24, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Inclusion Research Institute | DC | Business Associate | 2,200 | Apr 24, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Ladies First Choice, Inc. | FL | Healthcare Provider | 2,365 | Apr 23, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Centura Health | CO | Healthcare Provider | 12,286 | Apr 22, 2014 | Hacking/IT Incident | Archive (closed) |
| Larsen Dental Care LLC | ID | Healthcare Provider | 6,900 | Apr 18, 2014 | Theft | Archive (closed) |
| VGM Homelink | IA | Business Associate | 1,400 | Apr 18, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Shaker Clinic | OH | Healthcare Provider | 617 | Apr 18, 2014 | Loss | Archive (closed) |
| Service Coordination, Inc. | MD | Business Associate | 10,766 | Apr 17, 2014 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.