HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 142 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| St. Joseph Health System | TX | Business Associate | 3,300 | Mar 5, 2014 | Hacking/IT Incident | Archive (closed) |
| Eureka Internal Medicine | CA | Healthcare Provider | 3,534 | Mar 4, 2014 | Improper Disposal | Archive (closed) |
| Data Media | GA | Business Associate | 600 | Feb 28, 2014 | Other | Archive (closed) |
| Joseph Michael Benson M.D | TX | Healthcare Provider | 7,500 | Feb 27, 2014 | Theft | Archive (closed) |
| HealthSource of Ohio Inc. | OH | 8,845 | Feb 26, 2014 | Unauthorized Access/Disclosure | Archive (closed) | |
| Care Advantage, Inc. | VA | Healthcare Provider | 3,458 | Feb 26, 2014 | Theft | Archive (closed) |
| Cornerstone Health Care, PA | NC | Healthcare Provider | 548 | Feb 26, 2014 | Loss, Theft | Archive (closed) |
| The Kroger Co., for itself and its affiliates and subsidiaries | OH | Healthcare Provider | 504 | Feb 26, 2014 | Other | Archive (closed) |
| StayWell Health Management, LLC | MN | Business Associate | 1,511 | Feb 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Palo Verde Hospital, Privacy Manager Breach | CA | Healthcare Provider | 1,100 | Feb 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| StayWell Health Management, LLC | MN | Business Associate | 10,024 | Feb 21, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| StayWell Health Management, LLC | MN | Business Associate | 4,786 | Feb 21, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Inspira Health Network Inc. | NJ | Healthcare Provider | 1,411 | Feb 21, 2014 | Theft | Archive (closed) |
| StayWell Health Management, LLC | MN | Business Associate | 520 | Feb 21, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Vincent Hospital and Healthcare Inc | IN | Healthcare Provider | 1,142 | Feb 18, 2014 | Theft | Archive (closed) |
| UC Davis Medical Center, Privacy Manager Breach | CA | Healthcare Provider | 2,269 | Feb 14, 2014 | Hacking/IT Incident | Archive (closed) |
| Health Care Solutions at Home Inc. | OH | Health Plan | 1,139 | Feb 14, 2014 | Theft | Archive (closed) |
| Supportive Concepts for Families, Inc. | PA | Healthcare Provider | 593 | Feb 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Miami | FL | Healthcare Provider | 13,074 | Feb 12, 2014 | Loss | Archive (closed) |
| Lewis J. Sims, DPM, PC dba Sims and Associates Podiatry | NY | Healthcare Provider | 6,475 | Feb 12, 2014 | Other, Theft | Archive (closed) |
| WA State Department of Social & Health Services | WA | Health Plan | 3,104 | Feb 11, 2014 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Kmart Corporation | IL | Healthcare Provider | 16,446 | Feb 10, 2014 | Theft | Archive (closed) |
| Easter Seal Society of Superior California, Privacy Manager Breach | CA | Healthcare Provider | 3,026 | Feb 7, 2014 | Theft | Archive (closed) |
| PruittHealth Pharmacy Services | GA | Healthcare Provider | 841 | Feb 7, 2014 | Theft | Archive (closed) |
| St Joseph Health System | TX | Healthcare Provider | 405,000 | Feb 5, 2014 | Hacking/IT Incident | Archive (closed) |
| Min Yi, M.D. | CA | Healthcare Provider | 4,676 | Feb 5, 2014 | Theft | Archive (closed) |
| The University of Texas MD Anderson Cancer Center | TX | Healthcare Provider | 3,598 | Jan 31, 2014 | Loss | Archive (closed) |
| Beebe Medical Center | DE | Healthcare Provider | 1,883 | Jan 31, 2014 | Other | Archive (closed) |
| Presence Health | IL | Healthcare Provider | 836 | Jan 31, 2014 | Loss | Archive (closed) |
| University of Wisconsin-Madison School of Pharmacy | WI | Business Associate | 41,437 | Jan 30, 2014 | Loss | Archive (closed) |
| Medical Mutual of Ohio | OH | Business Associate | 1,420 | Jan 27, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Triple-S Salud, Inc. - Breach Case#2 | PR | Health Plan | 398,000 | Jan 24, 2014 | Theft | Archive (closed) |
| Triple-C, Inc. | PR | Business Associate | 8,000 | Jan 24, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Birmingham Printing and Publishing, Inc dba Paper Airplane | AL | Business Associate | 1,085 | Jan 24, 2014 | Other | Archive (closed) |
| Robert B. Neves, M.D. | CA | Business Associate | 611 | Jan 24, 2014 | Theft | Archive (closed) |
| Geisinger Bloomsburg Hospital | PA | Healthcare Provider | 3,101 | Jan 23, 2014 | Loss | Archive (closed) |
| The Brooklyn Hospital Center | NY | Healthcare Provider | 2,172 | Jan 22, 2014 | Theft | Archive (closed) |
| COMPLETE MEDICAL HOMECARE | KS | Healthcare Provider | 1,700 | Jan 21, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospital for Special Surgery | NY | Healthcare Provider | 937 | Jan 21, 2014 | Theft | Archive (closed) |
| Health Dimensions | MI | Healthcare Provider | 5,370 | Jan 16, 2014 | Theft | Archive (closed) |
| Sentara Healthcare | VA | Healthcare Provider | 3,861 | Jan 16, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Saint Francis Hospital and Medical Center | CT | Healthcare Provider | 858 | Jan 16, 2014 | Theft | Archive (closed) |
| Alamo Consumer Direct, LLC | TX | Healthcare Provider | 520 | Jan 16, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Network Pharmacy Knoxville | TN | Healthcare Provider | 9,602 | Jan 15, 2014 | Theft | Archive (closed) |
| Tri Lakes Medical Center | MS | Healthcare Provider | 1,489 | Jan 15, 2014 | Hacking/IT Incident | Archive (closed) |
| RGH Enterprises, Inc. | OH | Health Plan | 4,230 | Jan 13, 2014 | Theft | Archive (closed) |
| Southwest General Health Center | OH | Healthcare Provider | 953 | Jan 13, 2014 | Unknown | Archive (closed) |
| Riverside Medical Group | VA | Healthcare Provider | 919 | Jan 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Temple Physicians Inc. | PA | Healthcare Provider | 694 | Jan 13, 2014 | Loss, Theft | Archive (closed) |
| Cook County Health & Hospitals System | IL | Healthcare Provider | 22,511 | Jan 11, 2014 | Other | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.