HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 143 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Virginia Premier Health Plan (VPHP) | VA | Business Associate | 25,513 | Jan 10, 2014 | Theft | Archive (closed) |
| Tri Lakes Medical Center | MS | Healthcare Provider | 1,489 | Jan 10, 2014 | Hacking/IT Incident | Archive (closed) |
| 101 Family Medical Group, Privacy Manager Breach | CA | Business Associate | 2,500 | Jan 8, 2014 | Theft | Archive (closed) |
| North Carolina Department of Health and Human Services | NC | Healthcare Provider | 48,752 | Jan 7, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Phoebe Putney Memorial Hospital | GA | Healthcare Provider | 12,937 | Jan 7, 2014 | Theft | Archive (closed) |
| North Carolina Department of Health and Human Services | NC | Health Plan | 48,752 | Jan 6, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| RevSpring, Inc. | MI | Business Associate | 3,000 | Jan 6, 2014 | Other | Archive (closed) |
| Horizon Healthcare Services, Inc., doing business as Horizon Blue Cross Blue Shield of New Jersey, and its affiliates | NJ | Business Associate | 839,711 | Jan 3, 2014 | Theft | Archive (closed) |
| Phoebe Putney Memorial Hospital | GA | Healthcare Provider | 6,989 | Jan 3, 2014 | Loss | Archive (closed) |
| Coulee Medical Center | WA | Healthcare Provider | 2,500 | Jan 3, 2014 | Theft | Archive (closed) |
| Colorado Community Health Alliance (CCHA)/Physicians Health Partners | CO | Business Associate | 1,918 | Jan 2, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Houston Methodist Hospital | TX | Healthcare Provider | 1,341 | Jan 2, 2014 | Theft | Archive (closed) |
| New Mexico Oncology Hematology Consultants, LTD | NM | Healthcare Provider | 12,354 | Dec 31, 2013 | Theft | Archive (closed) |
| Barry University | FL | Healthcare Provider | 9,017 | Dec 31, 2013 | Hacking/IT Incident | Archive (closed) |
| Florida Department of Health | FL | Healthcare Provider | 2,354 | Dec 23, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Tranquility Counseling Services | NC | Healthcare Provider | 1,683 | Dec 23, 2013 | Other | Archive (closed) |
| Rob Meaglia, DDS | CA | Healthcare Provider | 1,400 | Dec 23, 2013 | Theft | Archive (closed) |
| Jeff Spiegel | MA | Healthcare Provider | 832 | Dec 23, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare of Texas, Inc. | TX | Health Plan | 2,826 | Dec 21, 2013 | Other | Archive (closed) |
| ZDI | CA | Business Associate | 1,674 | Dec 20, 2013 | Loss | Archive (closed) |
| Wyoming Department of Health | WY | Health Plan | 11,935 | Dec 19, 2013 | Hacking/IT Incident | Archive (closed) |
| Colby DeHart | TN | Business Associate | 2,777 | Dec 19, 2013 | Theft | Archive (closed) |
| DeLoach & Williamson | SC | Business Associate | 3,432 | Dec 18, 2013 | Theft | Archive (closed) |
| Walla Walla VA Medical Center | WA | Healthcare Provider | 1,519 | Dec 18, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Shiloh Medical Clinic | MT | Healthcare Provider | 1,900 | Dec 17, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Wyoming Department of Health | WY | Health Plan | 11,935 | Dec 16, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare In | CA | Business Associate | 1,499 | Dec 16, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Mosaic | NE | Healthcare Provider | 3,857 | Dec 11, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| L.A. Gay & Lesbian Center | CA | Healthcare Provider | 59,000 | Dec 10, 2013 | Hacking/IT Incident | Archive (closed) |
| Northside Hospital, Inc. | GA | Healthcare Provider | 4,879 | Dec 10, 2013 | Loss | Archive (closed) |
| Health Help, Inc. | KY | Healthcare Provider | 535 | Dec 10, 2013 | Theft | Archive (closed) |
| Florida Digestive Health Specialists | FL | Healthcare Provider | 4,400 | Dec 9, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Methodist Dallas Medical Center | TX | Healthcare Provider | 44,000 | Dec 6, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 17,350 | Dec 6, 2013 | Other | Archive (closed) |
| The Good Samaritan Health Center | GA | Healthcare Provider | 5,000 | Dec 6, 2013 | Hacking/IT Incident | Archive (closed) |
| PruittHealth Corporation | GA | Healthcare Provider | 4,500 | Dec 6, 2013 | Theft | Archive (closed) |
| SIU HealthCare | IL | Healthcare Provider | 1,891 | Dec 6, 2013 | Loss, Theft | Archive (closed) |
| Quality Health Claims Consultants, LLC | IL | Business Associate | 1,573 | Dec 6, 2013 | Theft | Archive (closed) |
| Medical Mutual of Ohio | OH | Health Plan | 643 | Dec 6, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| American Anesthesiology, Inc. | FL | Healthcare Provider | 1,000 | Dec 4, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Chicago | IL | Healthcare Provider | 2,080 | Nov 29, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| UW Medicine, Privacy Manager - Breach | WA | Healthcare Provider | 76,183 | Nov 27, 2013 | Hacking/IT Incident | Archive (closed) |
| UPMC | PA | Healthcare Provider | 1,279 | Nov 27, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Molina Healthcare of Texas, Inc. | TX | Health Plan | 2,826 | Nov 26, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Jones Chiropractic and Maximum Health | IN | Healthcare Provider | 1,500 | Nov 26, 2013 | Theft | Archive (closed) |
| Ronald Schubert MD PLLC | WA | Healthcare Provider | 950 | Nov 26, 2013 | Theft | Archive (closed) |
| Kaiser Foundation Hospital- Orange County | CA | Healthcare Provider | 49,000 | Nov 22, 2013 | Loss | Archive (closed) |
| New Jersey Department of Human Services | NJ | Health Plan | 9,825 | Nov 22, 2013 | Loss | Archive (closed) |
| University of California, San Francisco | CA | Healthcare Provider | 8,294 | Nov 22, 2013 | Theft | Archive (closed) |
| Redwood Memorial Hospital | CA | Healthcare Provider | 1,039 | Nov 19, 2013 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.