HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 145 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Paul G. Klein, DPM | NJ | Healthcare Provider | 2,500 | Oct 1, 2013 | Theft | Archive (closed) |
| HOPE Family Health | TN | Healthcare Provider | 6,932 | Sep 30, 2013 | Theft | Archive (closed) |
| Carol L Patrick Ph. D. | OH | Healthcare Provider | 517 | Sep 30, 2013 | Theft | Archive (closed) |
| Sarah Benjamin, DPM - Littleton Podiatry | CO | Healthcare Provider | 3,512 | Sep 28, 2013 | Theft | Archive (closed) |
| Comprehensive Podiatry LLC | OH | Healthcare Provider | 1,360 | Sep 27, 2013 | Theft | Archive (closed) |
| Santa Clara Valley Medical Center | CA | Healthcare Provider | 579 | Sep 27, 2013 | Theft | Archive (closed) |
| Region Ten Community Services Board | VA | Healthcare Provider | 10,228 | Sep 26, 2013 | Theft | Archive (closed) |
| Holy Cross Hospital, Inc. | FL | Healthcare Provider | 9,900 | Sep 24, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| InfoCrossing, Inc. | MO | Business Associate | 25,461 | Sep 20, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Sierra View District Hospital | CA | Healthcare Provider | 1,009 | Sep 20, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| South Shore Physicians, PC | NY | Healthcare Provider | 8,000 | Sep 16, 2013 | Theft | Archive (closed) |
| Dermatology Associates of Tallahassee | FL | Healthcare Provider | 915 | Sep 16, 2013 | Unknown | Archive (closed) |
| NHC HealthCare, Oak Ridge | TN | Healthcare Provider | 4,268 | Sep 13, 2013 | Loss | Archive (closed) |
| NHC HealthCare, Mauldin | SC | Healthcare Clearing House | 4,204 | Sep 13, 2013 | Improper Disposal | Archive (closed) |
| Advocate Health and Hospitals Corporation d/b/a Advocate Medical Group | IL | Business Associate | 2,029 | Sep 13, 2013 | Hacking/IT Incident | Archive (closed) |
| Dreyer Medical Clinic | IL | Business Associate | 998 | Sep 13, 2013 | Hacking/IT Incident | Archive (closed) |
| Dermatology Associates of Tallahassee | FL | Healthcare Provider | 915 | Sep 12, 2013 | Theft | Archive (closed) |
| PHMHS | PR | Business Associate | 5,000 | Sep 11, 2013 | Theft | Archive (closed) |
| Hankyu Chung, M.D. | CA | Healthcare Provider | 2,182 | Sep 6, 2013 | Theft | Archive (closed) |
| ICS Collection Service, Inc. | IL | Business Associate | 1,290 | Sep 6, 2013 | Hacking/IT Incident | Archive (closed) |
| Olson & White Orthodontics | MO | Healthcare Provider | 10,000 | Sep 3, 2013 | Theft | Archive (closed) |
| Janna Benkelman LPC LLC | CO | Healthcare Provider | 1,500 | Sep 3, 2013 | Theft | Archive (closed) |
| Kaiser Foundation Health Plan of the Northwest | OR | Health Plan | 647 | Sep 3, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Valperaiso Fire Department | IN | Health Plan | 0 | Sep 3, 2013 | Theft | Archive (closed) |
| Cogent Healthcare, Inc. | TN | Business Associate | 32,000 | Aug 30, 2013 | Theft | Archive (closed) |
| St. Anthony's Physician Organization | MO | Healthcare Provider | 2,600 | Aug 30, 2013 | Theft | Archive (closed) |
| Atlanta Center for Reproductive Medicine | GA | Healthcare Provider | 654 | Aug 30, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| UT Physicians | TX | Healthcare Provider | 596 | Aug 28, 2013 | Theft | Archive (closed) |
| Summit Community Care Clinic, Inc. | CO | Healthcare Provider | 921 | Aug 27, 2013 | Hacking/IT Incident | Archive (closed) |
| Advocate Health and Hospitals Corporation, d/b/a Advocate Medical Group | IL | Healthcare Provider | 4,029,530 | Aug 23, 2013 | Theft | Archive (closed) |
| Jackson Health System | FL | Healthcare Provider | 1,471 | Aug 22, 2013 | Loss | Archive (closed) |
| Elbowoods Memorial Health Center | ND | Health Plan | 10,000 | Aug 21, 2013 | Improper Disposal | Archive (closed) |
| North Texas Comprehensive Spine & Pain Center | TX | Healthcare Provider | 3,200 | Aug 19, 2013 | Loss, Theft | Archive (closed) |
| California Correctional Health Care Services | CA | Healthcare Provider | 1,033 | Aug 16, 2013 | Other | Archive (closed) |
| Foundations Recovery Network | TN | Healthcare Provider | 5,690 | Aug 15, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Anthem BCBS of GA | IN | Business Associate | 5,497 | Aug 13, 2013 | Theft | Archive (closed) |
| InfoCrossing, Inc. | MO | Business Associate | 1,357 | Aug 13, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Young Family Medicine Inc | OH | Healthcare Provider | 2,045 | Aug 12, 2013 | Theft | Archive (closed) |
| Hancock OB/GYN | IN | Healthcare Provider | 1,396 | Aug 12, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| M2ComSys Inc. | NV | Business Associate | 32,151 | Aug 8, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Resources of Arkansas | AR | Business Associate | 1,911 | Aug 5, 2013 | Theft | Archive (closed) |
| Baylor All Saints Medical Center at Fort Worth | TX | Healthcare Provider | 940 | Aug 5, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Vitreo-Retinal Medical Group, Inc. | CA | Healthcare Provider | 1,837 | Aug 2, 2013 | Theft | Archive (closed) |
| Missouri Department of Social Services | MO | Business Associate | 1,357 | Aug 2, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Rocky Mountain Spine Clinic | CO | Healthcare Provider | 532 | Jul 31, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| California Correctional Health Care Services, Privacy Manager Breach | CA | Healthcare Provider | 1,001 | Jul 30, 2013 | Unknown | Archive (closed) |
| Oregon Health & Science University | OR | Healthcare Provider | 1,361 | Jul 28, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Louisiana State University Health Care Services Division | LA | Healthcare Provider | 1,100 | Jul 25, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Louisiana State University Health Care Services Division | LA | Healthcare Provider | 6,994 | Jul 22, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| The Brookdale Hospital and Medical Center | NY | Healthcare Provider | 2,700 | Jul 20, 2013 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.