HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 146 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Rite Aid #2255 | WV | Health Plan | 948 | Jul 19, 2013 | Other | Archive (closed) |
| GEO Care, LLC | FL | Healthcare Provider | 710 | Jul 19, 2013 | Theft | Archive (closed) |
| Jesle Kuizon | CA | Business Associate | 800 | Jul 18, 2013 | Hacking/IT Incident, Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Harris County | TX | Health Plan | 21,000 | Jul 16, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Sheet Metal Local 36 Welfare Fund | MO | Business Associate | 4,560 | Jul 15, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Illinois Department of Healthcare and Family Services | IL | Healthcare Provider | 3,133 | Jul 15, 2013 | Hacking/IT Incident | Archive (closed) |
| Hansen and Associates, Inc. | WY | Business Associate | 2,700 | Jul 15, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Shred-it International Inc. | TX | Business Associate | 277,014 | Jul 11, 2013 | Improper Disposal | Archive (closed) |
| Long Beach Memorial Medical Center | CA | Healthcare Provider | 2,864 | Jul 11, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| ZDI | CA | Business Associate | 4,718 | Jul 10, 2013 | Loss | Archive (closed) |
| Medtronic, Inc. | MN | Healthcare Provider | 2,764 | Jul 10, 2013 | Theft | Archive (closed) |
| Children's Medical Center of Dallas | TX | Healthcare Provider | 2,462 | Jul 10, 2013 | Theft | Archive (closed) |
| Family Health Network | IL | Business Associate | 3,133 | Jul 8, 2013 | Other | Archive (closed) |
| Sutter Health East Bay Region | CA | Healthcare Provider | 4,479 | Jul 5, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| MED-EL Coproration | NC | Healthcare Provider | 609 | Jul 5, 2013 | Other | Archive (closed) |
| Samaritan Regional Health System | OH | Healthcare Provider | 2,203 | Jul 3, 2013 | Theft | Archive (closed) |
| South Florida Neurology Associates, P.A. | FL | Healthcare Provider | 900 | Jul 3, 2013 | Theft | Archive (closed) |
| Health Net, Inc. | CA | Health Plan | 8,331 | Jul 2, 2013 | Other | Archive (closed) |
| CVS Caremark | AZ | Business Associate | 4,305 | Jul 2, 2013 | Theft | Archive (closed) |
| RCR Technology Corporation | IN | Business Associate | 187,533 | Jul 1, 2013 | Other | Archive (closed) |
| Lone Star Circle of Care | TX | Healthcare Provider | 1,955 | Jun 28, 2013 | Theft | Archive (closed) |
| Alberto Gerardo Vazquez Rivera | PR | Business Associate | 679 | Jun 28, 2013 | Theft | Archive (closed) |
| Iowa Department of Human Services | IA | Healthcare Provider | 7,335 | Jun 26, 2013 | Loss, Unknown | Archive (closed) |
| James A. Fosnaugh | NE | Healthcare Provider | 2,125 | Jun 26, 2013 | Loss | Archive (closed) |
| Jacksonville Spine Center | FL | Healthcare Provider | 5,200 | Jun 24, 2013 | Theft | Archive (closed) |
| Gulf Breeze Family Eyecare, Inc | FL | Healthcare Provider | 9,626 | Jun 17, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Union Security Insurance Company | MO | Health Plan | 1,127 | Jun 17, 2013 | Improper Disposal | Archive (closed) |
| Fayetteville VAMC | NC | Healthcare Provider | 1,093 | Jun 14, 2013 | Theft | Archive (closed) |
| Lincoln County Health and Human Services/Lincoln Community Health Center | OR | Healthcare Provider | 959 | Jun 14, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Lucile Packard Childrens Hospital, Privacy Manager Breach | CA | Healthcare Provider | 12,900 | Jun 13, 2013 | Theft | Archive (closed) |
| Palm Beach County Health Department | FL | Healthcare Provider | 877 | Jun 11, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| UMASSAmherst | MA | Healthcare Provider | 1,670 | Jun 5, 2013 | Hacking/IT Incident | Archive (closed) |
| Community Support Services, Inc. | OH | Healthcare Provider | 1,167 | Jun 3, 2013 | Theft | Archive (closed) |
| University of Florida | FL | Healthcare Provider | 5,875 | May 30, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Bon Secours Mary Immaculate Hospital | VA | Healthcare Provider | 5,764 | May 29, 2013 | Theft | Archive (closed) |
| SynerMed / Inland Valleys IPA | CA | Business Associate | 3,164 | May 24, 2013 | Theft | Archive (closed) |
| Independence Care System | NY | Healthcare Provider | 2,434 | May 24, 2013 | Theft | Archive (closed) |
| Sonoma Valley Hospital | CA | Healthcare Provider | 1,386 | May 24, 2013 | Other | Archive (closed) |
| Health Resources of Arkansas | AR | Healthcare Provider | 1,900 | May 23, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Erskine Family Dentistry | IN | Healthcare Provider | 2,723 | May 21, 2013 | Hacking/IT Incident | Archive (closed) |
| City of Norwood | OH | Healthcare Provider | 9,577 | May 20, 2013 | Loss | Archive (closed) |
| Lutheran Social Services of South Central Pennsylvania | PA | Healthcare Provider | 7,803 | May 20, 2013 | Hacking/IT Incident | Archive (closed) |
| Just the Connection Inc | IN | Business Associate | 5,388 | May 20, 2013 | Improper Disposal | Archive (closed) |
| Dent Neurologic Institute | NY | Healthcare Provider | 10,000 | May 14, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Indiana University Health Arnett | IN | Healthcare Provider | 10,350 | May 13, 2013 | Theft | Archive (closed) |
| E-dreamz, Inc. | NC | Business Associate | 1,924 | May 10, 2013 | Hacking/IT Incident | Archive (closed) |
| E-dreamz, Inc. | NC | Business Associate | 9,988 | May 8, 2013 | Hacking/IT Incident | Archive (closed) |
| North Atlantic Telecom, Inc. | TN | Business Associate | 539 | May 8, 2013 | Other | Archive (closed) |
| Digital Archive Management | TX | Business Associate | 189,489 | May 7, 2013 | Improper Disposal | Archive (closed) |
| AssuranceMD f/k/a Harbor Group | PA | Business Associate | 22,000 | May 7, 2013 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.