HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 147 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Regional Medical Center | TN | Healthcare Provider | 1,180 | May 7, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Seattle - King County Department of Public Health | WA | Healthcare Provider | 750 | May 7, 2013 | Improper Disposal | Archive (closed) |
| University of Rochester Medical Center & Affiliates | NY | Healthcare Provider | 537 | May 6, 2013 | Loss | Archive (closed) |
| Wood County Hospital | OH | Healthcare Provider | 2,500 | May 3, 2013 | Theft | Archive (closed) |
| Arizona Counseling & Treatment Services, LLC | AZ | Healthcare Provider | 3,800 | May 1, 2013 | Theft | Archive (closed) |
| Laboratory Corporation of America | NC | Healthcare Provider | 1,580 | May 1, 2013 | Theft | Archive (closed) |
| Raleigh Orthopaedic Clinic | NC | Healthcare Provider | 17,300 | Apr 30, 2013 | Improper Disposal, Theft, Unauthorized Access/Disclosure | Archive (closed) |
| ZDI | CA | Business Associate | 14,829 | Apr 29, 2013 | Loss | Archive (closed) |
| IHC Health Services, Inc. dba Intermountain Life Flight | UT | Healthcare Provider | 857 | Apr 26, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Valley Mental Health | UT | Healthcare Provider | 700 | Apr 26, 2013 | Theft | Archive (closed) |
| Hope Hospice | TX | Healthcare Provider | 818 | Apr 25, 2013 | Other | Archive (closed) |
| The Guidance Center of Westchester | NY | Healthcare Provider | 1,416 | Apr 17, 2013 | Theft | Archive (closed) |
| Schneck Medical Center | IN | Healthcare Provider | 3,131 | Apr 12, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Oregon Health & Science University | OR | Healthcare Provider | 1,076 | Apr 11, 2013 | Theft | Archive (closed) |
| John J. Pershing VA Medical Center | MO | Healthcare Provider | 589 | Apr 11, 2013 | Theft | Archive (closed) |
| Wm. Jennings Bryan Dorn VAMC | SC | Healthcare Provider | 7,405 | Apr 10, 2013 | Theft | Archive (closed) |
| TMG Health | PA | Business Associate | 3,794 | Apr 5, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Care, P.L.L.C. | TX | Healthcare Provider | 554 | Apr 5, 2013 | Theft | Archive (closed) |
| Hospice and Palliative Care Center of Alamance Caswell | NC | Healthcare Provider | 5,370 | Apr 4, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| PORTAL HEALTHCARE SOLUTIONS LLC | VA | Business Associate | 2,360 | Apr 4, 2013 | Theft | Archive (closed) |
| University of Florida | FL | Healthcare Provider | 14,519 | Apr 3, 2013 | Other, Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Kmart Corporation | IL | Healthcare Provider | 12,542 | Apr 3, 2013 | Theft | Archive (closed) |
| Shands Jacksonville Medical Center, Inc. | FL | Healthcare Provider | 1,025 | Apr 2, 2013 | Theft | Archive (closed) |
| QuickRunner, Inc. (dba, RoadRunner Mailing Services) | CA | Business Associate | 2,400 | Mar 29, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Rite Aid #10217 | RI | Healthcare Provider | 2,082 | Mar 29, 2013 | Other, Unknown | Archive (closed) |
| Sunil Kakar, Psy.D. | WA | Business Associate | 629 | Mar 29, 2013 | Theft | Archive (closed) |
| Oregon Health & Science University | OR | Healthcare Provider | 1,114 | Mar 26, 2013 | Theft | Archive (closed) |
| Granger Medical Clinic | UT | Healthcare Provider | 2,600 | Mar 22, 2013 | Loss, Other, Theft | Archive (closed) |
| Texas Tech Unversity Health Sciences Center | TX | Healthcare Provider | 697 | Mar 22, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Mississippi Medical Center | MS | Healthcare Provider | 500 | Mar 21, 2013 | Loss | Archive (closed) |
| HealthCare for Women, Inc. | MA | Healthcare Provider | 8,727 | Mar 20, 2013 | Hacking/IT Incident | Archive (closed) |
| M&C Children's Clinic PA | TX | Healthcare Provider | 6,300 | Mar 19, 2013 | Hacking/IT Incident | Archive (closed) |
| Thomas L. Davis, Jr. DDS | OR | Healthcare Provider | 3,269 | Mar 15, 2013 | Theft | Archive (closed) |
| Mount Sinai Medical Center | FL | Healthcare Provider | 628 | Mar 15, 2013 | Theft | Archive (closed) |
| Connextions c/o Anthem BCBS | IN | Business Associate | 1,678 | Mar 14, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Patterson Dental Supply/Patterson Companies | MN | Business Associate | 6,400 | Mar 12, 2013 | Hacking/IT Incident | Archive (closed) |
| United HomeCare Services, Inc. | FL | Healthcare Provider | 12,299 | Mar 9, 2013 | Theft | Archive (closed) |
| University of Connecticut Health Center | CT | Healthcare Provider | 1,382 | Mar 8, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Goold Health System (Goold) | MA | Business Associate | 6,332 | Mar 6, 2013 | Loss | Archive (closed) |
| Sports Rehabilitation Consultants | OH | Healthcare Provider | 1,200 | Mar 6, 2013 | Theft | Archive (closed) |
| North Los Angeles County Regional Center | CA | Business Associate | 18,162 | Mar 4, 2013 | Theft | Archive (closed) |
| Maine Medical Center | ME | Healthcare Provider | 1,920 | Mar 4, 2013 | Other | Archive (closed) |
| Lancaster General Medical Group | PA | Healthcare Provider | 527 | Mar 4, 2013 | Theft | Archive (closed) |
| South Miami Hospital | FL | Healthcare Provider | 834 | Mar 2, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Plus Amerigroup | NY | Business Associate | 28,187 | Mar 1, 2013 | Theft | Archive (closed) |
| Standard Register | OH | Business Associate | 2,261 | Mar 1, 2013 | Theft | Archive (closed) |
| Plexus Group | IL | Business Associate | 500 | Mar 1, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| WOMENS HEALTH ENTERPRISE, INC. | GA | Healthcare Provider | 3,000 | Feb 27, 2013 | Theft | Archive (closed) |
| County of San Bernardino, Department of Behavioral Health | CA | Health Plan | 686 | Feb 25, 2013 | Theft | Archive (closed) |
| Crescent Health Inc. - a Walgreens Company | CA | Healthcare Provider | 109,000 | Feb 22, 2013 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.