Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 148 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Stronghold Counseling Services, Inc.SDHealthcare Provider8,500Feb 21, 2013TheftArchive (closed)
Arizona OncologyAZHealthcare Provider501Feb 21, 2013TheftArchive (closed)
Catoctin Dental/Richard B. Love, D.D.S., P.A.MDHealthcare Provider6,400Feb 20, 2013Hacking/IT IncidentArchive (closed)
Florida Healthy Kids CorporationFLBusiness Associate3,667Feb 19, 2013Unauthorized Access/DisclosureArchive (closed)
Terrell County Health DepartmentGAHealthcare Provider18,000Feb 18, 2013Unauthorized Access/DisclosureArchive (closed)
ABQ HealthPartnersNMHealthcare Provider778Feb 17, 2013TheftArchive (closed)
Heyman HospiceCare at FloydGAHealthcare Provider1,819Feb 15, 2013TheftArchive (closed)
HomeCare of Mid-Missouri, Inc.MOHealthcare Provider4,027Feb 14, 2013TheftArchive (closed)
Kindred Transitional Care and Rehabilitation - MarlMAHealthcare Provider716Feb 14, 2013TheftArchive (closed)
Jackson Health SystemFLHealthcare Provider566Feb 13, 2013OtherArchive (closed)
Froedtert HealthWIHealthcare Provider43,549Feb 12, 2013Hacking/IT IncidentArchive (closed)
Center for Pain Management, LLCMDHealthcare Provider5,822Feb 12, 2013TheftArchive (closed)
Coast Healthcare Management, LLCCABusiness Associate1,368Feb 12, 2013Other, TheftArchive (closed)
West Georgia AmbulanceGAHealthcare Provider500Feb 11, 2013LossArchive (closed)
Intervention Services, Inc.FLHealthcare Provider1,200Feb 7, 2013TheftArchive (closed)
Yadkinville Chiropractic DCPANCBusiness Associate1,000Feb 6, 2013TheftArchive (closed)
LifeGasGABusiness Associate1,103Feb 4, 2013TheftArchive (closed)
Community Services NWALHealthcare Provider2,400Feb 2, 2013TheftArchive (closed)
Kmart Pharmacy #7623LABusiness Associate16,988Jan 31, 2013Improper DisposalArchive (closed)
RR Donnelley (a sub-BA for UnitedHealth Group)ILBusiness Associate8,911Jan 30, 2013TheftArchive (closed)
Western Wisconsin Medical Association, S.C. - River Falls Medical ClinicsWIHealthcare Provider2,400Jan 25, 2013TheftArchive (closed)
The University of Texas MD Anderson Cancer CenterTXHealthcare Provider29,021Jan 24, 2013TheftArchive (closed)
Stanford School of Medicine & LP Children Hosp, Privacy Manager BreachCAHealthcare Provider56,500Jan 23, 2013TheftArchive (closed)
BlueCross BlueShield of Western New YorkNYBusiness Associate725Jan 22, 2013TheftArchive (closed)
Baptist Health SystemTXHealthcare Provider678Jan 22, 2013Unauthorized Access/DisclosureArchive (closed)
WAYNE MEMORIAL HOSPITALPAHealthcare Provider1,184Jan 18, 2013LossArchive (closed)
Riderwood VillageMDHealthcare Provider3,230Jan 17, 2013TheftArchive (closed)
California Department of Developmental Services, Privacy Manager BreachCAHealthcare Provider1,312Jan 15, 2013Hacking/IT Incident, Improper Disposal, Loss, Other, Theft, Unauthorized Access/Disclosure, UnknownArchive (closed)
Lee D. Pollan, DMD, PCNYHealthcare Provider19,178Jan 11, 2013TheftArchive (closed)
Washington University School of MedicineMOHealthcare Provider1,105Jan 11, 2013TheftArchive (closed)
Clearpoint Design, Inc.MABusiness Associate7,250Jan 10, 2013Hacking/IT IncidentArchive (closed)
Clearpoint Design, Inc.MABusiness Associate4,100Jan 10, 2013Hacking/IT IncidentArchive (closed)
Pousson Family DentistryLAHealthcare Provider1,400Jan 10, 2013TheftArchive (closed)
University of Nevada School of MedicineNVHealthcare Provider1,483Jan 8, 2013Improper DisposalArchive (closed)
SilverScript Insurance CompanyAZHealth Plan852Jan 8, 2013Unauthorized Access/DisclosureArchive (closed)
WorkflowOneOHBusiness Associate635Jan 8, 2013Unauthorized Access/DisclosureArchive (closed)
Clearpoint Design, Inc.MABusiness Associate4,125Jan 7, 2013Hacking/IT IncidentArchive (closed)
Calvin Schuster,MDCAHealthcare Provider532Jan 4, 2013TheftArchive (closed)
Group Health IncorporatedNYHealth Plan1,771Jan 2, 2013TheftArchive (closed)
Omnicell, Inc.CABusiness Associate56,820Dec 31, 2012TheftArchive (closed)
St. Mark's Medical CenterTXHealthcare Provider2,988Dec 31, 2012Hacking/IT IncidentArchive (closed)
Clearpoint Design, Inc.MABusiness Associate4,343Dec 28, 2012Hacking/IT IncidentArchive (closed)
HP Enterprise ServicesKYBusiness Associate1,090Dec 28, 2012TheftArchive (closed)
Sovereign Medical Group, LLCNJHealthcare Provider27,800Dec 27, 2012Hacking/IT Incident, TheftArchive (closed)
Gibson General HospitalINHealthcare Provider28,893Dec 26, 2012TheftArchive (closed)
Richard Switzer MD PCMIHealthcare Provider4,100Dec 23, 2012OtherArchive (closed)
Calif. Dept. of Health Care Services (DHCS)CAHealth Plan2,643Dec 23, 2012Unauthorized Access/DisclosureArchive (closed)
Center for Orthopedic Research and Education, Inc.AZHealthcare Provider35,488Dec 21, 2012TheftArchive (closed)
OHP PHSP, Inc.NYBusiness Associate28,187Dec 21, 2012Unauthorized Access/DisclosureArchive (closed)
Health AdvantageARHealth Plan2,863Dec 20, 2012OtherArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.