HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 15 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Better Vision Eyecare, LLC | AZ | Healthcare Provider | 501 | Oct 28, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Health Management Systems of America | MI | Healthcare Provider | 4,213 | Oct 27, 2025 | Hacking/IT Incident | Under investigation |
| Methodist Healthcare - Memphis Hospitals | TN | Healthcare Provider | 1,658 | Oct 27, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| REACH, Inc | AK | Healthcare Provider | 1,195 | Oct 27, 2025 | Hacking/IT Incident | Under investigation |
| VirMedice, LLC | AZ | Business Associate | 1,000 | Oct 25, 2025 | Hacking/IT Incident | Under investigation |
| Physicians to Children & Adolescents | KY | Healthcare Provider | 9,536 | Oct 24, 2025 | Hacking/IT Incident | Under investigation |
| Rocky Mountain Oncology Care | WY | Healthcare Provider | 5,615 | Oct 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Saint Mary’s Home of Erie | PA | Healthcare Provider | 5,013 | Oct 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Fairbanks Urology | AK | Healthcare Provider | 1,446 | Oct 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Southwest Urology | OH | Healthcare Provider | 1,310 | Oct 24, 2025 | Hacking/IT Incident | Under investigation |
| Michael R. Schwartz, MD Inc. | CA | Healthcare Provider | 9,809 | Oct 23, 2025 | Hacking/IT Incident | Under investigation |
| Sedgebrook OpCo SL VII LLC | IL | Healthcare Provider | 7,382 | Oct 23, 2025 | Hacking/IT Incident | Archive (closed) |
| Legacy Health, LLC | TX | Business Associate | 6,547 | Oct 23, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Yamhill Community Care Organization (YCCO) | OR | Health Plan | 1,251 | Oct 22, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Express Canna Cards, LLC | FL | Healthcare Provider | 5,000 | Oct 20, 2025 | Unauthorized Access/Disclosure | Under investigation |
| George E. Weems Memorial Hospital | FL | Healthcare Provider | 2,607 | Oct 20, 2025 | Hacking/IT Incident | Archive (closed) |
| Modernizing Medicine, Inc. | FL | Business Associate | 198,795 | Oct 17, 2025 | Hacking/IT Incident | Under investigation |
| Central Jersey Medical Center | NJ | Healthcare Provider | 88,000 | Oct 17, 2025 | Hacking/IT Incident | Archive (closed) |
| North Atlantic States Carpenters Health Benefits Fund | MA | Health Plan | 68,111 | Oct 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Heartland Health Center | NE | Healthcare Provider | 43,728 | Oct 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Firetree, Ltd | PA | Healthcare Provider | 17,979 | Oct 17, 2025 | Hacking/IT Incident | Under investigation |
| McElroy & Associates, Inc. | OK | Business Associate | 6,633 | Oct 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Sapphire Community Health | MT | Healthcare Provider | 5,617 | Oct 17, 2025 | Hacking/IT Incident | Archive (closed) |
| River City Eye Care, LLC | OR | Healthcare Provider | 6,588 | Oct 16, 2025 | Hacking/IT Incident | Under investigation |
| Coalesce, LLC dba Benefitelect | AZ | Business Associate | 501 | Oct 15, 2025 | Hacking/IT Incident | Under investigation |
| Kadlec Clinic - Fertility Center | WA | Healthcare Provider | 1,093 | Oct 14, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Aunt Martha’s Health & Wellness, Inc. | IL | Healthcare Provider | 500 | Oct 13, 2025 | Hacking/IT Incident | Under investigation |
| Visiting Nurse Association of Texas, LLC | TX | Healthcare Provider | 28,515 | Oct 10, 2025 | Hacking/IT Incident | Under investigation |
| Open Practice Solutions, LTD | OH | Business Associate | 21,265 | Oct 10, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Houston Methodist Specialty Physician Group | TX | Healthcare Provider | 2,329 | Oct 10, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Roots, Inc. | CA | Healthcare Provider | 2,000 | Oct 10, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Bay Medical LLC | MD | Healthcare Provider | 1,483 | Oct 9, 2025 | Hacking/IT Incident | Under investigation |
| Conduent Business Services LLC | NJ | Business Associate | 62,224,658 | Oct 8, 2025 | Hacking/IT Incident | Under investigation |
| Partners in Pediatrics, P.C. | CO | Healthcare Provider | 13,300 | Oct 8, 2025 | Hacking/IT Incident | Under investigation |
| Wellpoint, Inc. | IN | Business Associate | 579 | Oct 7, 2025 | Hacking/IT Incident | Under investigation |
| Sierra Vista Hospital & Clinics | NM | Healthcare Provider | 75,054 | Oct 6, 2025 | Hacking/IT Incident | Under investigation |
| OB-GYN Associates, Ltd. dba OBGYN Associates | NV | Healthcare Provider | 62,238 | Oct 6, 2025 | Hacking/IT Incident | Under investigation |
| Space Coast Vascular | FL | Healthcare Provider | 18,819 | Oct 6, 2025 | Hacking/IT Incident | Under investigation |
| Cardiovascular Medicine Associates (doing business as MyCardiologist) | FL | Healthcare Provider | 2,248 | Oct 6, 2025 | Hacking/IT Incident | Under investigation |
| Brightstar Global Solutions Corporation | RI | Health Plan | 103,879 | Oct 3, 2025 | Hacking/IT Incident | Under investigation |
| Southwest C.A.R.E. Center | NM | Healthcare Provider | 21,866 | Oct 3, 2025 | Hacking/IT Incident | Under investigation |
| Harris County Hospital District d/b/a Harris Health | TX | Healthcare Provider | 5,357 | Oct 3, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Arizona Health Care Cost Containment System- State Medicaid Agency | AZ | Health Plan | 3,177 | Oct 3, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Florida Health Sciences Center, Inc | FL | Healthcare Provider | 896 | Oct 3, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Vibra Hospital of Sacramento, LLC | CA | Healthcare Provider | 620 | Oct 3, 2025 | Hacking/IT Incident | Archive (closed) |
| Dermatology Associates | KY | Healthcare Provider | 501 | Oct 3, 2025 | Hacking/IT Incident | Archive (closed) |
| CareSTL Health, Inc. | MO | Healthcare Provider | 501 | Oct 3, 2025 | Hacking/IT Incident | Archive (closed) |
| Revere Health, PC | UT | Healthcare Provider | 10,800 | Oct 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Innovative Physical Therapy | IL | Healthcare Provider | 2,023 | Oct 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Harbor | OH | Healthcare Provider | 216,000 | Sep 30, 2025 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.