HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 150 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Gulf Coast Health Care Services Inc | FL | Healthcare Provider | 13,000 | Oct 15, 2012 | Hacking/IT Incident, Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Alexander J. Tikhtman, M.D. | KY | Healthcare Provider | 2,376 | Oct 12, 2012 | Theft | Archive (closed) |
| Apria Healthcare, Inc. | CA | Healthcare Provider | 65,700 | Oct 10, 2012 | Theft | Archive (closed) |
| PST Services, Inc | GA | Business Associate | 13,074 | Oct 8, 2012 | Improper Disposal | Archive (closed) |
| Cabinet for Health and Family Services, Department for Community Based Services | KY | Healthcare Provider | 2,500 | Sep 19, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Therese Medical Group, Inc | CA | Healthcare Provider | 3,031 | Sep 17, 2012 | Theft | Archive (closed) |
| Cox Health | MO | Healthcare Provider | 2,435 | Sep 17, 2012 | Theft | Archive (closed) |
| The Feinstein Institute for Medical Reserch | NY | Healthcare Provider | 13,000 | Sep 14, 2012 | Theft | Archive (closed) |
| BHcare, Inc | CT | Healthcare Provider | 5,827 | Sep 14, 2012 | Theft | Archive (closed) |
| Ecco Health, LLC | NV | Business Associate | 5,713 | Sep 14, 2012 | Loss | Archive (closed) |
| Valley Plastic Surgery, P.C. | VA | Healthcare Provider | 4,873 | Sep 13, 2012 | Theft | Archive (closed) |
| University of New Mexico Health Sciences Center | NM | Healthcare Provider | 2,365 | Sep 12, 2012 | Hacking/IT Incident | Archive (closed) |
| University of Miami | FL | Healthcare Provider | 64,846 | Sep 7, 2012 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Charlotte Clark-Neitzel, MD | WA | Healthcare Provider | 942 | Sep 7, 2012 | Theft | Archive (closed) |
| Sierra Plastic Surgery | NV | Healthcare Provider | 800 | Sep 5, 2012 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| Tricounty Behavioral Health Clinic | GA | Healthcare Provider | 4,000 | Aug 31, 2012 | Theft | Archive (closed) |
| Cancer Care Group, P.C. | IN | Healthcare Provider | 55,000 | Aug 28, 2012 | Theft | Archive (closed) |
| LANA MEDICAL CARE | FL | Healthcare Provider | 500 | Aug 28, 2012 | Theft | Archive (closed) |
| Central States Southeast and Siouthwest Areas Health & Welfare Fund | IL | Health Plan | 754 | Aug 21, 2012 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Liberty Resources, Inc. | PA | Healthcare Provider | 3,183 | Aug 17, 2012 | Theft | Archive (closed) |
| The University of Texas MD Anderson Cancer Center | TX | Healthcare Provider | 2,264 | Aug 17, 2012 | Loss | Archive (closed) |
| Memorial Healthcare System | FL | Healthcare Provider | 105,646 | Aug 16, 2012 | Theft | Archive (closed) |
| Apria Healthcare, Inc., Privacy Manager Breach | CA | Healthcare Provider | 11,000 | Aug 15, 2012 | Theft | Archive (closed) |
| Heartland Pathology Associates, P.A. | FL | Healthcare Provider | 1,175 | Aug 15, 2012 | Theft | Archive (closed) |
| TEMPLE COMMUNITY HOSPITAL | CA | Healthcare Provider | 603 | Aug 15, 2012 | Theft | Archive (closed) |
| Siemens Medical Solutions, USA | PA | Business Associate | 66,601 | Aug 10, 2012 | Theft | Archive (closed) |
| Harris County Hospital District | TX | Healthcare Provider | 2,875 | Aug 3, 2012 | Theft | Archive (closed) |
| Stanford Hospital & Clinics and School of Medicine, Privacy Manager Breach | CA | Healthcare Provider | 2,300 | Aug 3, 2012 | Theft | Archive (closed) |
| VNA Health Care Hartford Hospital | CT | Healthcare Provider | 7,461 | Jul 31, 2012 | Theft | Archive (closed) |
| Oregon Health & Science University | OR | Healthcare Provider | 702 | Jul 31, 2012 | Theft | Archive (closed) |
| EMC | CT | Business Associate | 7,461 | Jul 30, 2012 | Theft | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 1,240 | Jul 30, 2012 | Theft | Archive (closed) |
| Jeffrey Paul Edelstein M.D. | AZ | Healthcare Provider | 4,800 | Jul 27, 2012 | Theft | Archive (closed) |
| Northwestern Memorial Hospital | IL | Healthcare Provider | 4,211 | Jul 27, 2012 | Theft | Archive (closed) |
| The Surgeons of Lake County, LLC | IL | Healthcare Provider | 7,067 | Jul 25, 2012 | Hacking/IT Incident | Archive (closed) |
| Kindred Healthcare Inc d/b/a Kindred Transitional Care and Rehabilitation-Sellersburg | IN | Healthcare Provider | 1,504 | Jul 25, 2012 | Theft | Archive (closed) |
| NYU School of Medicine Faculty Group Practice | NY | Healthcare Provider | 8,488 | Jul 23, 2012 | Theft | Archive (closed) |
| Beth Israel Deaconess Medical Center | MA | Healthcare Provider | 3,900 | Jul 20, 2012 | Theft | Archive (closed) |
| Pamlico Medical Equipment LLC | NC | Healthcare Provider | 2,917 | Jul 17, 2012 | Loss | Archive (closed) |
| Molalla Family Dental | OR | Healthcare Provider | 4,354 | Jul 16, 2012 | Hacking/IT Incident, Other, Unauthorized Access/Disclosure | Archive (closed) |
| Visiting Nurse Services of Iowa | IA | Healthcare Provider | 1,298 | Jul 16, 2012 | Theft | Archive (closed) |
| Hamner Square Dental, Privacy Manager Breach | CA | Healthcare Provider | 1,112 | Jul 16, 2012 | Loss, Theft, Unauthorized Access/Disclosure, Unknown | Archive (closed) |
| Patterson Dental, Inc. | MN | Business Associate | 2,533 | Jul 13, 2012 | Loss, Unauthorized Access/Disclosure, Unknown | Archive (closed) |
| SwedishAmerican Health System | IL | Healthcare Provider | 1,500 | Jul 12, 2012 | Theft | Archive (closed) |
| Health Texas Provider Network - Cardiovascular Consultants of North Texas | TX | Healthcare Provider | 2,462 | Jul 5, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Sharon L. Rogers, Ph.D., ABPP | TX | Healthcare Provider | 585 | Jul 3, 2012 | Theft | Archive (closed) |
| Bruce G. Peller, DMD, PA | NC | Healthcare Provider | 9,953 | Jun 25, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Wolf & Yun | KY | Healthcare Provider | 824 | Jun 22, 2012 | Theft | Archive (closed) |
| Karen Kietzman | MT | Healthcare Provider | 708 | Jun 22, 2012 | Theft | Archive (closed) |
| University of Kentucky HealthCare | KY | Healthcare Provider | 4,490 | Jun 19, 2012 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.