HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 151 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Gessler Clinic, P.A. | FL | Healthcare Provider | 1,409 | Jun 14, 2012 | Theft | Archive (closed) |
| Memorial Sloan-Kettering Cancer Center | NY | Healthcare Provider | 568 | Jun 8, 2012 | Theft | Archive (closed) |
| Robert Witham, MD, FACP | OR | Healthcare Provider | 11,136 | Jun 6, 2012 | Theft | Archive (closed) |
| Metcare of Florida, Inc. | FL | Healthcare Provider | 2,557 | Jun 4, 2012 | Theft | Archive (closed) |
| PrevMED | MD | Business Associate | 1,444 | Jun 4, 2012 | Theft | Archive (closed) |
| Charlie Norwood VA Medical Center | GA | Healthcare Provider | 824 | Jun 4, 2012 | Loss | Archive (closed) |
| Volunteer State Health Plan, Inc. | TN | Health Plan | 1,102 | May 31, 2012 | Loss | Archive (closed) |
| Lutheran Community Services Northwest | WA | Healthcare Provider | 756 | May 29, 2012 | Theft | Archive (closed) |
| Titus Regional Medical Center | TX | Healthcare Provider | 5,700 | May 26, 2012 | Loss | Archive (closed) |
| Titus Regional Medical Center | TX | Healthcare Provider | 500 | May 26, 2012 | Theft | Archive (closed) |
| Independence Physical Therapy | CT | Healthcare Provider | 925 | May 25, 2012 | Theft | Archive (closed) |
| Phoebe Putney Memorial Hospital, Inc. | GA | Healthcare Provider | 12,937 | May 24, 2012 | Theft | Archive (closed) |
| Physician's Automated Laboratory | CA | Healthcare Provider | 745 | May 23, 2012 | Theft | Archive (closed) |
| Data Image, Inc. | OH | Business Associate | 15,000 | May 22, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's Hospital Boston | MA | Healthcare Provider | 2,159 | May 22, 2012 | Theft | Archive (closed) |
| Ameritas Life Insurance Corp. | NE | Health Plan | 3,000 | May 21, 2012 | Theft | Archive (closed) |
| Luz Colon, DPM Podiatry | FL | Healthcare Provider | 1,137 | May 19, 2012 | Loss, Theft | Archive (closed) |
| UnitedHealth Group health plan single affiliated covered entity | MN | Health Plan | 19,100 | May 18, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Our Lady of the Lake Regional Medical Center | LA | Healthcare Provider | 17,000 | May 18, 2012 | Loss, Theft | Archive (closed) |
| West Dermatology | CA | Healthcare Provider | 1,900 | May 18, 2012 | Theft | Archive (closed) |
| Duke University Health System | NC | Healthcare Provider | 591 | May 18, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Health Services Minnesota PA | MN | Healthcare Provider | 4,000 | May 14, 2012 | Theft | Archive (closed) |
| St. Mary Medical Center | CA | Healthcare Provider | 3,900 | May 14, 2012 | Loss | Archive (closed) |
| Iowa Department of Human Services | IA | Health Plan | 3,000 | May 11, 2012 | Improper Disposal | Archive (closed) |
| Hogan Services Inc. Health Care Premium Plan | MO | Health Plan | 1,134 | May 11, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Rite Aid Store 1343 | WV | Healthcare Provider | 2,905 | May 10, 2012 | Theft | Archive (closed) |
| University of Houston for UH College of Optometry | TX | Healthcare Provider | 7,000 | May 8, 2012 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| Baptist Health System | AL | Healthcare Provider | 1,655 | May 4, 2012 | Improper Disposal | Archive (closed) |
| Stephen Haggard, DPM Podiatry | WA | Healthcare Provider | 1,597 | May 4, 2012 | Theft | Archive (closed) |
| Oakland Vision Services, PC | MI | Healthcare Provider | 3,000 | May 3, 2012 | Hacking/IT Incident | Archive (closed) |
| IntraCare North Hospital | TX | Healthcare Provider | 750 | May 3, 2012 | Theft | Archive (closed) |
| Safe Ride Services, Inc | AZ | Healthcare Provider | 42,000 | May 1, 2012 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| Thomas Jefferson University Hospitals | PA | Healthcare Provider | 590 | Apr 30, 2012 | Theft | Archive (closed) |
| SHIELDS For Families | CA | Healthcare Provider | 961 | Apr 26, 2012 | Theft | Archive (closed) |
| Oregon Health Authority | OR | Healthcare Provider | 550 | Apr 26, 2012 | Theft | Archive (closed) |
| South Carolina Department of Health and Human Services | SC | Health Plan | 228,435 | Apr 24, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| TLC Dental Dania, LLC | FL | Healthcare Provider | 750 | Apr 23, 2012 | Theft | Archive (closed) |
| University of Arkansas for Medical Sciences | AR | Healthcare Provider | 7,121 | Apr 20, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Desert AIDS Project | CA | Healthcare Provider | 4,400 | Apr 20, 2012 | Theft | Archive (closed) |
| Emory Healthcare | GA | Healthcare Provider | 315,000 | Apr 18, 2012 | Other, Unknown | Archive (closed) |
| DRD Management, Inc. D/B/A DRD Knoxville Medical Clinic - Central | TX | Healthcare Provider | 1,000 | Apr 16, 2012 | Improper Disposal | Archive (closed) |
| Memorial Healthcare System | FL | Health Plan | 9,497 | Apr 13, 2012 | Other | Archive (closed) |
| Roy E. Gondo, M.D. | WA | Healthcare Provider | 2,100 | Apr 13, 2012 | Theft | Archive (closed) |
| Rhinebeck Health Center/Center for Progressive Medicine | NY | Healthcare Provider | 6,745 | Apr 12, 2012 | Theft | Archive (closed) |
| IU Medical Group | IN | Healthcare Provider | 1,000 | Apr 12, 2012 | Improper Disposal | Archive (closed) |
| Utah Department of Technology Services | UT | Business Associate | 780,000 | Apr 11, 2012 | Hacking/IT Incident | Archive (closed) |
| David Charles Rish | CA | Business Associate | 2,000 | Apr 10, 2012 | Theft | Archive (closed) |
| AccentCare Home Health of California, Inc. Medicare # 057564 CA state License # 080000226 | CA | Healthcare Provider | 1,000 | Apr 10, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Affinity Health Plan | NY | Health Plan | 933 | Apr 10, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| HealthLOGIX | MI | Business Associate | 555 | Apr 10, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.