HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 152 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The Neighborhood Christian Clinic | AZ | Healthcare Provider | 9,565 | Apr 9, 2012 | Loss | Archive (closed) |
| St. Elizabeth's Medical Center | MA | Healthcare Provider | 6,831 | Apr 6, 2012 | Loss | Archive (closed) |
| County of Wayne Department of Personnel/Human Resources Benefits Administration Division | MI | Health Plan | 1,229 | Apr 6, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Lake Granbury Medicl Ceter | TX | Healthcare Provider | 502 | Apr 4, 2012 | Theft | Archive (closed) |
| CenterLight Healthcare | NY | Health Plan | 642 | Apr 3, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Joseph's Medical Center | CA | Healthcare Provider | 712 | Mar 29, 2012 | Theft | Archive (closed) |
| Caremark PCS Health, L.L.C. (formerly known as Caremark PCS Health, L.P.) | IL | Business Associate | 3,482 | Mar 23, 2012 | Other | Archive (closed) |
| Duke University Health System | NC | Healthcare Provider | 1,370 | Mar 23, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Chicago Muscoskeletal Institute | IL | Healthcare Provider | 750 | Mar 23, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Baylor Heart and Vascular Center, LLP | TX | Healthcare Provider | 1,972 | Mar 16, 2012 | Theft | Archive (closed) |
| T&P Consulting, INC DBA Quantum HC | PR | Business Associate | 7,606 | Mar 15, 2012 | Theft | Archive (closed) |
| Georgia Health Sciences University | GA | Healthcare Provider | 513 | Mar 15, 2012 | Theft | Archive (closed) |
| Advanced Clinical Research Institute | CA | Health Plan | 875 | Mar 14, 2012 | Theft | Archive (closed) |
| Quantum Health Consulting | PR | Business Associate | 7,923 | Mar 13, 2012 | Theft | Archive (closed) |
| William F. DeLuca Jr., M.D. | NY | Healthcare Provider | 577 | Mar 13, 2012 | Theft | Archive (closed) |
| T&P Consulting, INC. d/b/a Quantum Health Consulting | PR | Business Associate | 27,098 | Mar 12, 2012 | Theft | Archive (closed) |
| T & P Consulting, Inc. d/b/a Quantum Health Consulting | PR | Business Associate | 10,000 | Mar 12, 2012 | Theft | Archive (closed) |
| Quantum Health Consulting | PR | Business Associate | 4,645 | Mar 12, 2012 | Theft | Archive (closed) |
| Kern Medical Center | CA | Healthcare Provider | 1,431 | Mar 12, 2012 | Theft | Archive (closed) |
| Indiana Internal Medicine Consultants | IN | Healthcare Provider | 20,000 | Mar 9, 2012 | Theft | Archive (closed) |
| Robley Rex VA Medical Center | KY | Healthcare Provider | 1,182 | Mar 6, 2012 | Other | Archive (closed) |
| Anchorage Community Mental Health Services Inc. | AK | Healthcare Provider | 2,743 | Mar 3, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Jeremaih J. Twomey, F.A.C.P., P.A. | TX | Business Associate | 2,559 | Mar 2, 2012 | Theft | Archive (closed) |
| Lee Miller Rehabilitation Associates | MD | Healthcare Provider | 10,480 | Feb 29, 2012 | Theft | Archive (closed) |
| T&P CONSULTING, INC. D/B/A QUANTUM | PR | Business Associate | 7,706 | Feb 28, 2012 | Theft | Archive (closed) |
| Beth Barrett Consulting, LLC | NM | Business Associate | 7,000 | Feb 28, 2012 | Theft | Archive (closed) |
| Catalyst Health Solutions, Inc. | MD | Business Associate | 632 | Feb 28, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| CardioNet, Inc. | PA | Healthcare Provider | 728 | Feb 27, 2012 | Theft | Archive (closed) |
| Dr. Trandinh | OR | Business Associate | 2,300 | Feb 20, 2012 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Ochsner Health System | LA | Healthcare Provider | 2,088 | Feb 20, 2012 | Loss | Archive (closed) |
| St. Joseph Health System | CA | Healthcare Provider | 12,234 | Feb 15, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Georgetown University Hospital | DC | Healthcare Provider | 1,549 | Feb 15, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Motion Picture Industry Health Plans (MPI) | CA | Health Plan | 703 | Feb 15, 2012 | Theft | Archive (closed) |
| Lakeview Medical Center | WI | Healthcare Provider | 698 | Feb 14, 2012 | Theft | Archive (closed) |
| Goshen Health System, Inc. | IN | Healthcare Provider | 660 | Feb 14, 2012 | Hacking/IT Incident | Archive (closed) |
| Medco Health Solutions, Inc. | NJ | Healthcare Provider | 1,287 | Feb 13, 2012 | Theft | Archive (closed) |
| Affiliated Computer Services, Inc. (ACS, Inc.) A Xerox Company | NJ | Business Associate | 1,700 | Feb 8, 2012 | Other | Archive (closed) |
| Loma Linda University Medical Center (LLUMC) | CA | Healthcare Provider | 1,366 | Feb 8, 2012 | Other | Archive (closed) |
| Accretive Health | IL | Business Associate | 14,000 | Feb 6, 2012 | Theft | Archive (closed) |
| UnitedHealth Group health plan single affiliated covered entity | MN | Health Plan | 6,678 | Feb 1, 2012 | Other | Archive (closed) |
| Triumph, LLC | NC | Healthcare Provider | 2,000 | Feb 1, 2012 | Theft | Archive (closed) |
| University of Miami | FL | Healthcare Provider | 1,219 | Jan 30, 2012 | Theft | Archive (closed) |
| Metro Community Provider Network | CO | Healthcare Provider | 3,200 | Jan 27, 2012 | Hacking/IT Incident, Other | Archive (closed) |
| Flex Physical Therapy | WA | Healthcare Provider | 3,100 | Jan 27, 2012 | Theft | Archive (closed) |
| St.Vincent Physician Network | IN | Healthcare Provider | 1,423 | Jan 26, 2012 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Oldendorf Medical Services, PLLC | NY | Healthcare Provider | 549 | Jan 24, 2012 | Theft | Archive (closed) |
| ACS, Affiliated Computer Services, Inc., A Xerox Company | VA | Business Associate | 1,444 | Jan 23, 2012 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Muskogee Regional Medical Center | OK | Health Plan | 844 | Jan 20, 2012 | Loss | Archive (closed) |
| Delta Dental of California | CA | Health Plan | 11,646 | Jan 19, 2012 | Other | Archive (closed) |
| Kansas Department on Aging | KS | Healthcare Provider | 7,757 | Jan 19, 2012 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.