HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 154 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Futurity First Insurance Group | CT | Business Associate | 3,994 | Oct 11, 2011 | Theft | Archive (closed) |
| InStep Foot Clinic, P.A. | MN | Healthcare Provider | 2,600 | Oct 11, 2011 | Theft | Archive (closed) |
| Lahey Clinic | MA | Healthcare Provider | 599 | Oct 11, 2011 | Theft | Archive (closed) |
| The Nemours Foundation | FL | Healthcare Provider | 1,055,489 | Oct 7, 2011 | Loss | Archive (closed) |
| Adult & Pediatric Dermatology, PC | MA | Healthcare Provider | 2,200 | Oct 7, 2011 | Theft | Archive (closed) |
| Thomas J O'Laughlin, MD | CA | Business Associate | 700 | Oct 7, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Indiana University | IN | Healthcare Provider | 3,266 | Oct 4, 2011 | Theft | Archive (closed) |
| Futurity First Insurance Group | CT | Business Associate | 1,631 | Oct 3, 2011 | Loss | Archive (closed) |
| Henry Ford Health System | MI | Healthcare Provider | 520 | Oct 3, 2011 | Theft | Archive (closed) |
| MAPFRE Life | PR | Health Plan | 2,209 | Sep 29, 2011 | Theft | Archive (closed) |
| Summit Medical Group, PLLC | TN | Healthcare Provider | 731 | Sep 28, 2011 | Theft | Archive (closed) |
| FIRST PRIORITY LIFE INSURANCE COMPANY | PA | Business Associate | 579 | Sep 28, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Fairview Health Services | MN | Healthcare Provider | 14,623 | Sep 27, 2011 | Theft | Archive (closed) |
| North Memorial Health Care | MN | Healthcare Provider | 9,497 | Sep 27, 2011 | Theft | Archive (closed) |
| NYU Hospital for Joint Diseases Inventory Management Department | NY | Healthcare Provider | 2,600 | Sep 26, 2011 | Theft | Archive (closed) |
| Health Texas Provider Network | TX | Healthcare Provider | 1,259 | Sep 23, 2011 | Theft | Archive (closed) |
| VA Illiana Health Care System | IL | Healthcare Provider | 518 | Sep 23, 2011 | Loss | Archive (closed) |
| AllOne Health Management Solutions, Inc. | PA | Business Associate | 507 | Sep 23, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Benefits Administration Services, Inc. | VA | Business Associate | 4,000 | Sep 22, 2011 | Loss | Archive (closed) |
| Bonney Lake Medical Center and Mythili R. Ramachandran, MD | WA | Healthcare Provider | 2,367 | Sep 21, 2011 | Theft | Archive (closed) |
| VA Gulf Coast Veterans Health Care System | MS | Healthcare Provider | 1,797 | Sep 20, 2011 | Theft | Archive (closed) |
| Freda J Bowman MD PA | TX | Healthcare Provider | 1,300 | Sep 20, 2011 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| Diversified Resources, Inc. | GA | Healthcare Provider | 863 | Sep 15, 2011 | Theft | Archive (closed) |
| John T. Melvin, M.D.& Associates | TX | Healthcare Provider | 2,541 | Sep 14, 2011 | Theft | Archive (closed) |
| Living Healthy Community Clinic | WI | Business Associate | 3,000 | Sep 13, 2011 | Hacking/IT Incident | Archive (closed) |
| Centro de Ortodoncia Inc. | PR | Healthcare Provider | 2,000 | Sep 13, 2011 | Theft | Archive (closed) |
| Texas Health and Human Services Commission | TX | Health Plan | 1,696 | Sep 9, 2011 | Theft | Archive (closed) |
| Jonathan Noel MD | IN | Healthcare Provider | 2,059 | Sep 8, 2011 | Theft | Archive (closed) |
| NEA Baptist Clinic | AR | Healthcare Provider | 3,116 | Sep 7, 2011 | Hacking/IT Incident | Archive (closed) |
| Muir Orthopaedic Specialists, A Medical Group Inc. | CA | Healthcare Provider | 1,800 | Sep 7, 2011 | Theft | Archive (closed) |
| Multi-Speciality Collection Services, LLC | CA | Business Associate | 19,651 | Aug 29, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| HEALTH RESEARCH INSTITUTE, INC., PFEIFFER TREATMENT CENTER | IL | Healthcare Provider | 2,000 | Aug 29, 2011 | Theft | Archive (closed) |
| SpaMed Solutions, LLC, Edward McMenamin President, | NJ | Business Associate | 3,000 | Aug 28, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Lexington VAMC | KY | Healthcare Provider | 1,432 | Aug 25, 2011 | Theft | Archive (closed) |
| MedAssets | NJ | Business Associate | 32,008 | Aug 18, 2011 | Theft | Archive (closed) |
| Capron Rescue Squad District | IL | Healthcare Provider | 815 | Aug 18, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Health Partners | TX | Business Associate | 10,345 | Aug 17, 2011 | Theft | Archive (closed) |
| Colorado Department of Health Care Policy and Financing | CO | Health Plan | 3,589 | Aug 16, 2011 | Loss | Archive (closed) |
| The Neurological Institute of Savannah & Center for Spine | GA | Healthcare Provider | 63,425 | Aug 15, 2011 | Theft | Archive (closed) |
| Accuprint | PR | Business Associate | 5,848 | Aug 15, 2011 | Theft | Archive (closed) |
| Washington State Department of Social and Health Services | WA | Health Plan | 3,950 | Aug 9, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Med Assets | NJ | Business Associate | 8,795 | Aug 8, 2011 | Theft | Archive (closed) |
| Ashley Industrial Molding, Inc. Employee Welfare Benefit Plan | IN | Business Associate | 506 | Aug 8, 2011 | Hacking/IT Incident | Archive (closed) |
| Brigham and Women's Hospital and Faulkner Hospital | MA | Healthcare Provider | 638 | Aug 3, 2011 | Theft | Archive (closed) |
| Mills-Peninsula Health Services | CA | Healthcare Provider | 1,500 | Jul 29, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Treatment Services Northwest | OR | Healthcare Provider | 1,200 | Jul 29, 2011 | Theft | Archive (closed) |
| University of Kentucky - UK HealthCare | KY | Healthcare Provider | 3,604 | Jul 28, 2011 | Theft | Archive (closed) |
| Austin Center for Therapy and Assessment, LLC | TX | Healthcare Provider | 1,870 | Jul 28, 2011 | Theft | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 501 | Jul 28, 2011 | Theft | Archive (closed) |
| RxAmerica, a subsidiary of CVS Caremark | TX | Business Associate | 4,573 | Jul 22, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.