HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 155 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Windsor Health Plan | TN | Business Associate | 1,378 | Jul 22, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Andersen Air Force Base, Guam | VA | Healthcare Provider | 700 | Jul 22, 2011 | Improper Disposal | Archive (closed) |
| Assurecare Risk Management, Inc. | IL | Business Associate | 25,330 | Jul 21, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Beth Israel Deaconess Medical Center | MA | Healthcare Provider | 2,021 | Jul 19, 2011 | Hacking/IT Incident | Archive (closed) |
| DeKalb Medical Center, Inc. d/b/a DeKalb Medical Hillandale | GA | Healthcare Provider | 7,500 | Jul 15, 2011 | Theft | Archive (closed) |
| Memorial Health Systems | CO | Healthcare Provider | 2,300 | Jul 15, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Dr Axel Velez | PR | Healthcare Provider | 2,800 | Jul 13, 2011 | Theft | Archive (closed) |
| Lansing Community College | MI | Business Associate | 5,000 | Jul 11, 2011 | Hacking/IT Incident | Archive (closed) |
| Jackson Health System | FL | Healthcare Provider | 1,562 | Jul 8, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Troy Regional Medical Center | AL | Healthcare Provider | 880 | Jul 8, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| The Mount Sinai Hospital | NY | Healthcare Provider | 712 | Jul 8, 2011 | Theft | Archive (closed) |
| Yanez Dental Corporation | CA | Healthcare Provider | 10,190 | Jul 4, 2011 | Theft | Archive (closed) |
| Department of Personnel and Administration | CO | Business Associate | 3,589 | Jun 29, 2011 | Theft | Archive (closed) |
| Health Plan of San Mateo | CA | Health Plan | 694 | Jun 29, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Gail Gillespie and Associates, LLC | LA | Healthcare Provider | 2,000 | Jun 28, 2011 | Theft | Archive (closed) |
| Area Agency on Aging, Ohio District 5 | OH | Business Associate | 78,042 | Jun 27, 2011 | Theft | Archive (closed) |
| University of Missouri Health Care | MO | Healthcare Provider | 1,288 | Jun 23, 2011 | Unknown | Archive (closed) |
| NOL, LLC d/b/a Premier Radiology | TN | Healthcare Provider | 810 | Jun 22, 2011 | Theft | Archive (closed) |
| Advanced Diagnostic Imaging, P.C. | TN | Healthcare Provider | 705 | Jun 22, 2011 | Theft | Archive (closed) |
| Blue Cross and Blue Shield of Florida | FL | Health Plan | 3,463 | Jun 17, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Gene S. J. Liaw, MD. PS | WA | Healthcare Provider | 1,105 | Jun 17, 2011 | Theft | Archive (closed) |
| HealthCare Partners | CA | Healthcare Provider | 15,677 | Jun 16, 2011 | Theft | Archive (closed) |
| New River Health Association | WV | Healthcare Provider | 950 | Jun 16, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Fidelity National Technology Imaging (FNTI) | CA | Business Associate | 1,192 | Jun 10, 2011 | Loss | Archive (closed) |
| TUBA CITY REGIONAL HEALTH CARE CORPORATION | AZ | Healthcare Provider | 2,000 | Jun 9, 2011 | Improper Disposal, Loss | Archive (closed) |
| FOOTHILLS NEPHROLOGY, PC | SC | Healthcare Provider | 1,280 | Jun 9, 2011 | Theft | Archive (closed) |
| Metropolitan Community Health Services, Inc. | NC | Healthcare Provider | 1,263 | Jun 9, 2011 | Unknown | Archive (closed) |
| Lower Umpqua Hospital | OR | Business Associate | 17,000 | Jun 8, 2011 | Theft | Archive (closed) |
| Navos | WA | Health Plan | 2,700 | Jun 8, 2011 | Unknown | Archive (closed) |
| Saint Joseph - Berea | KY | Healthcare Provider | 1,986 | Jun 2, 2011 | Loss, Theft | Archive (closed) |
| Spartanburg Regional Healthcare System | SC | Healthcare Provider | 400,000 | May 27, 2011 | Theft | Archive (closed) |
| Agent Benefits Corporation | MI | Business Associate | 11,387 | May 26, 2011 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| VA Caribbean Healthcare System | PR | Healthcare Provider | 6,006 | May 26, 2011 | Theft | Archive (closed) |
| Cahaba Government Benefit Administrators, LLC | AL | Business Associate | 13,412 | May 25, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Imaging Center of Garland | TX | Healthcare Provider | 1,031 | May 19, 2011 | Improper Disposal | Archive (closed) |
| St. Mary's Hospital for Children | NY | Business Associate | 550 | May 19, 2011 | Theft | Archive (closed) |
| Robert B. Miller, MD | CA | Healthcare Provider | 620 | May 17, 2011 | Theft | Archive (closed) |
| CENTER FOR ARTHRITIS & RHEUMATIC DISEASES | FL | Healthcare Provider | 8,000 | May 11, 2011 | Theft | Archive (closed) |
| CVS CAREMARK | AZ | Healthcare Provider | 654 | May 11, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| MMM Healthcare, Inc. | PR | Healthcare Provider | 32,390 | May 9, 2011 | Theft | Archive (closed) |
| PMC Medicare Choice | PR | Health Plan | 24,361 | May 9, 2011 | Theft | Archive (closed) |
| Indiana Regional Medical Center | PA | Healthcare Provider | 1,388 | May 9, 2011 | Theft | Archive (closed) |
| Union Security Insurance Company | MO | Health Plan | 850 | May 9, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Reid Hospital & Health Care Services | IN | Healthcare Provider | 22,001 | May 6, 2011 | Theft | Archive (closed) |
| Drs Edalji and Komer | MA | Healthcare Provider | 563 | May 6, 2011 | Theft | Archive (closed) |
| Methodist Charlton Medical Center | TX | Healthcare Provider | 1,500 | May 5, 2011 | Theft | Archive (closed) |
| Speare Memorial Hospital | NH | Healthcare Provider | 5,960 | May 2, 2011 | Theft | Archive (closed) |
| Knox Community Hospital | OH | Healthcare Provider | 500 | Apr 28, 2011 | Improper Disposal | Archive (closed) |
| Phoenix Health Plan | AZ | Health Plan | 9,393 | Apr 25, 2011 | Hacking/IT Incident | Archive (closed) |
| Genesis Clinical Laboratory | IL | Healthcare Provider | 1,070 | Apr 25, 2011 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.