HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 158 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Debra C. Duffy, DDS | TX | Healthcare Provider | 4,700 | Oct 5, 2010 | Theft | Archive (closed) |
| Cumberland Gastroenterology, P.S.C. | KY | Healthcare Provider | 2,200 | Oct 5, 2010 | Theft | Archive (closed) |
| WESTMED Medical Group | NY | Healthcare Provider | 578 | Oct 5, 2010 | Theft | Archive (closed) |
| Joseph A. Gagnon d/b/a Goldthwait Associates | MA | Business Associate | 11,000 | Oct 1, 2010 | Improper Disposal | Archive (closed) |
| LORENZO BROWN, MD INC. | CA | Healthcare Provider | 928 | Sep 29, 2010 | Theft | Archive (closed) |
| University of Oklahoma - Tulsa, Neurology Clinic | OK | Healthcare Provider | 19,200 | Sep 27, 2010 | Hacking/IT Incident | Archive (closed) |
| NewYork-Presbyterian Hospital and Columbia University Medical Center | NY | Healthcare Provider | 6,800 | Sep 24, 2010 | Theft | Archive (closed) |
| St. James Hospital and Health Centers | IL | Healthcare Provider | 967 | Sep 24, 2010 | Improper Disposal | Archive (closed) |
| Eden Medical Center | CA | Business Associate | 1,474 | Sep 23, 2010 | Theft | Archive (closed) |
| Oroville Hospital | CA | Business Associate | 1,474 | Sep 23, 2010 | Theft | Archive (closed) |
| St. Vincent Hospital and Health Care Center, Inc. | IN | Healthcare Provider | 1,199 | Sep 23, 2010 | Theft | Archive (closed) |
| Alaskan AIDS Assistance Association | AK | Business Associate | 2,000 | Sep 22, 2010 | Theft | Archive (closed) |
| Counseling and Psychotherapy of Throggs Neck | NY | Healthcare Provider | 9,000 | Sep 21, 2010 | Theft | Archive (closed) |
| CareCore National | SC | Business Associate | 1,270 | Sep 20, 2010 | Other | Archive (closed) |
| Matthew H. Conrad, M.D., P.A. | KS | Healthcare Provider | 1,200 | Sep 19, 2010 | Theft | Archive (closed) |
| County of Los Angeles | CA | Healthcare Provider | 33,000 | Sep 17, 2010 | Theft | Archive (closed) |
| Ault Chiropractic Center | IN | Healthcare Provider | 2,000 | Sep 15, 2010 | Theft | Archive (closed) |
| Pediatric and Adult Allergy, PC | IA | Healthcare Provider | 19,222 | Sep 11, 2010 | Loss | Archive (closed) |
| The Kent Center | RI | Healthcare Provider | 1,361 | Sep 10, 2010 | Theft | Archive (closed) |
| LabCorp Patient Service Center | NV | Healthcare Provider | 507 | Sep 10, 2010 | Theft | Archive (closed) |
| Curtis R. Bryan, M.D. | VA | Healthcare Provider | 2,739 | Sep 8, 2010 | Theft | Archive (closed) |
| Mayo Clinic | MN | Healthcare Provider | 1,740 | Sep 8, 2010 | Theft | Archive (closed) |
| Aon Consulting | PA | Business Associate | 22,642 | Sep 7, 2010 | Other | Archive (closed) |
| University of Rochester Medical Center and Affiliates | NY | Healthcare Provider | 857 | Sep 7, 2010 | Loss | Archive (closed) |
| NYU School of Medicine--Aging and Dementia Clinical Research Center | NY | Healthcare Provider | 1,200 | Aug 27, 2010 | Loss | Archive (closed) |
| KPMG LLP | NY | Business Associate | 3,630 | Aug 26, 2010 | Theft | Archive (closed) |
| KPMG LLP | NY | Business Associate | 956 | Aug 26, 2010 | Theft | Archive (closed) |
| Pioneer Valley Pathology | MA | Business Associate | 24,750 | Aug 25, 2010 | Theft | Archive (closed) |
| SunBridge Healthcare Corporation | NM | Healthcare Provider | 1,000 | Aug 25, 2010 | Theft | Archive (closed) |
| Cook County Health & Hospitals System | IL | Healthcare Provider | 7,081 | Aug 20, 2010 | Theft | Archive (closed) |
| Eastmoreland Surgical Clinic, William Graham, DO | OR | Healthcare Provider | 4,328 | Aug 20, 2010 | Theft | Archive (closed) |
| Yale University | CT | Healthcare Provider | 1,000 | Aug 18, 2010 | Theft | Archive (closed) |
| Chattanooga Family Practice Associates, P.C. | TN | Healthcare Provider | 1,711 | Aug 16, 2010 | Loss | Archive (closed) |
| Loma Linda University School of Dentistry | CA | Healthcare Provider | 10,100 | Aug 11, 2010 | Theft | Archive (closed) |
| Ward A. Morris, DDS | WA | Healthcare Provider | 2,698 | Aug 11, 2010 | Theft | Archive (closed) |
| Mercer Health & Benefits | ID | Business Associate | 5,500 | Aug 10, 2010 | Loss | Archive (closed) |
| Thomas Jefferson University Hospitals, Inc. | PA | Healthcare Provider | 21,000 | Aug 9, 2010 | Theft | Archive (closed) |
| UNCG Speech and Hearing Center | NC | Healthcare Provider | 2,300 | Aug 9, 2010 | Hacking/IT Incident | Archive (closed) |
| St. John's Mercy Medical Group | MO | Healthcare Provider | 1,907 | Aug 9, 2010 | Improper Disposal | Archive (closed) |
| Fort Worth Allergy and Asthma Associates | TX | Healthcare Provider | 25,000 | Aug 5, 2010 | Theft | Archive (closed) |
| Aultman Hospital | OH | Healthcare Provider | 13,867 | Aug 5, 2010 | Theft | Archive (closed) |
| McKesson Pharmacy Systems LLC | GA | Business Associate | 11,440 | Aug 5, 2010 | Other | Archive (closed) |
| Jewish Hospital | KY | Healthcare Provider | 2,089 | Aug 5, 2010 | Theft | Archive (closed) |
| Beauty Dental, Inc. | IL | Healthcare Provider | 657 | Aug 5, 2010 | Loss, Theft | Archive (closed) |
| Wright State Physicians | OH | Healthcare Provider | 1,309 | Aug 3, 2010 | Other | Archive (closed) |
| Penn Treaty Network America Insurance Company | PA | Health Plan | 560 | Aug 3, 2010 | Other | Archive (closed) |
| WellPoint, Inc. | IN | Health Plan | 31,700 | Jul 30, 2010 | Hacking/IT Incident | Archive (closed) |
| Matrix Imaging | NY | Business Associate | 2,631 | Jul 30, 2010 | Theft | Archive (closed) |
| Baylor College of Medicine | TX | Healthcare Provider | 1,646 | Jul 30, 2010 | Theft | Archive (closed) |
| Carolina Center for Development and Rehabilitation | NC | Healthcare Provider | 1,590 | Jul 30, 2010 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.