HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 159 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Mercer | MI | Business Associate | 1,073 | Jul 30, 2010 | Loss | Archive (closed) |
| Texas Children's Hospital | TX | Healthcare Provider | 694 | Jul 30, 2010 | Theft | Archive (closed) |
| Charles Mitchell MD | TX | Healthcare Provider | 6,873 | Jul 28, 2010 | Theft | Archive (closed) |
| Aetna | CT | Health Plan | 6,372 | Jul 27, 2010 | Unauthorized Access/Disclosure | Archive (closed) |
| The University of Texas at Arlington | TX | Healthcare Provider | 27,000 | Jul 23, 2010 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 23,753 | Jul 23, 2010 | Theft | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 16,820 | Jul 23, 2010 | Theft | Archive (closed) |
| Medina OB/GYN Associates, Inc | OH | Business Associate | 1,200 | Jul 23, 2010 | Improper Disposal | Archive (closed) |
| DC Chartered Health Plan, Inc | DC | Health Plan | 540 | Jul 23, 2010 | Theft | Archive (closed) |
| Iron Mountain Data Products, Inc. (now known as | PA | Business Associate | 800,000 | Jul 19, 2010 | Loss | Archive (closed) |
| UnitedHealthcare Insurance Company | MN | Business Associate | 1,097 | Jul 17, 2010 | Other | Archive (closed) |
| Prince William County Community Services (CS) | VA | Healthcare Provider | 669 | Jul 15, 2010 | Theft | Archive (closed) |
| Governor's Office of Information Technology | CO | Business Associate | 105,470 | Jul 9, 2010 | Theft | Archive (closed) |
| SunBridge Healthcare Corporation | NM | Healthcare Provider | 3,830 | Jul 8, 2010 | Theft | Archive (closed) |
| University of Florida | FL | Healthcare Provider | 2,047 | Jul 8, 2010 | Other | Archive (closed) |
| NYU Hospitals Center | NY | Healthcare Provider | 2,563 | Jul 7, 2010 | Theft | Archive (closed) |
| Long Island Consultation Center | NY | Healthcare Provider | 800 | Jul 7, 2010 | Theft | Archive (closed) |
| Care 1st Health Plan | CA | Business Associate | 29,000 | Jul 6, 2010 | Loss, Other | Archive (closed) |
| Centerstone | TN | Healthcare Provider | 1,537 | Jul 2, 2010 | Theft | Archive (closed) |
| Children's Hospital & Research Center at Oakland | CA | Healthcare Provider | 1,000 | Jun 29, 2010 | Other | Archive (closed) |
| Mary M. Desch,MD/PathHealer, LTD | AZ | Healthcare Provider | 5,893 | Jun 28, 2010 | Theft | Archive (closed) |
| Aramark Healthcare Support Services, LLC | PA | Business Associate | 937 | Jun 24, 2010 | Other | Archive (closed) |
| University Health System | NV | Healthcare Provider | 7,526 | Jun 22, 2010 | Theft | Archive (closed) |
| Augusta Data Storage, Inc | GA | Business Associate | 14,000 | Jun 21, 2010 | Loss | Archive (closed) |
| alma aguado md pa | TX | Healthcare Provider | 600 | Jun 21, 2010 | Theft | Archive (closed) |
| University of Kentucky | KY | Healthcare Provider | 2,027 | Jun 18, 2010 | Theft | Archive (closed) |
| Comprehensive Care Management Corporation | NY | Health Plan | 1,020 | Jun 14, 2010 | Theft | Archive (closed) |
| The Children's Medical Center of Dayton | OH | Healthcare Provider | 1,001 | Jun 14, 2010 | Other | Archive (closed) |
| DentaQuest | MA | Business Associate | 10,515 | Jun 9, 2010 | Theft | Archive (closed) |
| St. Jude Children's Research Hospital | TN | Healthcare Provider | 1,745 | Jun 8, 2010 | Loss | Archive (closed) |
| Siemens Medical Solutions, USA, Inc | PA | Business Associate | 130,495 | Jun 4, 2010 | Theft | Archive (closed) |
| UnitedHealth Group health plan single affiliated covered entity | MN | Health Plan | 16,291 | Jun 4, 2010 | Other | Archive (closed) |
| Nihal Saran, MD | MI | Healthcare Provider | 2,300 | Jun 4, 2010 | Theft | Archive (closed) |
| AvMed, Inc. | FL | Health Plan | 1,220,000 | Jun 3, 2010 | Theft | Archive (closed) |
| Cincinnati Childrens Hospital Medical Center | OH | Healthcare Provider | 60,998 | Jun 1, 2010 | Theft | Archive (closed) |
| Occupational Health Partners | KS | Healthcare Provider | 1,105 | Jun 1, 2010 | Theft | Archive (closed) |
| University of Louisville Research Foundation, Inc., DBA The Kidney Disease Program | KY | Healthcare Provider | 708 | Jun 1, 2010 | Hacking/IT Incident | Archive (closed) |
| Rainbow Hospice and Palliative Care | IL | Healthcare Provider | 1,000 | May 26, 2010 | Theft | Archive (closed) |
| VA North Texas Health Care System | TX | Healthcare Provider | 4,083 | May 25, 2010 | Improper Disposal | Archive (closed) |
| City of Charlotte, NC (Health Plan) | NC | Health Plan | 5,220 | May 24, 2010 | Loss | Archive (closed) |
| Omaha Construction Industry , Privacy Manager Breach | NE | Business Associate | 800 | May 21, 2010 | Theft | Archive (closed) |
| University of Rochester Medical Center and Affiliates | NY | Healthcare Provider | 2,628 | May 20, 2010 | Other | Archive (closed) |
| Oconee Physician Practices | SC | Healthcare Provider | 653 | May 20, 2010 | Theft | Archive (closed) |
| Heritage Health Solutions | TX | Business Associate | 656 | May 14, 2010 | Theft | Archive (closed) |
| Silicon Valley Eyecare Optometry and Contact Lenses | CA | Healthcare Provider | 40,000 | May 13, 2010 | Theft | Archive (closed) |
| Georgetown University Hospital | DC | Healthcare Provider | 2,416 | May 13, 2010 | Other, Theft | Archive (closed) |
| Heriberto Rodriguez-Ayala, M.D. | TX | Healthcare Provider | 4,200 | May 11, 2010 | Theft | Archive (closed) |
| VA Eastern Colorado Health Care System | CO | Healthcare Provider | 649 | May 5, 2010 | Theft | Archive (closed) |
| Miami VA Healthcare System | FL | Healthcare Provider | 568 | May 5, 2010 | Theft | Archive (closed) |
| Millennium Medical Management Resources, Inc. | IL | Business Associate | 180,111 | Apr 29, 2010 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.