HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 16 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Walgreen Co. | IL | Healthcare Provider | 2,708 | Sep 30, 2025 | Loss | Archive (closed) |
| Weekend Health, LLC | NY | Business Associate | 1,643 | Sep 30, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Shield of California | CA | Health Plan | 93,921 | Sep 29, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Superior Vision Services, Inc. | NY | Business Associate | 25,341 | Sep 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Thomas Davies, DPM | NY | Healthcare Provider | 14,581 | Sep 29, 2025 | Hacking/IT Incident | Archive (closed) |
| North Carolina Department of Health and Human Services | NC | Health Plan | 3,437 | Sep 29, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Belkorp Ag, LLC | CA | Health Plan | 942 | Sep 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Blue Shield of California | CA | Business Associate | 607 | Sep 29, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| VIVA Health | AL | Health Plan | 4,945 | Sep 26, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Intercommunity Action Inc. | PA | Healthcare Provider | 2,680 | Sep 26, 2025 | Hacking/IT Incident | Archive (closed) |
| Emergency Responders Health Center | ID | Healthcare Provider | 1,528 | Sep 26, 2025 | Hacking/IT Incident | Under investigation |
| Gainwell Technologies LLC | TX | Business Associate | 912 | Sep 26, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Rockhill Women’s Care | MO | Healthcare Provider | 70,129 | Sep 25, 2025 | Hacking/IT Incident | Under investigation |
| Susan B. Allen Memorial Hospital | KS | Healthcare Provider | 11,866 | Sep 25, 2025 | Hacking/IT Incident | Under investigation |
| Valley Radiology | CA | Healthcare Provider | 1,166 | Sep 25, 2025 | Hacking/IT Incident | Under investigation |
| Doctors Imaging Group | FL | Healthcare Provider | 171,862 | Sep 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Philadelphia Corporation for Aging (PCA) | PA | Business Associate | 410,491 | Sep 23, 2025 | Hacking/IT Incident | Under investigation |
| Outcomes One, Inc. | FL | Business Associate | 257,481 | Sep 23, 2025 | Hacking/IT Incident | Archive (closed) |
| Veradigm LLC | IL | Business Associate | 2,672,036 | Sep 22, 2025 | Hacking/IT Incident | Under investigation |
| City of St. Joseph, MO Health Department | MO | Healthcare Provider | 11,538 | Sep 22, 2025 | Hacking/IT Incident | Under investigation |
| Healthcare Interactive | MD | Business Associate | 501 | Sep 22, 2025 | Hacking/IT Incident | Under investigation |
| Health & Palliative Services of the Treasure Coast, Inc d/b/a Treasure Coast Hospice (“Treasure Health”) | FL | Healthcare Provider | 13,234 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| People Encouraging People | MD | Healthcare Provider | 13,083 | Sep 19, 2025 | Hacking/IT Incident | Under investigation |
| UNC Hospitals | NC | Healthcare Provider | 6,377 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Herr Foods, Inc. | PA | Healthcare Provider | 1,164 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| The University of North Carolina at Chapel Hill - School of Medicine | NC | Healthcare Provider | 799 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Sturgis Hospital | MI | Health Plan | 77,771 | Sep 18, 2025 | Hacking/IT Incident | Archive (closed) |
| Sturgis Hospital | MI | Healthcare Provider | 77,771 | Sep 18, 2025 | Hacking/IT Incident | Archive (closed) |
| Ennoble Care & Circa Health, LLC | NJ | Healthcare Provider | 36,332 | Sep 18, 2025 | Hacking/IT Incident | Under investigation |
| Sun Valley Surgery Center | NV | Healthcare Provider | 27,001 | Sep 18, 2025 | Hacking/IT Incident | Under investigation |
| Goshen Medical Center | NC | Healthcare Provider | 456,385 | Sep 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Trusteed Plan Services Corporation | WA | Business Associate | 7,977 | Sep 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Navesink Rehab | NJ | Healthcare Provider | 1,428 | Sep 17, 2025 | Hacking/IT Incident | Under investigation |
| Munson Healthcare | MI | Healthcare Provider | 1,186 | Sep 17, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Passaic Hospitalist Services, LLC | NJ | Healthcare Provider | 8,463 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Pensacola Hospitalist Physicians, LLC | FL | Healthcare Provider | 6,052 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Broad River Physicians Group, LLC | SC | Healthcare Provider | 3,295 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Olive Branch Emergency Physicians, LLC | MS | Healthcare Provider | 2,514 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Tennessee River Physicians, PLLC | TN | Healthcare Provider | 2,363 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Aurora Emergency Physicians, LLC | IL | Healthcare Provider | 2,176 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Germantown Emergency Physicians, PLLC | TN | Healthcare Provider | 2,084 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Passaic River Physicians, LLC | NJ | Healthcare Provider | 1,972 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Trinity Emergency Physicians, LLC | AL | Healthcare Provider | 1,491 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| The Bortolazzo Group, LLC | GA | Healthcare Provider | 1,491 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist University Emergency Physicians, PLLC | TN | Healthcare Provider | 1,070 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist North Emergency Physicians, PLLC | TN | Healthcare Provider | 699 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Mobile Emergency Physicians, LLC | AL | Healthcare Provider | 672 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Cookeville Hospitalist Group, PLLC | TN | Healthcare Provider | 654 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Lorain Emergency Physicians, LLC | OH | Healthcare Provider | 628 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Pennsylvania Hospitalist Group, LLC | PA | Healthcare Provider | 615 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.