HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 160 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Rockbridge Area Community Services | VA | Healthcare Provider | 500 | Apr 29, 2010 | Theft | Archive (closed) |
| South Texas Veterans Health Care System | TX | Healthcare Provider | 1,430 | Apr 28, 2010 | Improper Disposal, Loss | Archive (closed) |
| TOWERS WATSON | VA | Business Associate | 1,874 | Apr 27, 2010 | Theft | Archive (closed) |
| UnitedHealth Group health plan single affiliated covered entity | MN | Health Plan | 735 | Apr 27, 2010 | Theft | Archive (closed) |
| Medical Center At Bowling Green | KY | Healthcare Provider | 5,148 | Apr 26, 2010 | Theft | Archive (closed) |
| John Muir Physician Network | CA | Healthcare Provider | 5,450 | Apr 24, 2010 | Theft | Archive (closed) |
| St. Joseph Heritage Healthcare | CA | Healthcare Provider | 22,012 | Apr 23, 2010 | Theft | Archive (closed) |
| South Carolina Department of Health and Environmental Control | SC | Health Plan | 2,850 | Apr 22, 2010 | Improper Disposal | Archive (closed) |
| Blue Cross & Blue Shield of Rhode Island | RI | Health Plan | 12,000 | Apr 21, 2010 | Theft | Archive (closed) |
| Massachusetts Eye and Ear Infirmary | MA | Healthcare Provider | 3,594 | Apr 20, 2010 | Theft | Archive (closed) |
| Praxair Healthcare Services, Inc. (Home Care Supply in NY) | CT | Healthcare Provider | 54,165 | Apr 19, 2010 | Theft | Archive (closed) |
| Tomah Memorial Hospital | WI | Healthcare Provider | 600 | Apr 16, 2010 | Other | Archive (closed) |
| Affinity Health Plan, Inc. | NY | Health Plan | 344,579 | Apr 14, 2010 | Theft | Archive (closed) |
| Pediatric Sports and Spine Associates | TX | Healthcare Provider | 955 | Apr 9, 2010 | Theft | Archive (closed) |
| McKesson Information Solutions, LLC | GA | Business Associate | 660 | Apr 9, 2010 | Other | Archive (closed) |
| Providence Hospital | MI | Healthcare Provider | 83,945 | Apr 5, 2010 | Other | Archive (closed) |
| VHS Genesis Lab Inc. | IL | Healthcare Provider | 6,800 | Apr 5, 2010 | Loss | Archive (closed) |
| University of Pittsburgh Student Health Center | PA | Healthcare Provider | 8,000 | Apr 2, 2010 | Loss, Theft | Archive (closed) |
| Laboratory Corporation of America / US LABS / Dianon Systems, Inc | AZ | Healthcare Provider | 2,773 | Apr 1, 2010 | Theft | Archive (closed) |
| Computer Program and Systems, Inc. (CPSI) | AL | Business Associate | 768 | Mar 30, 2010 | Archive (closed) | |
| Hypertension, Nephrology, Dialysis and Transplantation, PC | AL | Healthcare Provider | 2,465 | Mar 27, 2010 | Theft | Archive (closed) |
| Griffin Hospital | CT | Healthcare Provider | 957 | Mar 26, 2010 | Hacking/IT Incident | Archive (closed) |
| Mount Sinai Medical Center | FL | Healthcare Provider | 2,600 | Mar 23, 2010 | Theft | Archive (closed) |
| Laboratory Corporation of America/Dynacare Northwest, Inc. | WA | Healthcare Provider | 5,080 | Mar 18, 2010 | Theft | Archive (closed) |
| Lee Memorial Health System | FL | Healthcare Provider | 3,800 | Mar 17, 2010 | Other | Archive (closed) |
| Ernest T. Bice, Jr. DDS, P.A. | TX | Healthcare Provider | 21,000 | Mar 10, 2010 | Theft | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 625 | Mar 9, 2010 | Theft | Archive (closed) |
| Thrivent Financial for Lutherans | WI | Health Plan | 9,500 | Mar 3, 2010 | Theft | Archive (closed) |
| North Carolina Baptist Hospital | NC | Healthcare Provider | 554 | Mar 3, 2010 | Theft | Archive (closed) |
| Wyoming Department of Health | WY | Health Plan | 9,023 | Mar 2, 2010 | Unauthorized Access/Disclosure | Archive (closed) |
| Shands at UF | FL | Healthcare Provider | 12,580 | Mar 1, 2010 | Theft | Archive (closed) |
| Central Brooklyn Medical Group, PC | NY | Healthcare Provider | 500 | Feb 25, 2010 | Theft | Archive (closed) |
| Advanced NeuroSpinal Care | CA | Healthcare Provider | 3,500 | Feb 23, 2010 | Theft | Archive (closed) |
| University of New Mexico Health Sciences Center | NM | Healthcare Provider | 1,900 | Feb 23, 2010 | Other | Archive (closed) |
| Lucille Packard Children's Hospital | CA | Healthcare Provider | 532 | Feb 21, 2010 | Other | Archive (closed) |
| State of TN, Bureau of TennCare | TN | Health Plan | 3,900 | Feb 19, 2010 | Theft | Archive (closed) |
| Cardiology Consultants/Baptist Health Care Corporation | FL | Healthcare Provider | 8,000 | Feb 18, 2010 | Theft | Archive (closed) |
| MSO of Puerto Rico, Inc. | PR | Business Associate | 1,907 | Feb 17, 2010 | Theft | Archive (closed) |
| MSO of Puerto Rico | PR | Business Associate | 605 | Feb 17, 2010 | Theft | Archive (closed) |
| Blue Cross Blue Shield of RI | RI | Business Associate | 528 | Feb 16, 2010 | Other | Archive (closed) |
| Center for Neurosciences | AZ | Healthcare Provider | 1,100 | Feb 10, 2010 | Theft | Archive (closed) |
| Health Behavior Innovations (HBI) | UT | Business Associate | 5,700 | Feb 5, 2010 | Theft | Archive (closed) |
| Carle Clinic Association | IL | Healthcare Provider | 1,300 | Jan 28, 2010 | Theft | Archive (closed) |
| University of California, San Francisco | CA | Healthcare Provider | 7,300 | Jan 27, 2010 | Theft | Archive (closed) |
| The Methodist Hospital | TX | Healthcare Provider | 689 | Jan 25, 2010 | Theft | Archive (closed) |
| Advocate Health Care | IL | Healthcare Provider | 812 | Jan 22, 2010 | Theft | Archive (closed) |
| Ashley and Gray DDS | MO | Healthcare Provider | 9,309 | Jan 19, 2010 | Theft | Archive (closed) |
| Concentra | TX | Healthcare Provider | 900 | Jan 19, 2010 | Theft | Archive (closed) |
| Children's Medical Center of Dallas | TX | Healthcare Provider | 3,800 | Jan 18, 2010 | Loss | Archive (closed) |
| Goodwill Industries of Greater Grand Rapids, Inc. | MI | Healthcare Provider | 10,000 | Jan 15, 2010 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.