HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 161 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| United Micro Data | ID | Business Associate | 2,562 | Jan 14, 2010 | Theft | Archive (closed) |
| Kaiser Permanente Medical Care Program | CA | Healthcare Provider | 15,500 | Jan 12, 2010 | Theft | Archive (closed) |
| Merkle Direct Marketing | MD | Business Associate | 15,000 | Jan 11, 2010 | Theft | Archive (closed) |
| Service Benefits Plan Administrative Services Corp | DC | Business Associate | 3,400 | Jan 8, 2010 | Theft | Archive (closed) |
| Massachusetts Eye and Ear Infirmary | MA | Healthcare Provider | 1,076 | Jan 8, 2010 | Theft | Archive (closed) |
| Daniel J. Sigman MD PC | MA | Business Associate | 1,860 | Jan 7, 2010 | Theft | Archive (closed) |
| Detroit Department of Health and Wellness Promotion | MI | Healthcare Provider | 10,000 | Dec 15, 2009 | Theft | Archive (closed) |
| Detroit Department of Health and Wellness Promotion | MI | Healthcare Provider | 646 | Dec 15, 2009 | Theft | Archive (closed) |
| University of California, San Francisco | CA | Healthcare Provider | 610 | Dec 15, 2009 | Other | Archive (closed) |
| Rick Lawson, Professional Computer Services | NC | Business Associate | 2,000 | Dec 11, 2009 | Theft | Archive (closed) |
| Kern Medical Center | CA | Healthcare Provider | 596 | Dec 10, 2009 | Theft | Archive (closed) |
| Democracy Data & Communications, LLC ( | VA | Business Associate | 83,000 | Dec 8, 2009 | Other | Archive (closed) |
| Cogent Healthcare, Inc. | TN | Business Associate | 6,400 | Nov 25, 2009 | Theft | Archive (closed) |
| The Children's Hospital of Philadelphia | PA | Healthcare Provider | 943 | Nov 24, 2009 | Theft | Archive (closed) |
| City of Hope National Medical Center | CA | Healthcare Provider | 5,900 | Nov 23, 2009 | Theft | Archive (closed) |
| Michele Del Vicario, MD | CA | Healthcare Provider | 6,145 | Nov 20, 2009 | Theft | Archive (closed) |
| L. Douglas Carlson, M.D. | CA | Healthcare Provider | 5,257 | Nov 20, 2009 | Theft | Archive (closed) |
| Mark D. Lurie, MD | CA | Healthcare Provider | 5,166 | Nov 20, 2009 | Theft | Archive (closed) |
| Joseph F. Lopez, MD | CA | Healthcare Provider | 952 | Nov 20, 2009 | Theft | Archive (closed) |
| David I. Cohen, MD | CA | Healthcare Provider | 857 | Nov 20, 2009 | Theft | Archive (closed) |
| Health Services for Children with Special Needs, Inc. | DC | Health Plan | 3,800 | Nov 17, 2009 | Loss | Archive (closed) |
| Alaska Department of Health and Social Services | AK | Healthcare Provider | 501 | Oct 30, 2009 | Theft | Archive (closed) |
| Mid America Kidney Stone Association, LLC | MO | Healthcare Provider | 1,000 | Oct 28, 2009 | Theft | Archive (closed) |
| Brooke Army Medical Center | TX | Healthcare Provider | 1,000 | Oct 21, 2009 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.