HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 17 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Methodist South Emergency Physicians, PLLC | TN | Healthcare Provider | 601 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Pensacola Emergency Physicians, LLC | FL | Healthcare Provider | 511 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Survival Flight, Inc. | AZ | Healthcare Provider | 97,217 | Sep 15, 2025 | Hacking/IT Incident | Under investigation |
| Millennium Health Systems, LLC | NJ | Healthcare Provider | 501 | Sep 15, 2025 | Hacking/IT Incident | Under investigation |
| Sandhills Medical Foundation | SC | Healthcare Provider | 169,017 | Sep 14, 2025 | Hacking/IT Incident | Under investigation |
| Saint Anthony Hospital | IL | Healthcare Provider | 6,679 | Sep 12, 2025 | Hacking/IT Incident | Under investigation |
| Roush Fenway Keselowski Racing, LLC | NC | Health Plan | 2,160 | Sep 12, 2025 | Hacking/IT Incident | Archive (closed) |
| North Penn Comprehensive Health Services d.b.a Laurel Health Centers | PA | Healthcare Provider | 991 | Sep 12, 2025 | Hacking/IT Incident | Under investigation |
| Hampton Regional Medical Center | SC | Healthcare Provider | 501 | Sep 12, 2025 | Hacking/IT Incident | Archive (closed) |
| Cookeville Regional Medical Center | TN | Healthcare Provider | 500 | Sep 12, 2025 | Hacking/IT Incident | Archive (closed) |
| Franklin Dermatology Group, PLC | TN | Healthcare Provider | 2,457 | Sep 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Western Skies Wellness LLC | OR | Healthcare Provider | 1,700 | Sep 11, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| PGA Development, Inc. | PA | Healthcare Provider | 23,899 | Sep 10, 2025 | Hacking/IT Incident | Under investigation |
| Texas Center for Infectious Disease Associates | TX | Healthcare Provider | 1,236 | Sep 10, 2025 | Hacking/IT Incident | Under investigation |
| R.F.M.S. Inc. | IL | Business Associate | 43,009 | Sep 9, 2025 | Hacking/IT Incident | Under investigation |
| Medical Associates of Brevard, LLC | FL | Healthcare Provider | 246,711 | Sep 5, 2025 | Hacking/IT Incident | Under investigation |
| Somerset County Children and Youth Services | PA | Healthcare Provider | 2,251 | Sep 5, 2025 | Hacking/IT Incident | Archive (closed) |
| Coos County Family Health Services | NH | Healthcare Provider | 501 | Sep 5, 2025 | Hacking/IT Incident | Under investigation |
| Twin Cities Pain Clinic | MN | Healthcare Provider | 3,572 | Sep 4, 2025 | Hacking/IT Incident | Under investigation |
| Retina Group of Florida | FL | Healthcare Provider | 152,691 | Sep 3, 2025 | Hacking/IT Incident | Under investigation |
| Teamsters Union 25 Health Services & Insurance Plan | MA | Health Plan | 19,231 | Sep 3, 2025 | Hacking/IT Incident | Under investigation |
| Sentara Health | VA | Healthcare Provider | 696 | Sep 3, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| North Oaks Health System | LA | Healthcare Provider | 6,243 | Sep 2, 2025 | Hacking/IT Incident | Under investigation |
| La Perouse, LLC | NV | Business Associate | 501 | Sep 2, 2025 | Hacking/IT Incident | Under investigation |
| University of Iowa Community Home Care | IA | Healthcare Provider | 109,029 | Aug 29, 2025 | Hacking/IT Incident | Archive (closed) |
| University of Iowa Health Care | IA | Healthcare Provider | 101,875 | Aug 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Meridian Valley Laboratories, Inc. | WA | Healthcare Provider | 16,341 | Aug 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Reimagine Network | CA | Healthcare Provider | 4,799 | Aug 29, 2025 | Hacking/IT Incident | Under investigation |
| Carrollton Ear, Nose and Throat, PC | GA | Healthcare Provider | 3,569 | Aug 29, 2025 | Hacking/IT Incident | Under investigation |
| Anthony L. Jordan Health Corporation | NY | Healthcare Provider | 2,974 | Aug 29, 2025 | Hacking/IT Incident | Under investigation |
| Children's Center of Hamden | CT | Healthcare Provider | 5,213 | Aug 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Northwest Medical Specialties PLLC | WA | Healthcare Provider | 3,864 | Aug 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Greater Pittsburgh Orthopaedics Associates | PA | Healthcare Provider | 35,000 | Aug 27, 2025 | Hacking/IT Incident | Under investigation |
| Woodlawn Hospital | IN | Healthcare Provider | 62,278 | Aug 25, 2025 | Hacking/IT Incident | Archive (closed) |
| Pacific Imaging Management, LLC | CA | Healthcare Provider | 13,158 | Aug 25, 2025 | Hacking/IT Incident | Under investigation |
| College Hometown Pharmacy | NY | Healthcare Provider | 9,742 | Aug 25, 2025 | Hacking/IT Incident | Under investigation |
| College Parkside Pharmacy | NY | Healthcare Provider | 5,736 | Aug 25, 2025 | Hacking/IT Incident | Under investigation |
| Assisted Living Pharmacy Service, LLC | WI | Healthcare Provider | 5,590 | Aug 25, 2025 | Hacking/IT Incident | Under investigation |
| Prime Therapeutics LLC | MN | Business Associate | 2,266 | Aug 25, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Beech Acres Parenting Center | OH | Healthcare Provider | 19,315 | Aug 22, 2025 | Hacking/IT Incident | Under investigation |
| zizzl llc | WI | Business Associate | 2,416 | Aug 22, 2025 | Hacking/IT Incident | Archive (closed) |
| C. B. King Memorial School | AR | Healthcare Provider | 838 | Aug 22, 2025 | Hacking/IT Incident | Under investigation |
| Independent Health Association, Inc. | NY | Health Plan | 637 | Aug 22, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Vance County Department of Social Services | NC | Business Associate | 501 | Aug 22, 2025 | Hacking/IT Incident | Under investigation |
| Vital Imaging Medical Diagnostic Centers, LLC | FL | Healthcare Provider | 111,509 | Aug 21, 2025 | Hacking/IT Incident | Under investigation |
| Preferred Hospital Leasing Hemphill Inc., d/b/a Sabine County Hospital | TX | Healthcare Provider | 7,600 | Aug 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Rehabilitation Support Services | NY | Healthcare Provider | 1,237 | Aug 21, 2025 | Hacking/IT Incident | Archive (closed) |
| McEwen & Associates | TX | Business Associate | 500 | Aug 21, 2025 | Hacking/IT Incident | Under investigation |
| McEwen & Associates | TX | Business Associate | 500 | Aug 21, 2025 | Hacking/IT Incident | Under investigation |
| McEwen & Associates | TX | Business Associate | 500 | Aug 21, 2025 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.