HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 18 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Aspire Rural Health System | MI | Healthcare Provider | 138,386 | Aug 20, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Arkansas Primary Care Clinic | AR | Healthcare Provider | 2,491 | Aug 20, 2025 | Hacking/IT Incident | Under investigation |
| Indiana Exceptional Medical care LLC | IN | Healthcare Provider | 1,850 | Aug 20, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| MRI Associates of St. Pete, Inc. d/b/a Saint Pete MRI | FL | Healthcare Provider | 138,209 | Aug 19, 2025 | Hacking/IT Incident | Under investigation |
| Revere Health PC | UT | Healthcare Provider | 605 | Aug 19, 2025 | Hacking/IT Incident | Under investigation |
| Behavioral Health Group | TX | Healthcare Provider | 597 | Aug 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Pediatric Otolaryngology Head & Neck Surgery Associates, P.A. | FL | Healthcare Provider | 43,446 | Aug 18, 2025 | Hacking/IT Incident | Under investigation |
| Bevel Health Medical Group | PA | Healthcare Provider | 510 | Aug 18, 2025 | Unauthorized Access/Disclosure | Under investigation |
| CareTracker, Inc. | NY | Business Associate | 501 | Aug 18, 2025 | Hacking/IT Incident | Under investigation |
| CPAP Medical Supplies and Services Inc. | FL | Healthcare Provider | 90,133 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| Alert Medical Alarms | PA | Healthcare Provider | 39,218 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| Lake City Cancer Care, LLC | FL | Healthcare Provider | 9,980 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| Cancer Care Center of North Florida | FL | Healthcare Provider | 1,798 | Aug 15, 2025 | Hacking/IT Incident | Archive (closed) |
| Welcome Dentistry-Anaheim | CA | Healthcare Provider | 1,001 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| Mower County Health and Human Services | MN | Healthcare Provider | 501 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| Children's Home & Aid dba Brightpoint | IL | Healthcare Provider | 1,051 | Aug 14, 2025 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 1,015 | Aug 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Welcome Dentistry-Los Angeles | CA | Healthcare Provider | 1,001 | Aug 13, 2025 | Hacking/IT Incident | Under investigation |
| Tombigbee Healthcare Authority dba Whitfield Regional Hospital | AL | Healthcare Provider | 58,081 | Aug 12, 2025 | Hacking/IT Incident | Under investigation |
| Zelis Healthcare LLC | MA | Business Associate | 4,289 | Aug 12, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Kathalene Keller Riney NP, LLC DBA Life in Motion Family Wellness Center | IN | Healthcare Provider | 3,747 | Aug 12, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| UnitedHealthcare | CT | Health Plan | 3,215 | Aug 12, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Laurel Cancer Care, LLC | MS | Healthcare Provider | 1,541 | Aug 12, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 6,414 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Dr. Doug's Pediatric Dentistry | UT | Healthcare Provider | 3,590 | Aug 11, 2025 | Hacking/IT Incident | Under investigation |
| Integrated Orthopedics of Arizona | AZ | Healthcare Provider | 2,916 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 2,700 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 2,366 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 1,634 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 1,520 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 1,011 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Altos Inc | CA | Business Associate | 882 | Aug 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Mission City Community Network, Inc. | CA | Healthcare Provider | 11,016 | Aug 9, 2025 | Hacking/IT Incident | Under investigation |
| Aflac Incorporated (“Aflac”) | GA | Health Plan | 13,924,906 | Aug 8, 2025 | Hacking/IT Incident | Under investigation |
| PROVAIL | WA | Healthcare Provider | 4,908 | Aug 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Center for Disability Services, Inc. | NY | Healthcare Provider | 3,343 | Aug 8, 2025 | Hacking/IT Incident | Under investigation |
| Anderson & Kreiger LLP | MA | Business Associate | 1,607 | Aug 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Friesen Group | CA | Healthcare Provider | 500 | Aug 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Oglethorpe, Inc. | FL | Healthcare Provider | 92,332 | Aug 5, 2025 | Hacking/IT Incident | Under investigation |
| South Coast Pediatrics | CA | Healthcare Provider | 7,000 | Aug 5, 2025 | Hacking/IT Incident | Under investigation |
| Precision Endodontics of Raleigh | NC | Healthcare Provider | 4,969 | Aug 5, 2025 | Hacking/IT Incident | Archive (closed) |
| MDLand International Corporation | NY | Business Associate | 22,586 | Aug 4, 2025 | Hacking/IT Incident | Under investigation |
| Westminster Village Greenwood, Inc. | IN | Healthcare Provider | 14,386 | Aug 4, 2025 | Hacking/IT Incident | Under investigation |
| Genoa Community Hospital/LTC | NE | Healthcare Provider | 2,544 | Aug 4, 2025 | Hacking/IT Incident | Archive (closed) |
| West Texas Oral Facial Surgery | TX | Healthcare Provider | 11,151 | Aug 2, 2025 | Hacking/IT Incident | Archive (closed) |
| DaVita Inc. | CO | Healthcare Provider | 2,689,826 | Aug 1, 2025 | Hacking/IT Incident | Under investigation |
| Highlands Oncology Group PA | AR | Healthcare Provider | 111,766 | Aug 1, 2025 | Hacking/IT Incident | Under investigation |
| Langdon & Company, LLP Certified Public Accountants | NC | Business Associate | 46,061 | Aug 1, 2025 | Hacking/IT Incident | Under investigation |
| Western Montana Clinic PC | MT | Healthcare Provider | 8,255 | Aug 1, 2025 | Hacking/IT Incident | Archive (closed) |
| Central Maine Healthcare | ME | Healthcare Provider | 7,223 | Jul 31, 2025 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.