HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 20 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cierant Corporation | CT | Business Associate | 232,506 | Jul 3, 2025 | Hacking/IT Incident | Under investigation |
| Arbor Associates, Inc. | MI | Business Associate | 17,040 | Jul 3, 2025 | Hacking/IT Incident | Under investigation |
| City of Franklin | WI | Healthcare Provider | 3,233 | Jul 3, 2025 | Hacking/IT Incident | Under investigation |
| Urology Associates of Charleston | SC | Healthcare Provider | 2,060 | Jul 3, 2025 | Hacking/IT Incident | Under investigation |
| Radiology Associates of Richmond, Inc. | VA | Healthcare Provider | 1,419,091 | Jul 1, 2025 | Hacking/IT Incident | Under investigation |
| Heart of America Medical Center (“HAMC”) | ND | Healthcare Provider | 29,430 | Jul 1, 2025 | Hacking/IT Incident | Under investigation |
| Kotel ATX PLLC dba Heading Health | TX | Healthcare Provider | 650 | Jul 1, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Centers for Medicare & Medicaid Services | MD | Health Plan | 107,154 | Jun 30, 2025 | Hacking/IT Incident | Under investigation |
| Texas Center for Infectious Disease Associates | TX | Healthcare Provider | 19,481 | Jun 30, 2025 | Hacking/IT Incident | Under investigation |
| Clinical Practices of the University of Pennsylvania | PA | Healthcare Provider | 1,432 | Jun 30, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Compumedics USA, Inc. | NC | Business Associate | 318,150 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Horizon Healthcare RCM | IN | Healthcare Clearing House | 210,901 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Heartland Regional Medical Center d/b/a Mosaic Life Care | MO | Healthcare Provider | 145,269 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| California Cancer Associates for Research and Excellence - High Desert | CA | Healthcare Provider | 17,250 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Lake City Cancer Care, LLC | FL | Healthcare Provider | 15,142 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Radiation Oncology Network of Southern California, LLC | CA | Healthcare Provider | 12,944 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Oncology Care | WY | Healthcare Provider | 10,268 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| e+ Oncologics Louisiana, LLC | LA | Healthcare Provider | 8,270 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| California Cancer Associates for Research and Excellence - Fresno | CA | Healthcare Provider | 7,670 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Southwest Urology | OH | Healthcare Provider | 7,214 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of Northern Colorado | CO | Healthcare Provider | 4,824 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Mojave Radiation Oncology Medical Group | CA | Healthcare Provider | 4,403 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Fairbanks Urology | AK | Healthcare Provider | 4,289 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Integrated Oncology Network | TN | Business Associate | 4,174 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| South Georgia Center for Cancer Care, LLC | GA | Healthcare Provider | 4,108 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of Tulsa | OK | Healthcare Provider | 3,159 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of The Woodlands | TX | Healthcare Provider | 2,978 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Denali Biomedical | AK | Healthcare Provider | 2,413 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Acadiana Radiation Therapy, LLC | LA | Healthcare Provider | 2,219 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Golden State Radiation Oncology | CA | Healthcare Provider | 2,130 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of Dallas Northeast | TX | Healthcare Provider | 1,935 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Orange County Radiation Oncology Medical Group | CA | Healthcare Provider | 1,911 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of Sugar Land | TX | Healthcare Provider | 1,808 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PET Imaging of Houston Medical Center | TX | Healthcare Provider | 1,236 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Bardmoor Cancer Center | FL | Healthcare Provider | 991 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Cancer Care Center of North Florida-Lake Butler | FL | Healthcare Provider | 976 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| California Cancer Associates for Research and Excellence - San Diego | CA | Healthcare Provider | 638 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| PDCM Insurance | IA | Business Associate | 501 | Jun 27, 2025 | Hacking/IT Incident | Under investigation |
| Amalgamated Meat Cutters and Retail Food Store Employees Union Local 342 Health Care Fund | NY | Health Plan | 56,615 | Jun 26, 2025 | Hacking/IT Incident | Under investigation |
| Jordan Drug, Inc. | KY | Healthcare Provider | 4,947 | Jun 26, 2025 | Hacking/IT Incident | Archive (closed) |
| Clement Manor | WI | Healthcare Provider | 16,046 | Jun 25, 2025 | Hacking/IT Incident | Under investigation |
| McLaren Health Care | MI | Healthcare Provider | 743,131 | Jun 24, 2025 | Hacking/IT Incident | Under investigation |
| Gardner Orthopedics LLC | FL | Healthcare Provider | 47,000 | Jun 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Minneapolis VA Medical Center | MN | Healthcare Provider | 1,099 | Jun 24, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Mainline Health Systems Inc | AR | Healthcare Provider | 101,104 | Jun 23, 2025 | Hacking/IT Incident | Under investigation |
| Blue Shield of California | CA | Business Associate | 673 | Jun 23, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Esse Health | MO | Healthcare Provider | 23,671 | Jun 20, 2025 | Hacking/IT Incident | Under investigation |
| Los Angeles County Developmental Services Fdn., Inc. dba Frank D. Lanterman Regional Ctr. | CA | Healthcare Provider | 19,000 | Jun 20, 2025 | Hacking/IT Incident | Under investigation |
| Retina Associates of Cleveland, Inc. | OH | Healthcare Provider | 3,604 | Jun 20, 2025 | Hacking/IT Incident | Under investigation |
| Harbor | OH | Healthcare Provider | 2,703 | Jun 20, 2025 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.