HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 21 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Skin Care Specialty Physicians | MD | Healthcare Provider | 1,038 | Jun 19, 2025 | Hacking/IT Incident | Under investigation |
| TRG, LLC | OR | Healthcare Provider | 142,004 | Jun 18, 2025 | Hacking/IT Incident | Archive (closed) |
| Iron County Medical Center | MO | Healthcare Provider | 10,239 | Jun 18, 2025 | Hacking/IT Incident | Archive (closed) |
| Marquette County Medical Care Facility | OH | Healthcare Provider | 1,499 | Jun 18, 2025 | Hacking/IT Incident | Under investigation |
| Winkler County Hospital District | TX | Healthcare Provider | 637 | Jun 17, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Broadwest Specialty Surgical Center | IN | Healthcare Provider | 536 | Jun 17, 2025 | Hacking/IT Incident | Under investigation |
| Cerner Corporation | MO | Business Associate | 501 | Jun 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Central Kentucky Radiology | KY | Healthcare Provider | 166,953 | Jun 13, 2025 | Hacking/IT Incident | Under investigation |
| Diversified Services Enterprises | FL | Business Associate | 61,066 | Jun 13, 2025 | Hacking/IT Incident | Under investigation |
| Mount Rogers Community Services | VA | Healthcare Provider | 38,191 | Jun 13, 2025 | Hacking/IT Incident | Under investigation |
| Decisely Insurance Services, LLC | GA | Business Associate | 24,737 | Jun 13, 2025 | Hacking/IT Incident | Archive (closed) |
| AltaMed Health Services Corporation | CA | Healthcare Provider | 4,530 | Jun 13, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Elmore County | ID | Healthcare Provider | 931 | Jun 13, 2025 | Hacking/IT Incident | Archive (closed) |
| Arkansas Urology Associates PA | AR | Healthcare Provider | 642 | Jun 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Rural Health Services | SC | Healthcare Provider | 36,542 | Jun 12, 2025 | Hacking/IT Incident | Under investigation |
| Imperial Beach Community Clinic | CA | Healthcare Provider | 10,358 | Jun 12, 2025 | Hacking/IT Incident | Under investigation |
| Kelley Drye & Warren LLP | NY | Business Associate | 771 | Jun 12, 2025 | Hacking/IT Incident | Under investigation |
| Clarkston Chiropractic Sports & Wellness | MI | Healthcare Provider | 2,757 | Jun 11, 2025 | Hacking/IT Incident | Under investigation |
| Apex Global Solutions, LLC | NY | Business Associate | 14,741 | Jun 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Repay Management Services, LLC | GA | Health Plan | 606 | Jun 10, 2025 | Hacking/IT Incident | Under investigation |
| Southern Connecticut Vascular Center, LLC | CT | Healthcare Provider | 154,417 | Jun 9, 2025 | Hacking/IT Incident | Archive (closed) |
| Sentara Health | VA | Healthcare Provider | 13,278 | Jun 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Episource, LLC | CA | Business Associate | 6,725,572 | Jun 6, 2025 | Hacking/IT Incident | Under investigation |
| Select Medical Holdings Corporation | PA | Healthcare Provider | 119,525 | Jun 6, 2025 | Hacking/IT Incident | Archive (closed) |
| Sharp Community Medical Group | CA | Healthcare Provider | 26,976 | Jun 6, 2025 | Hacking/IT Incident | Archive (closed) |
| Huron Regional Medical Center, Inc. | SD | Healthcare Provider | 25,398 | Jun 6, 2025 | Hacking/IT Incident | Under investigation |
| NYC Health + Hospitals | NY | Healthcare Provider | 5,728 | Jun 6, 2025 | Hacking/IT Incident | Under investigation |
| Public Health Trust of Miami Dade County DBA Jackson Health System | FL | Healthcare Provider | 2,599 | Jun 6, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Blue Shield of California | CA | Business Associate | 1,543 | Jun 6, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Centivo Corporation | GA | Business Associate | 630 | Jun 6, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Sharp HealthCare | CA | Healthcare Provider | 500 | Jun 6, 2025 | Hacking/IT Incident | Archive (closed) |
| Sensata Technologies, Inc. Health and Welfare Benefit Plan | MA | Health Plan | 15,630 | Jun 5, 2025 | Hacking/IT Incident | Archive (closed) |
| Jupiter Family Medicine PC | MI | Healthcare Provider | 3,000 | Jun 5, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| AffirmedRx PBC | KY | Business Associate | 1,089 | Jun 5, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Renkim Corporation | MI | Business Associate | 105,518 | Jun 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Cumberland County Hospital Association | KY | Healthcare Provider | 36,659 | Jun 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Ocuco Inc | FL | Business Associate | 240,961 | May 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Providia Home Care, LLC dba Preferred Care Home Health Services | FL | Healthcare Provider | 38,401 | May 30, 2025 | Hacking/IT Incident | Under investigation |
| Oliver Street Dermatology Management LLC | TX | Business Associate | 13,717 | May 30, 2025 | Hacking/IT Incident | Under investigation |
| Next Step Healthcare LLC | MA | Healthcare Provider | 12,090 | May 30, 2025 | Hacking/IT Incident | Under investigation |
| Missouri Department of Conservation | MO | Health Plan | 10,260 | May 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Upper Dublin Family Dentistry | PA | Healthcare Provider | 5,000 | May 30, 2025 | Hacking/IT Incident | Under investigation |
| CareOregon, Inc. | OR | Health Plan | 1,786 | May 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Horizon Blue Cross Blue Shield NJ | NJ | Health Plan | 781 | May 30, 2025 | Hacking/IT Incident | Archive (closed) |
| MedStar St. Mary's Hospital | MD | Healthcare Provider | 172,915 | May 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Gateway Community Services, Inc. | FL | Healthcare Provider | 34,498 | May 29, 2025 | Hacking/IT Incident | Under investigation |
| Northwestern Community Services Board | VA | Healthcare Provider | 21,856 | May 29, 2025 | Hacking/IT Incident | Under investigation |
| Covenant Surgical Partners, Inc. | TX | Business Associate | 88,609 | May 28, 2025 | Hacking/IT Incident | Under investigation |
| Erlanger Health | TN | Healthcare Provider | 3,371 | May 28, 2025 | Hacking/IT Incident | Archive (closed) |
| The Smith Institute for Urology | NY | Healthcare Provider | 2,263 | May 28, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.