HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 22 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Mary B. Toporcer, MD, P.C. | PA | Healthcare Provider | 501 | May 28, 2025 | Hacking/IT Incident | Under investigation |
| Cahaba Center for Mental Health | AL | Healthcare Provider | 15,085 | May 27, 2025 | Hacking/IT Incident | Archive (closed) |
| The Cooper Health System | NJ | Healthcare Provider | 57,412 | May 23, 2025 | Hacking/IT Incident | Under investigation |
| UChicago Medicine Medical Group | IL | Healthcare Provider | 38,656 | May 23, 2025 | Hacking/IT Incident | Archive (closed) |
| Shore Medical Center | NJ | Healthcare Provider | 31,177 | May 23, 2025 | Hacking/IT Incident | Archive (closed) |
| North Shore University Hospital Sleep Disorders Center | NY | Healthcare Provider | 13,332 | May 23, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Sports Physical Therapy, Occupational Therapy and Rehabilitation Services of the North Shore, P.L.L.C | NY | Healthcare Provider | 6,195 | May 23, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Access2Day Health | LA | Business Associate | 4,908 | May 23, 2025 | Hacking/IT Incident | Archive (closed) |
| Family Health Services, Inc. | NE | Business Associate | 4,025 | May 23, 2025 | Hacking/IT Incident | Archive (closed) |
| NHPP Physical Medicine and Rehabilitation | NY | Healthcare Provider | 1,353 | May 23, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Connections for Kids | ME | Healthcare Provider | 938 | May 23, 2025 | Hacking/IT Incident | Archive (closed) |
| HopeWay Foundation | NC | Healthcare Provider | 3,523 | May 20, 2025 | Hacking/IT Incident | Archive (closed) |
| Instituto de Ojos de Puerto Rico | Healthcare Provider | 50,000 | May 19, 2025 | Hacking/IT Incident | Archive (closed) | |
| Community Hospital of Anaconda | MT | Healthcare Provider | 21,243 | May 19, 2025 | Hacking/IT Incident | Under investigation |
| Swedish Edmonds Hospital | WA | Healthcare Provider | 886 | May 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Harbin Clinic, LLC | GA | Healthcare Provider | 176,149 | May 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Compassion Health Care, Inc. | NC | Healthcare Provider | 23,282 | May 16, 2025 | Hacking/IT Incident | Under investigation |
| Radiology Chartered | WI | Healthcare Provider | 12,656 | May 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Mercy Surgical Dressing Group, Inc. | PA | Business Associate | 4,159 | May 16, 2025 | Hacking/IT Incident | Under investigation |
| Balance Autism | IA | Healthcare Provider | 1,281 | May 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Insulet Corporation | MA | Healthcare Provider | 841 | May 16, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Weiser Valley Hospital District dba Weiser Memorial Hospital | ID | Healthcare Provider | 59,990 | May 15, 2025 | Hacking/IT Incident | Under investigation |
| Doctors Hospital at Renaissance, LTD | TX | Healthcare Provider | 34,060 | May 15, 2025 | Hacking/IT Incident | Archive (closed) |
| Hunter Health Clinic | KS | Healthcare Provider | 28,431 | May 15, 2025 | Hacking/IT Incident | Under investigation |
| CareNexa, LLC, doing business as Molecular Testing Labs | WA | Healthcare Provider | 7,711 | May 15, 2025 | Hacking/IT Incident | Under investigation |
| HopeHealth, Inc. | SC | Healthcare Provider | 5,823 | May 15, 2025 | Hacking/IT Incident | Archive (closed) |
| Midlothian Pharmacy Compounding & Prescription | TX | Healthcare Provider | 1,000 | May 15, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Anne Arundel County Department of Health | MD | Healthcare Provider | 500 | May 15, 2025 | Hacking/IT Incident | Under investigation |
| Union County Children and Youth Services | PA | Healthcare Provider | 4,157 | May 13, 2025 | Hacking/IT Incident | Archive (closed) |
| CVS Caremark | RI | Business Associate | 2,599 | May 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| InSider Vision, LLC | CO | Healthcare Provider | 1,426 | May 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Serviceaide, Inc. | CA | Business Associate | 483,126 | May 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Marlboro-Chesterfield Pathology, P.C. | NC | Healthcare Provider | 235,911 | May 9, 2025 | Hacking/IT Incident | Archive (closed) |
| THE CARING HEALTHCARE NETWORK, LLC | PA | Healthcare Provider | 1,019 | May 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross Blue Shield of Texas | IL | Business Associate | 593 | May 9, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Washington Gastroenterology | WA | Healthcare Provider | 501 | May 9, 2025 | Hacking/IT Incident | Archive (closed) |
| Tri-City Cardiology Consultants, P.C. | AZ | Healthcare Provider | 22,753 | May 8, 2025 | Hacking/IT Incident | Under investigation |
| Allied Services Division Welfare Fund | IL | Health Plan | 5,727 | May 7, 2025 | Hacking/IT Incident | Under investigation |
| SunLink Health Systems, Inc. | GA | Healthcare Provider | 2,856 | May 6, 2025 | Hacking/IT Incident | Archive (closed) |
| The Carpenter Health Network | LA | Healthcare Provider | 878 | May 6, 2025 | Hacking/IT Incident | Under investigation |
| Primary Health Care, Inc. | IA | Healthcare Provider | 787 | May 6, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Minnesota Orthodontics and Dentofacial Orthopedics, P.A. | MN | Healthcare Provider | 501 | May 5, 2025 | Hacking/IT Incident | Under investigation |
| Monongalia Health System, Inc. | WV | Healthcare Provider | 4,895 | May 3, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Schewitz Psychological Services dba Couples Learn | ME | Healthcare Provider | 3,700 | May 3, 2025 | Hacking/IT Incident | Archive (closed) |
| CardioVascular Health Clinic | OK | Healthcare Provider | 501 | May 3, 2025 | Hacking/IT Incident | Under investigation |
| DermCare Management | FL | Business Associate | 1,361,735 | May 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Absolute Dental Group, LLC | NV | Business Associate | 1,223,635 | May 2, 2025 | Hacking/IT Incident | Under investigation |
| Shelby Dermatology d.b.a Dermatologists of Birmingham | AL | Healthcare Provider | 86,414 | May 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Anesthesia Associates of Morristown, P.A. | NJ | Healthcare Provider | 34,675 | May 2, 2025 | Improper Disposal | Archive (closed) |
| Sonrisas Dental Health | CA | Healthcare Provider | 15,644 | May 2, 2025 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.