HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 23 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Arizona Arthritis and Rheumatology Associates, P.C. | AZ | Healthcare Provider | 5,509 | May 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Lincoln National Corporation d/b/a Lincoln Financial | IN | Health Plan | 1,123 | May 2, 2025 | Hacking/IT Incident | Archive (closed) |
| The Neurological Institute of Savannah & Center for Spine, P.C | GA | Healthcare Provider | 32,548 | May 1, 2025 | Hacking/IT Incident | Archive (closed) |
| Family Christian Health Center | IL | Healthcare Provider | 48,151 | Apr 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Canby Clinic | OR | Healthcare Provider | 549 | Apr 30, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Berkeley Research Group, LLC | CA | Business Associate | 500 | Apr 30, 2025 | Hacking/IT Incident | Under investigation |
| Physician Wound Solutions, LLC dba Apollo Medical Supply | FL | Healthcare Provider | 3,561 | Apr 29, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Ascension Health | MO | Healthcare Provider | 437,329 | Apr 28, 2025 | Hacking/IT Incident | Under investigation |
| Minnesota Epilepsy Group | MN | Healthcare Provider | 38,401 | Apr 28, 2025 | Hacking/IT Incident | Under investigation |
| Maximus, Inc. | VA | Business Associate | 4,955 | Apr 25, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Carlton County Public Health and Human Services | MN | Healthcare Provider | 3,502 | Apr 25, 2025 | Hacking/IT Incident | Under investigation |
| Prestonwood Baptist Church, Inc. | TX | Health Plan | 501 | Apr 25, 2025 | Hacking/IT Incident | Archive (closed) |
| Palo Verde Hospital | CA | Healthcare Provider | 42,962 | Apr 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Cache Valley Ear Nose & Throat | UT | Healthcare Provider | 26,469 | Apr 24, 2025 | Hacking/IT Incident | Under investigation |
| Drug and Alcohol Treatment Services, Inc. | PA | Healthcare Provider | 22,215 | Apr 24, 2025 | Hacking/IT Incident | Under investigation |
| Brainard Surgery Center LLC | OH | Healthcare Provider | 1,820 | Apr 24, 2025 | Hacking/IT Incident | Under investigation |
| Orthopaedic Specialists of Connecticut | CT | Healthcare Provider | 22,541 | Apr 23, 2025 | Hacking/IT Incident | Under investigation |
| Marc Irwin Sharfman, M.D., P.A. | FL | Healthcare Provider | 650 | Apr 23, 2025 | Hacking/IT Incident | Archive (closed) |
| City of Bristol, Tennessee | TN | Healthcare Provider | 4,708 | Apr 22, 2025 | Hacking/IT Incident | Archive (closed) |
| Charleston Fire Department | WV | Healthcare Provider | 2,583 | Apr 22, 2025 | Hacking/IT Incident | Archive (closed) |
| Icon Family Healthcare LLC | CA | Healthcare Provider | 1,800 | Apr 22, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Eliza Jennings Senior Care Network | OH | Healthcare Provider | 845 | Apr 22, 2025 | Hacking/IT Incident | Archive (closed) |
| Onsite Mammography | MA | Business Associate | 357,265 | Apr 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Union Health System, Inc. | IN | Healthcare Provider | 262,831 | Apr 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Horizon Behavioral Health | VA | Healthcare Provider | 49,303 | Apr 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Rheumatology Associates of Baltimore | MD | Healthcare Provider | 28,968 | Apr 21, 2025 | Hacking/IT Incident | Archive (closed) |
| 90 Degree Benefits, Inc. - St. Paul | WI | Business Associate | 1,268 | Apr 18, 2025 | Hacking/IT Incident | Archive (closed) |
| Langdon Prairie Health | ND | Healthcare Provider | 1,152 | Apr 18, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Cardiology Associates of Fredericksburg | VA | Healthcare Provider | 75,476 | Apr 17, 2025 | Hacking/IT Incident | Archive (closed) |
| WPM Pathology Laboratory, Chartered | KS | Business Associate | 5,694 | Apr 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Thrive Physical Therapy Partners | IL | Business Associate | 3,403 | Apr 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Thrive Physical Therapy Partners | IL | Business Associate | 986 | Apr 16, 2025 | Hacking/IT Incident | Archive (closed) |
| HEALTH AND WELLNESS OF TEXAS | TX | Healthcare Provider | 500 | Apr 16, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Highland Rivers Behavioral Health | GA | Healthcare Provider | 2,253 | Apr 15, 2025 | Hacking/IT Incident | Archive (closed) |
| Magnolia Manor Inc. | GA | Healthcare Provider | 960 | Apr 15, 2025 | Hacking/IT Incident | Archive (closed) |
| The City of Long Beach, CA | CA | Healthcare Provider | 258,191 | Apr 14, 2025 | Hacking/IT Incident | Archive (closed) |
| Bell Ambulance, Inc. | WI | Healthcare Provider | 237,830 | Apr 14, 2025 | Hacking/IT Incident | Under investigation |
| Alternate Solutions Health Network, LLC | OH | Healthcare Provider | 93,589 | Apr 14, 2025 | Hacking/IT Incident | Archive (closed) |
| Bassett Healthcare Network | NY | Healthcare Provider | 5,565 | Apr 14, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| AHS Sherman LLC dba AHS Sherman Medical Center | TX | Healthcare Provider | 908 | Apr 14, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Scharnhorst Ast Kennard Griffin PC | MO | Business Associate | 639 | Apr 14, 2025 | Hacking/IT Incident | Archive (closed) |
| Blue Cross and Blue Shield of Texas | IL | Health Plan | 12,086 | Apr 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross and Blue Shield of Illinois | IL | Health Plan | 6,903 | Apr 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 2,944 | Apr 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross and Blue Shield of Oklahoma | IL | Health Plan | 1,020 | Apr 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Yale New Haven Health System | CT | Healthcare Provider | 5,556,702 | Apr 11, 2025 | Hacking/IT Incident | Archive (closed) |
| Endue Software | ME | Business Associate | 118,028 | Apr 11, 2025 | Hacking/IT Incident | Under investigation |
| Whitman County Public Hospital District No. 3 | WA | Healthcare Provider | 63,453 | Apr 11, 2025 | Hacking/IT Incident | Archive (closed) |
| The Gatesworth Senior Living St. Louis | MO | Healthcare Provider | 31,124 | Apr 11, 2025 | Hacking/IT Incident | Under investigation |
| Parc Provence Memory Care Facility | MO | Healthcare Provider | 13,954 | Apr 11, 2025 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.