HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 24 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Summit Healthcare Medical Associates | AZ | Healthcare Provider | 1,861 | Apr 11, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Altior Healthcare, LLC | CA | Healthcare Provider | 1,002 | Apr 11, 2025 | Hacking/IT Incident | Under investigation |
| Cabot Medical Care | AR | Healthcare Provider | 21,467 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| RHEA MEDICAL CENTER | TN | Healthcare Provider | 8,309 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Boudreaux’s Specialty Compounding Pharmacy | LA | Healthcare Provider | 6,270 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Jacksonville Medical Care | AR | Healthcare Provider | 6,262 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health | TN | Healthcare Provider | 3,193 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Ambleside, Inc. | NC | Healthcare Provider | 501 | Apr 10, 2025 | Hacking/IT Incident | Under investigation |
| Blue Shield of California | CA | Business Associate | 4,700,000 | Apr 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Kelly & Associates Insurance Group, Inc. | MD | Business Associate | 553,332 | Apr 9, 2025 | Hacking/IT Incident | Under investigation |
| California Correctional Health Care Services | CA | Healthcare Provider | 4,105 | Apr 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Alabama Ophthalmology Associates | AL | Healthcare Provider | 131,576 | Apr 8, 2025 | Hacking/IT Incident | Under investigation |
| Benefits Partner, LLC dba Salus Group* | MI | Business Associate | 40,177 | Apr 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Northeast Georgia Health System | GA | Healthcare Provider | 24,849 | Apr 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Hebrew Home for Aged Disabled d/b/a San Francisco Campus for Jewish Living | CA | Healthcare Provider | 2,568 | Apr 7, 2025 | Hacking/IT Incident | Archive (closed) |
| Central Texas Pediatric Orthopedics | TX | Healthcare Provider | 140,000 | Apr 4, 2025 | Hacking/IT Incident | Archive (closed) |
| Worthington Steel Health and Welfare Plan | OH | Health Plan | 4,078 | Apr 4, 2025 | Hacking/IT Incident | Archive (closed) |
| Newburgh Healthcare Residential Center, Inc. | IN | Healthcare Provider | 700 | Apr 4, 2025 | Hacking/IT Incident | Under investigation |
| Friendship House, Inc. | NE | Healthcare Provider | 501 | Apr 4, 2025 | Hacking/IT Incident | Under investigation |
| Loretto Hospital | IL | Healthcare Provider | 501 | Apr 4, 2025 | Hacking/IT Incident | Under investigation |
| Hamilton County Government | TN | Healthcare Provider | 14,081 | Apr 3, 2025 | Hacking/IT Incident | Archive (closed) |
| Dallas County MHMR dba Metrocare Services | TX | Healthcare Provider | 553 | Apr 3, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Dameron Hospital | CA | Healthcare Provider | 210,706 | Apr 2, 2025 | Hacking/IT Incident | Under investigation |
| True Dental Care For Kids and Adults LLC | PA | Healthcare Provider | 17,640 | Apr 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Gilead Sciences, Inc. | CA | Health Plan | 12,224 | Apr 2, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Allegany Council on Alcoholism & Substance Abuse, Inc. | NY | Healthcare Provider | 696 | Apr 2, 2025 | Hacking/IT Incident | Under investigation |
| Health Services LLC | OH | Healthcare Provider | 75,906 | Apr 1, 2025 | Hacking/IT Incident | Under investigation |
| Central District Health Department of Nebraska | NE | Healthcare Provider | 58,519 | Apr 1, 2025 | Hacking/IT Incident | Under investigation |
| Gardner Health Services | CA | Healthcare Provider | 26,000 | Apr 1, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Black Hills Regional Eye Institute | SD | Healthcare Provider | 106,763 | Mar 31, 2025 | Hacking/IT Incident | Archive (closed) |
| Howard Health Systems dba Howard Memorial Hospital | AR | Healthcare Provider | 17,703 | Mar 31, 2025 | Hacking/IT Incident | Archive (closed) |
| Family Centers, Inc. | CT | Healthcare Provider | 12,142 | Mar 31, 2025 | Hacking/IT Incident | Archive (closed) |
| Willamette Family, Inc. | OR | Healthcare Provider | 3,899 | Mar 31, 2025 | Hacking/IT Incident | Under investigation |
| COSE Healthcloud Solutions, LLC | AZ | Healthcare Clearing House | 2,606 | Mar 31, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Frederick Health | MD | Healthcare Provider | 934,326 | Mar 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Community Dental Care, Inc. | MN | Healthcare Provider | 134,903 | Mar 28, 2025 | Hacking/IT Incident | Under investigation |
| North Hudson Community Action Corporation | NJ | Healthcare Provider | 6,595 | Mar 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Samaritan's Purse | NC | Health Plan | 2,351 | Mar 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Mayo Clinic | MN | Healthcare Provider | 1,869 | Mar 28, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Health | VA | Healthcare Provider | 1,620 | Mar 28, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Apria Healthcare LLC | IN | Healthcare Provider | 713 | Mar 28, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Baptist Hospitals of Southeast Texas | TX | Healthcare Provider | 501 | Mar 28, 2025 | Hacking/IT Incident | Under investigation |
| SimonMed Imaging | AZ | Healthcare Provider | 1,275,669 | Mar 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Georgia Urology | GA | Healthcare Provider | 12,398 | Mar 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Mercer County Joint Township Community Hospital | OH | Healthcare Provider | 88,541 | Mar 26, 2025 | Hacking/IT Incident | Archive (closed) |
| Western Wayne Family Physicians | MI | Healthcare Provider | 62,000 | Mar 26, 2025 | Hacking/IT Incident | Archive (closed) |
| MAK Anesthesia | GA | Healthcare Provider | 24,079 | Mar 26, 2025 | Hacking/IT Incident | Archive (closed) |
| Concord Orthopaedics | NH | Healthcare Provider | 72,815 | Mar 25, 2025 | Hacking/IT Incident | Archive (closed) |
| James J. Lynch, MD Ltd. dba Swift Institute | NV | Healthcare Provider | 13,430 | Mar 25, 2025 | Hacking/IT Incident | Under investigation |
| Bigfork Valley Hospital | MN | Healthcare Provider | 8,496 | Mar 25, 2025 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.