Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 25 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
William F Rinehart DMD PASCHealthcare Provider25,000Mar 24, 2025Hacking/IT IncidentArchive (closed)
Fundamental Administrative Services, LLCMDBusiness Associate56,325Mar 21, 2025Hacking/IT IncidentArchive (closed)
Fyzical Acquisition Holdings, LLCFLBusiness Associate43,045Mar 21, 2025Hacking/IT IncidentUnder investigation
MedRevenu, LLCCABusiness Associate17,775Mar 21, 2025Hacking/IT IncidentUnder investigation
Mid Florida Primary Care, PAFLHealthcare Provider16,435Mar 21, 2025Hacking/IT IncidentUnder investigation
MedicareCompareUSAWABusiness Associate5,782Mar 21, 2025Hacking/IT IncidentUnder investigation
PAR RehabMIHealthcare Provider4,300Mar 21, 2025Hacking/IT IncidentArchive (closed)
AmeriHealth Caritas LouisianaLAHealth Plan1,552Mar 21, 2025Unauthorized Access/DisclosureUnder investigation
Pineland Community Service BoardGAHealthcare Provider19,010Mar 20, 2025Hacking/IT IncidentArchive (closed)
Meigs County Emergency Medical ServicesOHHealthcare Provider5,802Mar 20, 2025Hacking/IT IncidentArchive (closed)
Special Tree Ltd.MIHealthcare Provider3,820Mar 20, 2025Hacking/IT IncidentArchive (closed)
Graphium HealthUTHealthcare Provider1,187Mar 20, 2025Unauthorized Access/DisclosureArchive (closed)
Pinehurst Radiology AssociatesNCHealthcare Provider8,682Mar 19, 2025Hacking/IT IncidentArchive (closed)
Millennium Home Health CareOKHealthcare Provider4,743Mar 19, 2025Hacking/IT IncidentUnder investigation
Heart to Heart Hospice Holdings, LLCTXHealthcare Provider19,034Mar 18, 2025Hacking/IT IncidentArchive (closed)
Dove HealthcareWIHealthcare Provider16,255Mar 18, 2025Hacking/IT IncidentArchive (closed)
The Pavilion at HealthPark, LLC dba Park Royal HospitalFLHealthcare Provider9,349Mar 18, 2025Hacking/IT IncidentArchive (closed)
Presbyterian Health PlanNMHealth Plan7,100Mar 18, 2025Hacking/IT IncidentUnder investigation
Lena Pope Home Inc.TXHealthcare Provider3,523Mar 17, 2025Hacking/IT IncidentUnder investigation
CDHA Management, LLC and Spark DSO, LLC dba Chord Specialty Dental PartnersTNHealthcare Provider173,430Mar 14, 2025Hacking/IT IncidentUnder investigation
Klickitat Valley HealthWAHealthcare Provider26,339Mar 14, 2025Hacking/IT IncidentArchive (closed)
Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty PharmacyNYHealthcare Provider2,348Mar 14, 2025Hacking/IT IncidentArchive (closed)
Topy America Inc.KYHealth Plan1,827Mar 14, 2025Hacking/IT IncidentArchive (closed)
Baylor Scott & White Texas Spine & Joint HospitalTXHealthcare Provider1,640Mar 14, 2025Hacking/IT IncidentUnder investigation
Lake Psychological ServicesPAHealthcare Provider987Mar 14, 2025Hacking/IT IncidentArchive (closed)
Welts, White, & Fontaine PCNHBusiness Associate500Mar 14, 2025Hacking/IT IncidentArchive (closed)
Columbia Eye ClinicSCHealthcare Provider500Mar 14, 2025Hacking/IT IncidentUnder investigation
CHC Solutions, Inc.PAHealthcare Provider794Mar 13, 2025Hacking/IT IncidentArchive (closed)
PACE Greater New OrleansLAHealthcare Provider715Mar 13, 2025Unauthorized Access/DisclosureArchive (closed)
OCH Regional Medical Center, MSMSHealthcare Provider51,266Mar 11, 2025Unauthorized Access/DisclosureArchive (closed)
Vision Upright MRICAHealthcare Provider23,031Mar 10, 2025Unauthorized Access/DisclosureArchive (closed)
Nice Healthcare Management Company, IncMNHealthcare Provider10,000Mar 10, 2025Hacking/IT IncidentUnder investigation
Rocky Mountain Regional VA Medical CenterCOHealthcare Provider1,115Mar 10, 2025Unauthorized Access/DisclosureArchive (closed)
United Seating and Mobility, LLC d/b/a NumotionTNHealthcare Provider529,004Mar 7, 2025Hacking/IT IncidentArchive (closed)
Sunflower Medical Group, P.A.KSHealthcare Provider220,968Mar 7, 2025Hacking/IT IncidentArchive (closed)
Hand & Plastic Surgery Centre, PLCMIHealthcare Provider19,846Mar 7, 2025Hacking/IT IncidentArchive (closed)
St. Charles County Ambulance DistrictMOHealthcare Provider1,265Mar 7, 2025Hacking/IT IncidentArchive (closed)
Fort Wayne Medical Education ProgramINHealthcare Provider28,502Mar 6, 2025Hacking/IT IncidentUnder investigation
SCLARCCABusiness Associate722Mar 6, 2025TheftUnder investigation
Madison County, MSMSHealth Plan6,082Mar 5, 2025Hacking/IT IncidentUnder investigation
Hillcrest Convalescent Center, Inc.NCHealthcare Provider106,194Mar 4, 2025Hacking/IT IncidentArchive (closed)
Liberty Resources, Inc.NYHealthcare Provider103,711Mar 4, 2025Hacking/IT IncidentArchive (closed)
Bay Cove Human Services, Inc.MAHealthcare Provider21,295Mar 3, 2025Hacking/IT IncidentArchive (closed)
Vernon Rehabilitation and Healthcare CenterCTHealthcare Provider5,416Mar 3, 2025Hacking/IT IncidentArchive (closed)
Manchester Rehabilitation and Healthcare CenterCTHealthcare Provider5,415Mar 3, 2025Hacking/IT IncidentUnder investigation
Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle CenterPAHealthcare Provider602Mar 3, 2025TheftArchive (closed)
Community Care AllianceRIHealthcare Provider111,804Mar 1, 2025Hacking/IT IncidentArchive (closed)
Southeast Series of Lockton Companies, LLC (Lockton)GABusiness Associate1,124,727Feb 28, 2025Hacking/IT IncidentUnder investigation
Legacy Professionals, LLPILBusiness Associate216,752Feb 28, 2025Hacking/IT IncidentArchive (closed)
Gaylord Hospital, IncCTHealthcare Provider62,232Feb 28, 2025Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.