Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 26 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Total Medical ImagingFLHealthcare Provider27,000Feb 28, 2025Unauthorized Access/DisclosureUnder investigation
Stram Center for Integrative MedicineNYHealthcare Provider15,263Feb 28, 2025TheftArchive (closed)
CEI Vision Partners, LLCMOBusiness Associate10,841Feb 28, 2025Hacking/IT IncidentUnder investigation
East Hawaii Rehab, Inc. DBA Lehua Physical Therapy and RehabHIHealthcare Provider8,472Feb 28, 2025TheftUnder investigation
Scott County, IowaIAHealthcare Provider4,336Feb 28, 2025Hacking/IT IncidentArchive (closed)
NVW Newco, LLCAZHealthcare Provider3,232Feb 28, 2025Unauthorized Access/DisclosureArchive (closed)
Kronick Moskovitz Tiedemann & GirardCABusiness Associate2,511Feb 28, 2025Hacking/IT IncidentUnder investigation
United Community Health CenterIAHealthcare Provider750Feb 28, 2025Hacking/IT IncidentArchive (closed)
Blue Shield of CaliforniaCAHealth Plan624Feb 28, 2025Unauthorized Access/DisclosureArchive (closed)
Carolina Arthritis AssociatesNCHealthcare Provider36,961Feb 27, 2025Hacking/IT IncidentArchive (closed)
SMC Corporation of AmericaINHealth Plan6,566Feb 27, 2025Hacking/IT IncidentArchive (closed)
Atlantis Operating LLC d/b/a The Phoenix Rehabilitation and Nursing CenterNYHealthcare Provider6,459Feb 26, 2025Hacking/IT IncidentArchive (closed)
HHH Acquisition, LLC d/b/a The Grove at Valhalla Rehabilitation and Nursing CenterNYHealthcare Provider4,196Feb 26, 2025Hacking/IT IncidentArchive (closed)
Palmetto Operating LLC d/b/a Palmetto Subacute Care Center (‘Palmetto’)FLHealthcare Provider2,746Feb 26, 2025Unauthorized Access/DisclosureArchive (closed)
Lake Washington VascularWAHealthcare Provider21,534Feb 25, 2025Hacking/IT IncidentUnder investigation
Bassford Remele P.A.MNBusiness Associate4,435Feb 25, 2025Hacking/IT IncidentArchive (closed)
Artistic Family DentalINHealthcare Provider3,915Feb 25, 2025Hacking/IT IncidentArchive (closed)
Roswell Park Comprehensive Cancer CenterNYHealthcare Provider11,435Feb 24, 2025TheftArchive (closed)
HealthRev Partners, LLCMOBusiness Associate1,446Feb 20, 2025Hacking/IT IncidentArchive (closed)
Central New York CardiologyNYHealthcare Provider93,983Feb 19, 2025Hacking/IT IncidentArchive (closed)
Life UniversityGAHealthcare Provider3,389Feb 17, 2025Hacking/IT IncidentArchive (closed)
Consultants in Pain MedicineTXHealthcare Provider1,124Feb 16, 2025Hacking/IT IncidentUnder investigation
Charleston Area Medical CenterWVHealthcare Provider67,413Feb 14, 2025Hacking/IT IncidentArchive (closed)
Restorix Health, Inc.LABusiness Associate38,553Feb 14, 2025Unauthorized Access/DisclosureUnder investigation
Somnia, Inc.NYBusiness Associate19,069Feb 14, 2025Hacking/IT IncidentArchive (closed)
Cornerstones of CareMOHealthcare Provider2,771Feb 14, 2025Hacking/IT IncidentUnder investigation
Spring Management OK, LLCOKBusiness Associate2,494Feb 14, 2025Hacking/IT IncidentUnder investigation
Children's Dental Center at Preston Trail, P.C. d/b/a Park Place Pediatric Dentistry (Arlington, TX)TNHealthcare Provider1,690Feb 14, 2025TheftArchive (closed)
CDS in TexasTXHealthcare Provider566Feb 14, 2025Unauthorized Access/DisclosureArchive (closed)
Ottawa Family PhysiciansKSHealthcare Provider19,460Feb 13, 2025Hacking/IT IncidentArchive (closed)
Fillmore County HospitalNEHealthcare Provider3,535Feb 13, 2025Hacking/IT IncidentArchive (closed)
Precision Orthopedics and Sports MedicineMDHealthcare Provider1,903Feb 13, 2025Hacking/IT IncidentArchive (closed)
New Era Life Insurance CompaniesTXHealth Plan335,506Feb 11, 2025Hacking/IT IncidentArchive (closed)
UNITED BACKCARE PS dba Pacific Rehabilitation CentersWAHealthcare Provider18,900Feb 11, 2025Hacking/IT IncidentUnder investigation
Heartland Medical Clinic, Inc. dba Heartland Community Health CenterKSHealthcare Provider43,768Feb 10, 2025Hacking/IT IncidentArchive (closed)
Columbus Division of FireOHHealthcare Provider736Feb 10, 2025Hacking/IT IncidentArchive (closed)
CPS Solutions, LLCOHBusiness Associate500Feb 10, 2025Hacking/IT IncidentUnder investigation
Authority of the City of Bainbridge and Decatur County (“Memorial Hospital & Manor”)GAHealthcare Provider120,085Feb 8, 2025Hacking/IT IncidentArchive (closed)
Blue & Co., LLCINBusiness Associate591,713Feb 7, 2025Hacking/IT IncidentArchive (closed)
St. Andrew’s Resources for Seniors SystemMOHealthcare Provider4,434Feb 7, 2025Hacking/IT IncidentArchive (closed)
VectraRx Mail Pharmacy Services, LLCAZHealthcare Provider109,383Feb 6, 2025Hacking/IT IncidentArchive (closed)
Primary Health-SMMPP, L.C.AZBusiness Associate67,567Feb 6, 2025Hacking/IT IncidentArchive (closed)
Catholic Charities West MichiganMIHealthcare Provider45,115Feb 6, 2025Hacking/IT IncidentArchive (closed)
St. Marys NDS LLCAZBusiness Associate11,715Feb 6, 2025Hacking/IT IncidentArchive (closed)
U.S. HEALTHWORKS-SMMPP, L.C.AZBusiness Associate10,673Feb 6, 2025Hacking/IT IncidentArchive (closed)
Insurance ACE/Humana Inc.KYHealth Plan8,553Feb 6, 2025Unauthorized Access/DisclosureArchive (closed)
The League Treatment CenterNYHealthcare Provider1,826Feb 6, 2025Hacking/IT IncidentArchive (closed)
Escambia Community Clinics, Inc. dba Community Health Northwest FloridaFLHealthcare Provider143,969Feb 3, 2025Hacking/IT IncidentUnder investigation
City of McKinneyTXHealth Plan17,751Feb 3, 2025Unauthorized Access/DisclosureArchive (closed)
Primary Health Services Center, Inc.LAHealthcare Provider17,202Feb 2, 2025Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.