HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 27 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| ARC Community Services, Inc. | WI | Healthcare Provider | 501 | Feb 2, 2025 | Hacking/IT Incident | Under investigation |
| PIH Health, Inc. | CA | Healthcare Provider | 2,947,264 | Jan 31, 2025 | Hacking/IT Incident | Under investigation |
| Mental Health Association Inc. | MA | Healthcare Provider | 12,633 | Jan 31, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Infosys Public Services, Inc. (“Infosys”) | MD | Business Associate | 2,985 | Jan 31, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Jewish Child Care Association of New York | NY | Business Associate | 1,962 | Jan 31, 2025 | Hacking/IT Incident | Archive (closed) |
| Regence BlueShield | OR | Business Associate | 783 | Jan 31, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Health Center, Inc. | CT | Healthcare Provider | 1,060,936 | Jan 30, 2025 | Hacking/IT Incident | Archive (closed) |
| St Clair Orthopaedics & Sports Medicine | MI | Healthcare Provider | 340,000 | Jan 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Lucent Health Solutions, LLC | TN | Business Associate | 37,000 | Jan 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist Homes of Alabama and Northwest Florida | AL | Healthcare Provider | 8,711 | Jan 30, 2025 | Hacking/IT Incident | Archive (closed) |
| ZI NEUROSCIENCES | NJ | Healthcare Provider | 1,000 | Jan 30, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Cardiology of Virginia, Inc. | VA | Healthcare Provider | 21,085 | Jan 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Endo Group, LLC | NY | Healthcare Provider | 4,498 | Jan 27, 2025 | Hacking/IT Incident | Archive (closed) |
| OrthoMinds, LLC | GA | Business Associate | 89,371 | Jan 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Benefits Management Group, Inc. | IL | Business Associate | 33,484 | Jan 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Spring River Mental Health & Wellness | KS | Healthcare Provider | 3,250 | Jan 24, 2025 | Hacking/IT Incident | Under investigation |
| Aprendamos Family of Services | NM | Healthcare Provider | 1,996 | Jan 23, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Inlet Health dba Communicare | KY | Healthcare Provider | 3,771 | Jan 22, 2025 | Hacking/IT Incident | Under investigation |
| Apex Custom Software | TX | Business Associate | 1,500 | Jan 22, 2025 | Hacking/IT Incident | Archive (closed) |
| University Diagnostic Medical Imaging, PC | NY | Healthcare Provider | 138,080 | Jan 21, 2025 | Hacking/IT Incident | Archive (closed) |
| LittleStar ABA Therapy | IN | Healthcare Provider | 2,530 | Jan 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Holdrege Memorial Homes, Inc. | NE | Healthcare Provider | 1,446 | Jan 20, 2025 | Hacking/IT Incident | Under investigation |
| Asheville Eye Associates, PLLC | NC | Healthcare Provider | 327,756 | Jan 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Allegheny Health Network Home Medical Equipment LLC and Allegheny Health Network Home Infusion LLC | PA | Healthcare Provider | 292,773 | Jan 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Alpine Ears, Nose & Throat, P.L.L.C. | CO | Healthcare Provider | 65,648 | Jan 17, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Behavioral Health Resources | WA | Healthcare Provider | 49,213 | Jan 17, 2025 | Hacking/IT Incident | Under investigation |
| OU Medicine, Inc. | OK | Healthcare Provider | 2,537 | Jan 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Texas Health and Human Services Commission | TX | Health Plan | 61,104 | Jan 16, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Treatment Solutions | NJ | Healthcare Provider | 950 | Jan 16, 2025 | Hacking/IT Incident | Under investigation |
| Alliant Health Plans | GA | Health Plan | 695 | Jan 16, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Square Medical Group, LLC | MA | Healthcare Provider | 2,363 | Jan 15, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Bankers Cooperative Group, Inc. | NJ | Business Associate | 14,403 | Jan 14, 2025 | Hacking/IT Incident | Archive (closed) |
| Han Van Duong M.D. Inc | CA | Healthcare Provider | 1,571 | Jan 14, 2025 | Theft | Archive (closed) |
| Mid America Physician Services | KS | Healthcare Provider | 104,513 | Jan 13, 2025 | Hacking/IT Incident | Under investigation |
| Veterans Health Administration | DC | Healthcare Provider | 1,847 | Jan 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Newport Harbor Pathology Medical Group, Inc. | CA | Healthcare Provider | 119,341 | Jan 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Samaritan Counseling Center of the Fox Valley | WI | Healthcare Provider | 956 | Jan 10, 2025 | Hacking/IT Incident | Under investigation |
| Summa Health | OH | Healthcare Provider | 874 | Jan 10, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Heritage Health Care | OH | Healthcare Provider | 12,162 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Hempfield Inc. ("Hempfield Manor") | PA | Healthcare Provider | 4,744 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Shawnee Inc. ("Shawnee Manor") | OH | Healthcare Provider | 4,395 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Findlay Inc. ("Fox Run Manor") | OH | Healthcare Provider | 3,986 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Bowling Green, Inc. ("Bowling Green Manor") | OH | Healthcare Provider | 3,500 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Court House Inc. ("St. Catherine's Manor of Washington Court House") | OH | Healthcare Provider | 3,012 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Piqua Inc. ("Piqua Manor") | OH | Healthcare Provider | 2,969 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Fairview Inc. ("Fairview Manor") | PA | Healthcare Provider | 2,935 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Edinboro Inc. ("Edinboro Manor") | PA | Healthcare Provider | 2,844 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Warren Inc. ("Warren Manor") | PA | Healthcare Provider | 2,709 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Perrysburg Inc. ("Manor at Perrysburg") | OH | Healthcare Provider | 2,704 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Briarwood Inc. ("Briarwood Village") | OH | Healthcare Provider | 2,650 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.