HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 28 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| HCF of Corry Inc. ("Corry Manor") | PA | Healthcare Provider | 2,620 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Washington Inc. ("Court House Manor") | OH | Healthcare Provider | 2,489 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Fox Run Inc. ("The Manor at Greendale") | OH | Healthcare Provider | 2,333 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Celina Inc. ("Celina Manor") | OH | Healthcare Provider | 2,321 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Crestview Inc. ("Village at the Greene") | OH | Healthcare Provider | 1,944 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Wapakoneta Inc. ("Wapakoneta Manor") | OH | Healthcare Provider | 1,862 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Sweden Valley Inc. ("Sweden Valley Manor") | PA | Healthcare Provider | 1,768 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Van Wert Inc. ("Van Wert Manor") | OH | Healthcare Provider | 1,604 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Bradford Inc. ("Bradford Manor") | PA | Healthcare Provider | 1,565 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| MHMR Concho Valley | TX | Healthcare Provider | 1,338 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Fostoria Inc. ("St. Catherine's Manor of Fostoria") | OH | Healthcare Provider | 1,253 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Roselawn Inc. ("Roselawn Manor") | OH | Healthcare Provider | 1,208 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| Building Service Employees Insurance Health and Welfare Plan | MO | Health Plan | 980 | Jan 9, 2025 | Theft | Archive (closed) |
| HCF of Garbry Ridge ("Garbry Ridge") | OH | Healthcare Provider | 512 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| BayMark Health Services, Inc. | TX | Business Associate | 265,701 | Jan 8, 2025 | Hacking/IT Incident | Archive (closed) |
| LifeBridge Health, Inc | MD | Healthcare Provider | 25,895 | Jan 8, 2025 | Hacking/IT Incident | Archive (closed) |
| McNall & Associates, P.C. | AK | Business Associate | 10,175 | Jan 8, 2025 | Hacking/IT Incident | Archive (closed) |
| Medusind Inc. | FL | Business Associate | 701,475 | Jan 7, 2025 | Hacking/IT Incident | Under investigation |
| Indiana University Health, Affiliated Covered Entity | IN | Healthcare Provider | 1,446 | Jan 7, 2025 | Hacking/IT Incident | Archive (closed) |
| Eastern Idaho Public Health | ID | Healthcare Provider | 759 | Jan 7, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| North Los Angeles County Regional Center | CA | Business Associate | 298,629 | Jan 6, 2025 | Hacking/IT Incident | Archive (closed) |
| Pediatric Home Respiratory Services, LLC d/b/a Pediatric Home Service | MN | Healthcare Provider | 41,792 | Jan 6, 2025 | Hacking/IT Incident | Archive (closed) |
| DentaQuest | WI | Health Plan | 868 | Jan 6, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Ingham County Medical Care Facility, d/b/a Dobie Road | MI | Healthcare Provider | 3,078 | Jan 5, 2025 | Hacking/IT Incident | Archive (closed) |
| Buffalo Surgery Center | NY | Healthcare Provider | 64,000 | Jan 4, 2025 | Hacking/IT Incident | Archive (closed) |
| TruBridge, Inc. | AL | Business Associate | 3,855 | Jan 4, 2025 | Hacking/IT Incident | Archive (closed) |
| The Plastic Surgery Center | NJ | Healthcare Provider | 64,813 | Jan 3, 2025 | Hacking/IT Incident | Archive (closed) |
| Sidney Health Center | MT | Healthcare Provider | 1,370 | Jan 3, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| PrintComm, Inc. | MI | Business Associate | 3,864 | Jan 2, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Center for Child Development, INC | DE | Healthcare Provider | 540 | Jan 2, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Watsonville Community Hospital | CA | Healthcare Provider | 30,312 | Dec 31, 2024 | Hacking/IT Incident | Under investigation |
| Legacy Treatment Services, Inc. | NJ | Healthcare Provider | 29,898 | Dec 31, 2024 | Hacking/IT Incident | Under investigation |
| Pacific Pulmonary Medical Group | CA | Healthcare Provider | 12,723 | Dec 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Tycon Medical Systems, Inc. | VA | Healthcare Provider | 112,847 | Dec 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Lifetime Psychiatry, LLC | MO | Healthcare Provider | 16,926 | Dec 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Omaha Surgical Center | NE | Healthcare Provider | 1,110 | Dec 30, 2024 | Hacking/IT Incident | Under investigation |
| Youngs Counseling, PLLC | TX | Healthcare Provider | 790 | Dec 30, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Judge Baker Children’s Center dba The Baker Center for Children and Families | MA | Healthcare Provider | 2,715 | Dec 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Dragonfly Health | AZ | Business Associate | 501 | Dec 27, 2024 | Hacking/IT Incident | Under investigation |
| Lexington Diagnostic Center | KY | Healthcare Provider | 29,819 | Dec 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Polaris Endeavors | FL | Healthcare Provider | 4,552 | Dec 24, 2024 | Hacking/IT Incident | Under investigation |
| Dignity Health Lassen Medical Clinic | CA | Healthcare Provider | 64,946 | Dec 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Word & Brown Insurance Administrators, Inc. | CA | Business Associate | 3,223 | Dec 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Khalil Foundation (DBA Khalil Center) | IL | Healthcare Provider | 1,153 | Dec 22, 2024 | Unauthorized Access/Disclosure | Under investigation |
| Youth Eastside Services | WA | Healthcare Provider | 23,492 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| In-Home Attendant Services Ltd. | TX | Healthcare Provider | 22,000 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Alta Resources Corp. | WI | Health Plan | 12,162 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Kansas City Hospice, Inc | MO | Healthcare Provider | 3,621 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Effortless Office Enterprises, LLC | NV | Business Associate | 3,112 | Dec 20, 2024 | Hacking/IT Incident | Under investigation |
| Menorah Life, Inc. | FL | Healthcare Provider | 2,736 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.