HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 29 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| HealthEquity, Inc. | UT | Business Associate | 1,549 | Dec 20, 2024 | Hacking/IT Incident | Under investigation |
| Aetna ACE | CT | Health Plan | 1,317 | Dec 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| BCBS of TX | IL | Health Plan | 1,028 | Dec 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Vickers Engineering, Inc. | MI | Health Plan | 857 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| AllyScripts, LLC | AL | Healthcare Provider | 776 | Dec 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Richmond University Medical Center | NY | Healthcare Provider | 674,033 | Dec 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Cardiology Associates of Mobile | AL | Healthcare Provider | 172,678 | Dec 19, 2024 | Hacking/IT Incident | Archive (closed) |
| CHCM, Inc. dba College Hospital Costa Mesa | CA | Healthcare Provider | 38,695 | Dec 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Ott Cone & Redpath, P.A. | NC | Business Associate | 22,171 | Dec 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Golden Age Home Health Inc. | OK | Healthcare Provider | 2,280 | Dec 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Regional Care, Inc. | NE | Healthcare Clearing House | 225,728 | Dec 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Indiana University Health, Affiliated Covered Entity | IN | Healthcare Provider | 19,827 | Dec 17, 2024 | Hacking/IT Incident | Archive (closed) |
| PracticeSuite, Inc. | FL | Business Associate | 13,000 | Dec 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Kitsap Mental Health Services | WA | Healthcare Provider | 70,757 | Dec 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Teton Orthopaedics | PA | Healthcare Provider | 13,409 | Dec 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Massachusetts Department of Mental Health | MA | Healthcare Provider | 959 | Dec 16, 2024 | Loss | Archive (closed) |
| VisionPoint Eye Center, PLLC | IL | Healthcare Provider | 66,926 | Dec 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Group, PLLC | TN | Healthcare Provider | 464,159 | Dec 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Brockton Neighborhood Health Center | MA | Healthcare Provider | 97,488 | Dec 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Northwest Asthma and Allergy Center | WA | Healthcare Provider | 1,000 | Dec 12, 2024 | Hacking/IT Incident | Archive (closed) |
| ConnectOnCall.com, LLC | DE | Business Associate | 914,138 | Dec 11, 2024 | Hacking/IT Incident | Archive (closed) |
| River Region Cardiology | AL | Healthcare Provider | 48,600 | Dec 11, 2024 | Hacking/IT Incident | Under investigation |
| Community Connections | DC | Healthcare Provider | 18,949 | Dec 11, 2024 | Hacking/IT Incident | Under investigation |
| El Paso Healthcare System, Ltd. d/b/a Las Palmas Del Sol Healthcare | TX | Healthcare Provider | 1,854 | Dec 11, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Insured Recovery | TN | Healthcare Provider | 850 | Dec 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Rumpke Consolidated Companies, Inc. & Affiliates Benefits Plan | OH | Health Plan | 16,946 | Dec 10, 2024 | Hacking/IT Incident | Archive (closed) |
| UT Southwestern Medical Center | TX | Healthcare Provider | 43,048 | Dec 9, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Hartson-Kennedy Inc. Group Benefit Plan | IN | Health Plan | 3,600 | Dec 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Center for Vein Restoration | MD | Business Associate | 446,094 | Dec 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | DC | Healthcare Provider | 2,302 | Dec 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Atrium Health | NC | Healthcare Provider | 585,959 | Dec 2, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| SAG-AFTRA Health Plan | CA | Health Plan | 98,474 | Dec 2, 2024 | Hacking/IT Incident | Archive (closed) |
| FC Compassus, LLC | TN | Healthcare Provider | 2,703 | Dec 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Village of Elm Grove | WI | Healthcare Provider | 668 | Dec 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Colonial Behavioral Health | VA | Healthcare Provider | 29,930 | Nov 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Jefferson Dental Center, Inc. | IN | Healthcare Provider | 12,340 | Nov 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Continental Cafe Holdings, LLC Health Plan | MI | Health Plan | 5,039 | Nov 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Hardin County Emergency Medical Services | KY | Healthcare Provider | 1,046 | Nov 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Georgia Department of Public Health | GA | Healthcare Provider | 532 | Nov 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Texas Tech University Health Sciences Center El Paso | TX | Healthcare Provider | 815,000 | Nov 25, 2024 | Hacking/IT Incident | Under investigation |
| Texas Tech University Health Sciences Center | TX | Healthcare Provider | 650,000 | Nov 25, 2024 | Hacking/IT Incident | Under investigation |
| American Addiction Centers, Inc. | TN | Business Associate | 410,747 | Nov 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Conceptions Reproductive Associates of Colorado | CO | Healthcare Provider | 80,000 | Nov 25, 2024 | Hacking/IT Incident | Under investigation |
| Citadel of Northbrook | IL | Healthcare Provider | 2,155 | Nov 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Pavilion of Bridgeview | IL | Healthcare Provider | 1,407 | Nov 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Lubbock County Hospital District | TX | Healthcare Provider | 1,461,776 | Nov 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Vann Virginia Center for Orthopaedics, PC dba Atlantic Orthopaedic Specialists | VA | Healthcare Provider | 15,264 | Nov 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Ardon Health | OR | Healthcare Provider | 10,098 | Nov 22, 2024 | Hacking/IT Incident | Archive (closed) |
| East Paris Internal Medicine Associates, PC | MI | Healthcare Provider | 5,239 | Nov 22, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Green Castle Recovery Center DBA, Sanford Behavioral Health | MI | Healthcare Provider | 703 | Nov 22, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.