HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 30 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| East Central Missouri Behavioral Health Services, Inc. | MO | Healthcare Provider | 20,000 | Nov 21, 2024 | Hacking/IT Incident | Under investigation |
| Pinnacle Claims Management | CA | Business Associate | 1,119 | Nov 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Enso Counseling Group, PLLC | NH | Healthcare Provider | 943 | Nov 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| York County | PA | Healthcare Provider | 841 | Nov 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Laboratory Services Cooperative | WA | Healthcare Provider | 501 | Nov 20, 2024 | Hacking/IT Incident | Under investigation |
| AuthoraCare Collective | NC | Healthcare Provider | 57,944 | Nov 19, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Athens County Board of Developmental Disabilities | OH | Healthcare Provider | 1,458 | Nov 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Berkshire Nursing & Rehab Center, LLC | IL | Healthcare Provider | 4,237 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| The Arbors Operator, LLC | IN | Healthcare Provider | 2,808 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Villa St. Francis Catholic Care Center | KS | Healthcare Provider | 2,522 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Dolton Nursing & Rehab, LLC | IL | Healthcare Provider | 1,559 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Terrace of Hialeah | FL | Healthcare Provider | 1,177 | Nov 18, 2024 | Hacking/IT Incident | Under investigation |
| Aperion Care Marseilles, LLC | IL | Healthcare Provider | 1,052 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Village Pharmacy Group | MA | Healthcare Provider | 584 | Nov 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Maternal Fetal Medicine Associates, PLLC, Carnegie Hill Imaging for Women, and Carnegie Women’s Health (collectively, “the Practices”) | NY | Healthcare Provider | 79,691 | Nov 15, 2024 | Hacking/IT Incident | Archive (closed) |
| ESHA, Inc. | TX | Business Associate | 76,922 | Nov 15, 2024 | Hacking/IT Incident | Under investigation |
| Equinox, Inc. | NY | Healthcare Provider | 21,565 | Nov 15, 2024 | Hacking/IT Incident | Archive (closed) |
| VPS of MI PLLC | MI | Healthcare Provider | 20,604 | Nov 15, 2024 | Hacking/IT Incident | Archive (closed) |
| ASPEN HEALTHCARE SERVICES INC | TX | Healthcare Provider | 7,195 | Nov 15, 2024 | Hacking/IT Incident | Under investigation |
| HealthFund Solutions, LLC | FL | Business Associate | 5,198 | Nov 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Option Care Health | IL | Healthcare Provider | 2,897 | Nov 15, 2024 | Hacking/IT Incident | Archive (closed) |
| athenahealth, Inc. | MA | Business Associate | 1,974 | Nov 15, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Physicians' Primary Care of Southwest Florida | FL | Healthcare Provider | 170,653 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Western Montana Mental Health Center | MT | Healthcare Provider | 86,758 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| TriHealth H, LLC d/b/a TriHealth Physician Partners (“TriHealth”) | OH | Healthcare Provider | 36,753 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Hopscotch Health Management, LLC | IL | Business Associate | 4,945 | Nov 14, 2024 | Theft | Archive (closed) |
| Hospice and Palliative Care Charlotte Region dba VIA Health Partners | NC | Healthcare Provider | 777 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Gastroenterology Associates PLLC | CO | Healthcare Provider | 366,491 | Nov 13, 2024 | Hacking/IT Incident | Under investigation |
| Liberty Endo, LLC | NY | Healthcare Provider | 942 | Nov 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Radiologic Medical Services, P.C. | IA | Healthcare Provider | 56,902 | Nov 12, 2024 | Hacking/IT Incident | Under investigation |
| Familylinks Inc. | PA | Healthcare Provider | 3,775 | Nov 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Humboldt Independent Practice Association (Humboldt IPA) | CA | Healthcare Provider | 26,353 | Nov 11, 2024 | Hacking/IT Incident | Under investigation |
| United Seating and Mobility, LLC dba Numotion | TN | Healthcare Provider | 2,319 | Nov 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Massachusetts Department of Developmental Services | MA | Healthcare Provider | 3,800 | Nov 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Michigan Masonic Home | MI | Healthcare Provider | 3,255 | Nov 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Mid-Minnesota Management Services d/b/a Central Resources | IL | Business Associate | 1,232 | Nov 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Huron Inc. Health Plan | MI | Health Plan | 750 | Nov 8, 2024 | Unauthorized Access/Disclosure | Under investigation |
| Missouri Department of Mental Health | MO | Healthcare Provider | 537 | Nov 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Great Plains Regional Medical Center | OK | Healthcare Provider | 133,149 | Nov 7, 2024 | Hacking/IT Incident | Under investigation |
| MDLand International Corporation | NY | Business Associate | 63,073 | Nov 7, 2024 | Hacking/IT Incident | Archive (closed) |
| South West Family Medicine Associates, PA | TX | Healthcare Provider | 36,959 | Nov 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Orthopedics Rhode Island, Inc. | CT | Healthcare Provider | 377,731 | Nov 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Universal Health Corporation | VA | Healthcare Provider | 583 | Nov 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Planned Parenthood of Montana | MT | Healthcare Provider | 56,917 | Nov 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Oklahoma Spine Hospital | OK | Healthcare Provider | 38,945 | Nov 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Thompson Coburn LLP | MO | Business Associate | 305,088 | Nov 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Mohawk Valley Cardiology, P.C. | NY | Healthcare Provider | 4,973 | Nov 4, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Embody Performance & Recovery | MO | Healthcare Provider | 1,100 | Nov 4, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Hospitals | CA | Healthcare Provider | 44,600 | Nov 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Brunswick Hospital Center | NY | Healthcare Provider | 40,764 | Nov 1, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.