HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 31 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Mid-Ohio Psychological Services Inc. | OH | Healthcare Provider | 40,345 | Nov 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Potomac Medical Aesthetics, LLC | MD | Healthcare Provider | 2,876 | Nov 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Brain & Eye Connection Vision Clinic, PC | OK | Healthcare Provider | 2,207 | Nov 1, 2024 | Hacking/IT Incident | Under investigation |
| Northeast Professional Home Care, Inc. | OH | Healthcare Provider | 648 | Nov 1, 2024 | Hacking/IT Incident | Under investigation |
| Rockford Gastroenterology Associates | IL | Healthcare Provider | 147,253 | Oct 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Family Medical Center | MD | Healthcare Provider | 2,100 | Oct 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Boatright Inc. | IN | Healthcare Provider | 746 | Oct 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Regence BlueCross BlueShield | OR | Health Plan | 610 | Oct 29, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mystic Valley Elder Services, CE | MA | Business Associate | 85,133 | Oct 28, 2024 | Hacking/IT Incident | Archive (closed) |
| The Physical Medicine & Rehabilitation Center, P.A. | NJ | Healthcare Provider | 4,083 | Oct 28, 2024 | Hacking/IT Incident | Archive (closed) |
| BrightStar Care | IL | Healthcare Provider | 1,187 | Oct 28, 2024 | Hacking/IT Incident | Archive (closed) |
| North Texas Medical Specialists | TX | Healthcare Provider | 994 | Oct 28, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Anthony Regional Hospital | IA | Healthcare Provider | 139,214 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Hawaii Radiologic Associates, Ltd. | HI | Healthcare Provider | 43,916 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Southwest Colorado Mental Health Center, Inc. d/b/a Axis Health System | CO | Healthcare Provider | 23,385 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Easterseals Rehabilitation Center Evansville | IN | Healthcare Provider | 8,394 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Oregon Reproductive Medicine, LLC d/b/a ORM Fertility | NY | Healthcare Provider | 2,322 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Riverview Health | IN | Healthcare Provider | 1,562 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Quest Diagnostics Incorporated | NJ | Healthcare Provider | 1,062 | Oct 25, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Native Village of Eyak Ilanka Community Health Center | AK | Healthcare Provider | 512 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| GPS Sango Family Dentistry, PLLC d/b/a Sango Family Dentistry | TN | Healthcare Provider | 27,000 | Oct 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Gandara Mental Health Center | MA | Healthcare Provider | 20,024 | Oct 24, 2024 | Hacking/IT Incident | Under investigation |
| Northeast Spine and Sports Medicine, LLC | NJ | Healthcare Provider | 6,866 | Oct 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Positive Behavior Supports Corporation | FL | Healthcare Provider | 2,247 | Oct 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Stanislaus County Behavioral Health and Recovery Services | CA | Health Plan | 767 | Oct 24, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mystic Valley Elder Services - Business Associate | MA | Business Associate | 2,402 | Oct 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Arkansas Blue Cross and Blue Shield | AR | Health Plan | 633 | Oct 22, 2024 | Hacking/IT Incident | Archive (closed) |
| East Adams Rural Healthcare | WA | Healthcare Provider | 13,206 | Oct 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Smiles in the Pines | NC | Healthcare Provider | 1,800 | Oct 21, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Summit Pathology and Summit Pathology Laboratories, Inc. | CO | Healthcare Provider | 1,813,538 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| RRCA Accounts Management Inc. | IL | Business Associate | 115,837 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| Advanced Recovery Equipment & Supplies, LLC | NY | Healthcare Provider | 56,000 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| Clay Platte Family Medicine | MO | Healthcare Provider | 53,916 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| Survival Flight, Inc. | AZ | Healthcare Provider | 10,989 | Oct 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Detroit Wayne Integrated Health Network | MI | Healthcare Provider | 3,347 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| Chicago Cardiology Institute | IL | Healthcare Provider | 2,743 | Oct 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Valleygate Dental Surgery Centers of Charlotte, Fayetteville, and the West, LLC. | NC | Healthcare Provider | 14,589 | Oct 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Jacksonville Children's Multispecialty Clinics/Atlantic Medical Management | NC | Healthcare Provider | 2,224 | Oct 17, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Tri County Medical Supply And Respiratory Services Inc. | AR | Healthcare Provider | 8,000 | Oct 16, 2024 | Improper Disposal | Archive (closed) |
| Sarah Bush Lincoln Fayette County Hospital | IL | Healthcare Provider | 4,845 | Oct 16, 2024 | Hacking/IT Incident | Archive (closed) |
| OnePoint Patient Care | AZ | Healthcare Provider | 1,741,152 | Oct 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Gryphon Healthcare, LLC | TX | Business Associate | 393,358 | Oct 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Center for Urban Community Services | NY | Business Associate | 38,000 | Oct 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Wilmington Community Clinic | CA | Healthcare Provider | 11,601 | Oct 11, 2024 | Hacking/IT Incident | Under investigation |
| Cheasapeake Regional Information System for our Patients, Inc. (CRISP) | MD | Business Associate | 8,008 | Oct 11, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| miCare Health Center | MT | Healthcare Provider | 2,766 | Oct 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Ad Valorem Records, Inc. | TN | Business Associate | 590 | Oct 11, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Visionworks of America, Inc. | TX | Healthcare Provider | 39,825 | Oct 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Tower Clock Eye Center | WI | Healthcare Provider | 10,737 | Oct 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Wellfleet Group, LLC | MA | Business Associate | 23,082 | Oct 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.