HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 32 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| DMEscripts, LLC | IN | Business Associate | 9,993 | Oct 8, 2024 | Hacking/IT Incident | Archive (closed) |
| TheraCom, L.L.C. | PA | Healthcare Provider | 9,271 | Oct 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Ciox Health LLC, d/b/a Datavant Group | AZ | Business Associate | 320,702 | Oct 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Smile Design Management LLC | FL | Healthcare Provider | 10,625 | Oct 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Dohman, Akerlund & Eddy | NE | Business Associate | 9,941 | Oct 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Schneider Regional Medical Center | Healthcare Provider | 1,570 | Oct 7, 2024 | Hacking/IT Incident | Archive (closed) | |
| University of Minnesota Board of Regents | MN | Healthcare Provider | 1,331 | Oct 7, 2024 | Hacking/IT Incident | Archive (closed) |
| ATSG, Inc | NY | Business Associate | 909,469 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Bayhealth Medical Center | DE | Healthcare Provider | 497,047 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Omni Family Health | CA | Healthcare Provider | 468,344 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| General Physician, P.C. | NY | Healthcare Provider | 167,387 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Long Island Plastic Surgical Group, P.C. | NY | Healthcare Provider | 161,707 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Seven Counties Services, Inc. | KY | Healthcare Provider | 132,609 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Dr. Daniel J. Leeman, M.D. | TX | Healthcare Provider | 50,000 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Easter Seals DC | MD | VA, Inc. | MD | Healthcare Provider | 584 | Oct 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Judge Rotenberg Educational Center | MA | Healthcare Provider | 2,579 | Oct 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 1,915 | Oct 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Connally Memorial Medical Center | TX | Health Plan | 1,228 | Sep 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Hafetz and Associates | NJ | Business Associate | 26,474 | Sep 27, 2024 | Hacking/IT Incident | Archive (closed) |
| CF Medical | GA | Business Associate | 242,200 | Sep 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Community Clinic of Maui, Inc. dba Malama I Ke Ola Health Center | HI | Healthcare Provider | 123,816 | Sep 26, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 57,891 | Sep 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Texas Spine Consultants, PLLC | TX | Healthcare Provider | 8,048 | Sep 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Prentke Romich Company dba PRC-Saltillo | OH | Healthcare Provider | 51,627 | Sep 25, 2024 | Hacking/IT Incident | Archive (closed) |
| DAP Health, Inc. | CA | Healthcare Provider | 129,048 | Sep 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Holistix Treatment Center LLC d/b/a We Level Up Treatment Lake Worth | FL | Healthcare Provider | 6,567 | Sep 24, 2024 | Hacking/IT Incident | Archive (closed) |
| UT Southwestern Medical Center | TX | Healthcare Provider | 778 | Sep 24, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Muskogee City County Enhanced 911 Trust Authority | OK | Business Associate | 180,000 | Sep 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Asheville Arthritis and Osteoporosis Center, P.A. | NC | Healthcare Provider | 58,251 | Sep 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Jacobsen Construction Co., Inc. Health Plan | UT | Health Plan | 2,127 | Sep 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Jefferson PA Heart and Vascular | PA | Healthcare Provider | 755 | Sep 18, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Southern Bone & Joint Specialists, PA (“Southern Bone”) | MS | Healthcare Provider | 7,162 | Sep 17, 2024 | Hacking/IT Incident | Archive (closed) |
| ERLC LLC, d/b/a Elitecare Emergency Hospital | TX | Healthcare Provider | 24,754 | Sep 16, 2024 | Hacking/IT Incident | Archive (closed) |
| JTaylor & Associates LLC | TX | Business Associate | 22,315 | Sep 16, 2024 | Hacking/IT Incident | Archive (closed) |
| La Liga Puertorriquena Contra El Cancer DBA Hospital Oncológico | Healthcare Provider | 4,590 | Sep 16, 2024 | Hacking/IT Incident | Archive (closed) | |
| Michigan Masonic Home | MI | Healthcare Provider | 4,189 | Sep 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Rim Country Health and Rehabilitation | AZ | Healthcare Provider | 720 | Sep 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Chambers Co Public Hospital District No1 dba Chambers Health | TX | Healthcare Provider | 85,531 | Sep 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Atrium Health | NC | Healthcare Provider | 32,120 | Sep 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Maryville Academy | IL | Healthcare Provider | 500 | Sep 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Access Ambulatory Surgery Center, LLC | NH | Healthcare Provider | 5,205 | Sep 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Young Consulting LLC | GA | Business Associate | 961,003 | Sep 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Local 1964 ILA Health & Insurance Fund | NJ | Health Plan | 2,059 | Sep 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Richland County, WI | WI | Healthcare Provider | 76,365 | Sep 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Millinocket Regional Hospital | ME | Healthcare Provider | 813 | Sep 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Nationwide Recovery Services, Inc. | GA | Business Associate | 501 | Sep 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Oficina Medica | Healthcare Provider | 2,618 | Sep 8, 2024 | Theft | Archive (closed) | |
| Centers for Medicare & Medicaid Services | MD | Health Plan | 3,112,815 | Sep 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Guam Seventh-Day Adventist Clinic | Healthcare Provider | 56,635 | Sep 6, 2024 | Hacking/IT Incident | Archive (closed) | |
| Seneca Nation Health System | NY | Healthcare Provider | 16,879 | Sep 6, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.