HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 33 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Welcome Health | CA | Healthcare Provider | 597 | Sep 6, 2024 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles Department of Mental Health | CA | Healthcare Provider | 2,334 | Sep 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Project Hospitality | NY | Healthcare Provider | 42,432 | Sep 4, 2024 | Hacking/IT Incident | Archive (closed) |
| United Way of Connecticut, Inc. | CT | Business Associate | 8,039 | Sep 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Premier Health Family Care - North and Premier Health Family Care of Vandalia | OH | Healthcare Provider | 3,092 | Sep 3, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Service Access & Management, Inc. | PA | Healthcare Provider | 1,450 | Sep 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Illinois Bone & Joint Institute, LLC | IL | Healthcare Provider | 665,321 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| EngageMED, Inc | AR | Business Associate | 249,297 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Catholic Charities CYO of The Archdiocese of San Francisco | CA | Healthcare Provider | 7,486 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Baptist Health Medical Center Drew County | AR | Healthcare Provider | 5,207 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Minnesota Department of Human Services | MN | Healthcare Provider | 4,329 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Mount Carmel Behavioral Health | OH | Healthcare Provider | 1,221 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Washoe County School District | NV | Health Plan | 1,017 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Goodwin Living Incorporated | VA | Healthcare Provider | 7,170 | Aug 29, 2024 | Hacking/IT Incident | Archive (closed) |
| CBIZ Benefits & Insurance Services, Inc. | OH | Business Associate | 9,602 | Aug 28, 2024 | Hacking/IT Incident | Archive (closed) |
| Panoramic Health | AZ | Business Associate | 6,228 | Aug 28, 2024 | Hacking/IT Incident | Archive (closed) |
| CODAC Inc dba CODAC Behavioral Health and CODAC Healthcare, LLC | RI | Healthcare Provider | 9,592 | Aug 27, 2024 | Hacking/IT Incident | Under investigation |
| Blue Cross and Blue Shield of North Carolina | NC | Business Associate | 972 | Aug 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Roper St. Francis Healthcare | SC | Healthcare Provider | 4,125 | Aug 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Compass Healthcare & Rehab Rowan LLC | NC | Healthcare Provider | 1,381 | Aug 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Florida Department of Health | FL | Healthcare Provider | 729,699 | Aug 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Okanogan Behavioral HealthCare | WA | Healthcare Provider | 26,429 | Aug 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Excelsior Orthopaedics, LLC | NY | Healthcare Provider | 286,935 | Aug 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Pomona Community Health Center dba ParkTree Community Health Center | CA | Healthcare Provider | 40,964 | Aug 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Acadian Ambulance Service, Inc. | LA | Healthcare Provider | 2,896,985 | Aug 20, 2024 | Hacking/IT Incident | Archive (closed) |
| VeriSource Services, Inc. | TX | Business Associate | 112,726 | Aug 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Contents Trader, Inc. | TX | Healthcare Provider | 12,495 | Aug 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Connecticut GI, PLLC | CT | Healthcare Provider | 46,354 | Aug 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Mid-Columbia Center for Living | OR | Healthcare Provider | 4,435 | Aug 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Advanced Medical Management, LLC | KS | Healthcare Provider | 2,815 | Aug 19, 2024 | Hacking/IT Incident | Archive (closed) |
| HAH Group Holding Company, LLC d/b/a “Help At Home" | IL | Healthcare Provider | 26,744 | Aug 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Kerber, Eck & Braeckel LLP | IL | Business Associate | 134,918 | Aug 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Vasinda's Around the Clock Care dba ATC Home Care | CA | Healthcare Provider | 30,819 | Aug 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Baker Places, Inc. | CA | Business Associate | 971 | Aug 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Behavioral Health Alliance of Rural Pennsylvania | PA | Health Plan | 642 | Aug 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Specialty Networks, Inc. | TN | Business Associate | 411,037 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Carespring Health Care Management LLC | OH | Healthcare Provider | 64,609 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Fairfield Memorial Hospital Association | IL | Healthcare Provider | 25,093 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Packaging Corporation of America | IL | Health Plan | 783 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| United Urology Group | MD | Business Associate | 10,704 | Aug 14, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Connecticut Health Center Finance Corporation | CT | Healthcare Provider | 1,123 | Aug 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Julie D. Kinsler DDS LLC dba Kinsler Family Dentistry | IN | Healthcare Provider | 5,500 | Aug 12, 2024 | Hacking/IT Incident | Archive (closed) |
| HealthEquity, Inc. | UT | Business Associate | 4,300,000 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| PDG, P.A. dba Park Dental | MN | Healthcare Provider | 185,606 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Turning Point of Central California, Inc. | CA | Healthcare Provider | 53,737 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Gramercy Surgery Center, Inc. | NY | Healthcare Provider | 52,372 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Monte Nido | FL | Healthcare Provider | 41,662 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Dental Specialists of Minnesota, PLLC dba The Dental Specialists | MN | Healthcare Provider | 38,442 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Pemiscot Memorial Health System | MO | Healthcare Provider | 33,279 | Aug 9, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| PG Dental d/b/a Aire Dental Arts | NY | Healthcare Provider | 10,200 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.