HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 34 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The Facial Pain Center | MN | Healthcare Provider | 1,894 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| siParadigm LLC | NJ | Healthcare Provider | 501 | Aug 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Harborview Oral & Facial Surgery Center | MS | Healthcare Provider | 3,472 | Aug 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Internal Medicine Associates, LLC d/b/a Gastrointestinal Medicine Associates | RI | Healthcare Provider | 31,835 | Aug 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Pocahontas Medical Clinic, PA | AR | Healthcare Provider | 31,216 | Aug 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Alabama Cardiovascular Group | AL | Healthcare Provider | 280,534 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Fraser Child and Family Center | MN | Healthcare Provider | 64,131 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Calibrated Healthcare, LLC | CA | Business Associate | 6,890 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| PRM Management Company, Inc. | FL | Healthcare Provider | 3,359 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Wayne Memorial Hospital | GA | Healthcare Provider | 2,500 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Hamilton-Madison House | NY | Healthcare Provider | 1,114 | Aug 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Frilot L.L.C. | LA | Business Associate | 1,448 | Aug 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Providence Pediatrics Manito | WA | Healthcare Provider | 1,166 | Aug 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Roseland Community Hospital Association | IL | Healthcare Provider | 500 | Aug 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Deer Oaks Behavioral Health | TX | Healthcare Provider | 171,871 | Jul 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Special Health Resources of Texas, Inc. | TX | Healthcare Provider | 500 | Jul 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Delta County Memorial Hospital District (Delta Health) | CO | Healthcare Provider | 148,363 | Jul 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Advantage Orthopedic & Sports Medicine, LLP | OR | Healthcare Provider | 1,914 | Jul 29, 2024 | Hacking/IT Incident | Archive (closed) |
| United of Omaha Life Insurance Company | NE | Health Plan | 107,894 | Jul 26, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Alabama at Birmingham School of Nursing | AL | Healthcare Provider | 1,655 | Jul 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| South Western Communications, Inc. | IN | Health Plan | 1,115 | Jul 26, 2024 | Hacking/IT Incident | Archive (closed) |
| NeighborHealth | MA | Healthcare Provider | 526 | Jul 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| AMERICAN CLINICAL SOLUTIONS, LLC | FL | Healthcare Provider | 300,000 | Jul 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Surgery Center of Mid Florida | FL | Healthcare Provider | 48,684 | Jul 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Allcare Medical Management Incorporated | CA | Business Associate | 16,378 | Jul 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Sutton Dental Arts | OR | Healthcare Provider | 4,109 | Jul 22, 2024 | Hacking/IT Incident | Archive (closed) |
| EMS Department for the Kansas City, Kansas Fire Department | KS | Healthcare Provider | 501 | Jul 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Change Healthcare, Inc. | MN | Business Associate | 192,700,000 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Arisa Health Incorporated | AR | Healthcare Provider | 375,436 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Neuro Rehab Associates, Inc. d/b/a Northeast Rehabilitation Hospital Network | NH | Healthcare Provider | 136,724 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 56,953 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Community Counseling of Bristol County, Inc. | MA | Healthcare Provider | 44,991 | Jul 19, 2024 | Hacking/IT Incident | Under investigation |
| Franklin County, Kansas | KS | Healthcare Provider | 10,263 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Barrett Eye Care | IN | Healthcare Provider | 4,648 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Sun City Pediatrics, PA | TX | Healthcare Provider | 4,500 | Jul 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Imagine360, LLC | PA | Business Associate | 6,926 | Jul 17, 2024 | Hacking/IT Incident | Archive (closed) |
| The North Cottage Program | MA | Healthcare Provider | 8,190 | Jul 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group, Inc. | CA | Healthcare Provider | 3,435 | Jul 15, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospital Auxilio Mutuo | Healthcare Provider | 42,000 | Jul 13, 2024 | Hacking/IT Incident | Archive (closed) | |
| New Jersey Oral & Maxillofacial Surgery | NJ | Healthcare Provider | 74,413 | Jul 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Aveanna Healthcare, LLC | GA | Healthcare Provider | 10,482 | Jul 12, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Fairfax Radiological Consultants | VA | Healthcare Provider | 3,512 | Jul 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Family Dynamics Counseling Services, Inc. | WA | Healthcare Provider | 4,373 | Jul 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Janna Pharmacy LLC | CA | Healthcare Provider | 26,372 | Jul 10, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Johnson & Associates, Inc. | MT | Business Associate | 4,600 | Jul 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Meridian Internal Medicine, P.A. | NC | Healthcare Provider | 2,656 | Jul 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Smith, Gambrell & Russell LLP | GA | Business Associate | 220,000 | Jul 9, 2024 | Hacking/IT Incident | Archive (closed) |
| The Medibase Group, Inc. | GA | Business Associate | 117,957 | Jul 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Butler Health Plan, SW Division of OHI | OH | Health Plan | 5,911 | Jul 5, 2024 | Hacking/IT Incident | Archive (closed) |
| School Employees' Benefit Trust | IN | Health Plan | 1,371 | Jul 5, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.