HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 35 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Ascension Health | MO | Healthcare Provider | 5,466,931 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Palomar Health Medical Group | CA | Healthcare Provider | 1,140,221 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| DaVita Inc. | CO | Healthcare Provider | 67,443 | Jul 3, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Maryville, Inc. | NJ | Healthcare Provider | 24,827 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Patented Acquisition Corporation | OH | Business Associate | 12,787 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Aultman Hospital | OH | Healthcare Provider | 6,892 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund | NY | Health Plan | 2,184 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Regional Obstetrical Consultants PC | TN | Healthcare Provider | 25,650 | Jul 2, 2024 | Hacking/IT Incident | Under investigation |
| Atlanta Perinatal Consultants, LLP | GA | Healthcare Provider | 1,508 | Jul 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Marana Health Center, Inc. | AZ | Health Plan | 542 | Jul 2, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Human Technology Inc., and its affiliates | TN | Healthcare Provider | 24,580 | Jul 1, 2024 | Hacking/IT Incident | Archive (closed) |
| AmeriHealth Caritas Delaware | DE | Health Plan | 2,823 | Jul 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Core Dental Health | TN | Healthcare Provider | 2,349 | Jul 1, 2024 | Hacking/IT Incident | Archive (closed) |
| SkinCure Oncology | IL | Business Associate | 13,434 | Jun 28, 2024 | Hacking/IT Incident | Archive (closed) |
| Georgia Kidney Associates, Inc. | GA | Healthcare Provider | 9,940 | Jun 28, 2024 | Theft | Archive (closed) |
| Mass General Brigham Health Plan | MA | Health Plan | 3,659 | Jun 28, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mass General Brigham Incorporated | MA | Healthcare Provider | 655 | Jun 28, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Ann & Robert H. Lurie Children's Hospital of Chicago | IL | Healthcare Provider | 775,860 | Jun 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Samaritan Health Services, Inc. | OR | Healthcare Provider | 1,296 | Jun 27, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kairos Health Arizona, Inc. | AZ | Business Associate | 14,435 | Jun 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mayfield Dental Arts LLC | OH | Healthcare Provider | 3,318 | Jun 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Providence Mission Heritage Endocrinology | CA | Healthcare Provider | 1,875 | Jun 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| MD Now Medical Centers, Inc. | FL | Healthcare Provider | 150,560 | Jun 25, 2024 | Hacking/IT Incident | Archive (closed) |
| The Mount Kisco Surgery Center LLC d/b/a The Ambulatory Surgery Center of Westchester | NY | Healthcare Provider | 22,139 | Jun 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Memorial Sloan Kettering Cancer Center | NY | Healthcare Provider | 12,274 | Jun 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Geisinger | PA | Healthcare Provider | 1,276,026 | Jun 21, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Retina Associates | TX | Healthcare Provider | 312,867 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Ambulnz Holdings, LLC | NY | Healthcare Provider | 43,773 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles Department of Health Services | CA | Healthcare Provider | 41,444 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Aultman Hospital | OH | Healthcare Provider | 26,206 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Wisconsin Department of Health Services | WI | Healthcare Provider | 19,150 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| The Lash Group, LLC | PA | Business Associate | 15,196 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Altoona Logan Township Mobile Medical Emergency Department Authority | PA | Healthcare Provider | 6,169 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Pinnacle Orthopaedics & Sports Medicine Specialists LLC | GA | Healthcare Provider | 1,100 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Mobile Medical Response, Inc. | MI | Healthcare Provider | 700 | Jun 21, 2024 | Theft | Archive (closed) |
| Access Sports Medicine & Orthopaedics | NH | Healthcare Provider | 88,044 | Jun 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Carroll County Memorial Hospital | MO | Healthcare Provider | 7,021 | Jun 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Zwanger-Pesiri Radiology | NY | Healthcare Provider | 985 | Jun 18, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Radiology and Imaging Specialists | FL | Healthcare Provider | 37,210 | Jun 17, 2024 | Hacking/IT Incident | Archive (closed) |
| OB GYN Specialists of Lima Inc | OH | Healthcare Provider | 1,241 | Jun 17, 2024 | Improper Disposal | Archive (closed) |
| Consulting Radiologists LTD. | MN | Healthcare Provider | 583,824 | Jun 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Neurobehavioral Medicine Consultants, P.C. | OH | Healthcare Provider | 18,182 | Jun 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 1,267 | Jun 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan of Northwest | OR | Health Plan | 578 | Jun 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Heart South Cardiovascular Group | AL | Healthcare Provider | 20,577 | Jun 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Aptihealth, Inc. | NY | Healthcare Provider | 19,805 | Jun 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Benefit Management LLC | KS | Business Associate | 8,777 | Jun 12, 2024 | Hacking/IT Incident | Archive (closed) |
| IBEW LOCAL 236 WELFARE FUND | CT | Health Plan | 3,217 | Jun 11, 2024 | Hacking/IT Incident | Archive (closed) |
| WAREHOUSE EMPLOYEES LOCAL 169 CONTRIBUTING EMPLOYERS HEALTH & WELFARE FUND | PA | Health Plan | 1,061 | Jun 11, 2024 | Hacking/IT Incident | Archive (closed) |
| ASBESTOS WORKERS LOCAL 42 WELFARE PLAN | GA | Health Plan | 520 | Jun 11, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.