HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 36 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Signature Performance, Inc. | NE | Business Associate | 130,228 | Jun 10, 2024 | Hacking/IT Incident | Archive (closed) |
| CRG Lynwood, LLC, d/b/a Lynwood Manor | MI | Healthcare Provider | 6,566 | Jun 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Looking Glass Counseling | MA | Healthcare Provider | 2,739 | Jun 10, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Alliance Rehabilitation Services | NE | Healthcare Provider | 10,750 | Jun 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Best Health Physical Therapy, LLC | CT | Healthcare Provider | 3,764 | Jun 6, 2024 | Hacking/IT Incident | Archive (closed) |
| IACT Health | GA | Healthcare Provider | 676 | Jun 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Panorama Eyecare | CO | Healthcare Provider | 377,911 | Jun 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Insurance ACE/Humana Inc. | KY | Health Plan | 15,003 | Jun 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Angels Neurological Centers, P.C. | MA | Healthcare Provider | 934 | Jun 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Financial Business and Consumer Solutions, Inc. | PA | Business Associate | 117,567 | Jun 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Wilson & Company, Inc., Engineers & Architects Health and Welfare Benefit Plan | NM | Health Plan | 1,867 | Jun 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Woodfords Family Services | ME | Healthcare Provider | 500 | Jun 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Mending Minds LLC dba Walnut Creek Psychiatry | IA | Healthcare Provider | 733 | Jun 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Adventist Health Tulare | CA | Healthcare Provider | 70,802 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Easterseals Central Illinois | IL | Healthcare Provider | 14,855 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| AmerisourceBergen Specialty Group, LLC | PA | Healthcare Provider | 3,102 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Delta Specialty Hospital | TN | Healthcare Provider | 1,998 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Crestwyn Behavioral Health Hospital, Inc. | TN | Healthcare Provider | 1,757 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| FC Compassus, LLC | TN | Healthcare Provider | 1,383 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Boston IVF, LLC | MA | Healthcare Provider | 604 | May 30, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Lakeview Health Systems, LLC | FL | Healthcare Provider | 10,772 | May 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Orchard Park Fire District EMS | NY | Healthcare Provider | 2,089 | May 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Fora Health, Inc. | OR | Healthcare Provider | 1,568 | May 28, 2024 | Hacking/IT Incident | Archive (closed) |
| Florida Digestive Health Specialists, LLP | FL | Healthcare Provider | 3,205 | May 27, 2024 | Hacking/IT Incident | Archive (closed) |
| A&A Services d/b/a Sav-Rx | NE | Business Associate | 2,812,336 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| AmerisourceBergen Specialty Group, LLC | PA | Healthcare Provider | 252,214 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Chicago Medical Center | IL | Healthcare Provider | 10,332 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| iCircle Services of the Finger Lakes, Inc. | NY | Health Plan | 3,414 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Montefiore Einstein Advance Care | NY | Healthcare Provider | 2,356 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| City of St. Cloud | FL | Health Plan | 2,273 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Moffitt Cancer Center and Research Institute | FL | Healthcare Provider | 756 | May 24, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| ALN Medical Management, LLC | NE | Business Associate | 1,323,720 | May 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Tri-City Healthcare District | CA | Healthcare Provider | 108,149 | May 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Summit Healthcare Regional Medical Center | AZ | Healthcare Provider | 905 | May 23, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Trionfo Solutions, LLC | IL | Business Associate | 81,588 | May 22, 2024 | Hacking/IT Incident | Archive (closed) |
| McLean Hospital | MA | Healthcare Provider | 2,231 | May 21, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| County of Los Angeles Department of Mental Health | CA | Healthcare Provider | 1,598 | May 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Multnomah County Health Department | OR | Healthcare Provider | 1,092 | May 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Omni Healthcare Financial Holdings | NC | Business Associate | 16,852 | May 18, 2024 | Hacking/IT Incident | Archive (closed) |
| El Centro Del Barrio d/b/a CentroMed | TX | Healthcare Provider | 400,000 | May 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Gastroenterology Associates of Central Florida, P.A./ Center for Digestive Health | FL | Healthcare Provider | 121,693 | May 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Victoria Eye Center/Victoria Surgery Center/Victoria Vision Center | TX | Healthcare Provider | 80,000 | May 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Call 4 Health, Inc. | FL | Business Associate | 10,434 | May 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Brockton Area Multi Services, Inc. | MA | Healthcare Provider | 21,537 | May 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Pope & Conner Consulting, Inc. | WI | Business Associate | 1,035 | May 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Hypertension-Nephrology Associates, P.C. | PA | Healthcare Provider | 39,491 | May 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Badalamenti-Ferlito Orthodontics | MI | Healthcare Provider | 1,427 | May 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Tobii Dynavox | PA | Healthcare Provider | 1,098 | May 14, 2024 | Hacking/IT Incident | Archive (closed) |
| TimeDoc, Inc | IL | Business Associate | 1,894 | May 13, 2024 | Theft | Archive (closed) |
| Superior Air-Ground Ambulance Service, Inc. | IL | Healthcare Provider | 1,039,972 | May 10, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.