HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 37 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Children's Health Care | MN | Healthcare Provider | 24,183 | May 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Texas Panhandle Centers | TX | Healthcare Provider | 16,394 | May 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Precision Medical Products Inc. | CA | Healthcare Clearing House | 1,094 | May 9, 2024 | Hacking/IT Incident | Archive (closed) |
| WebTPA Employer Services, LLC (“WebTPA”) | TX | Business Associate | 2,518,533 | May 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Watson Clinic | FL | Healthcare Provider | 280,278 | May 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Winter Haven Hospital | FL | Healthcare Provider | 2,101 | May 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| 1st Choice Home Care | AR | Healthcare Provider | 1,600 | May 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Delta Specialty Hospital | TN | Healthcare Provider | 1,019 | May 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| The Kennedy Collective | CT | Healthcare Provider | 851 | May 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Columbia University Irving Medical Center | NY | Healthcare Provider | 29,629 | May 6, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kenneth Young Center | IL | Healthcare Provider | 6,842 | May 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Allina Health System | MN | Healthcare Provider | 715 | May 6, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Affiliated Dermatologists and Dermatologic Surgeons, P.A. | NJ | Healthcare Provider | 373,680 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| MedStar Health, Inc. | MD | Healthcare Provider | 183,079 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Redwood Coast Regional Center | CA | Healthcare Provider | 24,937 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 9,191 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Panoramic Health | AZ | Business Associate | 5,445 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Grayson & Associates | AL | Healthcare Provider | 573 | May 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Medical Express Ambulance Inc. D/B/A Medex Ambulance | IL | Healthcare Provider | 121,190 | May 2, 2024 | Hacking/IT Incident | Under investigation |
| Marpai Health | NY | Healthcare Provider | 1,129 | May 2, 2024 | Hacking/IT Incident | Archive (closed) |
| United Seating and Mobility, L.L.C., d/b/a Numotion | TN | Healthcare Provider | 688,852 | May 1, 2024 | Hacking/IT Incident | Archive (closed) |
| UnitedHealthcare Insurance Company | CT | Business Associate | 16,665 | May 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Merchants Benefit Administration | AZ | Health Plan | 767 | Apr 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Allergy Medical Group of the North Area, Inc. | CA | Healthcare Provider | 6,934 | Apr 29, 2024 | Hacking/IT Incident | Archive (closed) |
| AMERICAN RENAL MANAGEMENT | TN | Business Associate | 501 | Apr 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Inland Physicians Billing Services | CA | Healthcare Clearing House | 77,434 | Apr 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Signature Healthcare Services LLC | CA | Business Associate | 14,696 | Apr 27, 2024 | Hacking/IT Incident | Archive (closed) |
| OrthoConnecticut PLLC | CT | Healthcare Provider | 178,742 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| LivaNova USA, Inc. | TX | Business Associate | 129,031 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Justice Resource Institute | MA | Healthcare Provider | 23,118 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Aspire Health Alliance | MA | Healthcare Provider | 17,490 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Bay Oral Surgery & Implant Center | WI | Healthcare Provider | 13,055 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Guardant Health, Inc. | CA | Healthcare Provider | 9,309 | Apr 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Forefront Dermatology, S.C. d/b/a Premier Dermatology | IL | Healthcare Provider | 2,297 | Apr 26, 2024 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles Departments of Health Services and Public Health | CA | Healthcare Provider | 252,856 | Apr 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Empath-Stratum Inc. doing business as Empath Health | FL | Healthcare Provider | 40,569 | Apr 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Therapeutic Health Services | WA | Healthcare Provider | 27,170 | Apr 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Kootenai Health | ID | Healthcare Provider | 464,088 | Apr 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Medical Billing Specialists, Inc. | MA | Business Associate | 43,673 | Apr 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Moffitt Cancer Center and Research Institute | FL | Healthcare Provider | 26,577 | Apr 24, 2024 | Hacking/IT Incident | Archive (closed) |
| NorthBay Healthcare Corporation | CA | Healthcare Provider | 569,012 | Apr 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Cape Fear Aesthetics | NC | Healthcare Provider | 1,165 | Apr 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Bluebonnet Trails Community Services | TX | Healthcare Provider | 76,165 | Apr 22, 2024 | Hacking/IT Incident | Archive (closed) |
| The Prudential Insurance Company of America | NJ | Health Plan | 36,075 | Apr 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Blackstone Valley Community Health Care | RI | Healthcare Provider | 34,518 | Apr 22, 2024 | Hacking/IT Incident | Archive (closed) |
| The Georgia Institute for Plastic Surgery | GA | Healthcare Provider | 8,111 | Apr 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Health First Urgent Care PLLC | WA | Healthcare Provider | 4,169 | Apr 22, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| South Texas Oncology and Hematology, PLLC | TX | Healthcare Provider | 175,195 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Bridgeway Center, Inc. | FL | Healthcare Provider | 36,353 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Green Diamond Resource Company | WA | Health Plan | 8,172 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.