HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 38 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cumberland Heights Foundation, Inc. | TN | Healthcare Provider | 5,078 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Advarra, Inc. | MD | Business Associate | 596 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Montgomery County Board of Developmental Disabilities Services | OH | Business Associate | 8,819 | Apr 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Tobin, Carberry, O'Malley, Riley & Selinger, P.C. | CT | Business Associate | 47,106 | Apr 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Orthopedic and Fracture Clinic dba West Idaho Orthopedics and Sports Medicine | ID | Healthcare Provider | 6,146 | Apr 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Hospice of the Bluegrass, Inc. dba Bluegrass Care Navigators | KY | Healthcare Provider | 2,282 | Apr 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Somerset Dental | NV | Healthcare Provider | 11,321 | Apr 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Philips Respironics | PA | Business Associate | 7,539 | Apr 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Philips Respironics | PA | Business Associate | 5,576 | Apr 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Dental Health Services | CA | Health Plan | 4,562 | Apr 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Dental Health Services, Inc | WA | Health Plan | 1,778 | Apr 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Philips Respironics | PA | Business Associate | 1,338 | Apr 16, 2024 | Hacking/IT Incident | Archive (closed) |
| MHNU Corporation d/b/a Medical Home Network | IL | Business Associate | 681 | Apr 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Moveable Feast, Inc. | MD | Healthcare Provider | 568 | Apr 16, 2024 | Improper Disposal | Archive (closed) |
| Catholic Medical Center | NH | Healthcare Provider | 2,792 | Apr 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan, Inc. | CA | Health Plan | 13,400,000 | Apr 12, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Rebound Orthopedics & Neurosurgery | WA | Healthcare Provider | 426,536 | Apr 10, 2024 | Hacking/IT Incident | Archive (closed) |
| CompuNet Clinical Laboratories | OH | Healthcare Provider | 6,963 | Apr 10, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| American Healthcare Systems LLC dba Randolph Health | NC | Healthcare Provider | 899 | Apr 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Spurwink Services, Inc. | MS | Healthcare Provider | 27,332 | Apr 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Group Health Cooperative of South Central Wisconsin | WI | Health Plan | 533,809 | Apr 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Knowles Smith & Associates, d/b/a Village Family Dental | NC | Healthcare Provider | 240,214 | Apr 8, 2024 | Hacking/IT Incident | Archive (closed) |
| The Epilepsy Foundation of Metro New York | NY | Healthcare Provider | 3,852 | Apr 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Gaia Software, LLC | CO | Business Associate | 56,676 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Jackson Medical Center, LLC | AL | Healthcare Provider | 16,892 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Island Ambulatory Surgery Center, LLC | NY | Healthcare Provider | 8,266 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | TN | Business Associate | 717 | Apr 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Sleep Management Institute | OH | Healthcare Provider | 500 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Politzer and Durocher, PLC d/b/a Optometric Physicians of Middle Tennessee | TN | Healthcare Provider | 24,996 | Apr 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Cattaraugus-Allegany Board of Cooperative Education Services | NY | Business Associate | 15,203 | Apr 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Zuckerberg San Francisco General Hospital and Trauma Center | CA | Healthcare Provider | 754 | Apr 4, 2024 | Loss | Archive (closed) |
| UNC Hospitals | NC | Healthcare Provider | 3,142 | Apr 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Advanced Care Hospital of Montana | MT | Healthcare Provider | 2,331 | Apr 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Continuum Health Alliance, LLC | NJ | Business Associate | 377,119 | Apr 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Otolaryngology Associates, LLC | IN | Healthcare Provider | 316,802 | Apr 1, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Tennessee Health Science Center | TN | Healthcare Provider | 19,353 | Apr 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Rutgers Robert Wood Johnson Medical School | NJ | Healthcare Provider | 2,399 | Apr 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Delta Health System | MS | Healthcare Provider | 216,532 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Trustpoint Rehabilitation Hospital of Lubbock | TX | Healthcare Provider | 9,014 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Highmark | PA | Health Plan | 6,205 | Mar 29, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mountain Valley Regional Rehabilitation Hospital | AZ | Healthcare Provider | 5,963 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Greenwood Regional Rehabilitation Hospital | SC | Healthcare Provider | 5,823 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Idaho Advanced Care Hospital | ID | Healthcare Provider | 5,606 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Rehabilitation Hospital of Southern New Mexico | NM | Healthcare Provider | 5,466 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| New Braunfels Regional Rehabilitation Hospital | TX | Healthcare Provider | 5,384 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Spartanburg Rehabilitation Institute | SC | Healthcare Provider | 4,506 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Colorado Long Term Acute Hospital | CO | Healthcare Provider | 4,335 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Virginia Oral, Maxillofacial & Implant Surgery | VA | Healthcare Provider | 4,333 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| PRATT MRI LLC | KS | Business Associate | 4,265 | Mar 29, 2024 | Loss | Archive (closed) |
| South Texas Rehabilitation Hospital | TX | Healthcare Provider | 4,130 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.