Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 39 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Rehabilitation Hospital of the NorthwestIDHealthcare Provider3,821Mar 29, 2024Hacking/IT IncidentArchive (closed)
Olive View-UCLA Medical CenterCAHealthcare Provider3,716Mar 29, 2024TheftArchive (closed)
Rehabilitation Hospital of Northwest OhioOHHealthcare Provider3,671Mar 29, 2024Hacking/IT IncidentArchive (closed)
Elkhorn Valley Rehabilitation HospitalWYHealthcare Provider3,636Mar 29, 2024Hacking/IT IncidentArchive (closed)
Corpus Christi Rehabilitation HospitalTXHealthcare Provider3,581Mar 29, 2024Hacking/IT IncidentArchive (closed)
Northern Utah Rehabilitation HospitalUTHealthcare Provider3,477Mar 29, 2024Hacking/IT IncidentArchive (closed)
Mesquite Rehabilitation InstituteTXHealthcare Provider3,317Mar 29, 2024Hacking/IT IncidentArchive (closed)
Rehabilitation Hospital of Northern ArizonaAZHealthcare Provider3,287Mar 29, 2024Hacking/IT IncidentArchive (closed)
Summa Rehabilitation HospitalOHHealthcare Provider2,986Mar 29, 2024Hacking/IT IncidentArchive (closed)
Lafayette Regional Rehabilitation HospitalINHealthcare Provider2,861Mar 29, 2024Hacking/IT IncidentArchive (closed)
Weslaco Regional Rehabilitation HospitalTXHealthcare Provider2,781Mar 29, 2024Hacking/IT IncidentArchive (closed)
Midlands Regional Rehabilitation HospitalSCHealthcare Provider2,018Mar 29, 2024Hacking/IT IncidentArchive (closed)
Laredo Rehabilitation HospitalTXHealthcare Provider1,785Mar 29, 2024Hacking/IT IncidentArchive (closed)
Rehabilitation Hospital of Northern IndianaINHealthcare Provider1,643Mar 29, 2024Hacking/IT IncidentArchive (closed)
Utah Valley Rehabilitation HospitalUTHealthcare Provider1,642Mar 29, 2024Hacking/IT IncidentArchive (closed)
Mesquite Specialty HospitalTXHealthcare Provider1,244Mar 29, 2024Hacking/IT IncidentArchive (closed)
Laredo Specialty HospitalTXHealthcare Provider1,242Mar 29, 2024Hacking/IT IncidentArchive (closed)
Bloomington Regional Rehabilitation HospitalINHealthcare Provider1,191Mar 29, 2024Hacking/IT IncidentArchive (closed)
Advanced Care Hospital of Southern New MexicoNMHealthcare Provider1,162Mar 29, 2024Hacking/IT IncidentArchive (closed)
Rehabilitation Hospital of Southern CaliforniaCAHealthcare Provider925Mar 29, 2024Hacking/IT IncidentArchive (closed)
Northern Colorado Rehabilitation HospitalCOHealthcare Provider885Mar 29, 2024Hacking/IT IncidentArchive (closed)
Bakersfield Rehabilitation HospitalCAHealthcare Provider852Mar 29, 2024Hacking/IT IncidentArchive (closed)
Denver Regional Rehabilitation HospitalCOHealthcare Provider848Mar 29, 2024Hacking/IT IncidentArchive (closed)
Baylor College of MedicineTXHealthcare Provider801Mar 29, 2024Hacking/IT IncidentArchive (closed)
Risas Dental & BracesPAHealthcare Provider618,189Mar 28, 2024Hacking/IT IncidentArchive (closed)
Strive Holdco, LLCTXHealthcare Provider51,477Mar 28, 2024Unauthorized Access/DisclosureArchive (closed)
Florida Pediatric Associates, LLCFLHealthcare Provider1,104Mar 28, 2024Hacking/IT IncidentArchive (closed)
UT Southwestern Medical CenterTXHealthcare Provider2,045Mar 27, 2024Unauthorized Access/DisclosureArchive (closed)
Washington County Department of Human ServicesPAHealthcare Provider13,583Mar 26, 2024Hacking/IT IncidentArchive (closed)
Pembina County Memorial HospitalNDHealthcare Provider23,811Mar 25, 2024Hacking/IT IncidentArchive (closed)
Baytown Medical Center, L.P.TXHealthcare Provider1,500Mar 25, 2024Unauthorized Access/DisclosureArchive (closed)
Family Health CenterMIHealthcare Provider33,240Mar 24, 2024Hacking/IT IncidentArchive (closed)
Designed Receivable Solutions, Inc.CABusiness Associate585,035Mar 23, 2024Hacking/IT IncidentArchive (closed)
Robert Peterson DDS, PCORHealthcare Provider6,500Mar 23, 2024TheftArchive (closed)
Human Development Services of Westchester, Inc.NYHealthcare Provider506Mar 23, 2024Hacking/IT IncidentArchive (closed)
Emergency Medical Services AuthorityOKHealthcare Provider611,743Mar 22, 2024Hacking/IT IncidentArchive (closed)
Ethos, also known as Southwest Boston Senior ServicesMABusiness Associate14,503Mar 22, 2024Hacking/IT IncidentArchive (closed)
Mary H. Makhlouf, DMD, MS, PANCHealthcare Provider1,797Mar 22, 2024Hacking/IT IncidentArchive (closed)
County of Los Angeles Department of Mental HealthCAHealthcare Provider1,408Mar 22, 2024Hacking/IT IncidentArchive (closed)
M&D Capital Premier Billing LLCNYBusiness Associate284,326Mar 21, 2024Hacking/IT IncidentArchive (closed)
Battle Mountain General HospitalNVHealthcare Provider2,767Mar 21, 2024Hacking/IT IncidentArchive (closed)
Lakewood Medical Center, PCCOHealthcare Provider2,500Mar 21, 2024Hacking/IT IncidentArchive (closed)
City of ConneautOHHealthcare Provider771Mar 21, 2024Hacking/IT IncidentArchive (closed)
Pomona Valley Hospital Medical CenterCAHealthcare Provider13,516Mar 20, 2024Hacking/IT IncidentArchive (closed)
Ezras Choilim Health Center, Inc.NYHealthcare Provider59,861Mar 19, 2024Hacking/IT IncidentArchive (closed)
Western New York Independent Living, Inc.NYHealthcare Provider2,886Mar 19, 2024Hacking/IT IncidentArchive (closed)
Valley Oaks HealthINHealthcare Provider50,034Mar 18, 2024Hacking/IT IncidentArchive (closed)
Weirton Medical CenterWVHealthcare Provider26,793Mar 18, 2024Hacking/IT IncidentArchive (closed)
Sycamore Rehabilitation Services, Inc.INHealthcare Provider3,414Mar 18, 2024Hacking/IT IncidentArchive (closed)
RxBenefits, Inc.ALBusiness Associate3,396Mar 18, 2024Unauthorized Access/DisclosureArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.