HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 40 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Bonney Forge Corporation | PA | Health Plan | 672 | Mar 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Andor Labs | NC | Healthcare Provider | 500 | Mar 18, 2024 | Theft | Archive (closed) |
| Aveanna Healthcare | GA | Healthcare Provider | 65,482 | Mar 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Philips Respironics | PA | Business Associate | 1,125 | Mar 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Cornerstone Healthcare Group Management Services LLC | KY | Business Associate | 484,957 | Mar 14, 2024 | Hacking/IT Incident | Archive (closed) |
| California Correctional Health Care Services | CA | Healthcare Provider | 1,348 | Mar 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthfirst | NY | Health Plan | 6,836 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| A5 PHARMACY INC. | NY | Healthcare Provider | 3,000 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Plymouth Tube Company Employee Benefit Plan | IL | Health Plan | 2,652 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Bronson Healthcare Group | MI | Healthcare Provider | 1,597 | Mar 13, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Lindsay Municipal Hospital | OK | Healthcare Provider | 500 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| CCM Health | MN | Healthcare Provider | 84,329 | Mar 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Newton Centre Dental | MA | Healthcare Provider | 2,547 | Mar 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Blue Ridge Pediatric & Adolescent Medicine, Inc. | NC | Healthcare Provider | 39,282 | Mar 11, 2024 | Hacking/IT Incident | Archive (closed) |
| R1 RCM Inc. | IL | Business Associate | 16,121 | Mar 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Rancho Family Medical Group, Inc. | CA | Healthcare Provider | 10,480 | Mar 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Texas Health and Human Services | TX | Health Plan | 3,392 | Mar 11, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Massachusetts Department of Developmental Services | MA | Healthcare Provider | 500 | Mar 11, 2024 | Improper Disposal | Archive (closed) |
| Jewish Home Lifecare, Inc. | NY | Healthcare Provider | 104,234 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Access TeleCare | TX | Healthcare Provider | 65,466 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Orsini Pharmaceutical Services, LLC | IL | Healthcare Provider | 56,989 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Gunster, Yoakley, & Stewart, PA | FL | Business Associate | 42,077 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| UC San Diego Health Hillcrest- Hillcrest Medical Center | CA | Healthcare Provider | 1,642 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| CDC Dental Management, Co., LLC dba Kids Care Dental & Orthodontics | CA | Healthcare Provider | 1,286 | Mar 7, 2024 | Hacking/IT Incident | Archive (closed) |
| Dental Group of Amarillo | TX | Healthcare Provider | 109,684 | Mar 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Orthopedic Associates of Flower Mound PLLC | TX | Healthcare Provider | 1,759 | Mar 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Seaglass Chiropractic | NJ | Healthcare Provider | 650 | Mar 6, 2024 | Theft | Archive (closed) |
| University of Wisconsin Hospitals and Clinics Authority | WI | Healthcare Provider | 85,902 | Mar 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Orlando VA Medical Center | FL | Healthcare Provider | 9,850 | Mar 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus Tennessee | TN | Health Plan | 1,251 | Mar 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Philips Respironics | PA | Business Associate | 457,152 | Mar 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Bay Surgical Specialists, LLC | FL | Healthcare Provider | 1,505 | Mar 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Vail Summit Orthopaedics, LLC (“VSON”) | CO | Healthcare Provider | 1,138 | Mar 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Lake of the Woods County Social Services | MN | Healthcare Provider | 537 | Mar 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Yakima Valley Radiology, PC | WA | Healthcare Provider | 235,249 | Mar 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Eastern Radiologists, Inc | NC | Healthcare Provider | 886,746 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Cherry Street Services, Inc. d/b/a Cherry Health | MI | Healthcare Provider | 181,820 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Highland Health Systems | AL | Healthcare Provider | 83,543 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Kirkland & Ellis LLP | IL | Business Associate | 48,802 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| DGA-Producer Pension & Health Plans | CA | Health Plan | 4,211 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Ada Technologies, Inc. | OH | Health Plan | 2,398 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Littleton Regional Healthcare | NH | Healthcare Provider | 12,614 | Feb 28, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Ohio Neurologic Institute | OH | Healthcare Provider | 5,548 | Feb 28, 2024 | Theft | Archive (closed) |
| kmj Health Solutions | MI | Business Associate | 2,191 | Feb 28, 2024 | Hacking/IT Incident | Archive (closed) |
| Northeast Orthopedics and Sports Medicine, PLLC | NY | Healthcare Provider | 177,101 | Feb 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Community Health Group Partnership Plan | CA | Health Plan | 708 | Feb 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Bay Area Anesthesia, LLC | FL | Healthcare Provider | 15,196 | Feb 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Ascend Healthcare Management LLC | AZ | Healthcare Provider | 791 | Feb 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Scurry County Hospital District dba Cogdell Memorial Hospital | TX | Healthcare Provider | 86,981 | Feb 24, 2024 | Hacking/IT Incident | Archive (closed) |
| OrthopedicsNY, LLP | NY | Healthcare Provider | 656,086 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.