HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 41 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Bold Quail Holdings, LLC (NewGen Administrative Services, LLC) | CA | Healthcare Provider | 105,425 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| UNITE HERE | NY | Business Associate | 95,797 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| MedQ, Inc. | TX | Business Associate | 55,917 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| CVS Caremark Part D Services, L.L.C. (“CVS”) | RI | Business Associate | 11,193 | Feb 23, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Santa Clarita Community College District | CA | Health Plan | 2,324 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Washington County Hospital and Nursing Home | AL | Healthcare Provider | 29,346 | Feb 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Lamont Hanley & Associates, Inc. | NH | Business Associate | 22,216 | Feb 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Prague Regional Memorial Hospital | OK | Healthcare Provider | 1,129 | Feb 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Maryville, Inc. | NJ | Healthcare Provider | 15,503 | Feb 21, 2024 | Hacking/IT Incident | Archive (closed) |
| interventional Pain and Regenerative Medicine | TX | Healthcare Provider | 2,843 | Feb 21, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Anna Jaques Hospital a member of Beth Israel Health Incorporated | MA | Healthcare Provider | 308,829 | Feb 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Egyptian Health Department | IL | Healthcare Provider | 121,995 | Feb 20, 2024 | Hacking/IT Incident | Archive (closed) |
| East Carolina University’s Brody School of Medicine, a member of the ECU Health affiliated covered entity | NC | Healthcare Provider | 19,085 | Feb 20, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mental Health Center of North Central Alabama, Inc. | AL | Healthcare Provider | 75,667 | Feb 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Human Affairs International of California | CA | Business Associate | 18,347 | Feb 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospice of Huntington | WV | Healthcare Provider | 9,013 | Feb 16, 2024 | Hacking/IT Incident | Archive (closed) |
| McKenzie County Healthcare System, Inc. | ND | Healthcare Provider | 8,345 | Feb 16, 2024 | Hacking/IT Incident | Archive (closed) |
| Dedicated Physicians Group of Texas, PLLC d/b/a Dedicated Senior Medical Center | FL | Healthcare Provider | 3,441 | Feb 16, 2024 | Theft | Archive (closed) |
| CareFirst BlueCross BlueShield Community Health Plan - District of Columbia | DC | Business Associate | 2,189 | Feb 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| CVS Pharmacy, Inc. | RI | Healthcare Provider | 1,896 | Feb 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Employee Benefits Corporation of America and Benefit Design Group, Inc. | VA | Health Plan | 38,912 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Qualcomm Incorporated | CA | Health Plan | 4,102 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Lena Pope Home Inc. | TX | Healthcare Provider | 3,954 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Amin Radiology d/b/a Citrus Diagnostic Center | FL | Healthcare Provider | 1,273 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus Tennessee | TN | Health Plan | 790 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Dignity Health Welfare Benefits Plan | CO | Health Plan | 744 | Feb 15, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Insurance ACE/Humana Inc. | KY | Health Plan | 3,480 | Feb 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Dubuque Fire Department | IA | Healthcare Provider | 1,381 | Feb 14, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| North Hill Needham, Inc., North Hill Home Health Care, Inc. and North Hill Employee Dental Plan | MA | Healthcare Provider | 1,096 | Feb 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Roswell Park Comprehensive Cancer Center | NY | Healthcare Provider | 755 | Feb 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Biomatrix Specialty Pharmacy, LLC | FL | Healthcare Provider | 3,640 | Feb 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Coleman Professional Services Inc. | OH | Healthcare Provider | 51,889 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Tiegerman | NY | Healthcare Provider | 19,000 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| AGC Flat Glass North America, Inc. Welfare Benefits Plan | GA | Health Plan | 13,079 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Erie Indemnity Company Group Dental Assistance Plan | PA | Health Plan | 3,122 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| May Institute | MA | Healthcare Provider | 2,612 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Lexington Health, Inc. | SC | Healthcare Provider | 1,994 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Prime Healthcare Employee Health Plan | CA | Health Plan | 101,135 | Feb 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Liberty Hospital | MO | Healthcare Provider | 264,541 | Feb 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Humana Inc. | KY | Health Plan | 12,339 | Feb 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| CBIZ Marks Paneth, LLC | OH | Business Associate | 5,562 | Feb 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Forward Healthcare, LLC | MD | Healthcare Provider | 3,999 | Feb 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Medical Management Resource Group, L.L.C. | AZ | Business Associate | 2,264,157 | Feb 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Bradford Health Services, LLC | AL | Healthcare Provider | 28,543 | Feb 6, 2024 | Hacking/IT Incident | Under investigation |
| Humana Inc. | KY | Health Plan | 6,440 | Feb 6, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| The Bengtson Center for Aesthetics and Plastic Surgery | MI | Healthcare Provider | 935 | Feb 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kentucky Cabinet for Health and Family Services | KY | Health Plan | 857 | Feb 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Spectrum Vision Partners | NY | Business Associate | 592,237 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Greater Cincinnati Behavioral Health Services | OH | Healthcare Provider | 50,000 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Health Alliance Medical Plans | IL | Health Plan | 6,900 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.