HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 42 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| East Side Health District | IL | Healthcare Provider | 559 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Bloom Health Centers | MD | Healthcare Provider | 1,954 | Feb 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Capital Health System, Inc. | NJ | Healthcare Provider | 503,071 | Jan 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Crescent Community Health Center | IA | Healthcare Provider | 20,529 | Jan 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Coppola Physical Therapy and Fitness Gyms | NH | Healthcare Provider | 632 | Jan 31, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Saint Anthony Health Ministries | IL | Healthcare Provider | 360,220 | Jan 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | DC | Healthcare Provider | 46,677 | Jan 30, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Bay Area Heart Center, PA | FL | Healthcare Provider | 11,709 | Jan 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Allies for Health + Wellbeing | PA | Healthcare Provider | 680 | Jan 30, 2024 | Hacking/IT Incident | Archive (closed) |
| OrthoArkansas, PA Employee Benefit Plan | AR | Health Plan | 1,270 | Jan 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Sun Pain Management, LLC | AZ | Healthcare Provider | 2,988 | Jan 27, 2024 | Hacking/IT Incident | Archive (closed) |
| INTEGRIS Health | OK | Healthcare Provider | 2,385,646 | Jan 26, 2024 | Hacking/IT Incident | Archive (closed) |
| CNO ACE | IN | Health Plan | 65,295 | Jan 26, 2024 | Hacking/IT Incident | Archive (closed) |
| PruittHealth, Inc. | GA | Business Associate | 56,405 | Jan 26, 2024 | Hacking/IT Incident | Archive (closed) |
| United Regional Health Care System | TX | Healthcare Provider | 36,900 | Jan 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Nabholz Construction Company Employee Welfare Health Plan | AR | Health Plan | 5,326 | Jan 26, 2024 | Hacking/IT Incident | Archive (closed) |
| Artesia General Hospital | NM | Healthcare Provider | 2,931 | Jan 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Kern Regional Center | CA | Healthcare Provider | 772 | Jan 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Marian Village Corporation, d/b/a/ Marywood Nursing Care Center (“Marywood”) | MI | Healthcare Provider | 6,178 | Jan 24, 2024 | Hacking/IT Incident | Archive (closed) |
| FedEx Corporation Group Health Plan | TN | Health Plan | 553 | Jan 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Des Moines Orthopaedic Surgeons, P.C. | IA | Business Associate | 55,055 | Jan 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Webber Chiropractic Sports Clinic, Inc. | WA | Healthcare Provider | 1,695 | Jan 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Des Moines Orthopaedic Surgeons, P.C. | IA | Healthcare Provider | 307,864 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| AHS Management Company, Inc. | TN | Business Associate | 38,361 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Coastal Hospice & Palliative Care | MD | Healthcare Provider | 29,100 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Humana Inc. | KY | Health Plan | 12,539 | Jan 22, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| J.D. Gilmour & Co., Inc. | CA | Business Associate | 2,570 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Catholic Charities of the Archdiocese of Miami, Inc. | FL | Healthcare Provider | 1,170 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Omaha Firefighters Healthcare Trust | NE | Health Plan | 3,567 | Jan 20, 2024 | Hacking/IT Incident | Archive (closed) |
| Columbus Regional Healthcare System | NC | Healthcare Provider | 132,887 | Jan 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Mount Vernon Dental Smiles | VA | Healthcare Provider | 1,074 | Jan 19, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Native American Health Center | CA | Healthcare Provider | 4,231 | Jan 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Regence BlueCross BlueShield of Oregon | OR | Health Plan | 856 | Jan 18, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Walker, Inc. d/b/a Walker Therapeutic & Educational Programs | MA | Healthcare Provider | 846 | Jan 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Brady Martz & Associates PC | ND | Business Associate | 13,655 | Jan 17, 2024 | Hacking/IT Incident | Archive (closed) |
| TGI Direct | MI | Business Associate | 11,556 | Jan 17, 2024 | Hacking/IT Incident | Archive (closed) |
| Dickinson County Health Department | KS | Healthcare Provider | 1,063 | Jan 17, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| CR Pharmacy Services, Inc. d/b/a CarePro | IA | Healthcare Provider | 151,499 | Jan 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Azura Vascular Care | PA | Business Associate | 348,000 | Jan 13, 2024 | Hacking/IT Incident | Archive (closed) |
| HORNE, LLP | MS | Business Associate | 170,052 | Jan 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Colorado Ophthalmology Associates, PC | CO | Healthcare Provider | 6,020 | Jan 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Air Methods, LLC | NV | Healthcare Provider | 34,063 | Jan 12, 2024 | Theft | Archive (closed) |
| Pacific Cataract and Laser Institute, Inc., P.C. | WA | Healthcare Provider | 9,967 | Jan 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Lester and Rosalie Anixter Center | IL | Healthcare Provider | 6,194 | Jan 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Group, PLLC | TN | Healthcare Provider | 4,135 | Jan 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Covenant Care California, LLC | CA | Healthcare Provider | 501 | Jan 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Hampton-Newport News Community Services Board | VA | Healthcare Provider | 44,312 | Jan 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Family Healthcare Center | ND | Healthcare Provider | 6,457 | Jan 11, 2024 | Hacking/IT Incident | Archive (closed) |
| Concentra Health Services, Inc. | TX | Healthcare Provider | 3,998,163 | Jan 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Coastal Plains Community Mental Health Mental Retardation Center | TX | Healthcare Provider | 45,357 | Jan 9, 2024 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.