HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 43 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Burr & Forman LLP | AL | Business Associate | 19,893 | Jan 9, 2024 | Hacking/IT Incident | Archive (closed) |
| InHealth Technologies | CA | Healthcare Provider | 12,143 | Jan 9, 2024 | Hacking/IT Incident | Archive (closed) |
| Psychological Holdings, PLLC d/b/a Senior PsychCare | TX | Healthcare Provider | 75,349 | Jan 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Sharp Health Plan | CA | Health Plan | 9,255 | Jan 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Sharp Health Plan | CA | Health Plan | 8,200 | Jan 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Dignity Health Nevada St. Rose Dominican Hospital | NV | Healthcare Provider | 2,652 | Jan 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Catholic Heath Initiative Trinity Medical Center | OH | Healthcare Provider | 797 | Jan 8, 2024 | Hacking/IT Incident | Archive (closed) |
| The Harris Center for Mental Health and IDD | TX | Healthcare Provider | 545,001 | Jan 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Cooper Clinic, P.A. | TX | Healthcare Provider | 124,341 | Jan 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Fincantieri Marine Group, LLC | DC | Health Plan | 11,535 | Jan 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Daleville Dental II LLC | AL | Healthcare Provider | 5,280 | Jan 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | DC | Healthcare Provider | 2,380 | Jan 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Tampa Bay Surgical Group | FL | Healthcare Provider | 1,107 | Jan 5, 2024 | Loss | Archive (closed) |
| ConsensioHealth, LLC | WI | Business Associate | 60,871 | Jan 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Morgan Stanley Health Benefits and Insurance Plan | NY | Health Plan | 2,442 | Jan 4, 2024 | Hacking/IT Incident | Archive (closed) |
| North Kansas City Hospital | MO | Healthcare Provider | 502,438 | Jan 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Inyo Healthcare District | CA | Healthcare Provider | 1,305 | Jan 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Amerigroup Iowa, Inc | IN | Business Associate | 1,023 | Jan 3, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Midwest Long Term Care Services DBA Senior Scripts | MO | Healthcare Provider | 10,566 | Jan 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Community Tri-County Healthcare | AL | Healthcare Provider | 5,809 | Jan 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Keystone First | PA | Health Plan | 1,965 | Jan 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Transformative Healthcare, on behalf of Fallon Ambulance Services | MA | Healthcare Provider | 911,757 | Dec 31, 2023 | Hacking/IT Incident | Archive (closed) |
| HMG Healthcare, LLC | TX | Healthcare Provider | 80,000 | Dec 29, 2023 | Hacking/IT Incident | Archive (closed) |
| EDI Health Group dba DentalXChange | CA | Healthcare Clearing House | 2,574 | Dec 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Electrostim Medical Services, Inc. d/b/A EMSI | FL | Healthcare Provider | 542,990 | Dec 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Medical Center Barbour | AL | Healthcare Provider | 61,014 | Dec 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Fred Hutchinson Cancer Center | WA | Healthcare Provider | 20,192 | Dec 26, 2023 | Loss | Archive (closed) |
| Lake County Health Department and Community Health Center | IL | Healthcare Provider | 5,000 | Dec 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Fred Hutchinson Cancer Center | WA | Healthcare Provider | 1,840,927 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Retina Group of Washington, PLLC | MD | Healthcare Provider | 455,935 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Clay County Social Services | MN | Business Associate | 123,847 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Meridian Behavioral Healthcare, Inc. | FL | Healthcare Provider | 98,808 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Kent County Community Mental Health Authority d/b/a Network180 | MI | Healthcare Provider | 59,334 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Highlands Oncology Group PA | AR | Healthcare Provider | 55,297 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Eye Physicians of Central Florida, PLLC, a division of Florida Pediatric Associates, LLC | FL | Healthcare Provider | 31,189 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| The Foleck Center, LTD | VA | Healthcare Provider | 6,965 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| NYC Health + Hospitals | NY | Healthcare Provider | 3,000 | Dec 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Mountain Dermatology Specialists, PC | CO | Healthcare Provider | 2,705 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles Department of Mental Health | CA | Healthcare Provider | 1,284 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| RevSpring, Inc. | TN | Business Associate | 1,053 | Dec 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| HealthEC LLC | NJ | Business Associate | 4,786,241 | Dec 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Southeastern Orthopaedic Specialists, PA | NC | Healthcare Provider | 35,533 | Dec 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Lone Peak Physical Therapy, Inc. | MT | Healthcare Provider | 5,809 | Dec 21, 2023 | Theft | Archive (closed) |
| Rush System for Health | IL | Healthcare Provider | 4,961 | Dec 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc. | KY | Health Plan | 2,844 | Dec 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Molina Healthcare of Ohio, Inc. | CA | Health Plan | 1,977 | Dec 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| First Choice Dental | WI | Healthcare Provider | 1,000 | Dec 21, 2023 | Hacking/IT Incident | Archive (closed) |
| AccessDx Laboratory, LLC | TX | Healthcare Provider | 535 | Dec 21, 2023 | Hacking/IT Incident | Archive (closed) |
| 360 Physical Therapy, LLC | ND | Healthcare Provider | 520 | Dec 21, 2023 | Theft | Archive (closed) |
| Plaza Radiology, LLC | TN | Healthcare Provider | 569,022 | Dec 20, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.