Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 46 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
BBRx PharmacyNYHealthcare Provider8,786Nov 7, 2023Hacking/IT IncidentArchive (closed)
Mannings 8th Ave Inc.NYHealthcare Provider5,796Nov 7, 2023Hacking/IT IncidentArchive (closed)
Boomerang HealthcareCAHealthcare Provider1,204Nov 7, 2023Unauthorized Access/DisclosureArchive (closed)
Confucius PharmacyNYHealthcare Provider501Nov 7, 2023Hacking/IT IncidentArchive (closed)
Welltok, Inc.COBusiness Associate14,782,887Nov 6, 2023Hacking/IT IncidentArchive (closed)
Prestige Care, Inc.WAHealthcare Provider116,956Nov 6, 2023Hacking/IT IncidentArchive (closed)
WellLife Network Inc.NYHealthcare Provider43,875Nov 6, 2023Hacking/IT IncidentArchive (closed)
Wyndemere Senior Care LLCILHealthcare Provider6,832Nov 6, 2023Hacking/IT IncidentArchive (closed)
Healthsoft LLCGABusiness Associate1,000Nov 6, 2023Hacking/IT IncidentArchive (closed)
Financial Asset Management SystemsGABusiness Associate164,796Nov 4, 2023Hacking/IT IncidentArchive (closed)
Perry Johnson & Associates, Inc. dba PJ&ANVBusiness Associate9,302,588Nov 3, 2023Hacking/IT IncidentArchive (closed)
Sutter HealthCAHealthcare Provider845,441Nov 3, 2023Hacking/IT IncidentArchive (closed)
South Austin Health Imaging LLC dba Longhorn Imaging CenterTXHealthcare Provider100,645Nov 3, 2023Hacking/IT IncidentArchive (closed)
Mulkay Cardiology Consultants at Holy Name Medical Center, P.C.NJHealthcare Provider79,582Nov 3, 2023Hacking/IT IncidentArchive (closed)
Westat, Inc.MDBusiness Associate20,045Nov 3, 2023Hacking/IT IncidentArchive (closed)
Youth and Shelter Services, Inc.IAHealthcare Provider13,603Nov 3, 2023Hacking/IT IncidentArchive (closed)
Catholic Charities of the Diocese of Rockville Centre d/b/a Catholic Charities of Long IslandNYHealthcare Provider13,000Nov 3, 2023Hacking/IT IncidentArchive (closed)
Life Generations Healthcare LLCCAHealthcare Provider5,832Nov 3, 2023Hacking/IT IncidentArchive (closed)
Rebekah Children’s ServicesCAHealthcare Provider2,033Nov 3, 2023Hacking/IT IncidentArchive (closed)
WACOSAMNHealthcare Provider1,380Nov 3, 2023Hacking/IT IncidentArchive (closed)
Mayo ClinicMNHealthcare Provider1,152Nov 3, 2023Unauthorized Access/DisclosureArchive (closed)
Claxton-Hepburn Medical CenterNYHealthcare Provider757Nov 2, 2023Hacking/IT IncidentUnder investigation
Postmeds, Inc.CAHealthcare Provider2,369,026Oct 30, 2023Hacking/IT IncidentArchive (closed)
Longhorn VillageTXHealthcare Provider1,670Oct 30, 2023Hacking/IT IncidentArchive (closed)
Frederiksted Health Care, Inc.Healthcare Provider600Oct 30, 2023Hacking/IT IncidentArchive (closed)
Northern Iowa Therapy PCIABusiness Associate5,112Oct 29, 2023Hacking/IT IncidentArchive (closed)
PeakMedCOHealthcare Provider27,800Oct 27, 2023Hacking/IT IncidentArchive (closed)
Cadence BankMSBusiness Associate13,862Oct 27, 2023Hacking/IT IncidentArchive (closed)
JDA eHealth Systems, Inc. d/b/a ParathonILBusiness Associate8,099Oct 27, 2023Hacking/IT IncidentArchive (closed)
Pause Pain & WellnessMSHealthcare Provider777Oct 27, 2023Unauthorized Access/DisclosureArchive (closed)
Western Washington Medical GroupMSHealthcare Provider350,863Oct 26, 2023Hacking/IT IncidentArchive (closed)
Greater Rochester Independent Practice Association, Inc.NYHealthcare Provider279,156Oct 26, 2023Hacking/IT IncidentArchive (closed)
Hospital Sisters Health SystemILBusiness Associate500Oct 26, 2023Hacking/IT IncidentArchive (closed)
Fredericksburg Foot & Ankle Center, PLCVAHealthcare Provider14,912Oct 25, 2023Hacking/IT IncidentArchive (closed)
Edward C. Taylor, PhDFLHealthcare Provider6,684Oct 25, 2023Hacking/IT IncidentArchive (closed)
MNGI Digestive Health, PAMNHealthcare Provider767,670Oct 24, 2023Hacking/IT IncidentArchive (closed)
eleHealthLABusiness Associate2,187Oct 24, 2023Unauthorized Access/DisclosureArchive (closed)
LCS Financial ServicesCOBusiness Associate768Oct 24, 2023Hacking/IT IncidentArchive (closed)
Dakota Eye InstituteNDHealthcare Provider107,143Oct 23, 2023Hacking/IT IncidentArchive (closed)
University of MichiganMIHealthcare Provider61,033Oct 23, 2023Hacking/IT IncidentArchive (closed)
McLaren Health CareMIHealthcare Provider2,103,881Oct 20, 2023Hacking/IT IncidentArchive (closed)
La Red Health CenterDEHealthcare Provider39,759Oct 20, 2023Hacking/IT IncidentArchive (closed)
City of PhiladelphiaPAHealth Plan6,107Oct 20, 2023Hacking/IT IncidentArchive (closed)
Morrison Child and Family ServicesORHealthcare Provider2,044Oct 20, 2023Hacking/IT IncidentArchive (closed)
Radius Global SolutionsPABusiness Associate135,742Oct 19, 2023Hacking/IT IncidentArchive (closed)
Hospital & Medical Foundation of Paris, Inc d/b/a Horizon HealthILHealthcare Provider16,598Oct 19, 2023Hacking/IT IncidentArchive (closed)
Counseling and Recovery Services of OklahomaOKHealthcare Provider3,365Oct 19, 2023Hacking/IT IncidentArchive (closed)
Oscar Insurance Company of FloridaNYHealth Plan1,399Oct 19, 2023Hacking/IT IncidentArchive (closed)
Napa Integrated Medicine PCCABusiness Associate600Oct 19, 2023TheftArchive (closed)
Singing River Health System and its wholly owned subsidiary, Singing River GulfportMSHealthcare Provider895,204Oct 18, 2023Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.