HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 47 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| BHI Energy Health and Welfare Benefits Plan | MA | Health Plan | 4,049 | Oct 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Helping the Aging Needy and Disabled Inc | TX | Healthcare Provider | 628 | Oct 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Peerstar LLC | PA | Healthcare Provider | 11,438 | Oct 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Pacific Clear Vision Institute | OR | Healthcare Provider | 626 | Oct 15, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Westat, Inc. | MD | Business Associate | 51,513 | Oct 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlas Healthcare Group | CT | Healthcare Provider | 10,831 | Oct 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Premier Health Partners and wholly owned covered entities listed in description section below | OH | Healthcare Provider | 10,833 | Oct 12, 2023 | Hacking/IT Incident | Under investigation |
| NASCO | GA | Business Associate | 1,744,655 | Oct 10, 2023 | Hacking/IT Incident | Archive (closed) |
| BHS Physician Network, Inc. | TX | Healthcare Provider | 1,857 | Oct 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Data Media Associates | GA | Business Associate | 2,035 | Oct 9, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Fellowship Village | NJ | Healthcare Provider | 501 | Oct 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Brooklyn Premier Orthopedics | NY | Healthcare Provider | 48,459 | Oct 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Responsive Care Solutions | FL | Business Associate | 5,200 | Oct 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Neurovative Diagnostics, LLC | TX | Healthcare Provider | 1,599 | Oct 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Carle Health | IL | Healthcare Provider | 679 | Oct 5, 2023 | Hacking/IT Incident | Archive (closed) |
| Region 4 South Mental Health Consortium | MN | Healthcare Provider | 677 | Oct 5, 2023 | Hacking/IT Incident | Archive (closed) |
| Walmart Associates Health and Welfare Plan | AR | Health Plan | 85,952 | Oct 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Borgfeld Dental Center PLLC dba Henwood Family Dentistry | TX | Healthcare Provider | 7,300 | Oct 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Arietis Health, LLC | FL | Business Associate | 1,975,066 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Prospect Medical Holdings, Inc. | CA | Business Associate | 1,309,096 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| International Business Machines Corporation | NY | Business Associate | 630,755 | Sep 29, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| South Florida Behavioral Health Network dba Thriving Mind South Florida | FL | Business Associate | 258,126 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Greater Dallas Healthcare Enterprises | TX | Healthcare Provider | 143,833 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Valley Mountain Regional Center | CA | Business Associate | 126,679 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Georgia Northside Ear, Nose, and Throat, LLC. | TX | Healthcare Provider | 37,774 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Mt. Graham Regional Medical Center | AZ | Healthcare Provider | 35,688 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Physio Logic Chiropractic and Physical Therapy, PLLC and Dr. Patty DiBlasio, PC | NY | Healthcare Provider | 9,580 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| H3- Hope, Healing, Health Inc. | MI | Healthcare Provider | 1,586 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Physio Logic Medicine, PC | NY | Healthcare Provider | 1,280 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Piedmont Healthcare, Inc. | GA | Healthcare Provider | 895 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Gillette Children's Specialty Healthcare | MN | Healthcare Provider | 542 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Acadia Health, LLC d/b/a Just Kids Dental | AL | Healthcare Provider | 129,463 | Sep 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Community First Medical Center | IL | Healthcare Provider | 216,047 | Sep 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Hospice of the Bluegrass, Inc. dba Bluegrass Care Navigators | KY | Healthcare Provider | 7,664 | Sep 26, 2023 | Hacking/IT Incident | Archive (closed) |
| AIDS Alabama, Inc. | AL | Healthcare Provider | 1,922 | Sep 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Entertainment Community Fund, dba Actors Fund Home | NJ | Healthcare Provider | 1,110 | Sep 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Riverdale Mental Health d/b/a Mosaic Mental Health | NY | Healthcare Provider | 7,281 | Sep 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Tangoe, Inc. | IN | Health Plan | 4,765 | Sep 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Cook County Health and Hospitals System | IL | Healthcare Provider | 1,248,546 | Sep 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Navvis & Company, LLC | MO | Business Associate | 2,824,726 | Sep 22, 2023 | Hacking/IT Incident | Archive (closed) |
| OrthoAlaska, LLC | AK | Healthcare Provider | 176,203 | Sep 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Health First, Inc. | FL | Healthcare Provider | 14,171 | Sep 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Indiana University Health | IN | Healthcare Provider | 4,194 | Sep 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Blue Cross Blue Shield of Texas | IL | Business Associate | 3,708 | Sep 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Clover Health LLC | NJ | Health Plan | 2,834 | Sep 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Allegheny County, Pennsylvania | PA | Business Associate | 1,505 | Sep 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Wellstar Health System | GA | Healthcare Provider | 779 | Sep 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Lakeview Clinic | MN | Healthcare Provider | 624 | Sep 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Arkansas Total Care, Inc. | AR | Health Plan | 578 | Sep 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Elevate Patient Financial Solutions | TX | Business Associate | 5,364 | Sep 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.