HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 49 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| SysInformation Healthcare Services, LLC | TX | Business Associate | 537,987 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| SouthCoast Medical Group, LLC | GA | Healthcare Provider | 450,860 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Morris Hospital & Healthcare Centers | IL | Healthcare Provider | 256,568 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Blue Cross Blue Shield of Arizona | AZ | Health Plan | 47,485 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 527 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| A-Family Dental Care Center PC | PA | Healthcare Provider | 2,800 | Aug 16, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| SUNY at Buffalo School of Dental Medicine | NY | Healthcare Provider | 765 | Aug 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Performance Health Technology | OR | Business Associate | 1,752,076 | Aug 15, 2023 | Hacking/IT Incident | Archive (closed) |
| University of Utah Health | UT | Health Plan | 8,606 | Aug 15, 2023 | Hacking/IT Incident | Archive (closed) |
| Kennedy University Hospital, Inc. t/a Jefferson Health | NJ | Healthcare Provider | 4,140 | Aug 15, 2023 | Loss | Archive (closed) |
| Monocacy Valley Dental | MD | Healthcare Provider | 4,000 | Aug 15, 2023 | Theft | Archive (closed) |
| VNS Health Health Plans | NY | Health Plan | 103,775 | Aug 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Nice Pak Products Inc., Health and Welfare Benefits Plan | NJ | Health Plan | 8,487 | Aug 14, 2023 | Hacking/IT Incident | Archive (closed) |
| TRACT Radiology | MS | Business Associate | 7,810 | Aug 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Health Care Policy & Financing | CO | Health Plan | 4,091,794 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| El Centro Del Barrio d/b/a CentroMed | TX | Healthcare Provider | 350,000 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| American National Group, LLC | TX | Health Plan | 47,711 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| United Bankshares, Inc. | DC | Business Associate | 8,801 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| Three Crowns Park | IL | Healthcare Provider | 516 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| EMS Management and Consultants Inc | NC | Business Associate | 223,598 | Aug 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Coastal Orthopedics & Sports Medicine of Southwest Florida | FL | Healthcare Provider | 203,427 | Aug 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Allison Transmission Inc. Health Care Program for Hourly Employees / Wellness Program for Salaried Employees | IN | Business Associate | 5,330 | Aug 10, 2023 | Hacking/IT Incident | Archive (closed) |
| iTrust Wellness Group | SC | Healthcare Provider | 981 | Aug 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services | VA | Health Plan | 423,824 | Aug 9, 2023 | Hacking/IT Incident | Archive (closed) |
| Madera County | CA | Health Plan | 1,446 | Aug 9, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| PCC Pediatric EHR Solutions | VT | Business Associate | 520 | Aug 9, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Premera Blue Cross | WA | Health Plan | 33,212 | Aug 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Sovos Compliance LLC | MA | Business Associate | 18,261 | Aug 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Harris Eye Care | MI | Healthcare Provider | 6,267 | Aug 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Lurie Children’s Surgical Foundation | IL | Healthcare Provider | 1,997 | Aug 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Spinal and Sports Care Clinic PS | WA | Healthcare Provider | 1,136 | Aug 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Missouri Department of Social Services | MO | Health Plan | 739,884 | Aug 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Redwood Coast Regional Center | CA | Healthcare Provider | 1,345 | Aug 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Cranberry Township Emergency Medical Service | PA | Healthcare Provider | 1,247 | Aug 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Gary Motykie, M.D., a Medical Corporation | CA | Healthcare Provider | 3,400 | Aug 5, 2023 | Hacking/IT Incident | Archive (closed) |
| Maximus, Inc. | VA | Business Associate | 9,179,390 | Aug 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Radius Global Solutions | MN | Business Associate | 632,204 | Aug 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Indiana University Health | IN | Health Plan | 21,383 | Aug 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Capital Neurological Surgeons | CA | Healthcare Provider | 1,769 | Aug 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Brigham and Women's Hospital | MA | Healthcare Provider | 987 | Aug 4, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Unum Group SACE | TN | Health Plan | 559,315 | Aug 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Cognizant Technologies Solutions | TX | Business Associate | 7,313 | Aug 3, 2023 | Hacking/IT Incident | Archive (closed) |
| City of Dallas | TX | Health Plan | 5,058 | Aug 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Advanced Care Partners, LLC | GA | Healthcare Provider | 518 | Aug 3, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Plumbers Local 8 Health & Welfare Fund | MO | Health Plan | 4,790 | Aug 2, 2023 | Hacking/IT Incident | Archive (closed) |
| The Health Plan of West Virginia, Inc. | WV | Health Plan | 1,292 | Aug 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Grane Supply, Inc. | PA | Healthcare Provider | 798 | Aug 1, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| HCA Healthcare | TN | Business Associate | 11,270,000 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Synergy Healthcare Services | GA | Business Associate | 296,956 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Howard County General Hospital | MD | Healthcare Provider | 2,975 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.