HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 5 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Suntree Internal Medicine | FL | Healthcare Provider | 9,810 | Jun 18, 2026 | Hacking/IT Incident | Under investigation |
| Family Health Centers of Southern Indiana | IL | Healthcare Provider | 7,117 | Jun 18, 2026 | Hacking/IT Incident | Under investigation |
| Cherry Street Services, Inc. | MI | Healthcare Provider | 501 | Jun 18, 2026 | Hacking/IT Incident | Under investigation |
| Columbia Orthopaedic Group | MO | Healthcare Provider | 500 | Jun 18, 2026 | Hacking/IT Incident | Under investigation |
| Aitkin County Health and Human Services | MN | Business Associate | 83,114 | Jun 17, 2026 | Hacking/IT Incident | Under investigation |
| Blue Fish Pediatrics | TX | Healthcare Provider | 62,150 | Jun 17, 2026 | Hacking/IT Incident | Under investigation |
| University of Miami | FL | Healthcare Provider | 6,721 | Jun 17, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| NewYork-Presbyterian Hospital | NY | Healthcare Provider | 6,909 | Jun 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Gail J May Ltd d/b/a/ Insight Optical | IL | Healthcare Provider | 501 | Jun 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Decatur Diagnostic Laboratory Inc. | AL | Healthcare Provider | 500 | Jun 16, 2026 | Hacking/IT Incident | Under investigation |
| Kentucky MSO, LLC | KY | Healthcare Provider | 537 | Jun 13, 2026 | Hacking/IT Incident | Archive (closed) |
| Clinical Registry Solutions | NY | Business Associate | 8,545 | Jun 12, 2026 | Hacking/IT Incident | Under investigation |
| Ohio Living | OH | Healthcare Provider | 500 | Jun 12, 2026 | Hacking/IT Incident | Under investigation |
| Chickasaw Nation Department of Health | OK | Healthcare Provider | 1,607 | Jun 11, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Open Arms Care Corporation | TN | Healthcare Provider | 893 | Jun 11, 2026 | Hacking/IT Incident | Under investigation |
| Dr. Erick Perroud | MI | Healthcare Provider | 7,692 | Jun 10, 2026 | Hacking/IT Incident | Under investigation |
| Trinity Health System | MI | Business Associate | 2,480 | Jun 10, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Michigan Surgical Center, LLC | MI | Healthcare Provider | 7,578 | Jun 9, 2026 | Hacking/IT Incident | Under investigation |
| Private National Mortgage Acceptance Company, LLC Group Health Plan | CA | Health Plan | 3,972 | Jun 9, 2026 | Hacking/IT Incident | Archive (closed) |
| Monaco & Associates Incorporated | KS | Healthcare Provider | 534 | Jun 9, 2026 | Hacking/IT Incident | Under investigation |
| Lutheran Home for the Aged | MO | Healthcare Provider | 2,311 | Jun 8, 2026 | Hacking/IT Incident | Under investigation |
| Sierra Management Group | CA | Business Associate | 1,279 | Jun 7, 2026 | Hacking/IT Incident | Under investigation |
| Xsolis, Inc. | TN | Business Associate | 1,396,519 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Minnesota Epilepsy Group, P.A. | MN | Healthcare Provider | 80,061 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Gay & Lesbian Community Services Center of Orange County, Inc. | CA | Healthcare Provider | 75,532 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| UnitedHealth Care Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 34,574 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Sturdy Health, Inc. | MA | Healthcare Provider | 1,006 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Signature Healthcare Corporation | MA | Healthcare Provider | 500 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| MVP VIP Holdco dba Heart of America Eye Care | MO | Healthcare Provider | 500 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Minidoka Memorial Hospital | ID | Healthcare Provider | 22,000 | Jun 4, 2026 | Hacking/IT Incident | Under investigation |
| McLeod Physician Associates II | SC | Healthcare Provider | 19,553 | Jun 4, 2026 | Hacking/IT Incident | Under investigation |
| City of Middletown | OH | Healthcare Provider | 20,608 | Jun 3, 2026 | Hacking/IT Incident | Under investigation |
| All About Women's Care | CO | Healthcare Provider | 12,000 | Jun 3, 2026 | Hacking/IT Incident | Under investigation |
| Amicus Solutions, Inc. (additional related entities may be impacted, the names of which are available upon request) | SC | Business Associate | 1,137 | Jun 3, 2026 | Hacking/IT Incident | Under investigation |
| Waveny LifeCare Network, Inc. | CT | Healthcare Provider | 27,113 | Jun 2, 2026 | Hacking/IT Incident | Under investigation |
| Lincoln National Corporation d/b/a Lincoln Financial | IN | Health Plan | 3,070 | Jun 2, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Henry Rossi & Company, LLP | PA | Business Associate | 2,720 | Jun 2, 2026 | Hacking/IT Incident | Under investigation |
| JASON R EGBERT OD PC | WA | Healthcare Provider | 1,225 | Jun 2, 2026 | Hacking/IT Incident | Archive (closed) |
| Area Agency on Aging Pasco-Pinellas Inc | FL | Healthcare Provider | 1,000 | Jun 2, 2026 | Improper Disposal | Archive (closed) |
| Medenet Inc. | FL | Business Associate | 1,387 | Jun 1, 2026 | Hacking/IT Incident | Under investigation |
| Networking Technology, Inc. | NC | Business Associate | 353,844 | May 29, 2026 | Hacking/IT Incident | Under investigation |
| United Medical Doctors | CA | Healthcare Provider | 501 | May 29, 2026 | Hacking/IT Incident | Under investigation |
| Campbell University | NC | Healthcare Provider | 500 | May 29, 2026 | Hacking/IT Incident | Under investigation |
| Kannarr Eye Care | KS | Healthcare Provider | 14,003 | May 28, 2026 | Hacking/IT Incident | Under investigation |
| Carlyle Senior Care Management Company, Inc. | SC | Business Associate | 4,060 | May 27, 2026 | Hacking/IT Incident | Under investigation |
| ERMI LLC | GA | Healthcare Provider | 74,074 | May 26, 2026 | Hacking/IT Incident | Under investigation |
| Wellmark Health Insurance | IA | Health Plan | 6,666 | May 26, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Virta Medical PC | CO | Healthcare Provider | 14,636 | May 23, 2026 | Hacking/IT Incident | Under investigation |
| Southern Illinois Ob-Gyn Associates, S.C. | IL | Healthcare Provider | 38,700 | May 22, 2026 | Hacking/IT Incident | Under investigation |
| Gastro Health | FL | Healthcare Provider | 35,632 | May 22, 2026 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.