HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 50 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Johns Hopkins Health System Corporation | MD | Business Associate | 2,584 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Florida Health Sciences Center, Inc. dba Tampa General Hospital | FL | Healthcare Provider | 2,430,920 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Centers for Medicare & Medicaid Services | MD | Health Plan | 2,342,357 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Allegheny County | PA | Healthcare Provider | 689,686 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| The Chattanooga Heart Institute | TN | Healthcare Provider | 545,491 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 398,319 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Jefferson County Health Center | IA | Healthcare Provider | 53,827 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| UC Davis Health | CA | Healthcare Provider | 3,201 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Dean Health Service Company, LLC (referenced herein as "WellFirst Health") | MN | Business Associate | 1,027 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Baylor College of Medicine | TX | Healthcare Provider | 505 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| CareSource | OH | Business Associate | 3,180,537 | Jul 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Gladden Farms Family Dentistry | AZ | Healthcare Provider | 3,085 | Jul 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Hillsborough County, Florida (County Government) | FL | Healthcare Provider | 70,636 | Jul 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Saint Francis Health System | OK | Healthcare Provider | 18,911 | Jul 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Johns Hopkins Medicine | MD | Healthcare Provider | 310,405 | Jul 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Family Vision of Anderson, P.A. | SC | Healthcare Provider | 62,631 | Jul 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Life Management Center of Northwest Florida, Inc. | FL | Healthcare Provider | 19,107 | Jul 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Bi-Bett Corporation | CA | Business Associate | 4,639 | Jul 25, 2023 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | TN | Business Associate | 2,688 | Jul 25, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| UT Southwestern Medical Center | TX | Healthcare Provider | 98,437 | Jul 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Sutter Senior Care | CA | Healthcare Provider | 519 | Jul 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Harris County Hospital District d/b/a Harris Health System | TX | Healthcare Provider | 455,676 | Jul 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Paramedic Billing Services | IL | Healthcare Clearing House | 93,610 | Jul 21, 2023 | Hacking/IT Incident | Archive (closed) |
| New England Life Care, Inc. | ME | Healthcare Provider | 51,854 | Jul 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Pennsylvania Department of Human Services | PA | Healthcare Provider | 11,687 | Jul 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Batesville Tool & Die, Inc. | IN | Health Plan | 4,549 | Jul 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Mindful Innovations, PLLC | NC | Healthcare Provider | 1,900 | Jul 20, 2023 | Hacking/IT Incident | Archive (closed) |
| Rite Aid Corporation | PA | Healthcare Provider | 23,433 | Jul 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Physicians Insurance A Mutual Company | WA | Business Associate | 1,852 | Jul 19, 2023 | Hacking/IT Incident | Archive (closed) |
| IVF Michigan, P.C. | MI | Healthcare Provider | 9,383 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Stephen Harkins, DDS, PC, dba: Harkins Pain & Sleep Management Group | AZ | Healthcare Provider | 6,411 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Associated Pathologists, LLC dba PathGroup Health Plan | TN | Health Plan | 2,031 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| ACUPUNCTURE AND INTEGRATIVE SOLUTIONS INCORPORATED | OH | Healthcare Provider | 750 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Tahoe Forest Hospital District | CA | Healthcare Provider | 1,119 | Jul 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Pension Benefit Information, LLC | MN | Business Associate | 1,866,694 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Fairfax Oral and Maxillofacial Surgery | VA | Healthcare Provider | 235,931 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Care N' Care Insurance Company, Inc. | TX | Health Plan | 33,032 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Wake Family Eye Care | NC | Healthcare Provider | 14,221 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| The Pavillion at Health Park, LLC dba Park Royal Hospital | FL | Healthcare Provider | 6,096 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| East Houston Medicine and Pediatrics Clinic | TX | Healthcare Provider | 13,184 | Jul 13, 2023 | Loss | Archive (closed) |
| Beacon Specialized Living | MI | Healthcare Provider | 3,338 | Jul 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Hines Interests Limited Partnership | TX | Health Plan | 3,000 | Jul 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Kansas Joint & Spine Specialists | KS | Healthcare Provider | 83,869 | Jul 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Konen & Associates dba Unified Pain Management | TX | Healthcare Provider | 5,922 | Jul 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Aria Care Partners | KS | Healthcare Provider | 77,405 | Jul 11, 2023 | Hacking/IT Incident | Archive (closed) |
| The Vitality Group, LLC | IL | Business Associate | 20,387 | Jul 11, 2023 | Hacking/IT Incident | Archive (closed) |
| Molina Healthcare | CA | Health Plan | 7,702 | Jul 11, 2023 | Hacking/IT Incident | Archive (closed) |
| Charles George Department of Veterans Affairs Medical Center | NC | Healthcare Provider | 1,541 | Jul 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Arizona State Urological Institute | AZ | Healthcare Provider | 1,626 | Jul 10, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Norton Healthcare Inc. | KY | Healthcare Provider | 2,500,000 | Jul 7, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.