HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 52 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Idaho Department of Health & Welfare | ID | Health Plan | 2,501 | Jun 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlanta Women's Health Group, P.C. | GA | Healthcare Provider | 33,839 | Jun 11, 2023 | Hacking/IT Incident | Archive (closed) |
| HC3, Inc | AL | Business Associate | 1,105 | Jun 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Valley Obstetrics & Gynecology PC | UT | Healthcare Provider | 61,327 | Jun 9, 2023 | Hacking/IT Incident | Archive (closed) |
| Intellihartx, LLC | TN | Business Associate | 489,830 | Jun 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Uponor North America | MN | Health Plan | 1,048 | Jun 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Marshall & Melhorn, LLC | OH | Business Associate | 9,412 | Jun 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Henry Ford Health | MI | Healthcare Provider | 168,215 | Jun 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Ascension Seton | TX | Healthcare Provider | 17,191 | Jun 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Utah Medicaid, Division of Integrated Healthcare: Utah Department of Health and Human Services | UT | Health Plan | 5,833 | Jun 6, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Southeast Nursing and Rehab Center | TX | Healthcare Provider | 2,721 | Jun 6, 2023 | Improper Disposal | Archive (closed) |
| Ascension Providence | TX | Healthcare Provider | 1,415 | Jun 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Enzo Clinical Labs, Inc. | NY | Healthcare Provider | 2,470,000 | Jun 5, 2023 | Hacking/IT Incident | Archive (closed) |
| South Jersey Behavorial Health Resources, Inc. | NJ | Healthcare Provider | 501 | Jun 4, 2023 | Hacking/IT Incident | Archive (closed) |
| John N. Evans, DPM | MI | Healthcare Provider | 15,545 | Jun 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Petaluma Health Center | CA | Healthcare Provider | 124,862 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Unified Operations Virginia LP | FL | Business Associate | 91,851 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Elgon Information Systems | MA | Business Associate | 31,248 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Episource | MN | Business Associate | 23,557 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Mercy Medical Center - Clinton, Inc. | IA | Healthcare Provider | 20,865 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Mississippi Children’s Home Society, CARES Center, Inc., Mississippi Children’s Home Services, Inc., d.b.a. Canopy Children’s Solutions | MS | Healthcare Provider | 19,791 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Classic Residence Management dba Vi Senior Living | IL | Healthcare Provider | 12,405 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| CareNet Medical Group, PC | NY | Healthcare Provider | 10,059 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| MUSC Health Lancaster Medical Center | SC | Healthcare Provider | 1,802 | Jun 2, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| T. Rowe Price Group, Inc. | MD | Health Plan | 684 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Maimonides Medical Center | NY | Healthcare Provider | 33,000 | Jun 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Pain Relief Centers PA | NC | Healthcare Provider | 7,000 | Jun 1, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| iSpace, Inc. | CA | Business Associate | 24,382 | May 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Iowa Department of Health and Human Services - Iowa Medicaid | IA | Health Plan | 233,834 | May 30, 2023 | Hacking/IT Incident | Archive (closed) |
| Builders FirstSource Flex Plan | TX | Health Plan | 3,763 | May 30, 2023 | Hacking/IT Incident | Archive (closed) |
| Managed Care of North America | GA | Business Associate | 8,627,242 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Onix Group | PA | Business Associate | 387,830 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Pioneer Valley Ophthalmic Consultants, PC | MA | Healthcare Provider | 36,275 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 8,432 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Valley Orthopaedic Specialists | CT | Healthcare Provider | 5,062 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 4,456 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| South Jersey Behavioral Health Resources, Inc. | NJ | Healthcare Provider | 2,193 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Lancaster Orthopedic Group | PA | Healthcare Provider | 1,784 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 1,518 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 1,389 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 1,191 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 1,147 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 1,097 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 983 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 916 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Sparta Community Hospital District | IL | Healthcare Provider | 909 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Iowa Department of Health and Human Services | IA | Health Plan | 833 | May 26, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 803 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 796 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 537 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.