HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 53 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Alvaria, Inc. | MA | Business Associate | 524 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Alvaria, Inc. | MA | Business Associate | 507 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| North Shore Medical Labs | NY | Healthcare Provider | 500 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Albany ENT & Allergy Services, PC. | NY | Healthcare Provider | 224,486 | May 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Asian Health Services | CA | Healthcare Provider | 6,270 | May 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Alaska Railroad Corporation Welfare Benefits Plan | AK | Health Plan | 3,549 | May 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Harvard Pilgrim Health Care | MA | Health Plan | 2,662,337 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Culbertson Memorial Hospital | IL | Healthcare Provider | 69,765 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| UI Community Home Care, a subsidiary of University of Iowa Health System | IA | Healthcare Provider | 67,897 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| MedInform, Inc. | OH | Business Associate | 14,453 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Goodwill Industries of Greater New York and Northern NJ, Inc. | NY | Healthcare Provider | 10,172 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Vascular Center of Intervention, Inc. | CA | Healthcare Provider | 3,833 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| The CSC Generation Holdings, Inc. Health and Welfare Plan | WA | Health Plan | 2,219 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| County of Sacramento | CA | Healthcare Provider | 5,525 | May 23, 2023 | Hacking/IT Incident | Archive (closed) |
| Grant Regional Health Center | WI | Healthcare Provider | 4,135 | May 23, 2023 | Hacking/IT Incident | Archive (closed) |
| Topcon Healthcare Solutions, Inc. | NJ | Business Associate | 3,336 | May 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Tennessee Orthopaedic Clinics | TN | Healthcare Provider | 46,679 | May 19, 2023 | Hacking/IT Incident | Archive (closed) |
| PillPack LLC | NH | Healthcare Provider | 19,032 | May 19, 2023 | Hacking/IT Incident | Archive (closed) |
| PartsSource, Inc. Welfare Benefit Plan | OH | Health Plan | 1,474 | May 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Hiawatha Harris MD, Inc. dba Pathways to Wellness Medication Clinics | CA | Healthcare Provider | 9,182 | May 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Marshall Information Services, LLC dba Primary Solutions | OH | Business Associate | 7,456 | May 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Clarke County Hospital | IA | Healthcare Provider | 28,003 | May 17, 2023 | Hacking/IT Incident | Archive (closed) |
| University of Missouri Health Care | MO | Healthcare Provider | 736 | May 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Essen Medical Associates, P.C. | NY | Healthcare Provider | 904,672 | May 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Buckeye Health Plan | OH | Health Plan | 686 | May 16, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| State of New Jersey Department of Human Services, Division of Medical Assistance and Health Services | NJ | Health Plan | 552 | May 16, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Lehigh Valley Health Network (blackcat) | PA | Healthcare Provider | 248,359 | May 15, 2023 | Hacking/IT Incident | Archive (closed) |
| Fertility Specialists Medical Group | CA | Healthcare Provider | 9,197 | May 15, 2023 | Hacking/IT Incident | Archive (closed) |
| R&B Corporation of Virginia d/b/a Credit Control Corporation | VA | Business Associate | 607,787 | May 13, 2023 | Hacking/IT Incident | Archive (closed) |
| PharMerica Corporation | KY | Healthcare Provider | 5,815,591 | May 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Great Expressions Dental Centers | MI | Healthcare Provider | 1,925,397 | May 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Illinois Department of Healthcare and Family Services, Illinois Department of Human Services | IL | Health Plan | 50,839 | May 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Solutran | MN | Business Associate | 17,728 | May 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Health Benefit Plan of the Anchorage School District | AK | Health Plan | 4,598 | May 12, 2023 | Theft | Archive (closed) |
| Sesame, Inc. | NY | Business Associate | 1,809 | May 12, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 1,116 | May 12, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Catholic Health System | NY | Healthcare Provider | 12,759 | May 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Uintah Basin Healthcare | UT | Healthcare Provider | 103,974 | May 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 28,975 | May 10, 2023 | Hacking/IT Incident | Archive (closed) |
| IMA Financial Group, Inc. | KS | Business Associate | 5,242 | May 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Smile Doctors of Arizona dba Grinz Orthodontics | AZ | Healthcare Provider | 1,034 | May 9, 2023 | Theft | Archive (closed) |
| ASAS Health, LLC | TX | Healthcare Provider | 25,527 | May 6, 2023 | Hacking/IT Incident | Archive (closed) |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 26,561 | May 5, 2023 | Hacking/IT Incident | Archive (closed) |
| People Incorporated of Sequoyah County | OK | Healthcare Provider | 8,725 | May 5, 2023 | Hacking/IT Incident | Archive (closed) |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | CT | Health Plan | 1,971 | May 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Our Sunday Visitor, Inc. | IN | Health Plan | 1,508 | May 5, 2023 | Hacking/IT Incident | Archive (closed) |
| New Mexico Department of Health | NM | Healthcare Provider | 49,000 | May 4, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Methodist Family Health | AR | Healthcare Provider | 5,259 | May 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Northwest Health - La Porte | IN | Healthcare Provider | 10,256 | May 2, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Herbert J. Thomas Memorial Hospital Association dba Thomas Memorial Hospital | WV | Healthcare Provider | 2,492 | May 2, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.