HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 54 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Oyate Health Center | SD | Healthcare Provider | 575 | May 2, 2023 | Improper Disposal | Archive (closed) |
| University Urology | NY | Healthcare Provider | 56,816 | May 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Saint Louis University | MO | Healthcare Provider | 48,392 | May 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Summit Eye & Optical | NJ | Healthcare Provider | 5,727 | May 1, 2023 | Hacking/IT Incident | Archive (closed) |
| ReDiscover Mental Health | MO | Healthcare Provider | 877 | May 1, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Brightside Health, Inc. | CA | Healthcare Provider | 767 | Apr 30, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| HealthPlan Services, Inc. | FL | Business Associate | 9,650 | Apr 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Grohler Hearing Aid Center, INC DBA Beltone Hearing Aid Centers | VA | Healthcare Provider | 5,272 | Apr 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Link Audiology LLC | WA | Healthcare Provider | 2,608 | Apr 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Allina Health | MN | Healthcare Provider | 1,042 | Apr 28, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Unlimited Care, Inc. | NY | Healthcare Provider | 8,453 | Apr 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Delphi Drug & Alcohol Council | NY | Healthcare Provider | 6,288 | Apr 27, 2023 | Hacking/IT Incident | Archive (closed) |
| University of California, San Francisco | CA | Healthcare Provider | 676 | Apr 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Lake County Health Department and Community Health Center | IL | Healthcare Provider | 23,376 | Apr 25, 2023 | Hacking/IT Incident | Archive (closed) |
| CounSol, LLC | FL | Business Associate | 4,277 | Apr 25, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Mars Area School District | PA | Health Plan | 1,270 | Apr 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Upstream RollCo, LLC | AL | Healthcare Provider | 748,678 | Apr 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Robeson Health Care Corporation | NC | Healthcare Provider | 62,627 | Apr 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 180,694 | Apr 20, 2023 | Hacking/IT Incident | Archive (closed) |
| Upper Peninsula Health Plan | MI | Health Plan | 833 | Apr 20, 2023 | Hacking/IT Incident | Archive (closed) |
| Modern Cardiology Associates | Healthcare Provider | 10,000 | Apr 19, 2023 | Hacking/IT Incident | Archive (closed) | |
| Graceworks Lutheran Services | OH | Healthcare Provider | 6,737 | Apr 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Morgan Stanley | NY | Health Plan | 535 | Apr 18, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Integrated Medical Services | AZ | Healthcare Provider | 6,591 | Apr 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| MiniMed Distribution Corp. | CA | Healthcare Provider | 58,374 | Apr 14, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| United Steelworkers Local 286 | PA | Health Plan | 37,965 | Apr 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Two Rivers Public Health Department | NE | Healthcare Provider | 15,168 | Apr 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Ethan Health, LLC | KY | Healthcare Provider | 4,047 | Apr 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Henry County Hospital | OH | Healthcare Provider | 3,689 | Apr 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Presence Healthcare Services dba Presence Medical Group | IL | Healthcare Provider | 921 | Apr 14, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Dallas County | TX | Healthcare Provider | 501 | Apr 14, 2023 | Improper Disposal | Archive (closed) |
| NationsBenefits Holdings, LLC | FL | Business Associate | 3,099,502 | Apr 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 49,968 | Apr 13, 2023 | Hacking/IT Incident | Archive (closed) |
| John Muir Health - Walnut Creek Medical Center | CA | Healthcare Provider | 821 | Apr 13, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Cummins Behavioral Health Systems | IN | Healthcare Provider | 154,285 | Apr 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Multnomah County Health Department | OR | Healthcare Provider | 2,719 | Apr 12, 2023 | Theft | Archive (closed) |
| Pathway Healthcare, LLC | AL | Healthcare Provider | 1,304 | Apr 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Yukon Kuskokwim Health Corporation | AK | Healthcare Provider | 51,787 | Apr 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Retina & Vitreous of Texas, PLLC | TX | Healthcare Provider | 35,766 | Apr 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Iowa Department of Health and Human Services - Iowa Medicaid Enterprise | IA | Health Plan | 20,815 | Apr 10, 2023 | Hacking/IT Incident | Archive (closed) |
| St. Vincent’s Ambulatory Care, Inc. | FL | Healthcare Provider | 768 | Apr 10, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 473,467 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 199,753 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| La Clínica de La Raza, Inc. | CA | Healthcare Provider | 125,794 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 31,440 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 21,830 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Centers for Medicare & Medicaid Services | MD | Health Plan | 10,011 | Apr 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 7,672 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 7,411 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Brightline, Inc. | CA | Business Associate | 4,044 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.