HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 55 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Gretna Family Health | NE | Healthcare Provider | 845 | Apr 7, 2023 | Hacking/IT Incident | Archive (closed) |
| St. Luke's Health System, Ltd. | ID | Healthcare Provider | 15,246 | Apr 6, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| NORTHEAST BEHAVIORAL HEALTH CARE CONSORTIUM | PA | Health Plan | 13,240 | Apr 5, 2023 | Hacking/IT Incident | Archive (closed) |
| California Physicians’ Services dba Blue Shield of California | CA | Health Plan | 1,553 | Apr 5, 2023 | Hacking/IT Incident | Archive (closed) |
| California Physicians' Services d/b/a Blue Shield of California | CA | Business Associate | 61,788 | Apr 4, 2023 | Hacking/IT Incident | Archive (closed) |
| WellBe Senior Medical, LLC | IL | Business Associate | 42,020 | Apr 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Banis Plastic Surgery | KY | Healthcare Provider | 4,498 | Apr 4, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Chippewa County | WI | Healthcare Provider | 842 | Apr 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Southwest Healthcare Services | ND | Healthcare Provider | 15,996 | Apr 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Monument, Inc. | NY | Business Associate | 108,584 | Mar 31, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Tallahassee Memorial Healthcare, Inc. | FL | Healthcare Provider | 20,376 | Mar 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Santa Clara Family Health Plan | CA | Health Plan | 276,993 | Mar 30, 2023 | Hacking/IT Incident | Archive (closed) |
| WellBe Senior Medical, LLC | IL | Healthcare Provider | 19,567 | Mar 30, 2023 | Hacking/IT Incident | Archive (closed) |
| UHS of Delaware, Inc. | PA | Business Associate | 40,290 | Mar 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Aspire Health Partners | FL | Healthcare Provider | 1,005 | Mar 29, 2023 | Improper Disposal | Archive (closed) |
| ProSmile Holdings, LLC | NJ | Business Associate | 39,674 | Mar 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Nonstop Administration and Insurance Services, Inc. | PA | Business Associate | 10,504 | Mar 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic General Hospital | MD | Healthcare Provider | 132,817 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| American Pain and Wellness, PLLC | TX | Healthcare Provider | 7,457 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Frideres Dental LLC | OR | Healthcare Provider | 1,596 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| NewBridge Services | NJ | Healthcare Provider | 1,457 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Adams County Children and Youth Services | PA | Healthcare Provider | 722 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| US Wellness Inc. | MD | Business Associate | 15,818 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Mattoo and Bhat Medical Associates | NY | Business Associate | 3,851 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Ridgewood Dialysis Center Inc. | NY | Business Associate | 2,204 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| New Medical Healthcare | KS | Healthcare Provider | 1,557 | Mar 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Atlantic Dialysis Management Services - Central Park Dialysis Center | NY | Business Associate | 1,345 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - New York Renal Associates | NY | Business Associate | 1,126 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - New Hyde Park Dialysis Center LLC | NY | Business Associate | 1,119 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Central Brooklyn Dialysis Center LLC | NY | Business Associate | 1,052 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Newtown Dialysis Center Inc. | NY | Business Associate | 970 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Springfield Dialysis Center | NY | Business Associate | 922 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - West Nassau Dialysis Center Inc. | NY | Business Associate | 795 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - East End Dialysis Center LLC | NY | Business Associate | 745 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Morrisania Dialysis Center | NY | Business Associate | 653 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Prospect Park Dialysis Center | NY | Business Associate | 563 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services | NY | Business Associate | 3,851 | Mar 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Broadway Dialysis Center | NY | Business Associate | 776 | Mar 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Yardley Dermatology Associates, PC | PA | Healthcare Provider | 523 | Mar 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| McAllen Hospitals, LP d/b/a South Texas Health System | TX | Healthcare Provider | 134,634 | Mar 20, 2023 | Hacking/IT Incident | Archive (closed) |
| NewYork-Presbyterian Hospital | NY | Healthcare Provider | 54,396 | Mar 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Integrated Supports for Living, Inc. | OR | Healthcare Provider | 1,161 | Mar 20, 2023 | Hacking/IT Incident | Archive (closed) |
| Associates in Dermatology | KY | Healthcare Provider | 12,060 | Mar 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Health Plan of San Mateo | CA | Health Plan | 11,894 | Mar 17, 2023 | Hacking/IT Incident | Archive (closed) |
| OU Medicine, Inc. d/b/a OU Health | OK | Healthcare Provider | 3,013 | Mar 17, 2023 | Theft | Archive (closed) |
| Majestic Care Middletown Assisted Living LLC | IN | Healthcare Provider | 2,636 | Mar 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Health Systems Professional Services Corporations (CHSPSC), LLC | TN | Business Associate | 1,173,555 | Mar 16, 2023 | Hacking/IT Incident | Archive (closed) |
| UC San Diego Health | CA | Healthcare Provider | 22,971 | Mar 16, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Merritt Healthcare Advisors | CT | Business Associate | 88,740 | Mar 15, 2023 | Hacking/IT Incident | Archive (closed) |
| Healthy Options dba Postal Prescription Services - Kroger | OH | Healthcare Provider | 82,466 | Mar 15, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.