HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 56 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| AllCare Plus Pharmacy, Inc. | MA | Healthcare Provider | 757 | Mar 15, 2023 | Hacking/IT Incident | Archive (closed) |
| NorthStar Emergency Medical Services | AL | Healthcare Provider | 82,450 | Mar 14, 2023 | Hacking/IT Incident | Archive (closed) |
| California Department of Health Care Services | CA | Health Plan | 6,460 | Mar 14, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Top of the World Ranch Treatment Center | IL | Healthcare Provider | 1,980 | Mar 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Bone & Joint Clinic, S.C. | WI | Healthcare Provider | 105,094 | Mar 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Beach District Surgery Center | CA | Healthcare Provider | 3,560 | Mar 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Ryu Physical Therapy, P.C. | CA | Healthcare Provider | 500 | Mar 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| ZOLL Services LLC | MA | Healthcare Provider | 997,097 | Mar 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Florida Medical Clinic, LLC | FL | Healthcare Provider | 94,132 | Mar 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Beacon Health System | IN | Healthcare Provider | 3,304 | Mar 10, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Colquitt Complete Care, LLC | GA | Healthcare Provider | 1,282 | Mar 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Arizona Department of Economic Security, Division of Developmental Disabilities | AZ | Healthcare Provider | 857 | Mar 10, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| The M K Morse Company Health Plan | OH | Health Plan | 2,730 | Mar 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Wichita Urology Group, PA | KS | Healthcare Provider | 1,493 | Mar 8, 2023 | Hacking/IT Incident | Archive (closed) |
| EPIC Management, LLC | CA | Health Plan | 1,190 | Mar 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Health Centers of Greater Dayton | OH | Healthcare Provider | 516 | Mar 8, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| SundaySky, Inc. | NY | Business Associate | 37,095 | Mar 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Trinity Health | MI | Business Associate | 46,526 | Mar 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Northeast Surgical Group, PC | MI | Healthcare Provider | 15,298 | Mar 6, 2023 | Hacking/IT Incident | Archive (closed) |
| The Chautauqua Center Inc. | NY | Healthcare Provider | 745 | Mar 6, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Denver Public Schools Medical Plans | CO | Health Plan | 35,068 | Mar 3, 2023 | Hacking/IT Incident | Archive (closed) |
| West Virginia University Board of Governors | WV | Healthcare Provider | 2,453 | Mar 3, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Cerebral, Inc | DE | Business Associate | 3,179,835 | Mar 1, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Codman Square Health Center | MA | Healthcare Provider | 10,161 | Mar 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Texas Medical Liability Trust | TX | Business Associate | 2,069 | Mar 1, 2023 | Hacking/IT Incident | Archive (closed) |
| MHMR Authority of Brazos Valley | TX | Healthcare Provider | 78,984 | Feb 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Valera Health | NY | Healthcare Provider | 2,317 | Feb 28, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Health Group | CA | Health Plan | 824 | Feb 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Clarity Child Guidance Center | TX | Health Plan | 531 | Feb 28, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Aloha Nursing Rehab Centre | HI | Healthcare Provider | 20,216 | Feb 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Asante Ashland Community Hospital | OR | Healthcare Provider | 8,834 | Feb 24, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Healthcare | VA | Healthcare Provider | 741 | Feb 24, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| eMDs, Inc. | TX | Business Associate | 625 | Feb 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Lawrence General Hospital | MA | Healthcare Provider | 76,571 | Feb 23, 2023 | Hacking/IT Incident | Archive (closed) |
| White Bird Clinic | OR | Healthcare Provider | 584 | Feb 23, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Harrisburg Medical Center | IL | Healthcare Provider | 147,826 | Feb 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Henrico Doctors Hospital | VA | Healthcare Provider | 990 | Feb 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Hutchinson Clinic, P.A. | KS | Healthcare Provider | 215,632 | Feb 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Sharp Healthcare | CA | Healthcare Provider | 62,777 | Feb 17, 2023 | Hacking/IT Incident | Archive (closed) |
| West Cecil Health Center | MD | Healthcare Provider | 1,136 | Feb 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Troy Roeder DDS PC | IL | Healthcare Provider | 1,127 | Feb 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Jackson Lewis P.C. | CA | Business Associate | 986 | Feb 17, 2023 | Theft | Archive (closed) |
| Shady Lane Nursing Home | NJ | Healthcare Provider | 566 | Feb 17, 2023 | Hacking/IT Incident | Archive (closed) |
| San Juan Regional Medical Center | NM | Healthcare Provider | 8,500 | Feb 15, 2023 | Hacking/IT Incident | Archive (closed) |
| Integrative Dentistry | WA | Healthcare Provider | 2,454 | Feb 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Reventics, LLC | FL | Business Associate | 4,212,823 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| CentraState Healthcare System, Inc. | NJ | Healthcare Provider | 617,901 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Highmark, Inc. | PA | Health Plan | 239,039 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Highmark Inc | PA | Business Associate | 36,600 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Evergreen Treatment Services | WA | Healthcare Provider | 21,325 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.