HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 57 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Nelson Pharmacy Consulting Services PLC | IA | Healthcare Provider | 13,752 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Intelligent Business Solutions | NC | Business Associate | 11,595 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Wentworth Health Partners Garrison Women's Health | NH | Healthcare Provider | 4,158 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| CVS Specialty | RI | Healthcare Provider | 740 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Compass Behavioral Health | KS | Healthcare Provider | 537 | Feb 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Cheyenne Radiology Group & MRI, P.C. | WY | Healthcare Provider | 12,222 | Feb 9, 2023 | Hacking/IT Incident | Archive (closed) |
| Health Benefit Plan of Bridgewater-Raritan Regional School District | NJ | Health Plan | 3,909 | Feb 9, 2023 | Hacking/IT Incident | Archive (closed) |
| Tattnall County, Georgia | GA | Healthcare Provider | 1,337 | Feb 9, 2023 | Hacking/IT Incident | Archive (closed) |
| 90 Degree Benefits, Inc. | WI | Business Associate | 185,459 | Feb 8, 2023 | Hacking/IT Incident | Archive (closed) |
| NR Pennsylvania Associates, LLC | PA | Healthcare Provider | 14,335 | Feb 7, 2023 | Hacking/IT Incident | Archive (closed) |
| NR Connecticut, LLC | CT | Healthcare Provider | 3,045 | Feb 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Frank R. Laurri, M.D. and Associates, P.C. | NY | Healthcare Provider | 2,673 | Feb 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Teijin Automotive Technologies Welfare Plan | MI | Health Plan | 25,464 | Feb 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Skin MD, PLLC | TN | Healthcare Provider | 7,558 | Feb 6, 2023 | Improper Disposal | Archive (closed) |
| Vitra Health, Inc. | MA | Healthcare Provider | 1,618 | Feb 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Center for Autism and Related Disorders, LLC | TX | Healthcare Provider | 634 | Feb 4, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Cardiovascular Associates | AL | Healthcare Provider | 433,348 | Feb 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Rise Interactive Media & Analytics, LLC | IL | Business Associate | 54,509 | Feb 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Hospice of the Valley | AZ | Healthcare Provider | 3,840 | Feb 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Southeast Colorado Hospital District | CO | Healthcare Provider | 1,435 | Feb 3, 2023 | Hacking/IT Incident | Archive (closed) |
| UT Specialty Dental Services, PLLC d/b/a Aspire Surgical | UT | Healthcare Provider | 5,327 | Feb 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Regal Medical Group,Lakeside Medical Organization, ADOC Acquisition, & Greater Covina Medical Group | CA | Healthcare Provider | 3,388,856 | Feb 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Arizona Health Advantage dba Arizona Priority Care and AZPC Clinics | AZ | Healthcare Provider | 10,978 | Feb 1, 2023 | Hacking/IT Incident | Archive (closed) |
| The Institute for Liver Health dba Arizona Liver Health-Arizona Clinical Trials | AZ | Healthcare Provider | 1,277 | Feb 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Brooks Rehabilitation | FL | Healthcare Provider | 1,554 | Jan 31, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Institute for Hormonal Balance | TX | Healthcare Provider | 597 | Jan 31, 2023 | Theft | Archive (closed) |
| Hayward Sisters Hospital d/b/a St. Rose Hospital | CA | Healthcare Provider | 115,241 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Howard Memorial Hospital | AR | Healthcare Provider | 53,668 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Stroke Scan Inc | TX | Healthcare Provider | 50,000 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Benefit Management, LLC | KS | Business Associate | 29,119 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| DotHouse Health Incorporated | MA | Healthcare Provider | 10,000 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Benefit Administrative Systems, LLC (BAS) | IL | Business Associate | 6,465 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Minuteman Senior Services | MA | Healthcare Provider | 3,381 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Cedar Oaks Surgery Center | MO | Healthcare Provider | 794 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Valley Care Home Health Services, Inc. | CA | Healthcare Provider | 2,674 | Jan 25, 2023 | Theft | Archive (closed) |
| Peachtree Immediate Care FP, LLC | GA | Healthcare Provider | 2,555 | Jan 23, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| AppleCare, LLC | GA | Healthcare Provider | 512 | Jan 23, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Cleveland Health Plan | OH | Health Plan | 15,206 | Jan 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| DCH Health System | AL | Healthcare Provider | 2,530 | Jan 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Chico Immediate Care Medical Center, Inc. | CA | Healthcare Provider | 3,780 | Jan 19, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| One Brooklyn Health System | NY | Healthcare Provider | 211,347 | Jan 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Health Plan of San Mateo | CA | Health Plan | 4,032 | Jan 18, 2023 | Hacking/IT Incident | Archive (closed) |
| mscripts®, LLC | CA | Business Associate | 88,923 | Jan 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Colorado Hospital Authority | CO | Healthcare Provider | 49,881 | Jan 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Jefferson County Health Center d/b/a Jefferson County Health Department | MO | Healthcare Provider | 115,940 | Jan 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Intelligent Business Solutions | NC | Business Associate | 11,595 | Jan 13, 2023 | Hacking/IT Incident | Archive (closed) |
| 1st Franklin Financial Corporation Master Welfare Benefit Plan | GA | Health Plan | 3,039 | Jan 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Health Network, Inc. | IN | Business Associate | 1,237 | Jan 13, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| DPP II, LLC | TX | Healthcare Provider | 125,981 | Jan 12, 2023 | Hacking/IT Incident | Archive (closed) |
| UCLA Health | CA | Healthcare Provider | 94,000 | Jan 12, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.