HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 58 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Rundle Eye Associates | CA | Healthcare Provider | 7,528 | Jan 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Minnesota Department of Human Services | MN | Health Plan | 4,307 | Jan 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Psychiatry Management, LLC, dba Mindpath Health | NC | Healthcare Provider | 193,947 | Jan 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Macoby Street Operations LLC d/b/a Pennsburg Manor | PA | Healthcare Provider | 1,547 | Jan 10, 2023 | Hacking/IT Incident | Archive (closed) |
| 225 Evergreen Road Operations LLC | PA | Healthcare Provider | 931 | Jan 10, 2023 | Hacking/IT Incident | Archive (closed) |
| 1020 South Main Street Operations LLC | PA | Healthcare Provider | 702 | Jan 10, 2023 | Hacking/IT Incident | Archive (closed) |
| BayCare Clinic, LLP | WI | Healthcare Provider | 134,000 | Jan 6, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Insulet Corporation | MA | Healthcare Provider | 29,000 | Jan 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Vascular Institute of North Texas, PLLC | TX | Healthcare Provider | 5,853 | Jan 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Pershing Health System | MO | Healthcare Provider | 5,368 | Jan 5, 2023 | Hacking/IT Incident | Archive (closed) |
| Vascular Institute of Houston, PLLC | TX | Healthcare Provider | 1,195 | Jan 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Texas Orthopaedic & Sports Medicine | TX | Healthcare Provider | 1,064 | Jan 5, 2023 | Hacking/IT Incident | Archive (closed) |
| Lantern Hill Retirement Community | NJ | Healthcare Provider | 528 | Jan 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Circles of Care, Inc. | FL | Healthcare Provider | 61,170 | Jan 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Live Oak Surgery Center | TX | Healthcare Provider | 5,264 | Jan 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Barclay Damon LLP | NY | Business Associate | 1,039 | Jan 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Bay Bridge Administrators, LLC | TX | Business Associate | 187,742 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Fitzgibbon Hospital | MO | Healthcare Provider | 112,072 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| NR Florida Associates LLC | FL | Healthcare Provider | 6,250 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| L. Knife & Son, Inc. Employee Benefits Plan | MA | Health Plan | 4,082 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| The Kelberman Center | NY | Healthcare Provider | 3,501 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| MJ Care | WI | Business Associate | 1,832 | Dec 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Verisma Systems, Inc. | VA | Business Associate | 1,586 | Dec 29, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Verisma Systems, Inc. | VA | Business Associate | 1,031 | Dec 29, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Bosselman Energy, Inc. Health Benefits Plan | NE | Health Plan | 735 | Dec 29, 2022 | Hacking/IT Incident | Archive (closed) |
| CellNetix Pathology & Laboratories | WA | Healthcare Provider | 1,969 | Dec 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 4,222 | Dec 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Quality Behavioral Health | WA | Healthcare Provider | 3,498 | Dec 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Cedar Cares, Inc. f/k/a Careportal | NY | Business Associate | 1,205 | Dec 23, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Southwest Louisiana Health Care System, Inc. d/b/a Lake Charles Memorial Health System | LA | Healthcare Provider | 269,752 | Dec 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Legacy Operating Company d/b/a Legacy Hospice | AL | Healthcare Provider | 21,202 | Dec 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Midwest Orthopaedic Consultants, S.C. | IL | Healthcare Provider | 6,818 | Dec 22, 2022 | Hacking/IT Incident | Archive (closed) |
| University of Miami | FL | Healthcare Provider | 973 | Dec 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Sequoia Benefits and Insurance Services, LLC, d/b/a Sequoia Consulting Group | CA | Business Associate | 4,265 | Dec 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Bay City Health & Rehabilitation Center | TX | Healthcare Provider | 2,000 | Dec 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Prairie Lakes Healthcare System | SD | Healthcare Provider | 1,164 | Dec 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Louis A. Johnson Veterans' Administration Medical Center | WV | Healthcare Provider | 736 | Dec 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Metropolitan Area EMS Authority dba MedStar Mobile Healthcare | TX | Healthcare Provider | 612,000 | Dec 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Hawaiian Eye Center | HI | Healthcare Provider | 14,524 | Dec 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Three Rivers Provider Network | CA | Business Associate | 4,725 | Dec 19, 2022 | Hacking/IT Incident | Archive (closed) |
| MITCON | MI | Business Associate | 1,131 | Dec 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Monarch | NC | Healthcare Provider | 56,155 | Dec 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Foundcare, Inc. | FL | Healthcare Provider | 14,194 | Dec 16, 2022 | Hacking/IT Incident | Archive (closed) |
| AAA Collections, Inc. | SD | Business Associate | 4,635 | Dec 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Ola Equipment LLC | HI | Business Associate | 39,000 | Dec 14, 2022 | Theft | Archive (closed) |
| The Elizabeth Hospice | CA | Healthcare Provider | 35,496 | Dec 14, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Avem Health Partners | OK | Business Associate | 271,303 | Dec 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Robert S Miller, LICSW, ACSW, PLLC | WA | Healthcare Provider | 902 | Dec 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Sleep Center Hawaii | HI | Healthcare Provider | 5,396 | Dec 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Pediatrics West, P.C. | MA | Healthcare Provider | 62,924 | Dec 9, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.