HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 59 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| KEMET Electronics Corporation | FL | Health Plan | 2,927 | Dec 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Hanger Prosthetics and Orthotics | TX | Healthcare Provider | 1,354 | Dec 9, 2022 | Hacking/IT Incident | Archive (closed) |
| San Gorgonio Memorial Hospital | CA | Healthcare Provider | 16,846 | Dec 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Rhode Island Department of Health | RI | Healthcare Provider | 8,800 | Dec 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Employee Group Insurance Benefits Plan of Acuity Brands, Inc. | GA | Health Plan | 20,849 | Dec 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Emory Healthcare | GA | Healthcare Provider | 1,891 | Dec 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Blakehurst | MD | Healthcare Provider | 1,047 | Dec 6, 2022 | Hacking/IT Incident | Archive (closed) |
| NYC Health + Hospitals | NY | Healthcare Provider | 2,174 | Dec 2, 2022 | Loss | Archive (closed) |
| Polsinelli PC | MO | Business Associate | 1,220 | Dec 2, 2022 | Hacking/IT Incident | Archive (closed) |
| CommonSpirit Health | IL | Business Associate | 633,031 | Dec 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Dr. Douglas C. Shoenberger, PC | PA | Business Associate | 8,179 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Pendurthi Surgical Associates | PA | Business Associate | 7,925 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Peter J. Isaac, D.O. | PA | Business Associate | 6,390 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Dermatology & Skin Cancer Center | PA | Business Associate | 5,423 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Lehigh Valley Women's Medical Specialties, P.C. | PA | Business Associate | 4,535 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Ellen M. Field, M.D. | PA | Business Associate | 4,438 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| MaryAnne Freeman Brndjar, DO, PC | PA | Business Associate | 2,491 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Easton Cardiovascular Associates | PA | Business Associate | 883 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| NU House Calls, PC | PA | Business Associate | 552 | Nov 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Keck Medicine of USC | CA | Healthcare Provider | 2,200 | Nov 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Klamath County | OR | Healthcare Provider | 547 | Nov 29, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Dallam Hartley Counties Hospital District | TX | Healthcare Provider | 69,835 | Nov 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Legacy Health | OR | Healthcare Provider | 8,065 | Nov 23, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Compton & Broomhead Dental Center | IN | Healthcare Provider | 1,307 | Nov 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Mena Regional Health System | AR | Healthcare Provider | 84,814 | Nov 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Hope Health Systems Inc. | MD | Healthcare Provider | 9,972 | Nov 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Community Health Network, Inc. as an Affiliated Covered Entity | IN | Healthcare Provider | 1,500,000 | Nov 18, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Wright & Filippis LLC | MI | Healthcare Provider | 877,584 | Nov 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Gateway Rehabilitation Center | PA | Healthcare Provider | 119,000 | Nov 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Orlando Health | FL | Healthcare Provider | 35,403 | Nov 18, 2022 | Hacking/IT Incident | Archive (closed) |
| CareFirst Administrators | MD | Health Plan | 14,538 | Nov 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Nuance Communications, Inc. | MA | Business Associate | 4,830 | Nov 18, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| CONSUMER DIRECTED SERVICES IN TEXAS, INC. | TX | Healthcare Provider | 56,728 | Nov 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of the Mid-Atlantic States, Inc. | CA | Health Plan | 8,556 | Nov 17, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Innovative Service Technology Management Services, Inc. | GA | Health Plan | 2,654 | Nov 17, 2022 | Hacking/IT Incident | Archive (closed) |
| University Medical Center of Southern Nevada | NV | Healthcare Provider | 1,861 | Nov 17, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Rosenfeld VanWirt, PC | PA | Business Associate | 18,719 | Nov 16, 2022 | Hacking/IT Incident | Archive (closed) |
| South Walton Fire District | FL | Healthcare Provider | 25,331 | Nov 15, 2022 | Hacking/IT Incident | Archive (closed) |
| CCA Health Plans of California, Inc. f/k/a Vitality Health Plan of California, Inc. | CA | Health Plan | 14,631 | Nov 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Docs Medical Inc | CT | Healthcare Provider | 3,146 | Nov 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Arkansas Department of Human Services | AR | Health Plan | 925 | Nov 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Care Management Solutions, LLC | WV | Business Associate | 254,000 | Nov 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Epic Management LLC | TN | Healthcare Provider | 10,050 | Nov 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Yakima Neighborhood Health Services | WA | Healthcare Provider | 2,689 | Nov 14, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Dialpad, Inc. | CA | Business Associate | 1,392 | Nov 14, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Connexin Software, Inc. | PA | Business Associate | 2,846,039 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Stanley Street Treatment and Resources, Inc. | MA | Healthcare Provider | 45,785 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| NewYork-Presbyterian Hospital | NY | Healthcare Provider | 12,000 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Yale University | CT | Healthcare Provider | 9,051 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Manassas Surgery Center Anesthesia Services | NY | Healthcare Provider | 726 | Nov 10, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.