HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 60 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Doctors' Center Hospital | Healthcare Provider | 762,364 | Nov 9, 2022 | Hacking/IT Incident | Archive (closed) | |
| Work Health Solutions | CA | Healthcare Provider | 13,157 | Nov 9, 2022 | Hacking/IT Incident | Archive (closed) |
| GATE Petroleum Company Employee Benefits Plan | FL | Health Plan | 4,912 | Nov 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Heartland Alliance | IL | Business Associate | 46,694 | Nov 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Eastside Pediatrics, PLLC | NY | Healthcare Provider | 1,721 | Nov 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of PA PC | NY | Healthcare Provider | 1,372 | Nov 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of CA PC | CA | Healthcare Provider | 1,308 | Nov 7, 2022 | Hacking/IT Incident | Archive (closed) |
| CorrHealth Inc. | TX | Business Associate | 1,245 | Nov 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| The Stern Cardiovascular Foundation, Inc. | TN | Healthcare Provider | 270,645 | Nov 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Titan Health Partners, LLC d/b/a Astera Cancer Care | NJ | Healthcare Provider | 3,848 | Nov 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Pinnacle Claims Management, Inc. | CA | Business Associate | 2,048 | Nov 3, 2022 | Hacking/IT Incident | Archive (closed) |
| OCEANVIEWS OPTICAL INC | FL | Healthcare Provider | 2,000 | Nov 3, 2022 | Hacking/IT Incident | Archive (closed) |
| TIC International Corporation (“TIC”) | IN | Business Associate | 1,362 | Nov 1, 2022 | Hacking/IT Incident | Archive (closed) |
| CorrectCare Integrated Health, Inc. | KY | Business Associate | 502,089 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Louisiana Department of Public Safety and Corrections | LA | Healthcare Provider | 85,466 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| PrimeCare Medical, Inc. | PA | Healthcare Provider | 22,254 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Administrative Fund of the Detectives’ Endowment Association, Inc., Police Department City of New York | NY | Health Plan | 21,544 | Oct 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Gateway Ambulatory Surgery Center | NC | Healthcare Provider | 18,479 | Oct 31, 2022 | Hacking/IT Incident | Archive (closed) |
| CorrectCare Integrated Health, Inc. | KY | Business Associate | 4,380 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| The Psychology Center | WI | Healthcare Provider | 3,614 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Mediko, Inc. | VA | Healthcare Provider | 2,809 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Alta Forest Products Health and Welfare Plan | WA | Health Plan | 2,100 | Oct 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Navajo County Sheriff's Office | AZ | Healthcare Provider | 797 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Heart of Florida Health Center, Inc. | FL | Healthcare Provider | 721 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Mohave County Adult Detention Facility | AZ | Healthcare Provider | 558 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| St Luke's Health - Texas | TX | Healthcare Provider | 16,906 | Oct 30, 2022 | Hacking/IT Incident | Archive (closed) |
| SightCare, Inc. | AZ | Health Plan | 637,999 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| OakBend Medical Center / OakBend Medical Group | TX | Healthcare Provider | 500,000 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Nationwide Optometry, PC | AZ | Healthcare Provider | 73,073 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Assurance Health System, LLC | IN | Healthcare Provider | 3,565 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Native American Rehabilitation Association of the Northwest, Inc. | OR | Healthcare Provider | 2,915 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Restorative Arts Physical Therapy, Inc. d/b/a Core Conditioning | CA | Healthcare Provider | 727 | Oct 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Sacramento County Adult Correctional Health | CA | Healthcare Provider | 5,372 | Oct 27, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| State of New Jersey Department of Human Services, Division of Medical Assistance and Health Services | NJ | Health Plan | 3,900 | Oct 27, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 33,857 | Oct 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Forest Hill Pediatrics, LLC | MD | Healthcare Provider | 4,850 | Oct 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Coastal Horizons Center Inc. | NC | Healthcare Provider | 679 | Oct 25, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Hendry County Hospital Authority d/b/a Hendry Regional Medical Center | FL | Healthcare Provider | 49,514 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of NM Inc | NY | Healthcare Provider | 42,617 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Regions Hospital | MN | Healthcare Provider | 31,094 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Primary Anesthesia Services | NY | Healthcare Provider | 30,952 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Somnia Pain Management of Kentucky | NY | Healthcare Provider | 10,848 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Saddlebrook Anesthesia Services PC | NJ | Healthcare Provider | 9,596 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates Of KY PSC | NY | Healthcare Provider | 8,980 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of CT PC | NY | Healthcare Provider | 5,240 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of VA LLC | NY | Healthcare Provider | 4,209 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of IN LLC | NY | Healthcare Provider | 2,317 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Somnia, Inc. | NY | Healthcare Provider | 1,892 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Mid-Westchester Anesthesia Services PC | NY | Healthcare Provider | 871 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Illinois Department of Healthcare and Family Services, Illinois Department of Human Services | IL | Health Plan | 480,435 | Oct 21, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.