HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 61 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Massengale Eye Care | OK | Healthcare Provider | 15,000 | Oct 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Phoenix Programs of Florida, Inc. | FL | Healthcare Provider | 6,594 | Oct 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Dr. Scott B. Klimaj, DMD | RI | Healthcare Provider | 1,558 | Oct 21, 2022 | Hacking/IT Incident | Archive (closed) |
| FOREFRONT DERMATOLOGY, SC | WI | Healthcare Provider | 45,580 | Oct 20, 2022 | Theft | Archive (closed) |
| Delaware Department of Health and Social Services, Division of Developmental Disabilities Services | DE | Healthcare Provider | 7,000 | Oct 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Sigmund Software, LLC | CT | Business Associate | 4,767 | Oct 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Pynenberg & Scheske DDS,SC | WI | Healthcare Provider | 2,612 | Oct 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Fontainebleau Development Health and Welfare Plan | FL | Health Plan | 1,825 | Oct 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Lifeline Systems Company | MA | Healthcare Provider | 72,848 | Oct 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Advocate Aurora Health | WI | Healthcare Provider | 3,000,000 | Oct 14, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| WakeMed Health and Hospitals | NC | Healthcare Provider | 495,808 | Oct 14, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Keystone Health | PA | Healthcare Provider | 235,237 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Tift Regional Health System | GA | Healthcare Provider | 180,142 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Ascension St. Vincent’s Coastal Cardiology | GA | Healthcare Provider | 71,227 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Presbyterian Healthcare Services | NM | Healthcare Provider | 44,450 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Alain A. Montiel, DDS | CA | Healthcare Provider | 17,157 | Oct 14, 2022 | Theft | Archive (closed) |
| HH/Killeen Health System, LLC doing business as Seton Medical Center Harker Heights | TX | Healthcare Provider | 15,056 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| The Valley Hospital | NJ | Healthcare Provider | 4,245 | Oct 14, 2022 | Improper Disposal | Archive (closed) |
| Casco Bay EyeCare, PA, LLC | ME | Healthcare Provider | 1,432 | Oct 14, 2022 | Loss | Archive (closed) |
| Friend Family Health Center, Inc. | IL | Healthcare Provider | 1,419 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Blue Cross and Blue Shield of Kansas | KS | Health Plan | 1,308 | Oct 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Springfield Clinic | IL | Healthcare Provider | 802 | Oct 14, 2022 | Loss | Archive (closed) |
| Sage Counseling Omaha | NE | Healthcare Provider | 1,359 | Oct 12, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Defense Health Agency | VA | Health Plan | 1,279 | Oct 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Premier Physical Therapy and Sports Performance, Limited Partnership | DE | Healthcare Provider | 982 | Oct 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Choice Health Insurance LLC | SC | Business Associate | 32,064 | Oct 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Aesthetic Dermatology Associates, PC | PA | Healthcare Provider | 33,793 | Oct 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Regional Women’s Health Group, LLC | NJ | Healthcare Provider | 804 | Oct 10, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Seredor Centers, Inc. | FL | Healthcare Provider | 12,656 | Oct 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Falcon Healthcare, Inc. dba Interim Healthcare of Lubbock Texas | TX | Healthcare Provider | 89,443 | Oct 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Urology of Greater Atlanta, LLC | GA | Healthcare Provider | 79,795 | Oct 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Lifespire Services, Inc. | NY | Healthcare Provider | 15,375 | Oct 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Wisconsin Department of Health Services | WI | Health Plan | 12,358 | Oct 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Thomas J. Hubbard, MD, Inc. DBA Hubbard Plastic Surgery & Skin Enhancement Center | VA | Healthcare Provider | 914 | Oct 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Berkshire Farm Center & Services for Youth | NY | Healthcare Provider | 951 | Oct 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Salud Family Health | CO | Healthcare Provider | 427,546 | Oct 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Valle del Sol, Inc. | AZ | Healthcare Provider | 70,268 | Oct 5, 2022 | Hacking/IT Incident | Archive (closed) |
| CareOregon | OR | Health Plan | 8,022 | Oct 5, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| VisionWeb Holdings, LLC | TX | Business Associate | 35,900 | Oct 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Medicine Shady Grove LLC | MD | Healthcare Provider | 6,482 | Oct 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Monroe Ear Nose and Throat Associates, PC | MI | Healthcare Provider | 14,500 | Sep 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Anthem ACE | IN | Health Plan | 13,406 | Sep 30, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Optum Medical Care of New Jersey, P.C. | NJ | Healthcare Provider | 12,499 | Sep 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Delta Dental of Washington | WA | Health Plan | 6,361 | Sep 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Trillium Health Inc. | NY | Healthcare Provider | 3,191 | Sep 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Zomo Health | TX | Business Associate | 1,359 | Sep 30, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Anthem Health Plans of Kentucky, Incorporated | IN | Business Associate | 537 | Sep 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Smith, Gambrell & Russell, LLP | GA | Business Associate | 4,688 | Sep 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Reid and Riege, P.C. | CT | Business Associate | 610 | Sep 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Cytometry Specialists, Inc. d/b/a CSI Laboratories | GA | Healthcare Provider | 244,850 | Sep 26, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.