Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 63 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Dr. Alexander J. Richardson, DPMOHHealthcare Provider11,651Sep 8, 2022Hacking/IT IncidentArchive (closed)
UCLA HealthCAHealthcare Provider2,190Sep 8, 2022LossArchive (closed)
DaVita Inc.COHealthcare Provider1,092Sep 6, 2022Hacking/IT IncidentArchive (closed)
Independent Living Systems, LLCFLBusiness Associate4,226,508Sep 2, 2022Hacking/IT IncidentArchive (closed)
Reiter Affiliated Companies, LLCCABusiness Associate48,000Sep 2, 2022Hacking/IT IncidentArchive (closed)
Reiter Affiliated Health and Welfare PlanCAHealth Plan45,000Sep 2, 2022Hacking/IT IncidentArchive (closed)
The Physicians’ Spine and Rehabilitation Specialists of Georgia, P.C.GAHealthcare Provider38,589Sep 2, 2022Hacking/IT IncidentArchive (closed)
Genesis Health Care, Inc.SCHealthcare Provider21,226Sep 2, 2022Hacking/IT IncidentArchive (closed)
Shands Teaching Hospitals and Clinics, Inc.FLHealthcare Provider941Sep 2, 2022Unauthorized Access/DisclosureArchive (closed)
Narragansett Bay CommissionRIHealthcare Provider2,153Sep 1, 2022Hacking/IT IncidentArchive (closed)
Walgreen Co.ILHealthcare Provider1,704Aug 31, 2022TheftArchive (closed)
Trinity HealthMIBusiness Associate46,748Aug 29, 2022Unauthorized Access/DisclosureArchive (closed)
NYSARC Columbia County Chapter d/b/a COARCNYHealthcare Provider5,701Aug 29, 2022Hacking/IT IncidentArchive (closed)
The State Psychiatric Hospitals in the New Jersey Department of Health, Division of Behavioral Health ServicesNJHealthcare Provider850Aug 29, 2022Hacking/IT IncidentArchive (closed)
Methodist McKinney HospitalTXHealthcare Provider110,244Aug 26, 2022Hacking/IT IncidentArchive (closed)
NorthStar HealthCare Consulting LLCGABusiness Associate18,354Aug 26, 2022Unauthorized Access/DisclosureArchive (closed)
Methodist Craig Ranch Surgical CenterTXHealthcare Provider15,157Aug 26, 2022Hacking/IT IncidentArchive (closed)
First Street Family HealthCOHealthcare Provider7,310Aug 26, 2022Hacking/IT IncidentArchive (closed)
EmergeOrthoNCHealthcare Provider68,661Aug 25, 2022Hacking/IT IncidentArchive (closed)
General Health SystemLAHealthcare Provider46,149Aug 25, 2022Hacking/IT IncidentArchive (closed)
USAble Mutual Insurance Company d/b/a Arkansas Blue Cross and Blue ShieldARHealth Plan8,871Aug 25, 2022Hacking/IT IncidentArchive (closed)
Farmville Internal MedicineNCHealthcare Provider3,000Aug 25, 2022Hacking/IT IncidentArchive (closed)
Health AdvantageARHealth Plan1,642Aug 25, 2022Hacking/IT IncidentArchive (closed)
One Medical, Inc.TXHealthcare Provider1,009Aug 25, 2022TheftArchive (closed)
Warner Norcross and Judd, LLPMIBusiness Associate255,160Aug 24, 2022Hacking/IT IncidentArchive (closed)
Community BridgesNHHealthcare Provider10,461Aug 24, 2022Hacking/IT IncidentArchive (closed)
Henderson & Walton Women’s Center, P.C.ALHealthcare Provider34,306Aug 23, 2022Hacking/IT IncidentArchive (closed)
California Department of Corrections and RehabilitationCAHealthcare Provider236,000Aug 22, 2022Hacking/IT IncidentArchive (closed)
Prowers County Hospital DistrictCOHealthcare Provider1,205Aug 22, 2022Hacking/IT IncidentArchive (closed)
Cerebral Medical Group, P.A.CAHealthcare Provider6,110Aug 19, 2022Unauthorized Access/DisclosureArchive (closed)
Celanese Medical PLanTXHealth Plan704Aug 19, 2022Unauthorized Access/DisclosureArchive (closed)
Medical Mutual of OhioOHHealth Plan1,377Aug 17, 2022Hacking/IT IncidentArchive (closed)
San Diego American Indian Health CenterCAHealthcare Provider30,721Aug 15, 2022Hacking/IT IncidentArchive (closed)
Choice Health Insurance, LLCSCBusiness Associate14,307Aug 15, 2022Hacking/IT IncidentArchive (closed)
AdventHealth Medical Group OB GYN at WoodridgeILHealthcare Provider2,001Aug 15, 2022LossArchive (closed)
Novant Health Inc.NCBusiness Associate1,362,296Aug 14, 2022Unauthorized Access/DisclosureArchive (closed)
Priti Patel Physician PCNYHealthcare Provider6,877Aug 14, 2022Hacking/IT IncidentArchive (closed)
OMNI Healthcare, INCFLHealthcare Provider1,000Aug 14, 2022Unauthorized Access/DisclosureArchive (closed)
Conifer Revenue Cycle Solutions, LLCTXBusiness Associate343,593Aug 12, 2022Hacking/IT IncidentArchive (closed)
Common Ground Healthcare CooperativeWIHealth Plan133,714Aug 12, 2022Hacking/IT IncidentArchive (closed)
Onyx Technology LLCMDBusiness Associate96,814Aug 12, 2022Hacking/IT IncidentArchive (closed)
Rock County Human Services DepartmentWIHealthcare Provider25,610Aug 12, 2022Hacking/IT IncidentArchive (closed)
Valley Baptist Medical Center - HarlingenTXHealthcare Provider11,137Aug 12, 2022Hacking/IT IncidentArchive (closed)
Valley Baptist Medical Center - BrownsvilleTXHealthcare Provider7,496Aug 12, 2022Hacking/IT IncidentArchive (closed)
Specialized Treatment FacilityMSHealthcare Provider1,059Aug 12, 2022Unauthorized Access/DisclosureArchive (closed)
Overlake Medical Center & ClinicsWAHealthcare Provider557Aug 12, 2022Hacking/IT IncidentArchive (closed)
Lamoille Health PartnersVTHealthcare Provider59,381Aug 11, 2022Hacking/IT IncidentArchive (closed)
Northwestern Medical CenterVTHealthcare Provider686Aug 9, 2022Unauthorized Access/DisclosureArchive (closed)
Maternal and Family Health ServicesPAHealthcare Provider461,070Aug 8, 2022Hacking/IT IncidentArchive (closed)
Columbia River Mental Health ServicesWAHealthcare Provider17,842Aug 8, 2022Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.