HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 64 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| DataStat, Inc. | MI | Business Associate | 1,650 | Aug 8, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Niagara County Department of Mental Health and Substance Abuse | NY | Healthcare Provider | 17,000 | Aug 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Living Innovations | NH | Healthcare Provider | 4,041 | Aug 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Inline Network Integration, LLC | TX | Business Associate | 500 | Aug 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Practice Resources, LLC | NY | Business Associate | 942,138 | Aug 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Centerstone of Indiana, Inc. | IN | Healthcare Provider | 1,700 | Aug 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Independent Case Management, INC. | AR | Healthcare Provider | 3,307 | Aug 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Kareem Redmond, DDS, PLLC | NC | Healthcare Provider | 1,100 | Aug 3, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Luke's Health System, Ltd. | ID | Healthcare Provider | 31,573 | Aug 2, 2022 | Hacking/IT Incident | Archive (closed) |
| Southwest Behavioral & Health Services | AZ | Healthcare Provider | 1,337 | Aug 2, 2022 | Hacking/IT Incident | Archive (closed) |
| First Choice Community Health Care, Inc. | NM | Healthcare Provider | 101,541 | Aug 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Florida Springs Surgery Center | FL | Healthcare Provider | 2,203 | Aug 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Sentara Williamsburg Regional Medical Center | VA | Healthcare Provider | 591 | Aug 1, 2022 | Loss | Archive (closed) |
| Healthback Holdings, LLC | OK | Healthcare Provider | 21,114 | Jul 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Granbury Eye Clinic | TX | Healthcare Provider | 16,475 | Jul 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Minuteman Senior Services | MA | Healthcare Provider | 11,330 | Jul 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Eventus WholeHealth PLLC | NC | Healthcare Provider | 1,707 | Jul 29, 2022 | Hacking/IT Incident | Archive (closed) |
| OneTouchPoint, Inc. | WI | Business Associate | 4,112,892 | Jul 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 325,278 | Jul 27, 2022 | Hacking/IT Incident | Archive (closed) |
| BHG Holdings, LLC dba Behavioral Health Group | TX | Healthcare Provider | 197,507 | Jul 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Conifer Value-Based Care, LLC | CA | Business Associate | 20,642 | Jul 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Allegheny Heath Network | PA | Healthcare Provider | 8,071 | Jul 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Dr. Manaf Ahmad | TX | Healthcare Provider | 3,717 | Jul 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Steward Medical Group | FL | Healthcare Provider | 2,188 | Jul 26, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Lawson Products, Inc. | IL | Health Plan | 791 | Jul 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Santa Rosa County District Schools | FL | Health Plan | 9,424 | Jul 25, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| NuLife Med, LLC | NH | Business Associate | 3,805 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Center for Primary Care | GA | Healthcare Provider | 2,400 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Scott County, Iowa | IA | Business Associate | 1,607 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 1,457 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Radiation Oncology Centers of the Carolinas | NC | Healthcare Provider | 1,116 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 5,004 | Jul 22, 2022 | Hacking/IT Incident | Archive (closed) |
| City of Newport, Rhode Island | RI | Health Plan | 2,877 | Jul 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Central Maine Medical Center | ME | Healthcare Provider | 11,938 | Jul 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Patriot Growth Insurance Services, LLC | PA | Business Associate | 4,614 | Jul 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Zenith American Solutions | WA | Business Associate | 30,560 | Jul 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| The Bronx Accountable Healthcare Network | NY | Healthcare Provider | 17,161 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Cavender Stores, Ltd Health Plan | TX | Health Plan | 4,447 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Keswick Multi-Care Center | MD | Healthcare Provider | 1,508 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Dow Rummel Village | SD | Healthcare Provider | 1,079 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Goodman Campbell Brain and Spine | IN | Healthcare Provider | 362,833 | Jul 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Blue Cross and Blue Shield of Alabama | AL | Health Plan | 8,702 | Jul 19, 2022 | Hacking/IT Incident | Archive (closed) |
| ProMedica | OH | Healthcare Provider | 1,178 | Jul 19, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Health Plan, Inc., Southern California | CA | Health Plan | 75,010 | Jul 15, 2022 | Theft | Archive (closed) |
| Benson Health | NC | Healthcare Provider | 28,913 | Jul 15, 2022 | Hacking/IT Incident | Archive (closed) |
| East Valley Ophthalmology | AZ | Healthcare Provider | 20,734 | Jul 15, 2022 | Hacking/IT Incident | Archive (closed) |
| OPEN ARMS ASSISTED LIVING | WI | Business Associate | 6,000 | Jul 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Orthopedic Specialists of North America, PLLC dba OrthoArizona | AZ | Healthcare Provider | 2,748 | Jul 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Acts Retirement Services, Inc. and Affiliates | PA | Healthcare Provider | 2,236 | Jul 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Mary Hitchcock Memorial Hospital d/b/a Dartmouth-Hitchcock Medical Center | NH | Healthcare Provider | 1,201 | Jul 15, 2022 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.