HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 65 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Washington University School of Medicine | MO | Healthcare Provider | 1,056 | Jul 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Avamere Health Services, LLC | OR | Business Associate | 229,460 | Jul 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Premere Infinity Rehab, LLC | OR | Business Associate | 196,077 | Jul 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Magie Mabrey Hughes Eye Clinic, P.A. dba Arkansas Retina | AR | Healthcare Provider | 57,394 | Jul 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Synergic Healthcare Solutions, LLC d/b/a Fast Track Urgent Care Center | FL | Healthcare Provider | 258,411 | Jul 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Arlington Skin | VA | Healthcare Provider | 17,468 | Jul 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Blue Shield of California | CA | Health Plan | 1,506 | Jul 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Practice Center PC | PA | Healthcare Provider | 83,969 | Jul 11, 2022 | Hacking/IT Incident | Archive (closed) |
| McLaren Port Huron | MI | Healthcare Provider | 48,957 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Associated Eye Care | MN | Healthcare Provider | 40,793 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Kurilec Eye Care, LLC | CT | Healthcare Provider | 2,876 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Cornerstone Services | IL | Healthcare Provider | 2,513 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Wisconsin Department of Health Services | WI | Health Plan | 1,698 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 1,089 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 878 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Southern California United Food & Commercial Workers Unions and Food Employers Benefit Fund | CA | Health Plan | 850 | Jul 8, 2022 | Theft | Archive (closed) |
| Change Healthcare | GA | Business Associate | 1,262 | Jul 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Phoenixville Hospital | PA | Healthcare Provider | 934 | Jul 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Southwest Health Center | WI | Healthcare Provider | 46,142 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Parmer Medical Center | TX | Healthcare Provider | 2,400 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Arbuckle Memorial Hospital | OK | Healthcare Provider | 1,907 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Cheyenne Regional Medical Center | WY | Healthcare Provider | 1,652 | Jul 5, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Preferred Hospital Leasing Muleshoe, Inc d/b/a Muleshoe Area Medical Center | TX | Healthcare Provider | 1,212 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Preferred Hospital Leasing Coleman Inc. d/b/a Coleman County Medical Center | TX | Healthcare Provider | 1,159 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Preferred Hospital Leasing Junction, Inc d/b/a Kimble Hospital | TX | Healthcare Provider | 1,041 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Preferred Hospital Leasing Hemphill, Inc d/b/a Sabine County Hospital | TX | Healthcare Provider | 958 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Preferred Hospital Leasing Van Horn, Inc d/b/a Culberson Hospital | TX | Healthcare Provider | 689 | Jul 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Professional Finance Company, Inc. | CO | Business Associate | 1,918,941 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| CHRISTUS Spohn Health System Corporation | TX | Healthcare Provider | 842,874 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Carolina Behavioral Health Alliance, LLC | NC | Business Associate | 130,922 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| WellDyneRx, LLC | FL | Business Associate | 49,964 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Dr. Scott Heinlein Andrew, DPM d/b/a Affiliated Foot & Ankle Center | OH | Healthcare Provider | 4,692 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Michigan Avenue Immediate Care | IL | Healthcare Provider | 144,104 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Bayhealth Medical Center, Inc. | DE | Healthcare Provider | 17,481 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| OrthoWest, PC | NE | Healthcare Provider | 1,369 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 628 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Community of Hope D.C. | DC | Healthcare Provider | 580 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Highmark, Inc. | PA | Health Plan | 511 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 1,145 | Jun 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Catholic Health System | NY | Healthcare Provider | 904 | Jun 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Mattax Neu Prater Eye Center, Inc. | MO | Healthcare Provider | 92,361 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Kevin Wolf, DPM d/b/a Goldsboro Podiatry | NC | Healthcare Provider | 30,668 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Surgery Partners (North Carolina Specialty Hospital) | TN | Business Associate | 8,258 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| St Joseph Heritage Health | CA | Healthcare Provider | 7,229 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Surgery Partners (Lafayette Surgical Specialty Hospital) | TN | Business Associate | 3,527 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 1,267 | Jun 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | VA | Business Associate | 735 | Jun 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Foxhall Ob Gyn Associates | DC | Healthcare Provider | 27,000 | Jun 24, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| University Pediatric Dentistry | NY | Healthcare Provider | 6,843 | Jun 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Rodeo Pharmacy Inc | NJ | Healthcare Provider | 1,574 | Jun 24, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.