HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 67 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| TOTS, Inc. dba Kiddos' Clubhouse | GA | Healthcare Provider | 1,868 | Jun 2, 2022 | Hacking/IT Incident | Archive (closed) |
| The Rothman Orthopaedic Institute | PA | Healthcare Provider | 874 | Jun 2, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Smile Solutions | WA | Healthcare Provider | 8,000 | Jun 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Fishman Vision | CA | Healthcare Provider | 2,646 | Jun 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Burman & Zuckerbrod Ophthalmology Associates, P.C. | MI | Healthcare Provider | 1,337 | Jun 1, 2022 | Hacking/IT Incident | Archive (closed) |
| University of Kansas Health System - Great Bend Campus | KS | Healthcare Provider | 926 | Jun 1, 2022 | Improper Disposal | Archive (closed) |
| Allied Urological Services, LLC | NY | Business Associate | 50,640 | May 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Associated Ophthalmologists of Kansas City, P.C. | MO | Healthcare Provider | 13,461 | May 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Virginia Mason Medical Center | WA | Healthcare Provider | 1,523 | May 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Shields Health Care Group, Inc. | MA | Business Associate | 2,380,483 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Shoreline Eye Group | CT | Healthcare Provider | 57,047 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| AU Health | GA | Healthcare Provider | 49,623 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Finkelstein Eye Associates | IL | Healthcare Provider | 48,587 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Capsule | NY | Healthcare Provider | 27,625 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Sylvester Eye Care | OK | Healthcare Provider | 19,377 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Stephen Sims, MD, PA dba North Lakes Pain Consultants | TX | Healthcare Provider | 8,620 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Platinum Hospitalists LLP | NV | Healthcare Provider | 5,535 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| John Knox Village of Florida | FL | Healthcare Provider | 5,000 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Virginia Commonwealth University Health System | VA | Healthcare Provider | 4,441 | May 27, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Chicago Medical Center | IL | Healthcare Provider | 2,568 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| BJC Health System | MO | Business Associate | 500 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Comstar, LLC | MA | Business Associate | 585,621 | May 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Aon PLC | IL | Business Associate | 129,682 | May 26, 2022 | Hacking/IT Incident | Archive (closed) |
| NLB Corporation | MI | Health Plan | 1,943 | May 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Fred Hutchinson Cancer Center | WA | Healthcare Provider | 89,111 | May 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Moyes Eye Center, PC | MO | Healthcare Provider | 38,000 | May 25, 2022 | Hacking/IT Incident | Archive (closed) |
| The Multiple Sclerosis Center of Atlanta | GA | Healthcare Provider | 2,820 | May 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Val Verde Regional Medical Center (“VVRMC”) | TX | Healthcare Provider | 86,562 | May 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Health Care, Inc | KS | Healthcare Provider | 33,619 | May 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Allwell Behavioral Health Services | OH | Healthcare Provider | 29,972 | May 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Creative Hospice Care, Inc. dba Homestead Hospice & Palliative Care | GA | Healthcare Provider | 28,332 | May 23, 2022 | Hacking/IT Incident | Archive (closed) |
| County of Santa Barbara, Department of Behavioral Wellness | CA | Healthcare Provider | 601 | May 23, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Washington University School of Medicine | MO | Health Plan | 500 | May 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Alameda Health System | CA | Healthcare Provider | 90,000 | May 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Aesto, LLC d/b/a Aesto Health | AL | Business Associate | 17,400 | May 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Oswego County Opportunities, Inc. | NY | Healthcare Provider | 7,766 | May 20, 2022 | Hacking/IT Incident | Archive (closed) |
| OE Enterprises, Inc. | NC | Healthcare Provider | 2,224 | May 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Georgia Pain and Spine Care | GA | Healthcare Provider | 1,056 | May 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Julieta Y. Echeverria D.D.S., Inc. | CA | Healthcare Provider | 529 | May 20, 2022 | Theft | Archive (closed) |
| Health Care Administrative Services | VA | Healthcare Provider | 500 | May 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Partnership HealthPlan of California | CA | Health Plan | 852,375 | May 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Bryan County Ambulance Authority | OK | Healthcare Provider | 14,273 | May 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Allaire Healthcare Group | NJ | Healthcare Provider | 13,148 | May 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Northern Rockies Orthopaedics | MT | Healthcare Provider | 6,701 | May 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Apria Healthcare LLC | IN | Healthcare Provider | 1,868,831 | May 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Heidell, Pittoni, Murphy & Bach, LLP | NY | Business Associate | 114,979 | May 16, 2022 | Hacking/IT Incident | Archive (closed) |
| EmblemHealth Plan, Inc. | NY | Health Plan | 11,399 | May 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| ConnectiCare | CT | Health Plan | 1,196 | May 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Insurance Plan of Greater New York | NY | Health Plan | 792 | May 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Parker-Hannifin Corporation Group Health Plans | OH | Health Plan | 119,513 | May 13, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.