HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 68 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Schneck Medical Center | IN | Healthcare Provider | 92,311 | May 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Healthcare Assistance Plan for Employees of Seventh-day Adventist Organization of the North American Division | MD | Health Plan | 2,008 | May 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Behavioral Health Partners of Metrowest, LLC. | MA | Business Associate | 10,920 | May 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Motion Picture Industry Pension & Health Plans | CA | Health Plan | 16,838 | May 11, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Summit Healthcare Association | AZ | Healthcare Provider | 1,410 | May 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Genetics & IVF Institute | VA | Healthcare Provider | 606 | May 11, 2022 | Hacking/IT Incident | Archive (closed) |
| McKenzie Health System | MI | Healthcare Provider | 51,040 | May 10, 2022 | Hacking/IT Incident | Archive (closed) |
| RiverKids Pediatric Home Health | TX | Healthcare Provider | 3,494 | May 10, 2022 | Hacking/IT Incident | Archive (closed) |
| NuLife Med, LLC | NH | Healthcare Provider | 92,436 | May 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Oklahoma City Indian Clinic | OK | Healthcare Provider | 38,239 | May 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Healthfirst | NY | Health Plan | 5,048 | May 9, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Cypress Healthcare, LLC | AL | Healthcare Provider | 899 | May 9, 2022 | Theft | Archive (closed) |
| Covenant Care California, LLC, on behalf of Wagner Heights Nursing and Rehabilitation Center | CA | Healthcare Provider | 23,093 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Mississippi Sports Medicine and Orthopaedic Center | MS | Healthcare Provider | 21,315 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| WellDyneRx, LLC | FL | Healthcare Provider | 5,122 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Mindpath Care Centers, North Carolina, PLLC | NC | Healthcare Provider | 1,781 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Guardian Pharmacy of Cincinnati LLC dba Mullaney’s, A Guardian Pharmacy | OH | Healthcare Provider | 1,720 | May 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Optum, Inc. | MN | Business Associate | 1,584 | May 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSource, Inc | OH | Health Plan | 959 | May 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| North Alabama Bone & Joint Clinic, P.C. | AL | Healthcare Provider | 500 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| SAC Health System | CA | Healthcare Provider | 77,842 | May 5, 2022 | Theft | Archive (closed) |
| Vail Health Services | CO | Healthcare Provider | 41,889 | May 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Greater Nashua Mental Health | NH | Healthcare Provider | 1,085 | May 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Kenosha Community Health Center | WI | Healthcare Provider | 2,688 | May 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Shutterfly, LLC | CA | Business Associate | 2,641 | May 3, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Thompson Child & Family Focus | NC | Healthcare Provider | 986 | May 3, 2022 | Hacking/IT Incident | Archive (closed) |
| FPS Medical Center | AZ | Healthcare Provider | 28,024 | May 2, 2022 | Hacking/IT Incident | Archive (closed) |
| Methodist Le Bonheur Healthcare | TN | Healthcare Provider | 1,370 | May 2, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| National Imaging Associates, Inc. | MD | Business Associate | 744 | May 2, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Refuah Health Center | NY | Healthcare Provider | 260,740 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Frank Eye Center, P.A. | KS | Healthcare Provider | 26,333 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Arkfeld, Parson, and Goldstein, P.C. doing business as ilumin | NE | Healthcare Provider | 14,984 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Ad Astra Eye LLC | KS | Healthcare Provider | 3,684 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Salusive Health Inc. MyNurse | CA | Healthcare Provider | 1,072 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Regional Eye Associates, Inc. & Surgical Eye Center of Morgantown | WV | Healthcare Provider | 194,035 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Affiliated Eye Surgeons | MI | Healthcare Provider | 23,377 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Sterling Healthcare Holdings, LLC DBA Cordant Health Solutions | CO | Healthcare Provider | 20,932 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Northern Eye Care Associates, P.C. | MI | Healthcare Provider | 7,873 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| The People Concern | CA | Healthcare Provider | 7,600 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| SUMMIT EYE ASSOCIATES P.C. | TN | Healthcare Provider | 53,818 | Apr 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Allied Eye Physicians and Surgeons, Inc. | OH | Healthcare Provider | 20,651 | Apr 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Southern Ohio Medical Center | OH | Healthcare Provider | 15,136 | Apr 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Select Benefits Group, LLC dba Dental Select | UT | Business Associate | 1,035 | Apr 26, 2022 | Hacking/IT Incident | Archive (closed) |
| ARcare | AR | Healthcare Provider | 345,353 | Apr 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Illinois Gastroenterology Group, PLLC | IL | Healthcare Provider | 227,943 | Apr 22, 2022 | Hacking/IT Incident | Archive (closed) |
| King County Public Hospital District No. 2 d/b/a EvergreenHealth | WA | Healthcare Provider | 20,533 | Apr 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 3,717 | Apr 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| The Mental Health Center of Greater Manchester | NH | Healthcare Provider | 1,322 | Apr 22, 2022 | Hacking/IT Incident | Archive (closed) |
| JM Pension Advisory Inc. | MD | Business Associate | 897 | Apr 22, 2022 | Loss | Archive (closed) |
| National Imaging Associates, Inc. | MD | Business Associate | 616 | Apr 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.