HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 69 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The Energy Cooperative Group Benefits Plan | OH | Health Plan | 875 | Apr 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Homestead Building Systems | VA | Health Plan | 727 | Apr 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Healthplex, Inc. | NY | Health Plan | 89,955 | Apr 20, 2022 | Hacking/IT Incident | Archive (closed) |
| La Casa de Salud | NY | Healthcare Provider | 9,969 | Apr 20, 2022 | Hacking/IT Incident | Archive (closed) |
| County of Los Angeles Department of Mental Health | CA | Healthcare Provider | 5,129 | Apr 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Fairfield County Implants and Periodontics, LLC | CT | Healthcare Provider | 10,502 | Apr 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Wayne Family Practice Associates, PC | GA | Healthcare Provider | 5,944 | Apr 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Optima Dermatology Holdings, LLC | NH | Healthcare Provider | 59,872 | Apr 18, 2022 | Hacking/IT Incident | Archive (closed) |
| HealthActions, P.A. | AL | Healthcare Provider | 3,653 | Apr 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Canon Business Process Services Inc | NY | Business Associate | 8,015 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Canon Business Process Services Inc | NY | Business Associate | 1,625 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Spectrum Health System | MI | Healthcare Provider | 794 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Canon Business Process Services Inc | NY | Business Associate | 745 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Newman Regional Health | KS | Healthcare Provider | 52,224 | Apr 14, 2022 | Hacking/IT Incident | Archive (closed) |
| New Creation Counseling Center | OH | Healthcare Provider | 24,029 | Apr 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Central Florida Cardiology Group | FL | Healthcare Provider | 1,186 | Apr 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Mountain Area Health Education Center dba MAHEC | NC | Healthcare Provider | 1,115 | Apr 14, 2022 | Improper Disposal | Archive (closed) |
| OneHome Health Solutions | FL | Healthcare Provider | 15,401 | Apr 13, 2022 | Theft | Archive (closed) |
| Lutheran Services Carolinas | NC | Business Associate | 1,226 | Apr 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Adaptive Health Integrations | ND | Healthcare Provider | 510,574 | Apr 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Altoona Area School District | PA | Health Plan | 9,196 | Apr 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Von Behren & Hunter LLP | CA | Business Associate | 5,852 | Apr 11, 2022 | Hacking/IT Incident | Archive (closed) |
| The MetroHealth System | OH | Healthcare Provider | 1,748 | Apr 11, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthcare Collections - I, LLC | AZ | Business Associate | 900 | Apr 11, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Chinese Community Health Plan | CA | Health Plan | 502 | Apr 11, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| WellStar Health System, Inc. | GA | Healthcare Provider | 30,417 | Apr 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Georgia Pines CSB | GA | Healthcare Provider | 24,000 | Apr 8, 2022 | Theft | Archive (closed) |
| Pediatric Associates, P.C. | VA | Healthcare Provider | 13,000 | Apr 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Ballad Health | TN | Healthcare Provider | 4,295 | Apr 8, 2022 | Hacking/IT Incident | Archive (closed) |
| East Tennessee Children's Hospital | TN | Healthcare Provider | 422,531 | Apr 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Bishop Eye Center | SC | Healthcare Provider | 2,292 | Apr 7, 2022 | Hacking/IT Incident | Archive (closed) |
| SummaCare Inc | OH | Health Plan | 716 | Apr 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Vermont Eye Care | VT | Healthcare Provider | 29,892 | Apr 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Advantage Benefits Group | MI | Business Associate | 7,147 | Apr 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan, Inc. | CA | Health Plan | 695 | Apr 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| The Guidance Center, Inc. | AZ | Healthcare Provider | 23,104 | Apr 5, 2022 | Hacking/IT Incident | Archive (closed) |
| River City Insurance Group d/b/a Lavinder Group & Associates | VA | Business Associate | 1,118 | Apr 5, 2022 | Hacking/IT Incident | Archive (closed) |
| State of Arizona Department of Administration | AZ | Health Plan | 820 | Apr 5, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Urgent Team Holdings | TN | Healthcare Provider | 166,601 | Mar 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Englewood Health | NJ | Healthcare Provider | 3,901 | Mar 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Resources for Human Development | PA | Healthcare Provider | 46,673 | Mar 29, 2022 | Theft | Archive (closed) |
| Super Care, Inc. dba SuperCare Health | CA | Healthcare Provider | 317,863 | Mar 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Law Enforcement Health Benefits, Inc. | PA | Health Plan | 85,282 | Mar 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Charleston Area Medical Center, Inc. | WV | Healthcare Provider | 54,000 | Mar 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Medical Surgical Eye Care | KS | Healthcare Provider | 2,000 | Mar 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Christie Business Holdings Company, P.C. | IL | Healthcare Provider | 502,869 | Mar 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Cytometry Specialists, Inc., d/b/a CSI Laboratories | GA | Healthcare Provider | 312,000 | Mar 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Lutheran Social Services of Illinois | IL | Healthcare Provider | 146,028 | Mar 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Colorado Physician Partners, PLLC | CO | Healthcare Provider | 12,877 | Mar 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Advanced Medical Practice Management | NJ | Business Associate | 56,427 | Mar 23, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.