HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 7 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Mid Florida Dermatology & Plastic Surgery | FL | Healthcare Provider | 85,585 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| NCH Corporation Employee Benefits Plan | TX | Health Plan | 4,055 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| CUNNINGHAM PROSTHETIC CARE LLC | ME | Healthcare Provider | 2,523 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| Capitol Pain Institute | CO | Healthcare Provider | 695 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 551 | May 1, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Integrated Pain Associates | TX | Healthcare Provider | 500 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| Mt. Spokane Pediatrics | WA | Healthcare Provider | 32,021 | Apr 30, 2026 | Hacking/IT Incident | Under investigation |
| Totem Lake Family Dentistry | WA | Healthcare Provider | 3,464 | Apr 30, 2026 | Hacking/IT Incident | Under investigation |
| Ouster, Inc. | CA | Health Plan | 574 | Apr 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Tri-Cities Gastroenterology | TN | Healthcare Provider | 67,115 | Apr 29, 2026 | Hacking/IT Incident | Under investigation |
| Northwoods Surgery Center | MN | Healthcare Provider | 5,385 | Apr 29, 2026 | Hacking/IT Incident | Under investigation |
| FMRS Health Systems, Inc. | WV | Healthcare Provider | 500 | Apr 28, 2026 | Hacking/IT Incident | Under investigation |
| C2N Diagnostics, LLC | MO | Healthcare Provider | 2,027 | Apr 27, 2026 | Hacking/IT Incident | Under investigation |
| Florida Physician Specialists | FL | Healthcare Provider | 276,498 | Apr 24, 2026 | Hacking/IT Incident | Under investigation |
| Hematology Oncology Consultants | MI | Healthcare Provider | 62,972 | Apr 24, 2026 | Hacking/IT Incident | Under investigation |
| GrayRobinson, P.A. | FL | Business Associate | 54,131 | Apr 24, 2026 | Hacking/IT Incident | Under investigation |
| Aldrich Pediatric Dentistry | IN | Healthcare Provider | 5,900 | Apr 24, 2026 | Hacking/IT Incident | Under investigation |
| Stewart Home & School | KY | Healthcare Provider | 3,677 | Apr 23, 2026 | Hacking/IT Incident | Under investigation |
| Interim HealthCare of Lubbock | TX | Healthcare Provider | 2,071 | Apr 23, 2026 | Hacking/IT Incident | Archive (closed) |
| Interim HealthCare of Amarillo | TX | Healthcare Provider | 666 | Apr 23, 2026 | Hacking/IT Incident | Archive (closed) |
| Belmont Aesthetic and Reconstructive Plastic Surgery | VA | Healthcare Provider | 528 | Apr 23, 2026 | Hacking/IT Incident | Under investigation |
| Laurel Eye Clinic | PA | Healthcare Provider | 145,221 | Apr 22, 2026 | Hacking/IT Incident | Under investigation |
| Liberty Bankers Life Ins. Co. | TX | Health Plan | 20,202 | Apr 22, 2026 | Hacking/IT Incident | Archive (closed) |
| Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) | CA | Business Associate | 2,287 | Apr 22, 2026 | Hacking/IT Incident | Under investigation |
| Spokane Digestive Disease Center, P.S. | WA | Healthcare Provider | 2,157 | Apr 20, 2026 | Hacking/IT Incident | Under investigation |
| Prime Care 12 Priority Health | WV | Healthcare Provider | 1,000 | Apr 20, 2026 | Hacking/IT Incident | Under investigation |
| Innovative Scientific Solutions, LLC | SC | Healthcare Provider | 143,842 | Apr 17, 2026 | Hacking/IT Incident | Under investigation |
| University of Nebraska Medical Center | NE | Healthcare Provider | 26,937 | Apr 17, 2026 | Hacking/IT Incident | Under investigation |
| Bayside Dental | WA | Healthcare Provider | 10,216 | Apr 17, 2026 | Hacking/IT Incident | Under investigation |
| ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners | MD | Healthcare Provider | 7,213 | Apr 17, 2026 | Hacking/IT Incident | Under investigation |
| Lennox International Inc. | TX | Health Plan | 3,709 | Apr 17, 2026 | Hacking/IT Incident | Archive (closed) |
| L.A. Care Health Plan | CA | Health Plan | 2,885 | Apr 17, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| NJ Division of Developmental Disabilities - Hunterdon Developmental Center | NJ | Healthcare Provider | 807 | Apr 17, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Iowa Department of Health and Human Services | IA | Health Plan | 6,717 | Apr 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Spokane United Methodist Homes d/b/a Rockwood Retirement Communities | WA | Healthcare Provider | 3,811 | Apr 16, 2026 | Hacking/IT Incident | Under investigation |
| Washington VA Medical Center | DC | Healthcare Provider | 1,467 | Apr 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Mazzola Mardon, P.C. | NY | Business Associate | 2,123 | Apr 15, 2026 | Hacking/IT Incident | Under investigation |
| City Health, a medical corporation | CA | Healthcare Provider | 65,000 | Apr 14, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Defense Health Agency | VA | Health Plan | 1,300 | Apr 14, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Instabase, Inc. | DE | Health Plan | 908 | Apr 13, 2026 | Hacking/IT Incident | Archive (closed) |
| Joseph J Chappell, Jr., MD, PA dba Tupelo Eye Clinic | MS | Healthcare Provider | 6,245 | Apr 10, 2026 | Hacking/IT Incident | Under investigation |
| Springfield Hospital | VT | Healthcare Provider | 5,892 | Apr 10, 2026 | Hacking/IT Incident | Under investigation |
| Branch Metrics, Inc. | CA | Health Plan | 857 | Apr 10, 2026 | Hacking/IT Incident | Archive (closed) |
| Duncan Regional Hospital, Inc. | OK | Healthcare Provider | 724 | Apr 10, 2026 | Hacking/IT Incident | Archive (closed) |
| CARE Clinic | MN | Healthcare Provider | 500 | Apr 10, 2026 | Hacking/IT Incident | Under investigation |
| CardioFit Medical Group, Inc. | CA | Healthcare Provider | 7,243 | Apr 9, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Virginia Department of Behavioral Health and Developmental Services | VA | Healthcare Provider | 724 | Apr 7, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospital Caribbean Medical Center | Healthcare Provider | 92,000 | Apr 6, 2026 | Hacking/IT Incident | Under investigation | |
| Heart South Cardiovascular Group | AL | Healthcare Provider | 46,666 | Apr 6, 2026 | Hacking/IT Incident | Under investigation |
| Grandview Family Medicine | UT | Healthcare Provider | 13,310 | Apr 6, 2026 | Hacking/IT Incident | Under investigation |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.