HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 70 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Thomas Allen, Inc. | MN | Healthcare Provider | 2,803 | Mar 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Taylor Regional Hospital | KY | Healthcare Provider | 190,209 | Mar 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Livingston Memorial VNA Health Corporation and its affiliates Livingston Memorial Visiting Nurse Association and Livingston CareGivers | CA | Healthcare Provider | 34,775 | Mar 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Valley View Hospital Association | CO | Healthcare Provider | 21,826 | Mar 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Clinic of North Texas, LLP | TX | Healthcare Provider | 244,174 | Mar 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Cancer and Hematology Centers of Western Michigan | MI | Healthcare Provider | 43,071 | Mar 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Wheeling Health Right, Inc. | WV | Healthcare Provider | 3,912 | Mar 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Central Minnesota Mental Health Center | MN | Healthcare Provider | 28,725 | Mar 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Chelan Douglas Health District | WA | Healthcare Provider | 188,236 | Mar 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Eye Group of Southern Indiana | IN | Healthcare Provider | 4,002 | Mar 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Virginia Mason Medical Center | WA | Healthcare Provider | 2,733 | Mar 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Trinity Home Care, Inc. | MA | Healthcare Provider | 1,541 | Mar 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Labette Health | KS | Healthcare Provider | 85,635 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Highmark Inc | PA | Health Plan | 67,147 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Capital Region Medical Center | MO | Healthcare Provider | 17,578 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Major League Baseball Players Benefit Plan | MD | Health Plan | 13,156 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Local 295 IBT Employer Group Welfare Fund | NY | Health Plan | 6,123 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| New Jersey Brain and Spine | NJ | Healthcare Provider | 92,453 | Mar 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Dialyze Direct, LLC | NJ | Healthcare Provider | 14,203 | Mar 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Gainwell Technologies, LLC | TX | Business Associate | 1,955 | Mar 10, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Gainwell Technologies, LLC | TX | Business Associate | 810 | Mar 10, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Horizon Actuarial Services, LLC | GA | Business Associate | 227,953 | Mar 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Parkland Community Health Plan, Inc. | TX | Health Plan | 1,682 | Mar 8, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Indiana Orthopedics | IN | Healthcare Provider | 83,705 | Mar 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Laboratorio Clínico Caparros | Healthcare Provider | 500 | Mar 6, 2022 | Hacking/IT Incident | Archive (closed) | |
| South Denver Cardiology Associates, PC | CO | Healthcare Provider | 287,652 | Mar 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Duncan Regional Hospital, Incorporated | OK | Healthcare Provider | 86,379 | Mar 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Indiana Hemophilia and Thrombosis Center, Inc. | IN | Healthcare Provider | 4,750 | Mar 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Familylinks | PA | Healthcare Provider | 1,494 | Mar 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Molecular Pathology Laboratory Network, Inc. | TN | Healthcare Provider | 339,471 | Mar 3, 2022 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 2,921 | Mar 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Crossroads Health | OH | Healthcare Provider | 10,324 | Mar 2, 2022 | Hacking/IT Incident | Archive (closed) |
| LGAA Health Plan | UT | Health Plan | 864 | Mar 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Monongalia Health System, Inc. | WV | Healthcare Provider | 492,861 | Feb 28, 2022 | Hacking/IT Incident | Archive (closed) |
| UMass Memorial Health Care | MA | Business Associate | 4,270 | Feb 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Norwood Clinic | TN | Healthcare Provider | 228,000 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Montrose Regional Health | CO | Healthcare Provider | 52,632 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| First Step of Sarasota, Inc. | FL | Healthcare Provider | 52,500 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Bako Diagnostics | GA | Healthcare Provider | 25,745 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| The Art & Science of Dermatology, P.C. | VA | Healthcare Provider | 4,500 | Feb 25, 2022 | Loss | Archive (closed) |
| Kittitas Valley Healthcare | WA | Healthcare Provider | 3,987 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| University Medical Center of Southern Nevada | NV | Healthcare Provider | 12,230 | Feb 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Houston Health Department | TX | Healthcare Provider | 10,291 | Feb 24, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Alliance Physical Therapy Group, LLC | MI | Business Associate | 197,588 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| The Puerto Rican Organization to Motivate, Enltighten, and Serve Addicts, Inc. | NY | Healthcare Provider | 33,933 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Ultimate Care, Inc. | NY | Healthcare Provider | 15,788 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| CareOregon Advantage | OR | Health Plan | 10,467 | Feb 23, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Zoe Therapy Services | VA | Healthcare Provider | 1,100 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Bronx Addiction Services Integrated Concepts Systems, Inc. | NY | Healthcare Provider | 823 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Community Association of Progressive Dominicans, Inc. | NY | Healthcare Provider | 656 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.