HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 71 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cooperman Barnabas Medical Center | NJ | Healthcare Provider | 538 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Logan Health Medical Center | MT | Healthcare Provider | 213,543 | Feb 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Ascension Michigan (single affiliated covered entity) ACE | MI | Healthcare Provider | 27,177 | Feb 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial village ER | TX | Healthcare Provider | 80,000 | Feb 19, 2022 | Hacking/IT Incident | Archive (closed) |
| US Radiology Specialists, Inc. | NC | Business Associate | 1,322,347 | Feb 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Bible Fellowship Church Homes, Inc. dba Fellowship Community | PA | Healthcare Provider | 3,500 | Feb 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Liberty of Oklahoma Corporation | PA | Business Associate | 5,746 | Feb 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Towne Home Care, LLC | NJ | Healthcare Provider | 5,591 | Feb 17, 2022 | Hacking/IT Incident | Archive (closed) |
| Extend Fertility | NY | Healthcare Provider | 10,373 | Feb 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Comprehensive Health Services | FL | Healthcare Provider | 106,752 | Feb 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Jersey City Medical Center | NJ | Healthcare Provider | 1,130 | Feb 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 893 | Feb 15, 2022 | Hacking/IT Incident | Archive (closed) |
| Priority Health | MI | Health Plan | 2,112 | Feb 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Cooper University Health Care | NJ | Healthcare Provider | 1,039 | Feb 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Community Medical Center | NJ | Healthcare Provider | 630 | Feb 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Jackson County Hospital District | FL | Healthcare Provider | 96,253 | Feb 11, 2022 | Hacking/IT Incident | Archive (closed) |
| CVS Pharmacy | RI | Healthcare Provider | 6,221 | Feb 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Fare LLC | MI | Healthcare Provider | 3,892 | Feb 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Englewood Health | NJ | Healthcare Provider | 582 | Feb 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Jacksonville Spine Center, P.A. | FL | Healthcare Provider | 38,263 | Feb 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Summit BHC West Virginia, LLC d/b/a Highland Hospital | WV | Healthcare Provider | 6,804 | Feb 10, 2022 | Hacking/IT Incident | Archive (closed) |
| EPIC Pharmacy Network, Inc. | VA | Healthcare Provider | 28,776 | Feb 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Seneca Nation Health System | NY | Healthcare Provider | 12,000 | Feb 8, 2022 | Hacking/IT Incident | Archive (closed) |
| La Posada at Park Centre, Inc. | AZ | Health Plan | 812 | Feb 8, 2022 | Hacking/IT Incident | Archive (closed) |
| South Shore Hospital Corporation | IL | Healthcare Provider | 115,175 | Feb 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Cross Timbers Health Clinics, Inc/ d/b/a AccelHealth | TX | Healthcare Provider | 48,126 | Feb 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Hofmann Arthritis Institute PLLC and Hofmann Arthritis Institute of Nevada PLLC | UT | Healthcare Provider | 13,320 | Feb 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Florida Blue | FL | Health Plan | 588 | Feb 4, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Oklahoma Healthcare Authority (OHCA) | OK | Health Plan | 8,629 | Feb 3, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Morley Companies, Inc. | MI | Business Associate | 659,194 | Feb 1, 2022 | Hacking/IT Incident | Archive (closed) |
| North Shore University Hospital | NY | Healthcare Provider | 7,614 | Feb 1, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Catholic Hospice, Inc. | FL | Healthcare Provider | 14,986 | Jan 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Christian Health Center | IL | Healthcare Provider | 31,000 | Jan 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Philadelphia FIGHT Community Health Centers | PA | Healthcare Provider | 17,992 | Jan 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Pace Center for Girls | FL | Healthcare Provider | 18,300 | Jan 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans | NJ | Health Plan | 10,023 | Jan 24, 2022 | Hacking/IT Incident | Archive (closed) |
| OneDigital OBO Guardian Life Insurance Company of America | NY | Business Associate | 800 | Jan 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Medical Healthcare Solutions, Inc. | MA | Business Associate | 133,997 | Jan 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Seneca Family of Agencies | CA | Business Associate | 1,528 | Jan 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Advocates, Inc. | MA | Healthcare Provider | 70,031 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| iRise Florida Spine and Joint Institute, LLC | FL | Healthcare Provider | 61,595 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| County of Kings, State of California | CA | Healthcare Provider | 16,590 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Allegheny Health Network Home Infusion, LLC | PA | Healthcare Provider | 15,342 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 1,471 | Jan 21, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Independence Blue Cross | PA | Health Plan | 591 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| University of Arkansas for Medical Sciences | AR | Healthcare Provider | 518 | Jan 21, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Thomas Jefferson University Hospital, Inc. | PA | Healthcare Provider | 5,239 | Jan 20, 2022 | Hacking/IT Incident | Archive (closed) |
| DataHEALTH, Inc. | TX | Business Associate | 3,649 | Jan 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Abington Memorial Hospital dba Jefferson Abington Hospital | PA | Healthcare Provider | 3,475 | Jan 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Medical Review Institute of America | UT | Business Associate | 2,406 | Jan 20, 2022 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.