HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 72 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Caring Communities | IL | Business Associate | 1,659 | Jan 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Human Services | CO | Healthcare Provider | 6,132 | Jan 19, 2022 | Hacking/IT Incident | Archive (closed) |
| Golden State Dermatology | CA | Healthcare Provider | 1,010 | Jan 19, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Walworth County, Wisconsin | WI | Healthcare Provider | 1,212 | Jan 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Practolytics LLC | SC | Business Associate | 1,125 | Jan 18, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Raveco Medical | NY | Healthcare Provider | 4,897 | Jan 17, 2022 | Hacking/IT Incident | Archive (closed) |
| South City Hospital | MO | Healthcare Provider | 21,601 | Jan 14, 2022 | Theft | Archive (closed) |
| Fiondella, Milone & LaSaracina, LLP | CT | Business Associate | 6,215 | Jan 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Digital Insurance, LLC doing business as OneDigital | GA | Business Associate | 2,051 | Jan 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Vantage Holding Company, LLC | PA | Healthcare Provider | 1,762 | Jan 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Volunteers of America Southwest California | CA | Healthcare Provider | 1,300 | Jan 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Albany Family Dentistry | MN | Healthcare Provider | 1,117 | Jan 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Oscar Health Plan of California | NJ | Health Plan | 7,632 | Jan 13, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Oscar Insurance Company of Florida | FL | Health Plan | 6,290 | Jan 13, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Millennium Eye Care LLC | NJ | Healthcare Provider | 6,050 | Jan 13, 2022 | Hacking/IT Incident | Archive (closed) |
| Oscar Buckeye State Insurance Corporation | OH | Health Plan | 1,296 | Jan 13, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Oscar Insurance Corporation of Ohio | OH | Health Plan | 505 | Jan 13, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospital Authority of Valdosta and Lowndes County Georgia | GA | Healthcare Provider | 41,692 | Jan 12, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Deerbrook Cath Lab LLC | TX | Business Associate | 2,364 | Jan 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Lakeshore Bone & Joint Institute, PC | IN | Healthcare Provider | 23,627 | Jan 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Medical Review Institute of America | UT | Business Associate | 134,571 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| TTEC Healthcare Solutions | CO | Business Associate | 86,305 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Suncoast Skin Solutions | FL | Healthcare Provider | 77,190 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| DataXport | TX | Business Associate | 8,181 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Heart ‘n Home Hospice | ID | Healthcare Provider | 4,769 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Advent Health Partners, Inc. | TN | Business Associate | 37,183 | Jan 6, 2022 | Hacking/IT Incident | Archive (closed) |
| NYU Langone Hospitals | NY | Healthcare Provider | 1,141 | Jan 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Houston Area Community Services, Inc. d/b/a Avenue 360 Health and Wellness | TX | Healthcare Provider | 12,186 | Jan 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Vanderbilt University Medical Center | TN | Healthcare Provider | 556 | Jan 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Ravkoo | FL | Healthcare Provider | 105,000 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Brockton Hospital, Inc. d/b/a Signature Healthcare Brockton Hospital | MA | Healthcare Provider | 73,022 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Peachtree Orthopaedic Clinic | GA | Healthcare Provider | 53,686 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Sherrill House, Inc. | MA | Healthcare Provider | 5,006 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| North Broward Hospital District d/b/a Broward Health | FL | Healthcare Provider | 1,351,431 | Jan 2, 2022 | Hacking/IT Incident | Archive (closed) |
| Ciox Health | GA | Business Associate | 43,033 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Loyola University Medical Center | IL | Healthcare Provider | 16,934 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Barlow Respiratory Hospital | CA | Healthcare Provider | 10,761 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| A New Leaf, Inc. | AZ | Healthcare Provider | 10,438 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Anthem Affiliated Covered Entities | IN | Health Plan | 7,250 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Virtual Private Network Solutions, LLC d/b/a VPN Solutions, LLC | VA | Business Associate | 6,400 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Granite Falls Family Medical Care Center | NC | Healthcare Provider | 5,404 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Dr. Kochurani Puthumana | VA | Healthcare Provider | 3,805 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Hoya Optical Labs of America, Inc. | TX | Business Associate | 14,099 | Dec 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Sage Medical Professionals LLC | SD | Business Associate | 2,138 | Dec 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Douglas C Morrow ODPC | IN | Healthcare Provider | 5,269 | Dec 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Advocate Aurora Health | WI | Healthcare Provider | 1,729 | Dec 28, 2021 | Loss | Archive (closed) |
| Pithadia Medical Professional Services, Inc. | IN | Healthcare Provider | 1,624 | Dec 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Florida Digestive Health Specialists, LLP | FL | Healthcare Provider | 212,509 | Dec 27, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Fertility Centers of Illinois, PLLC | IL | Healthcare Provider | 79,943 | Dec 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 1,352 | Dec 27, 2021 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.