HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 73 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| MedQuest Pharmacy, Inc. | UT | Healthcare Provider | 39,447 | Dec 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Duneland School Corporation | IN | Health Plan | 7,000 | Dec 23, 2021 | Hacking/IT Incident | Archive (closed) |
| C.E. Niehoff & Company | IL | Health Plan | 1,509 | Dec 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Daniel J. Edelman Holdings, Inc. | IL | Health Plan | 184,500 | Dec 22, 2021 | Hacking/IT Incident | Archive (closed) |
| James Kagan, MD | CO | Healthcare Provider | 1,310 | Dec 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Monongalia Health System, Inc. | WV | Healthcare Provider | 398,164 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Georgia Bone & Joint Surgeons, P.C. | GA | Healthcare Provider | 39,300 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Welfare, Pension and Annuity Funds of Local No. ONE, I.A.T.S.E. | NY | Health Plan | 20,579 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Rhode Island Public Transit Authority | RI | Health Plan | 5,015 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| W. Emery Reynolds, M.D | OK | Business Associate | 1,844 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Skin Care Specialty Physicians | MD | Healthcare Provider | 1,553 | Dec 21, 2021 | Theft | Archive (closed) |
| Fast Medical Center | OK | Business Associate | 901 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Chaddock | IL | Healthcare Provider | 777 | Dec 21, 2021 | Theft | Archive (closed) |
| Southern Orthopaedic Associates d/b/a Orthopaedic Institute of Western Kentucky | KY | Healthcare Provider | 106,910 | Dec 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Alabama Department of Rehabilitation Services | AL | Healthcare Provider | 934 | Dec 20, 2021 | Improper Disposal | Archive (closed) |
| Northwest Broward Orthopaedics Associates | FL | Healthcare Provider | 53,892 | Dec 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Surgery Group SC | IL | Healthcare Provider | 7,646 | Dec 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Apple Blossom Family Practice | VA | Healthcare Provider | 12,053 | Dec 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Andrew Sauchelli, DMD | FL | Health Plan | 3,416 | Dec 16, 2021 | Hacking/IT Incident | Archive (closed) |
| UAW Retiree Medical Benefits Trust | MI | Health Plan | 576 | Dec 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Oregon Eye Specialists | OR | Healthcare Provider | 42,612 | Dec 13, 2021 | Hacking/IT Incident | Archive (closed) |
| Texas ENT Specialists | TX | Healthcare Provider | 535,489 | Dec 10, 2021 | Hacking/IT Incident | Archive (closed) |
| BioPlus Specialty Pharmacy Services, LLC | FL | Healthcare Provider | 348,870 | Dec 10, 2021 | Hacking/IT Incident | Archive (closed) |
| Eduro Healthcare, LLC | UT | Healthcare Provider | 8,059 | Dec 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Sacramento County Department of Health Services | CA | Healthcare Provider | 2,096 | Dec 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Weddell Pediatric Dental Specialists, LLC | IN | Healthcare Provider | 5,356 | Dec 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Javery Pain Institute | MI | Healthcare Provider | 1,387 | Dec 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Wind River Family and Community Health Care | WY | Healthcare Provider | 8,946 | Dec 7, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Summit Surgical, LLC | KS | Healthcare Provider | 4,910 | Dec 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Hope Group LLC | AZ | Healthcare Provider | 1,510 | Dec 7, 2021 | Hacking/IT Incident | Archive (closed) |
| OSR Physical Therapy | AZ | Healthcare Provider | 714 | Dec 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Oregon Anesthesiology Group, P.C. | OR | Healthcare Provider | 750,500 | Dec 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Bansley and Kiener, LLP | IL | Business Associate | 70,941 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Bansley and Kiener, LLP | IL | Business Associate | 15,814 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Nippon Life Insurance Company of America | NY | Health Plan | 4,109 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Behavioral Health and Developmental Services | VA | Healthcare Provider | 4,037 | Dec 3, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Bansley and Kiener, LLP | IL | Business Associate | 2,711 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Bansley and Kiener, LLP | IL | Business Associate | 2,297 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Baylor Scott & White Medical Center - Waxahachie | TX | Healthcare Provider | 883 | Dec 3, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Mertz Manufacturing Inc Health Insurance Plan | OK | Health Plan | 868 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Great Plains Manufacturing, Inc | KS | Health Plan | 4,110 | Dec 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Roy Varughese, M.D. | TX | Healthcare Provider | 2,916 | Dec 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Planned Parenthood Los Angeles | CA | Healthcare Provider | 409,759 | Nov 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Commission on Economic Opportunity | NY | Business Associate | 29,454 | Nov 30, 2021 | Hacking/IT Incident | Archive (closed) |
| AMITA Health Medical Group Primary Care- Hoffman Estates | IL | Healthcare Provider | 1,647 | Nov 30, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sound Generations | WA | Business Associate | 456,243 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Neuro Rehab Associates, Inc. d/b/a Northeast Rehabilitation Hospital Network | NH | Healthcare Provider | 190,220 | Nov 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Medsurant Holdings, LLC | PA | Healthcare Provider | 129,127 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Broward County Public Schools | FL | Health Plan | 49,608 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Boulder Neurosurgical and Spine Associates | CO | Healthcare Provider | 21,450 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.