HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 74 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Region IV Area Agency on Aging | MI | Health Plan | 3,171 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Amistad Family Services | NM | Healthcare Provider | 2,915 | Nov 29, 2021 | Theft | Archive (closed) |
| WyndRidge Health and Rehabilitation Center | TN | Healthcare Provider | 1,958 | Nov 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Quantum Imaging and Therapeutics Associates, Inc. | PA | Healthcare Provider | 394,506 | Nov 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Huntington Hospital | NY | Healthcare Provider | 12,925 | Nov 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Upstate HomeCare | NY | Healthcare Provider | 5,114 | Nov 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Minnesota Women's Care, P.A. | MN | Healthcare Provider | 1,900 | Nov 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Boston Medical Center | MA | Healthcare Provider | 723 | Nov 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| TriValley Primary Care | PA | Healthcare Provider | 122,806 | Nov 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Howard University College of Dentistry | DC | Healthcare Provider | 80,915 | Nov 23, 2021 | Hacking/IT Incident | Archive (closed) |
| OAA Orthopaedic Associates | PA | Healthcare Provider | 18,052 | Nov 23, 2021 | Hacking/IT Incident | Archive (closed) |
| One Community Health | OR | Healthcare Provider | 39,865 | Nov 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Washington County School District | UT | Business Associate | 659 | Nov 22, 2021 | Hacking/IT Incident | Archive (closed) |
| United Health Centers of the San Joaquin Valley | CA | Healthcare Provider | 112,031 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Sentara Healthcare | VA | Healthcare Provider | 72,121 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Saltzer Health | ID | Healthcare Provider | 15,650 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Anthem, Inc. | IN | Business Associate | 6,118 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Onondaga County Chapter NYSARC, Inc. | NY | Healthcare Provider | 5,425 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Blue Shield of California | CA | Health Plan | 1,519 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Colorado Allergy and Asthma Centers, PC | CO | Healthcare Provider | 791 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Episcopal Retirement Services | OH | Healthcare Provider | 4,133 | Nov 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Marietta Area Health Care Inc. dba Memorial Health System | OH | Healthcare Provider | 216,470 | Nov 17, 2021 | Hacking/IT Incident | Archive (closed) |
| True Health New Mexico | NM | Health Plan | 62,983 | Nov 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Austin Perio Health | TX | Healthcare Provider | 4,339 | Nov 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Magnet Solutions, Inc. | NE | Business Associate | 1,553 | Nov 15, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Citizens Financial Corporation | KY | Business Associate | 688 | Nov 15, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sarasota MRI | FL | Healthcare Provider | 39,962 | Nov 12, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Weill Cornell Medicine | NY | Healthcare Provider | 25,697 | Nov 12, 2021 | Hacking/IT Incident | Archive (closed) |
| University of Houston College of Optometry | TX | Healthcare Provider | 18,500 | Nov 12, 2021 | Hacking/IT Incident | Archive (closed) |
| The Kroger Company | OH | Healthcare Provider | 2,686 | Nov 12, 2021 | Theft | Archive (closed) |
| Ophthalmology Associates | MN | Healthcare Provider | 76,000 | Nov 11, 2021 | Hacking/IT Incident | Archive (closed) |
| The Centers for Advanced Orthopaedics, LLC | MD | Healthcare Provider | 21,162 | Nov 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Tom Wood Inc. Health Care Plan | IN | Health Plan | 2,235 | Nov 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Integrated Services of Kalamazoo | MI | Healthcare Provider | 3,754 | Nov 10, 2021 | Hacking/IT Incident | Archive (closed) |
| St. Anne’s Family Services | CA | Healthcare Provider | 661 | Nov 10, 2021 | Hacking/IT Incident | Archive (closed) |
| Valley Mountain Regional Center | CA | Business Associate | 17,197 | Nov 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Vitreo-Retinal Medical Group, Inc. d/b/a Retinal Consultants Medical Group | CA | Healthcare Provider | 11,603 | Nov 9, 2021 | Hacking/IT Incident | Archive (closed) |
| North Spring Behavioral Healthcare, Inc. | VA | Healthcare Provider | 3,245 | Nov 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 1,823 | Nov 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Continental American Insurance Company | SC | Health Plan | 623 | Nov 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The Urology Center of Colorado | CO | Healthcare Provider | 137,820 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Mowery Clinic LLC | KS | Healthcare Provider | 96,000 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| New York Psychotherapy and Counseling Center | NY | Healthcare Provider | 28,000 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Seneca Family of Agencies | CA | Business Associate | 27,309 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Three Rivers Regional Commission | GA | Business Associate | 17,560 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Hermitage Eye Care, PLLC dba Dover Eye Care | TN | Healthcare Provider | 11,672 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| University Hospital | NJ | Healthcare Provider | 10,067 | Nov 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Association to Benefit Children | NY | Healthcare Provider | 9,142 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Envision Home Health and Hospice | UT | Healthcare Provider | 5,381 | Nov 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| University of North Carolina Health | NC | Healthcare Provider | 946 | Nov 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.