HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 75 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Maxim Healthcare Group | MD | Healthcare Provider | 65,267 | Nov 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 1,965 | Nov 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Utah Imaging Associates, Inc. | UT | Healthcare Provider | 582,170 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Consociate Health | IL | Business Associate | 48,583 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Baywood Medical Associates, PLC dba Desert Pain Institute | AZ | Healthcare Provider | 44,850 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Putnam County Memorial Hospital | MO | Healthcare Provider | 6,916 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| JEV Plastic Surgery & Medical Aesthetics | MD | Healthcare Provider | 1,620 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Luminis Health Anne Arundel Medical Center | MD | Healthcare Provider | 824,450 | Nov 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Doctors Health Group, Inc. | AR | Healthcare Provider | 47,660 | Nov 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Victory Health Partners | AL | Healthcare Provider | 30,000 | Nov 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Washington DC VA Medical Center | DC | Healthcare Provider | 1,193 | Nov 1, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sea Mar Community Health Centers | WA | Healthcare Provider | 688,000 | Oct 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Pottawatomie County Health Department | KS | Healthcare Provider | 6,000 | Oct 30, 2021 | Hacking/IT Incident | Archive (closed) |
| NHS Management, LLC | AL | Business Associate | 120,712 | Oct 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Surecare Specialty Pharmacy | TX | Healthcare Provider | 8,412 | Oct 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Viverant PT, LLC | MN | Healthcare Provider | 6,540 | Oct 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Nationwide Laboratory Services | FL | Healthcare Provider | 33,437 | Oct 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Healthcare Management, Inc. | TN | Healthcare Provider | 12,306 | Oct 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Anthem, Inc. | IN | Business Associate | 5,505 | Oct 27, 2021 | Theft | Archive (closed) |
| California Physicians' Services d/b/a Blue Shield of California | CA | Health Plan | 2,841 | Oct 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Blue Cross of California | IN | Health Plan | 672 | Oct 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Lincare Holdings Inc. | FL | Healthcare Provider | 2,918,444 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Community Medical Centers, Inc. | CA | Healthcare Provider | 604,583 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Samaritan Daytop Village, Inc. | NY | Healthcare Provider | 15,459 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Seneca Family of Agencies | CA | Healthcare Provider | 3,900 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Rose H Bailey DDS | WA | Healthcare Provider | 3,000 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Foundation for Medical Care of Tulare and Kings Counties | CA | Business Associate | 1,835 | Oct 26, 2021 | Theft | Archive (closed) |
| Nutan K. Parikh, M.D., Ltd., A Professional Corporation dba Las Vegas Cancer Center | NV | Healthcare Provider | 1,300 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Walmart, Inc. | AR | Healthcare Provider | 828 | Oct 26, 2021 | Loss | Archive (closed) |
| Bryan Health | NE | Healthcare Provider | 2,753 | Oct 25, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Painters District Council No. 30 Health and Welfare Fund | IL | Health Plan | 2,157 | Oct 25, 2021 | Hacking/IT Incident | Archive (closed) |
| QRS, Inc. | TN | Business Associate | 430,334 | Oct 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Star Group, L.P. Health Benefits Plan | CT | Health Plan | 9,316 | Oct 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Educators Mutual Insurance Association | UT | Health Plan | 8,661 | Oct 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Throckmorton County Memorial Hospital | TX | Healthcare Provider | 3,028 | Oct 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Lavaca Medical Center | TX | Healthcare Provider | 48,705 | Oct 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Missouri Delta Medical Center | IL | Healthcare Provider | 9,745 | Oct 21, 2021 | Hacking/IT Incident | Archive (closed) |
| UNC Hospitals | NC | Healthcare Provider | 719 | Oct 19, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical Practice Solutions | MS | Business Associate | 16,737 | Oct 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Redwoods Rural Health Center | CA | Healthcare Provider | 2,306 | Oct 18, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Family of Woodstock | NY | Healthcare Provider | 8,214 | Oct 17, 2021 | Hacking/IT Incident | Archive (closed) |
| UMass Memorial Health Care, Inc. | MA | Business Associate | 209,048 | Oct 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Limeade, Inc. | WA | Business Associate | 2,287 | Oct 15, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Anthem Inc. | IN | Health Plan | 2,023 | Oct 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Syracuse ASC, LLC | NY | Healthcare Provider | 24,891 | Oct 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Jackson County Health Department | IL | Healthcare Provider | 1,000 | Oct 13, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Orange County Health Authority | CA | Health Plan | 4,732 | Oct 12, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | KY | Health Plan | 4,424 | Oct 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Clinical Pathology Diagnostics, LLC | CT | Healthcare Provider | 2,500 | Oct 12, 2021 | Hacking/IT Incident | Archive (closed) |
| ReproSource Fertility Diagnostics, Inc. | MA | Healthcare Provider | 253,774 | Oct 8, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.