HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 76 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| University Hospital | NJ | Healthcare Provider | 9,329 | Oct 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| North East Ohio Network | OH | Healthcare Provider | 3,555 | Oct 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Independent Health Corporation | NY | Business Associate | 541 | Oct 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| JDC Healthcare Management LLC | TX | Healthcare Provider | 1,077,635 | Oct 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Senior Living, LLC and Pilgrim River, LLC | NJ | Healthcare Provider | 3,952 | Oct 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Drs. Kelley & McDowell PA | SC | Healthcare Provider | 6,204 | Oct 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Carteret Health Care | NC | Healthcare Provider | 1,235 | Oct 6, 2021 | Theft | Archive (closed) |
| Wirt County Health Services Association d/b/a Coplin Health Systems | WV | Healthcare Provider | 2,643 | Oct 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Rockbridge Area Community Services Board | VA | Healthcare Provider | 2,000 | Oct 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Eskenazi Health | IN | Healthcare Provider | 1,515,918 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| OSF HealthCare System | IL | Healthcare Provider | 53,907 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance, LLC | PA | Healthcare Provider | 47,173 | Oct 1, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Professional Dental Alliance of Michigan, PLLC | PA | Healthcare Provider | 26,054 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Georgia, PLLC | PA | Healthcare Provider | 23,974 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Florida, LLC | PA | Healthcare Provider | 18,626 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Illinois, PLLC | PA | Healthcare Provider | 16,673 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Tennessee, LLC | PA | Healthcare Provider | 11,217 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of New York, PLLC | PA | Healthcare Provider | 10,778 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Indiana, PLLC | PA | Healthcare Provider | 7,359 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Connecticut, PLLC | PA | Healthcare Provider | 6,237 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Texas, PLLC | PA | Healthcare Provider | 4,235 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| NADG Hopewell, Inc. | PA | Healthcare Provider | 1,143 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Dental Alliance of Massachusetts | PA | Healthcare Provider | 607 | Oct 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Premier Management Company | TX | Healthcare Provider | 37,636 | Sep 30, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | KY | Health Plan | 948 | Sep 28, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Lakewood Manor Baptist Retirement Community, Inc. d/b/a Lakewood | VA | Healthcare Provider | 1,205 | Sep 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Navistar, Inc. Health Plan and the Navistar, Inc. Retiree Health Benefit and Life Insurance Plan | IL | Health Plan | 49,000 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Epilepsy Foundation of Texas | TX | Healthcare Provider | 2,824 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Griffith Energy Services Inc. Welfare Benefit Plan | MD | Health Plan | 2,693 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Zenith American Solutions | WA | Business Associate | 1,907 | Sep 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The Menninger Clinic | TX | Healthcare Provider | 1,365 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Digital Insurance, LLC doing business as OneDigital | GA | Health Plan | 895 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| elizabeth ortof MD | NY | Healthcare Provider | 5,000 | Sep 23, 2021 | Theft | Archive (closed) |
| State of Alaska Department of Health & Social Services | AK | Health Plan | 500,000 | Sep 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 1,011 | Sep 22, 2021 | Hacking/IT Incident | Archive (closed) |
| GYN Emergent Care Center | CA | Healthcare Provider | 5,080 | Sep 21, 2021 | Loss | Archive (closed) |
| Cerebral Medical Group | FL | Healthcare Provider | 875 | Sep 21, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| McAllen Surgical Specialty Center, Ltd. | TX | Healthcare Provider | 29,227 | Sep 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Illinois Department of Human Services and Illinois Department of Healthcare and Family Services | IL | Healthcare Provider | 1,960 | Sep 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Welfare & Pension Administration Service, Inc. | WA | Health Plan | 194,674 | Sep 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Orlick & Kasper, MDs, PA | FL | Healthcare Provider | 30,000 | Sep 17, 2021 | Theft | Archive (closed) |
| Horizon House, Inc. | PA | Healthcare Provider | 27,823 | Sep 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Georgia Department of Human Services | GA | Healthcare Clearing House | 15,938 | Sep 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Famous Enterprises Inc. Employee Benefit Plan | OH | Health Plan | 528 | Sep 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Mankato Clinic | MN | Healthcare Provider | 535 | Sep 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Samaritan Center of Puget Sound | WA | Healthcare Provider | 20,866 | Sep 15, 2021 | Theft | Archive (closed) |
| Directions for Living | FL | Healthcare Provider | 19,494 | Sep 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Simon Eye Management | DE | Healthcare Provider | 144,780 | Sep 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Multnomah County | OR | Healthcare Provider | 709 | Sep 14, 2021 | Theft | Archive (closed) |
| Abeo Solutions Inc. d/b/a Crystal Practice Management | TX | Business Associate | 21,112 | Sep 13, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.