Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 77 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Buddhist Tzu Chi Medical FoundationCAHealthcare Provider18,968Sep 13, 2021Hacking/IT IncidentArchive (closed)
Eastern Los Angeles Regional CenterCABusiness Associate5,441Sep 13, 2021Hacking/IT IncidentArchive (closed)
Indian Creek FoundationPAHealthcare Provider2,405Sep 13, 2021Hacking/IT IncidentArchive (closed)
Talbert HouseOHHealthcare Provider304,000Sep 10, 2021Hacking/IT IncidentArchive (closed)
Central Texas Medical Specialists, PLLC dba Austin Cancer CentersTXHealthcare Provider36,503Sep 10, 2021Hacking/IT IncidentArchive (closed)
Rehabilitation Support Services, Inc.NYHealthcare Provider23,907Sep 10, 2021Hacking/IT IncidentArchive (closed)
CVS PharmacyRIHealthcare Provider826Sep 10, 2021TheftArchive (closed)
Consumer Direct Care Network ArizonaAZHealthcare Provider504Sep 10, 2021Hacking/IT IncidentArchive (closed)
Vista Radiology, P.C.TNHealthcare Provider3,664Sep 9, 2021Hacking/IT IncidentArchive (closed)
Radiology Associates of Albuquerque, PANMHealthcare Provider616,211Sep 8, 2021Hacking/IT IncidentArchive (closed)
City of JoplinMOHealth Plan2,494Sep 8, 2021Hacking/IT IncidentArchive (closed)
HBP Financial Services Group, LTDCTBusiness Associate2,238Sep 8, 2021Hacking/IT IncidentArchive (closed)
Pathology Consultants of New London, P.C.CTHealthcare Provider835Sep 8, 2021Hacking/IT IncidentArchive (closed)
Resource Anesthesiology Association of California, a Medical CorporationCAHealthcare Provider2,700Sep 5, 2021TheftArchive (closed)
USV Optical, Inc.NJHealthcare Provider412,565Sep 3, 2021Hacking/IT IncidentArchive (closed)
Asarco Health, Dental, Vision, Flexible Spending, Non-Union Employee Benefits, and Retiree Medical PlansAZHealth Plan28,000Sep 3, 2021Hacking/IT IncidentArchive (closed)
Eastern Connecticut Pathology Consultants, P.C.CTHealthcare Provider5,978Sep 3, 2021Hacking/IT IncidentArchive (closed)
ADEC, Inc.INHealthcare Provider1,999Sep 3, 2021Hacking/IT IncidentArchive (closed)
California Department of State Hospitals - CoalingaCAHealthcare Provider1,738Sep 3, 2021Unauthorized Access/DisclosureArchive (closed)
Sequoia Concepts, Inc.CABusiness Associate2,230Sep 2, 2021Hacking/IT IncidentArchive (closed)
Lakeshore DentalWIBusiness Associate2,000Sep 1, 2021Unauthorized Access/DisclosureArchive (closed)
DuPage Medical Group, Ltd.ILHealthcare Provider655,384Aug 30, 2021Hacking/IT IncidentArchive (closed)
Queen Creek Medical Center d/b/a Desert Wells Family MedicineAZHealthcare Provider35,000Aug 30, 2021Hacking/IT IncidentArchive (closed)
Thomas Eye GroupGAHealthcare Provider33,994Aug 30, 2021Unauthorized Access/DisclosureArchive (closed)
Easterseals Delaware & Maryland's Eastern ShoreDEHealthcare Provider15,208Aug 30, 2021Hacking/IT IncidentArchive (closed)
Healthpointe Medical Group, Inc.CAHealthcare Provider11,000Aug 30, 2021Hacking/IT IncidentArchive (closed)
Ijaola, LLC d/b/a Mercy Grace Private PracticeAZHealthcare Provider4,450Aug 30, 2021Hacking/IT IncidentArchive (closed)
CareATC, Inc.OKHealthcare Provider98,774Aug 27, 2021Hacking/IT IncidentArchive (closed)
Beaumont HealthMIHealthcare Provider1,568Aug 27, 2021Hacking/IT IncidentArchive (closed)
Family Medical Center of MichiganMIHealthcare Provider21,988Aug 26, 2021Hacking/IT IncidentArchive (closed)
LifeLong Medical CareCAHealthcare Provider115,448Aug 25, 2021Hacking/IT IncidentArchive (closed)
San Andreas Regional CenterCABusiness Associate57,244Aug 25, 2021Hacking/IT IncidentArchive (closed)
Medical Business ManagementALBusiness Associate1,750Aug 25, 2021Hacking/IT IncidentArchive (closed)
Denton County, TexasTXHealthcare Provider326,417Aug 24, 2021Unauthorized Access/DisclosureArchive (closed)
The Wedge Medical CenterPAHealthcare Provider25,491Aug 24, 2021Hacking/IT IncidentArchive (closed)
CarePointe ENTINHealthcare Provider48,742Aug 23, 2021Hacking/IT IncidentArchive (closed)
South Florida Community Care Network LLC d/b/a Community Care PlanFLHealth Plan48,344Aug 20, 2021Unauthorized Access/DisclosureArchive (closed)
Gregory P. Vannucci DDSIAHealthcare Provider26,144Aug 20, 2021Hacking/IT IncidentArchive (closed)
Central Utah Clinic, P.C. dba Revere HealthUTHealthcare Provider12,433Aug 19, 2021Hacking/IT IncidentArchive (closed)
Nova Biomedical CorporationMAHealth Plan3,774Aug 17, 2021Hacking/IT IncidentArchive (closed)
Nashua Regional Cancer Center dba Radiation Center of Greater NashuaNHHealthcare Provider520Aug 17, 2021Hacking/IT IncidentArchive (closed)
Metro Infectious Disease ConsultantsILHealthcare Provider171,740Aug 16, 2021Hacking/IT IncidentArchive (closed)
Texoma Community CenterTXHealthcare Provider24,021Aug 16, 2021Hacking/IT IncidentArchive (closed)
UTMP Surgical OncologyTNHealthcare Provider1,310Aug 16, 2021Unauthorized Access/DisclosureArchive (closed)
Alluma, IncMNHealthcare Provider4,642Aug 15, 2021Unauthorized Access/DisclosureArchive (closed)
University Medical Center of Southern NevadaNVHealthcare Provider1,300,000Aug 13, 2021Hacking/IT IncidentArchive (closed)
McCoy Consulting Services LLCWVBusiness Associate5,665Aug 13, 2021Hacking/IT IncidentArchive (closed)
Fairfax Medical Facilities, Inc.OKHealthcare Provider4,970Aug 13, 2021Hacking/IT IncidentArchive (closed)
North Country HealthcareNHHealthcare Provider3,550Aug 12, 2021Hacking/IT IncidentArchive (closed)
Waste Management Health and Welfare Benefits PlanTXHealth Plan922Aug 12, 2021Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.