Skip to content
Network USA

HHS OCR breach portal data

HIPAA breach tracker: healthcare data breaches reported to HHS

Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.

8,024 reports, 1,094,628,651 individuals affected. Page 79 of 161. Clear filters

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Aetna ACECTHealth Plan8,664Jul 14, 2021Hacking/IT IncidentArchive (closed)
City of Lincoln Aging PartnersNEBusiness Associate1,513Jul 14, 2021Hacking/IT IncidentArchive (closed)
Synergic Healthcare Solutions, Inc. dba TGH Urgent Care powered by Fast TrackFLBusiness Associate558Jul 14, 2021TheftArchive (closed)
King County Public Hospital District No. 2 d/b/a EvergreenHealthWAHealthcare Provider22,579Jul 13, 2021Hacking/IT IncidentArchive (closed)
On Lok Senior Health ServicesCAHealth Plan1,643Jul 13, 2021Hacking/IT IncidentArchive (closed)
Nystrom & AssociatesMNHealthcare Provider985Jul 13, 2021Hacking/IT IncidentArchive (closed)
The George Washington University Medical Faculty AssociatesDCHealthcare Provider576Jul 13, 2021Unauthorized Access/DisclosureArchive (closed)
Bakersfield Hematology Oncology Inc.CAHealthcare Provider1,286Jul 12, 2021Unauthorized Access/DisclosureArchive (closed)
Oklahoma Heart Hospital, LLCOKHealthcare Provider1,038Jul 12, 2021Unauthorized Access/DisclosureArchive (closed)
CSI Financial Services, LLC dba ClearBalanceCABusiness Associate3,191Jul 10, 2021Hacking/IT IncidentArchive (closed)
Starling PhysiciansCTHealthcare Provider2,808Jul 9, 2021Hacking/IT IncidentArchive (closed)
Saint Peter's University HospitalNJHealthcare Provider585Jul 9, 2021Hacking/IT IncidentArchive (closed)
Forefront Dermatology, S.C.WIHealthcare Provider2,413,553Jul 8, 2021Hacking/IT IncidentArchive (closed)
CNA Financial CorporationILHealth Plan5,095Jul 8, 2021Hacking/IT IncidentArchive (closed)
Osborn Cancer CareWAHealthcare Provider4,614Jul 8, 2021Hacking/IT IncidentArchive (closed)
Lake County Health Department and Community Health CenterILHealthcare Provider705Jul 8, 2021Unauthorized Access/DisclosureArchive (closed)
Oscar Insurance Company of FloridaFLHealth Plan516Jul 8, 2021Hacking/IT IncidentArchive (closed)
Florida Heart AssociatesFLHealthcare Provider45,148Jul 7, 2021Hacking/IT IncidentArchive (closed)
Triangle Women's CenterNCHealthcare Provider978Jul 7, 2021Unauthorized Access/DisclosureArchive (closed)
Hope Medical LLCGAHealthcare Provider500Jul 7, 2021Unauthorized Access/DisclosureArchive (closed)
HealthReach Community Health CentersMEHealthcare Provider122,308Jul 6, 2021Improper DisposalArchive (closed)
Hot Springs Health ProgramNCHealthcare Provider1,984Jul 6, 2021Unauthorized Access/DisclosureArchive (closed)
Coastal Family Health Center, IncMSHealthcare Provider65,890Jul 2, 2021Hacking/IT IncidentArchive (closed)
University of Maryland, BaltimoreMDBusiness Associate37,263Jul 2, 2021Hacking/IT IncidentArchive (closed)
St. Vincent's Services, Inc. D/B/A HeartShare St. Vincent's ServicesNYHealthcare Provider1,927Jul 2, 2021Hacking/IT IncidentArchive (closed)
Cook County HealthILHealth Plan898Jul 2, 2021Unauthorized Access/DisclosureArchive (closed)
CentraCare Health SystemMNHealthcare Provider842Jul 2, 2021Hacking/IT IncidentArchive (closed)
HeartShare Wellness, LTDNYHealthcare Provider586Jul 2, 2021Hacking/IT IncidentArchive (closed)
Professional Business Systems, Inc., d/b/a Practicefirst Medical Management Solutions and PBS Medcode Corp.,NYBusiness Associate1,210,688Jul 1, 2021Hacking/IT IncidentArchive (closed)
Florida BlueFLHealth Plan32,749Jul 1, 2021Hacking/IT IncidentArchive (closed)
Wayne County HospitalIAHealthcare Provider2,016Jul 1, 2021Hacking/IT IncidentArchive (closed)
PracticeMax, Inc.AZBusiness Associate685,574Jun 30, 2021Hacking/IT IncidentArchive (closed)
Francisco J. Pabalan MD, INCCAHealthcare Provider50,000Jun 30, 2021Hacking/IT IncidentArchive (closed)
NYC Health + HospitalsNYHealthcare Provider43,727Jun 30, 2021Hacking/IT IncidentArchive (closed)
Peoples Community Health ClinicIAHealthcare Provider40,084Jun 29, 2021Hacking/IT IncidentArchive (closed)
Dermatology Group of Arkansas, PAARHealthcare Provider1,579Jun 29, 2021Hacking/IT IncidentArchive (closed)
Penn FoundationPAHealthcare Provider768Jun 29, 2021Hacking/IT IncidentArchive (closed)
Ankle and Foot Physicians and Surgeons PLLCWAHealthcare Provider5,244Jun 28, 2021Hacking/IT IncidentArchive (closed)
CVS CaremarkRIBusiness Associate3,064Jun 28, 2021Unauthorized Access/DisclosureArchive (closed)
Fairbanks Cancer Care Physicians, P.C.AKHealthcare Provider2,426Jun 28, 2021Hacking/IT IncidentArchive (closed)
Dental Center of Westport Group LLCCTHealthcare Provider2,175Jun 28, 2021Hacking/IT IncidentArchive (closed)
The Recovery Project, LLCMIHealthcare Provider1,103Jun 28, 2021Hacking/IT IncidentArchive (closed)
Northwestern Memorial HealthCareILHealthcare Provider201,197Jun 25, 2021Hacking/IT IncidentArchive (closed)
Carle Cancer Institute NormalILHealthcare Provider8,066Jun 25, 2021Hacking/IT IncidentArchive (closed)
Physicians DialysisFLHealthcare Provider1,998Jun 25, 2021Hacking/IT IncidentArchive (closed)
Smile Brands, Inc.CABusiness Associate2,592,494Jun 24, 2021Hacking/IT IncidentArchive (closed)
MultiPlanNYBusiness Associate214,956Jun 24, 2021Hacking/IT IncidentArchive (closed)
Aultman Health FoundationOHHealthcare Provider7,354Jun 24, 2021Unauthorized Access/DisclosureArchive (closed)
John Muir Physician NetworkCAHealthcare Provider1,081Jun 24, 2021Unauthorized Access/DisclosureArchive (closed)
Mississippi Center for Advanced Medicine, PCMSHealthcare Provider8,908Jun 23, 2021Hacking/IT IncidentArchive (closed)

See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.

Frequently asked questions

What is a healthcare data breach?

Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.