HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 81 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Superior HealthPlan | TX | Health Plan | 2,781 | Jun 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Hill Country Community Clinic dba Hill Country Health and Wellness Center | CA | Healthcare Provider | 2,658 | Jun 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Tri-County Family Medicine | NY | Healthcare Provider | 1,438 | Jun 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Wirt County Health Services Association d/b/a Coplin Health Systems | WV | Healthcare Provider | 2,164 | May 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Five Rivers Health Centers | OH | Healthcare Provider | 155,748 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Hoboken Radiology LLC | NJ | Healthcare Provider | 80,000 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Sturdy Memorial Hospital | MA | Healthcare Provider | 57,379 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Lafourche Medical Group | LA | Healthcare Provider | 34,862 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| WomenCare, Inc. d/b/a FamilyCare Health Center | WV | Healthcare Provider | 9,584 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 6,498 | May 28, 2021 | Improper Disposal | Archive (closed) |
| Stanford University School of Medicine | CA | Healthcare Provider | 2,063 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Williamson Health and Wellness Center, Inc. | WV | Healthcare Provider | 1,688 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Monroe County Health Center | WV | Healthcare Provider | 757 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| SEIU 775 Benefits Group | WA | Business Associate | 140,000 | May 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Arkansas Health and Wellness Health Plan | AR | Health Plan | 3,627 | May 27, 2021 | Hacking/IT Incident | Archive (closed) |
| State of TN Finance & Administration | TN | Health Plan | 947 | May 27, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Adirondack Medical Center d/b/a Adirondack Health | NY | Healthcare Provider | 877 | May 27, 2021 | Hacking/IT Incident | Archive (closed) |
| LogicGate | IL | Business Associate | 47,035 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| TidalHealth Peninsula Regional | MD | Healthcare Provider | 4,070 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Penobscot Community Health Center, Inc. | ME | Healthcare Provider | 2,798 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Buckeye Health Plan | OH | Health Plan | 2,334 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Dean Health Servicing Company | WI | Business Associate | 1,025 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 562 | May 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Center for Human Development | MA | Healthcare Provider | 15,665 | May 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Rogue Community Health | OR | Healthcare Provider | 847 | May 25, 2021 | Hacking/IT Incident | Archive (closed) |
| 20/20 Eye Care Network, Inc | FL | Business Associate | 4,142,440 | May 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Harper County Community Hospital | OK | Healthcare Provider | 5,725 | May 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Washoe Barton Medical Clinic d/b/a Carson Valley Medical Center | NV | Healthcare Provider | 1,115 | May 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Laird Hospital, Inc. | MS | Healthcare Provider | 1,092 | May 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Westwood Obstetrics and Gynecology | IL | Healthcare Provider | 12,931 | May 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Aspen Dental Management LLC | NY | Business Associate | 9,620 | May 21, 2021 | Theft | Archive (closed) |
| Beech Acres Parenting Center | OH | Healthcare Provider | 8,212 | May 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Massena Hospital | NY | Healthcare Provider | 1,897 | May 21, 2021 | Hacking/IT Incident | Archive (closed) |
| HC Watkins Memorial Hospital | MS | Healthcare Provider | 634 | May 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Swedish Covenant Health DBA Swedish Hospital | IL | Healthcare Provider | 4,206 | May 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Scott Regional Hospital | MS | Healthcare Provider | 1,056 | May 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Rehoboth McKinley Christian Health Care Services | NM | Healthcare Provider | 207,195 | May 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Southwestern Indiana Regional Council on Aging | IN | Healthcare Provider | 4,250 | May 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Community Health Choice Inc. | TX | Health Plan | 2,489 | May 19, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| San Diego Family Care | CA | Healthcare Provider | 154,513 | May 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Trinity Health System - Twin City | OH | Healthcare Provider | 9,579 | May 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Bayhealth Medical Center, Inc. | DE | Healthcare Provider | 565 | May 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Good Health Medical dba MY DR NOW | AZ | Healthcare Provider | 36,781 | May 17, 2021 | Hacking/IT Incident | Archive (closed) |
| The Miriam Hospital | RI | Healthcare Provider | 2,999 | May 17, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSouth Carolina, Inc. | SC | Healthcare Provider | 76,035 | May 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Community Access Unlimited | NJ | Business Associate | 13,813 | May 13, 2021 | Hacking/IT Incident | Archive (closed) |
| InVue Security Products, Inc. Employee Group Health Plan | NC | Health Plan | 1,062 | May 12, 2021 | Hacking/IT Incident | Archive (closed) |
| New England Dermatology and Laser Center, P.C. | MA | Healthcare Provider | 58,106 | May 11, 2021 | Improper Disposal | Archive (closed) |
| Master Equity Texas Limited Partnership | TX | Healthcare Clearing House | 1,962 | May 11, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Internal Medicine Associates of Jasper, PC, dba Prestige Medical Group | GA | Healthcare Provider | 34,203 | May 10, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.