HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 82 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| SAC Health Systems | CA | Healthcare Provider | 28,128 | May 10, 2021 | Hacking/IT Incident | Archive (closed) |
| United Health Group Health Plan SACE | MN | Health Plan | 666 | May 10, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Charles Cole Memorial Hospital, d/b/a UPMC Cole | PA | Healthcare Provider | 7,376 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Ascension St. Joseph Hospital | MI | Healthcare Provider | 5,807 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Exceltox Laboratories | CA | Healthcare Provider | 4,571 | May 7, 2021 | Loss | Archive (closed) |
| Nocona General Hospital | TX | Healthcare Provider | 3,254 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| St. Agnes Healthcare Inc. | MD | Healthcare Provider | 2,821 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| MidMichigan Health Services | MI | Healthcare Provider | 2,800 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Ascension - Our Lady of Lourdes Memorial Hospital Inc., | NY | Healthcare Provider | 1,745 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Ascension Standish Hospital | MI | Healthcare Provider | 1,705 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Shands Teaching Hospitals and Clinics, Inc. | FL | Healthcare Provider | 1,562 | May 7, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Implant and Prosthodontic Associates | OK | Healthcare Provider | 6,134 | May 6, 2021 | Theft | Archive (closed) |
| SummaCare | OH | Health Plan | 5,532 | May 6, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Brownsville Community Health Center dba New Horizon Medical Center | TX | Healthcare Provider | 4,258 | May 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Serendipity Hearing Inc. | CA | Healthcare Provider | 3,100 | May 6, 2021 | Theft | Archive (closed) |
| Tyler Family Circle of Care | TX | Healthcare Provider | 1,860 | May 6, 2021 | Hacking/IT Incident | Archive (closed) |
| NEC Networks, LLC d/b/a CaptureRx | TX | Business Associate | 2,600,000 | May 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Orthopedic Associates of Dutchess County | NY | Healthcare Provider | 330,143 | May 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Monadnock Community Hospital | NH | Healthcare Provider | 14,340 | May 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Arizona Asthma and Allergy Institute | AZ | Healthcare Provider | 70,372 | May 3, 2021 | Hacking/IT Incident | Archive (closed) |
| LifeBridge Community Gastroenterology, LLC dba Woodholme Gastroenterology | MD | Healthcare Provider | 66,342 | Apr 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Achievement Center of LECOM Health | PA | Healthcare Provider | 1,671 | Apr 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Minimed Distribution Corp | CA | Healthcare Provider | 1,658 | Apr 30, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Wyoming Department of Health | WY | Health Plan | 164,010 | Apr 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| St. John's Well Child and Family Center, Inc. | CA | Healthcare Provider | 29,030 | Apr 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Boston Children’s Hospital | MA | Healthcare Provider | 506 | Apr 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Hand to Shoulder Specialists of Wisconsin Ltd. | WI | Healthcare Provider | 39,317 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Middletown Ventures Associates, LLC, d/b/a Middletown Medical Imaging | NJ | Healthcare Provider | 29,945 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Open Upright MRI, LLC, d/b/a Woodbridge Radiology | NJ | Healthcare Provider | 25,272 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| East Brunswick Open Upright MRI, LLC | NJ | Healthcare Provider | 12,151 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Thrifty Drug Stores, Inc. | MN | Healthcare Provider | 3,958 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| NPS Corporation | WI | Health Plan | 999 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Werner Electric Supply | WI | Health Plan | 907 | Apr 28, 2021 | Hacking/IT Incident | Archive (closed) |
| SEES Group, LLC | TN | Healthcare Provider | 3,797 | Apr 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Faxton St. Luke's Healthcare | NY | Healthcare Provider | 17,656 | Apr 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Peak Vista Community Health Centers | CO | Healthcare Provider | 3,118 | Apr 26, 2021 | Theft | Archive (closed) |
| Allergy Partners, PLLC | NC | Healthcare Provider | 74,083 | Apr 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Gifford Health Care | VT | Healthcare Provider | 6,777 | Apr 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Catholic Charities of North Dakota | ND | Healthcare Provider | 1,901 | Apr 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Doctors Medical Center of Modesto | CA | Healthcare Provider | 1,259 | Apr 23, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Jackson County Health Dept | IL | Healthcare Provider | 800 | Apr 23, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Pediatric Associates of Milwaukee | WI | Healthcare Provider | 8,160 | Apr 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Entrust Medical Billing | OH | Healthcare Provider | 5,426 | Apr 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Gyrodata Incorporated | TX | Health Plan | 944 | Apr 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Baptist Health Arkansas | AR | Healthcare Provider | 16,765 | Apr 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Sapphire Community Health | MT | Healthcare Provider | 3,751 | Apr 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Center for Disease Detection, LLC | TX | Healthcare Provider | 2,436 | Apr 21, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Presbyterian Medical Services | NM | Healthcare Provider | 536 | Apr 21, 2021 | Loss | Archive (closed) |
| Health Aid of Ohio, Inc. | OH | Healthcare Provider | 141,149 | Apr 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Orthopedic Associates of Hawaii | HI | Healthcare Provider | 138,000 | Apr 20, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.