HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 83 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| All Access Ortho | HI | Healthcare Provider | 25,000 | Apr 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Specialty Surgical Suites dba Minimally Invasive Surgery of Hawaii | HI | Healthcare Provider | 1,000 | Apr 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Huggins Hospital | NH | Healthcare Provider | 3,616 | Apr 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Kanan Medical, L.L.C | FL | Healthcare Provider | 823 | Apr 19, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Urgent HomeMD | TX | Healthcare Provider | 615 | Apr 19, 2021 | Hacking/IT Incident | Archive (closed) |
| ElderServe Health, Inc. dba RiverSpring Health Plans | NY | Health Plan | 31,195 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| MailMyPrescriptions.com Pharmacy Corporation | FL | Healthcare Provider | 24,037 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Eastern Shore Rural Health System Inc. | VA | Healthcare Provider | 23,282 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Texas MedClinic | TX | Healthcare Provider | 6,638 | Apr 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Virtua Health, Inc. | NJ | Business Associate | 2,704 | Apr 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| North Country Hospital | VT | Healthcare Provider | 1,905 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Chautauqua County | NY | Healthcare Provider | 537 | Apr 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sterling Area Health Center | MI | Healthcare Provider | 3,336 | Apr 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Unlimited Medical Services of Florida, LLC DBA DNF Medical Centers | FL | Healthcare Provider | 846 | Apr 15, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Neighborhood Healthcare | CA | Healthcare Provider | 45,200 | Apr 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 943 | Apr 13, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Midwest Transplant Network, Inc. | KS | Healthcare Provider | 17,580 | Apr 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Regence | OR | Health Plan | 803 | Apr 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Wolfe Clinic, P.C. | IA | Healthcare Provider | 499,779 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Health Center Partners of Southern California | CA | Business Associate | 337,245 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| HME Specialists, LLC dba Home Medical Equipment Holdco, LLC | NM | Healthcare Provider | 153,013 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Crystal Lake Clinic PC | MI | Healthcare Provider | 37,331 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Harbor Health Services, Inc. | MA | Healthcare Provider | 901 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Harrington Physician Services | MA | Healthcare Provider | 4,393 | Apr 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| University Health | TX | Healthcare Provider | 2,704 | Apr 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Cadence Aerospace | CA | Health Plan | 747 | Apr 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Aloha Practice Management LLC | CA | Business Associate | 3,835 | Apr 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Maestro Health, LLC | IL | Business Associate | 18,488 | Apr 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Winona Agency, Inc. | MN | Business Associate | 3,306 | Apr 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Maritz Holdings Inc. | MO | Health Plan | 1,298 | Apr 6, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Trinity Health | MI | Business Associate | 586,869 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Total Health Care Inc. | MI | Health Plan | 221,454 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Atlanta Allergy & Asthma | GA | Healthcare Provider | 66,330 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Southern Orthopaedic Surgeons | AL | Healthcare Provider | 4,983 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Administrative Advantage, LLC | GA | Business Associate | 4,852 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Bricker & Eckler LLP | OH | Business Associate | 420,532 | Apr 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Squirrel Hill Health Center | PA | Healthcare Provider | 23,869 | Apr 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Belden Inc. | MO | Health Plan | 9,840 | Apr 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Cornerstone Municipal Advisory Group LLC dba Manquen Vance | MI | Business Associate | 9,202 | Apr 2, 2021 | Hacking/IT Incident | Archive (closed) |
| MedData Incorporated | TX | Business Associate | 135,908 | Apr 1, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Fort HealthCare Inc. | WI | Healthcare Provider | 784 | Apr 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Memorial Sloan Kettering Cancer Center | NY | Healthcare Provider | 18,913 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Prime International | MD | Business Associate | 17,562 | Mar 31, 2021 | Hacking/IT Incident | Archive (closed) |
| Three Lower Counties Community Services, Inc. d/b/a Chesapeake Health Care | MD | Healthcare Provider | 2,505 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Hermann Health System | TX | Healthcare Provider | 1,893 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| University Medical Center of Southern Nevada | NV | Healthcare Provider | 1,833 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Epilepsy Florida | FL | Healthcare Provider | 1,832 | Mar 30, 2021 | Hacking/IT Incident | Archive (closed) |
| La Clinica de La Raza, Inc. | CA | Healthcare Provider | 31,132 | Mar 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Midland Care Connection Inc | KS | Healthcare Provider | 1,364 | Mar 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Proteus Molecular and Clinical Lab, LLC | AL | Healthcare Provider | 728 | Mar 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.