HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 84 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Personal Touch Holding Corp. | NY | Business Associate | 753,107 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Trusted Health Plans, Inc. | DC | Health Plan | 200,665 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Apple Valley Clinic | MN | Healthcare Provider | 157,939 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| BioTelemetry, Inc. | PA | Healthcare Provider | 38,575 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Healthgrades Operating Company, Inc. | GA | Business Associate | 35,485 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Health Net Community Solutions | CA | Health Plan | 688,603 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Health Net of California | CA | Health Plan | 550,828 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| The Centers for Advanced Orthopaedics | MD | Healthcare Provider | 125,291 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| California Health & Wellness | CA | Health Plan | 80,242 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Health Net Life Insurance Company | CA | Health Plan | 30,842 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| CalViva Health | CA | Health Plan | 15,287 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Solis Health Plans, Inc. | FL | Health Plan | 2,649 | Mar 24, 2021 | Hacking/IT Incident | Archive (closed) |
| San Fernando Valley Medical Group, Inc. | CA | Healthcare Provider | 1,657 | Mar 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Mott Community College | MI | Health Plan | 1,612 | Mar 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Citywide Health Plan | UT | Health Plan | 718 | Mar 24, 2021 | Hacking/IT Incident | Archive (closed) |
| VA Northern California Health Care System | CA | Healthcare Provider | 645 | Mar 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Miami | FL | Healthcare Provider | 86,000 | Mar 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Haven Behavioral Healthcare | TN | Business Associate | 21,714 | Mar 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Dallas County Hospital District d/b/a Parkland Health & Hospital System | TX | Healthcare Provider | 1,566 | Mar 23, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Illinois Department of Healthcare and Family Services | IL | Health Plan | 8,848 | Mar 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Reliant Rehabilitation | TX | Business Associate | 614 | Mar 22, 2021 | Hacking/IT Incident | Archive (closed) |
| River City Whole Health, Ltd. | MT | Healthcare Provider | 2,714 | Mar 20, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Gastroenterology Consultants, PA | TX | Healthcare Provider | 161,698 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Cancer Treatment Centers of America at Midwestern Regional Medical Center | IL | Healthcare Provider | 104,808 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| SalusCare | FL | Healthcare Provider | 85,000 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Insulet Corporation | MA | Healthcare Provider | 9,050 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Victor Community Support Services | CA | Business Associate | 1,634 | Mar 19, 2021 | Theft | Archive (closed) |
| Total Life Healthcare | AR | Healthcare Provider | 528 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Villa of Hope | NY | Healthcare Provider | 2,410 | Mar 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Stavros Center for Independent Living Inc. | MA | Healthcare Provider | 2,347 | Mar 18, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida PACE Centers, Inc | FL | Health Plan | 1,502 | Mar 18, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| West Virginia Senior Advantage | WV | Health Plan | 1,049 | Mar 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Brandman Centers for Senior Care | CA | Health Plan | 521 | Mar 18, 2021 | Hacking/IT Incident | Archive (closed) |
| California Department of State Hospitals | CA | Healthcare Provider | 5,014 | Mar 17, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sleep Medicine Associates of Texas, P.A. | TX | Healthcare Provider | 994 | Mar 17, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Hoyman Hong, M.D. | CA | Healthcare Provider | 720 | Mar 17, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| VNA Home Health and Hospice | MO | Healthcare Provider | 517 | Mar 17, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Serenity Care PACE | MA | Healthcare Provider | 658 | Mar 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| North Oaks Health System | LA | Healthcare Provider | 642 | Mar 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Sandhills Medical Foundation, Inc. | SC | Healthcare Provider | 39,602 | Mar 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Colorado Retina Associates, P.C. | CO | Healthcare Provider | 26,609 | Mar 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Walworth County Department of Health and Human Services | WI | Healthcare Provider | 907 | Mar 12, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Mobile Anesthesiologists | IL | Healthcare Provider | 65,403 | Mar 10, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Assistcare Home Health Services LLC dba Preferred Home Care of NY/Preferred Gold | NY | Healthcare Provider | 57,345 | Mar 10, 2021 | Hacking/IT Incident | Archive (closed) |
| The New London Hospital Association, Inc. | NH | Healthcare Provider | 34,878 | Mar 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Woodcreek Provider Services LLC | WA | Business Associate | 233,199 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
| The Board of Trustees of Southern Illinois University, for and on behalf of its School of Medicine, and SIU Physicians & Surgeons, Inc. | IL | Healthcare Provider | 40,330 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Mendelson Kornblum Orthopedics, Spine & Pain Specialists | MI | Healthcare Provider | 28,658 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
| University of Pittsburgh Medical Center, St. Margaret Hospital (“UPMC St. Margaret”) | PA | Healthcare Provider | 11,135 | Mar 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Dyras Dental | MI | Healthcare Provider | 2,745 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.