HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 85 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Child Focus, Inc. | OH | Healthcare Provider | 2,716 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 2,071 | Mar 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Arizona Oncology Associates, PC | AZ | Healthcare Provider | 717 | Mar 5, 2021 | Loss | Archive (closed) |
| Miracle-Ear | CA | Healthcare Provider | 500 | Mar 5, 2021 | Theft | Archive (closed) |
| Saint Alphonsus Health System | ID | Healthcare Provider | 134,906 | Mar 4, 2021 | Hacking/IT Incident | Archive (closed) |
| ProPath Services, LLC | TX | Healthcare Provider | 39,213 | Mar 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Trillium Community Health Plan | OR | Health Plan | 87,761 | Mar 3, 2021 | Hacking/IT Incident | Archive (closed) |
| PeakTPA | MO | Business Associate | 50,509 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Arizona Complete Health | AZ | Health Plan | 34,978 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Liberation Programs, Inc | CT | Healthcare Provider | 7,406 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Family Health Services MN d/b/a Entira Family Clinics | MN | Healthcare Provider | 1,975 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| ProComp Software Consultants, Inc. | OH | Business Associate | 1,008 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| New Bedford Jewish Convalescent Home, Inc. | MA | Healthcare Provider | 873 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Metro Presort, Inc. | OR | Business Associate | 38,387 | Mar 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Geisinger Health Plan | PA | Health Plan | 2,872 | Feb 28, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Summit Behavioral Healthcare | TN | Healthcare Provider | 70,822 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| AllyAlign Health, Inc. | VA | Health Plan | 33,932 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| The SurgiCare Center of Utah | UT | Healthcare Provider | 8,816 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Santa Rosa Community Health Centers | CA | Healthcare Provider | 5,983 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| The Home for the Little Wanderers | MA | Healthcare Provider | 5,396 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Jewish Home Lifecare d/b/a The New Jewish Home | NY | Healthcare Provider | 2,091 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Volunteer State Health Plan, Inc. d/b/a BlueCare Tennessee | TN | Business Associate | 1,435 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Clovis Community Medical Center | CA | Healthcare Provider | 994 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Cornerstone Care, Inc. | PA | Healthcare Provider | 12,081 | Feb 25, 2021 | Hacking/IT Incident | Archive (closed) |
| InfuSystem Holdings, Inc. | MI | Business Associate | 725 | Feb 25, 2021 | Hacking/IT Incident | Archive (closed) |
| BW Homecare Holdings, LLC d.b.a. Elara Caring | TX | Healthcare Provider | 100,487 | Feb 24, 2021 | Hacking/IT Incident | Archive (closed) |
| New Directions Youth & Family Services | NY | Healthcare Provider | 941 | Feb 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Campbell County Hospital District | WY | Healthcare Provider | 900 | Feb 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Kaiser Foundation Hospitals, Northern California | CA | Healthcare Provider | 2,121 | Feb 23, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Orlando Health South Lake Hospital | FL | Healthcare Provider | 1,673 | Feb 23, 2021 | Loss | Archive (closed) |
| Jacobson Memorial Hospital Care Center | ND | Healthcare Provider | 1,545 | Feb 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | KY | Health Plan | 64,654 | Feb 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The Kroger Co. | OH | Healthcare Provider | 1,474,284 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Covenant HealthCare | MI | Healthcare Provider | 47,178 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Project Vida Health Center | TX | Healthcare Provider | 4,500 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Southeastern Minnesota Center for Independent Living, Inc. | MN | Healthcare Provider | 4,122 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Miracle - Ear | CA | Healthcare Provider | 2,710 | Feb 19, 2021 | Theft | Archive (closed) |
| Rainbow Rehabilitation Centers, Inc | MI | Healthcare Provider | 1,639 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Miracle - Ear | CA | Healthcare Provider | 1,094 | Feb 19, 2021 | Theft | Archive (closed) |
| Andor Labs | NC | Healthcare Provider | 500 | Feb 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Fisher Titus Health, Inc. | OH | Health Plan | 49,636 | Feb 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Steward West Division - AR/LA/TX ACE | TX | Healthcare Provider | 877 | Feb 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| RF EYE PC dba Cochise Eye and Laser | AZ | Healthcare Provider | 64,710 | Feb 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Grand River Medical Group | IA | Healthcare Provider | 37,423 | Feb 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Bowling Green Inn of Pensacola, LLC DBA Twelve Oaks Recovery | FL | Healthcare Provider | 9,023 | Feb 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Hope Healthcare Service | FL | Healthcare Provider | 1,152 | Feb 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Pennsylvania Adult & Teen Challenge | PA | Healthcare Provider | 7,771 | Feb 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Pitkin County | CO | Healthcare Provider | 1,454 | Feb 9, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Piedmont Health Services | NC | Healthcare Provider | 674 | Feb 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Gore Medical Management, LLC | GA | Healthcare Provider | 79,100 | Feb 8, 2021 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.