HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 86 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| HARVARD EYE ASSOCIATES | CA | Business Associate | 29,982 | Feb 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Hackley Community Care Center | MI | Healthcare Provider | 2,644 | Feb 8, 2021 | Hacking/IT Incident | Archive (closed) |
| The University of Pittsburgh Medical Center | PA | Healthcare Provider | 36,086 | Feb 5, 2021 | Hacking/IT Incident | Archive (closed) |
| University of Pittsburgh Medical Center Health Plan | PA | Health Plan | 18,900 | Feb 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Nevada Health Centers, Inc. | NV | Healthcare Provider | 7,937 | Feb 5, 2021 | Hacking/IT Incident | Archive (closed) |
| UT Southwestern Medical Center | TX | Healthcare Provider | 3,640 | Feb 5, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Granite Wellness Centers | CA | Healthcare Provider | 15,600 | Feb 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Texas Spine Consultants, LLP | TX | Healthcare Provider | 25,728 | Feb 3, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| DataLogic Software, Inc. | TX | Business Associate | 7,200 | Feb 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Fairfax County Public Schools' Health Plan | VA | Business Associate | 11,056 | Feb 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Nevada Orthopedic & Spine Center | NV | Healthcare Provider | 50,000 | Feb 1, 2021 | Hacking/IT Incident | Archive (closed) |
| The House Next Door, Inc. | FL | Healthcare Provider | 6,000 | Feb 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Lake Charles Memorial Health System | LA | Healthcare Provider | 3,802 | Feb 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Florida Healthy Kids Corporation | FL | Health Plan | 3,500,000 | Jan 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Bethesda Hospital | FL | Healthcare Provider | 18,477 | Jan 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| County of Ramsey | MN | Healthcare Provider | 8,687 | Jan 29, 2021 | Hacking/IT Incident | Archive (closed) |
| A Renewed Mind | OH | Healthcare Provider | 2,428 | Jan 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Leonard J. Chabert Medical Center | LA | Healthcare Provider | 2,254 | Jan 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 1,670 | Jan 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The Richards Group | VT | Business Associate | 15,429 | Jan 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Prime Therapeutics, LLC | MN | Business Associate | 1,863 | Jan 28, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Austin Hearing Services | TX | Healthcare Provider | 600 | Jan 23, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Hospital Physician Group Inc. | FL | Healthcare Provider | 13,759 | Jan 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Lynn Community Health, Incorporated | MA | Healthcare Provider | 1,800 | Jan 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | VA | Healthcare Provider | 1,680 | Jan 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Public Education Employees' Health Insurance Plan d/b/a PEEHIP | AL | Health Plan | 1,248 | Jan 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Merrill Iron & Steel Health Benefit Plan | WI | Health Plan | 899 | Jan 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Paraquad, Inc. | MO | Healthcare Provider | 648 | Jan 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Limeade, Inc. | WA | Business Associate | 668 | Jan 20, 2021 | Hacking/IT Incident | Archive (closed) |
| Krapf Group | PA | Health Plan | 610 | Jan 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Hendrick Health | TX | Healthcare Provider | 640,436 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Montgomery Hospice, Inc. | MD | Healthcare Provider | 6,741 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Center for Alternative Sentencing and Employment Services | NY | Healthcare Provider | 3,994 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Wisconsin Department of Health Services | WI | Health Plan | 1,281 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Froedtert Health | WI | Healthcare Provider | 760 | Jan 15, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Precision Spine Care | TX | Healthcare Provider | 20,787 | Jan 12, 2021 | Hacking/IT Incident | Archive (closed) |
| WeCare TLC | FL | Healthcare Provider | 2,340 | Jan 12, 2021 | Loss | Archive (closed) |
| Greater New Bedford Community Health Center | MA | Healthcare Provider | 696 | Jan 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Jefferson Healthcare | WA | Healthcare Provider | 2,543 | Jan 11, 2021 | Hacking/IT Incident | Archive (closed) |
| KR Perio, Katherine Rodriguez, DMD | FL | Healthcare Provider | 885 | Jan 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Feeling Great Sleep Medical Centers | NC | Healthcare Provider | 5,000 | Jan 9, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| American Anesthesiology, Inc. | NY | Healthcare Provider | 1,269,074 | Jan 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Roper St. Francis Healthcare | SC | Healthcare Provider | 189,761 | Jan 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Leon Medical Centers, LLC | FL | Healthcare Provider | 76,661 | Jan 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Walgreen Company | IL | Healthcare Provider | 16,089 | Jan 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Managed Health Services (MHS) | IN | Health Plan | 11,988 | Jan 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| University Medical Center of New Orleans | LA | Business Associate | 16,559 | Jan 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Gastroenterology Consultants Ltd | NV | Healthcare Provider | 2,500 | Jan 6, 2021 | Hacking/IT Incident | Archive (closed) |
| Desert Oasis Healthcare | CA | Healthcare Provider | 1,122 | Jan 4, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| South Country Health Alliance | MN | Health Plan | 66,874 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.