HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 87 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Nissan North America, Inc. | TN | Health Plan | 50,410 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Apex Laboratory, Inc. | NY | Healthcare Provider | 7,102 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Mattapan Community Health Center | MA | Healthcare Provider | 4,073 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| REEF Global Inc. | FL | Health Plan | 3,951 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Prestera Center for Mental Health Services, Inc. | WV | Healthcare Provider | 3,708 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Simpson Senior Services, Inc. | PA | Healthcare Provider | 3,259 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Workplace Vitality, Inc. | NY | Healthcare Provider | 2,850 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Peach State Health Plan | GA | Health Plan | 3,443 | Dec 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Home State Health Plan, Inc. | MO | Health Plan | 1,020 | Dec 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwestern Memorial Hospital | IL | Healthcare Provider | 682 | Dec 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Superior HealthPlan | TX | Health Plan | 3,748 | Dec 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Sunshine State Health Plan | FL | Health Plan | 3,429 | Dec 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Buckeye Health Plan | OH | Health Plan | 606 | Dec 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Ambetter for Arizona Complete Health | AZ | Health Plan | 518 | Dec 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Total Vision, LLC | CA | Business Associate | 138,402 | Dec 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Beebe Medical Foundation | DE | Healthcare Provider | 56,953 | Dec 28, 2020 | Hacking/IT Incident | Archive (closed) |
| AllCare Health, Inc. | OR | Health Plan | 5,707 | Dec 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Community Health Resources, Inc | CT | Healthcare Provider | 1,634 | Dec 28, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Magnolia Health Plan | MS | Health Plan | 759 | Dec 28, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Five Points Optometrists, P.C. dba Five Points Eye Care | GA | Healthcare Provider | 1,223 | Dec 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Riverside Community Care, Inc. | MA | Healthcare Provider | 6,978 | Dec 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Sky Lakes Medical Center | OR | Healthcare Provider | 5,514 | Dec 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Tom Wood East, Inc. | IN | Health Plan | 912 | Dec 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Aetna ACE | CT | Health Plan | 484,157 | Dec 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Agency for Community Treatment Services, Inc. | FL | Healthcare Provider | 73,825 | Dec 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Gainwell Technologies LLC | AR | Business Associate | 3,317 | Dec 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Plan of San Joaquin | CA | Health Plan | 418,842 | Dec 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Priority Health | MI | Health Plan | 36,812 | Dec 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Kristina T Nguyen, DDS, PC | VA | Healthcare Provider | 8,182 | Dec 21, 2020 | Hacking/IT Incident | Archive (closed) |
| GenRx Pharmacy | AZ | Healthcare Provider | 137,110 | Dec 18, 2020 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | TN | Health Plan | 1,340 | Dec 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Iowa Total Care, Inc. | IA | Health Plan | 536 | Dec 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Eye Care, LLC | NC | Health Plan | 149,804 | Dec 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Wilmington Surgical Associates, P.A. | NC | Healthcare Provider | 114,834 | Dec 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Comprehensive Neurology, PC | NY | Healthcare Provider | 6,800 | Dec 17, 2020 | Hacking/IT Incident | Archive (closed) |
| MEDNAX Services, Inc. | FL | Business Associate | 1,442,997 | Dec 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Benjamin Rose Institute on Aging | OH | Healthcare Provider | 1,452 | Dec 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Nebraska Methodist Health System | NE | Healthcare Provider | 39,912 | Dec 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Midwest Geriatric Management, LLC | MO | Healthcare Provider | 4,814 | Dec 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Beacon Health Solutions, LLC | FL | Business Associate | 20,151 | Dec 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Southeast Health Center of Ripley County | MO | Healthcare Provider | 5,944 | Dec 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Medica Central Insurance Company | MN | Health Plan | 4,492 | Dec 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Holy Redeemer Ambulatory Surgical Center | PA | Healthcare Provider | 1,295 | Dec 11, 2020 | Hacking/IT Incident | Archive (closed) |
| HMC Healthworks, Inc. | FL | Business Associate | 985 | Dec 11, 2020 | Hacking/IT Incident | Archive (closed) |
| RXN, Inc. d/b/a Lancaster Pharmacy | PA | Healthcare Provider | 856 | Dec 10, 2020 | Theft | Archive (closed) |
| Diamond Pharmacy | PA | Healthcare Provider | 616 | Dec 10, 2020 | Theft | Archive (closed) |
| 26th & Lehigh Pharmacy | PA | Healthcare Provider | 549 | Dec 10, 2020 | Theft | Archive (closed) |
| Wellness Pharmacy | PA | Healthcare Provider | 545 | Dec 10, 2020 | Theft | Archive (closed) |
| Sonoma Valley Healthcare District | CA | Healthcare Provider | 69,000 | Dec 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Texas Tech University Health Sciences Center | TX | Healthcare Provider | 36,739 | Dec 9, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.