HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 88 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Monroe Surgical Hospital, LLC | LA | Healthcare Provider | 3,500 | Dec 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Cedar Springs Hospital | CO | Healthcare Provider | 2,283 | Dec 9, 2020 | Loss | Archive (closed) |
| Employment Specialists of Maine, Inc. | ME | Healthcare Provider | 1,639 | Dec 9, 2020 | Hacking/IT Incident | Archive (closed) |
| The Presbyterian Homes, Inc. | NC | Healthcare Provider | 1,041 | Dec 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Dental Care Alliance, LLC | FL | Business Associate | 1,723,375 | Dec 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Mirra Health Care | FL | Business Associate | 1,064 | Dec 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Brigham and Women’s Hospital | MA | Healthcare Provider | 882 | Dec 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Florida Cardiology Group | FL | Healthcare Provider | 2,817 | Dec 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Meade Physicians, Inc. dba Brandenburg Family Medicine | KY | Healthcare Provider | 696 | Dec 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Meharry Medical College | TN | Healthcare Provider | 20,963 | Dec 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Mercy Health | MO | Healthcare Provider | 11,187 | Dec 4, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| McLeroy & Klein Medical Clinic | TX | Healthcare Provider | 3,200 | Dec 4, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Health Center of Worcester | MA | Healthcare Provider | 566 | Dec 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Allegheny Health Network | PA | Healthcare Provider | 299,507 | Dec 3, 2020 | Hacking/IT Incident | Archive (closed) |
| AMITA Health | IL | Healthcare Provider | 261,054 | Dec 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Regional Women's Health Group, LLC d/b/a Sincera Reproductive Medicine | PA | Healthcare Provider | 37,989 | Dec 3, 2020 | Hacking/IT Incident | Archive (closed) |
| DMBA | UT | Health Plan | 774 | Dec 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Liv-On Family Care Center, PA | MN | Healthcare Provider | 1,580 | Dec 1, 2020 | Theft | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 670 | Dec 1, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| US Med, LLC | FL | Healthcare Provider | 685 | Nov 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Brazos Valley Plastic Surgery | TX | Healthcare Provider | 2,255 | Nov 26, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| US Fertility LLC | MD | Business Associate | 878,550 | Nov 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Tufts Health Plan | MA | Health Plan | 60,545 | Nov 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Hillcrest Nursing Center | IL | Healthcare Provider | 1,030 | Nov 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Bardstown Primary Care dba: Physicians to Children & Adolescents | KY | Healthcare Provider | 859 | Nov 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The Nebraska Medical Center and University of Nebraska Medical Center, Affiliated Covered Entities | NE | Healthcare Provider | 216,472 | Nov 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Presbyterian Health Plan | NM | Business Associate | 3,557 | Nov 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Bilingual Psychological Associates, PC | TX | Healthcare Provider | 1,925 | Nov 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Peachtree Immediate Care FP, LLC | GA | Healthcare Provider | 1,462 | Nov 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Interim HealthCare of the Capital Region | NY | Healthcare Provider | 1,127 | Nov 23, 2020 | Hacking/IT Incident | Archive (closed) |
| The Tree House Child Advocacy Center of Montgomery County | MD | Business Associate | 514 | Nov 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| One Touch Point | WI | Business Associate | 500 | Nov 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Planned Parenthood of Metro Washington | DC | Healthcare Provider | 142,982 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Bayhealth Medical Center, Inc. | DE | Healthcare Provider | 78,006 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Louisiana State University- Health Care Services Division | LA | Healthcare Provider | 58,005 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Golden Gate Regional Center | CA | Business Associate | 11,315 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Harvard Pilgrim Health Care, Inc. | MA | Business Associate | 8,027 | Nov 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Indian Health Council Inc. | CA | Healthcare Provider | 5,769 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Legacy Community Health Services | TX | Healthcare Provider | 3,076 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Herron Business Law | PA | Business Associate | 1,419 | Nov 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Hi-Tech Artificial Limbs, Inc. | KY | Healthcare Provider | 529 | Nov 20, 2020 | Loss | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 524 | Nov 20, 2020 | Theft | Archive (closed) |
| AspenPointe, Inc. | CO | Healthcare Provider | 295,617 | Nov 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Jonathan Woolfson, MD, PC | GA | Healthcare Provider | 1,693 | Nov 19, 2020 | Theft | Archive (closed) |
| Paragon Health, P.C. | MI | Healthcare Provider | 685 | Nov 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Mercy Iowa City | IA | Healthcare Provider | 92,795 | Nov 13, 2020 | Hacking/IT Incident | Archive (closed) |
| University Hopsital | NJ | Healthcare Provider | 39,207 | Nov 13, 2020 | Hacking/IT Incident | Archive (closed) |
| PhySynergy LLC | GA | Healthcare Provider | 3,667 | Nov 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Northpoint Recovery Holdings, LLC | ID | Healthcare Provider | 1,866 | Nov 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Open Door Family Medical Center, Inc. | NY | Healthcare Provider | 36,474 | Nov 12, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.