HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 89 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Cornerstones of Care | MO | Healthcare Provider | 15,680 | Nov 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Delaware Department of Health and Social Services, Division of Public Health | DE | Healthcare Provider | 9,930 | Nov 12, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| ProMedica Bixby Hospital | MI | Healthcare Provider | 3,472 | Nov 12, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSource Indiana, Inc | OH | Health Plan | 10,021 | Nov 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSource | OH | Health Plan | 8,730 | Nov 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSource Kentucky Co | OH | Health Plan | 8,320 | Nov 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CareSource West Virginia Co | OH | Health Plan | 1,587 | Nov 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Jekyll Island-State Park Authority - Jekyll Island Fire/EMS | GA | Healthcare Provider | 7,046 | Nov 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Bruce L. Boros, M.D., P.A. DBA Advanced Urgent Care | FL | Healthcare Provider | 58,823 | Nov 6, 2020 | Hacking/IT Incident | Archive (closed) |
| People Incorporated | MN | Healthcare Provider | 27,500 | Nov 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Seeley Enterprises Company | OH | Healthcare Provider | 16,196 | Nov 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Galstan & Ward Family and Cosmetic Dentistry | VA | Healthcare Provider | 11,258 | Nov 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of Georgia, Inc. | GA | Health Plan | 10,205 | Nov 6, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Conway Regional Health System | AR | Healthcare Provider | 2,945 | Nov 6, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Physicians Apothecary | AL | Healthcare Provider | 2,000 | Nov 6, 2020 | Improper Disposal | Archive (closed) |
| Lawrence General Hospital | MA | Healthcare Provider | 176,587 | Nov 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Lake County Health Department and Community Health Center | IL | Healthcare Provider | 3,815 | Nov 5, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Pristine Dental | MA | Healthcare Provider | 1,428 | Nov 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Methodist Hospital of Southern California | CA | Healthcare Provider | 39,881 | Nov 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Alamance Skin Center | NC | Healthcare Provider | 4,080 | Nov 4, 2020 | Hacking/IT Incident | Archive (closed) |
| The GEO Group Inc. | FL | Healthcare Provider | 3,991 | Nov 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Chesapeake Regional Healthcare | VA | Healthcare Provider | 24,000 | Nov 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Hospital Center Health System | VA | Healthcare Provider | 23,846 | Oct 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Timberline Billing Service, LLC | IA | Business Associate | 117,088 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| NYU Langone Hospitals | NY | Healthcare Provider | 44,009 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Connecticut Department of Social Services | CT | Health Plan | 36,915 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Rady Children’s Hospital - San Diego | CA | Healthcare Provider | 19,837 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Yale New Haven Hospital | CT | Healthcare Provider | 15,904 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Dubuque Community School District | IL | Healthcare Provider | 4,704 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| My Choice Housecalls, LLC | FL | Healthcare Provider | 3,370 | Oct 30, 2020 | Theft | Archive (closed) |
| Johnston Community School District | IA | Healthcare Provider | 1,656 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Clinton Community School District | IA | Healthcare Provider | 1,643 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Cedar Falls Community School District | IA | Healthcare Provider | 1,445 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Lewis Central Community School District | IA | Healthcare Provider | 905 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Urbandale Community School District | IA | Healthcare Provider | 647 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Bondurant-Farrar Community School District | IA | Healthcare Provider | 603 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Saydel Community School District | IA | Healthcare Provider | 590 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Carlisle Community School District | IA | Healthcare Provider | 562 | Oct 30, 2020 | Hacking/IT Incident | Archive (closed) |
| CCPOA Benefit Trust Fund | CA | Health Plan | 80,000 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Tri-State Specialists, LLP | IA | Healthcare Provider | 17,050 | Oct 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| MK Periodontics and Implants | WA | Healthcare Provider | 8,000 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Muscatine Community School District | IA | Healthcare Provider | 2,039 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Burlington Community School District | IA | Healthcare Provider | 1,884 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Indianola Community School District | IA | Healthcare Provider | 1,141 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Clear Creek Amana Community School District | IA | Healthcare Provider | 771 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Maquoketa Community School District | IA | Healthcare Provider | 743 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Charles City Community School District | IA | Healthcare Provider | 580 | Oct 29, 2020 | Hacking/IT Incident | Archive (closed) |
| First Impressions Orthodontics, a subsidiary of Professional Dental Alliance of Connecticut PLLC | CT | Healthcare Provider | 20,727 | Oct 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Kids First Dentistry & Orthodontics, a subsidiary of Professional Dental Alliance of Connecticut, PLLC | CT | Healthcare Provider | 5,000 | Oct 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Luxottica of America Inc. | OH | Business Associate | 829,454 | Oct 27, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.