HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 9 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Renovo Chiropractic & Wellness | WA | Healthcare Provider | 538 | Mar 16, 2026 | Theft | Under investigation |
| Northern Regional Hospital | NC | Healthcare Provider | 1,575 | Mar 15, 2026 | Hacking/IT Incident | Archive (closed) |
| UPMC | PA | Healthcare Provider | 687 | Mar 14, 2026 | Unauthorized Access/Disclosure | Under investigation |
| MedPeds Associates of Sarasota | FL | Healthcare Provider | 22,017 | Mar 13, 2026 | Hacking/IT Incident | Under investigation |
| A Path of Care Home Health and Hospice | OK | Healthcare Provider | 3,849 | Mar 13, 2026 | Hacking/IT Incident | Archive (closed) |
| Bloom Circle, Inc. d/b/a Lena Health | TX | Business Associate | 3,651 | Mar 13, 2026 | Hacking/IT Incident | Under investigation |
| Trinity Health | MI | Business Associate | 2,740 | Mar 13, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Ideal Home Care | OK | Healthcare Provider | 1,331 | Mar 13, 2026 | Hacking/IT Incident | Archive (closed) |
| Wonderland Child & Family Services | WA | Healthcare Provider | 1,283 | Mar 13, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Georgia Vascual Specialists PC | GA | Healthcare Provider | 600 | Mar 13, 2026 | Hacking/IT Incident | Under investigation |
| Defense Health Agency | VA | Health Plan | 96,271 | Mar 12, 2026 | Hacking/IT Incident | Archive (closed) |
| East Carolina Anesthesia Associates | NC | Healthcare Provider | 19,408 | Mar 12, 2026 | Hacking/IT Incident | Under investigation |
| Community Nurse | MA | Healthcare Provider | 6,746 | Mar 12, 2026 | Hacking/IT Incident | Archive (closed) |
| Central Ohio Urology Group | OH | Healthcare Provider | 4,234 | Mar 12, 2026 | Hacking/IT Incident | Archive (closed) |
| Team Select | AZ | Healthcare Provider | 949 | Mar 12, 2026 | Hacking/IT Incident | Archive (closed) |
| Guardian Home Health Care, LLC | MA | Healthcare Provider | 613 | Mar 11, 2026 | Hacking/IT Incident | Archive (closed) |
| SSM Health | OK | Healthcare Provider | 597 | Mar 11, 2026 | Hacking/IT Incident | Archive (closed) |
| illumifin Corporation | MN | Business Associate | 5,385 | Mar 10, 2026 | Hacking/IT Incident | Under investigation |
| NYC Health + Hospitals | NY | Healthcare Provider | 5,086 | Mar 10, 2026 | Hacking/IT Incident | Archive (closed) |
| Delta Medical Systems | WI | Business Associate | 1,574 | Mar 10, 2026 | Hacking/IT Incident | Under investigation |
| Community Health Action of Staten Island | NY | Healthcare Provider | 501 | Mar 9, 2026 | Hacking/IT Incident | Under investigation |
| Tampa Bay Dental Implants & Periodontics | FL | Healthcare Provider | 6,400 | Mar 8, 2026 | Hacking/IT Incident | Under investigation |
| North Texas Behavioral Health Authority | TX | Healthcare Provider | 285,086 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| Saint Anthony Hospital | IL | Healthcare Provider | 146,108 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| Exclusive Physicians PLLC | MI | Healthcare Provider | 58,000 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| Barrio Comprehensive Family Health Care Center | TX | Healthcare Provider | 19,971 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| Cedar Valley Hospice | IA | Healthcare Provider | 10,666 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| County of Murray dba Murray County Medical Center | MN | Healthcare Provider | 5,073 | Mar 6, 2026 | Hacking/IT Incident | Under investigation |
| Colorado Allergy & Asthma Centers, P.C. | CO | Healthcare Provider | 2,063 | Mar 6, 2026 | Hacking/IT Incident | Archive (closed) |
| Tieu Dental Corporation | CA | Healthcare Provider | 8,918 | Mar 5, 2026 | Hacking/IT Incident | Under investigation |
| Longevity Health Plan | FL | Health Plan | 15,000 | Mar 4, 2026 | Hacking/IT Incident | Archive (closed) |
| Houston Dermatology Specialists | TX | Business Associate | 648 | Mar 2, 2026 | Hacking/IT Incident | Archive (closed) |
| Kin Counseling Services PLLC | CO | Healthcare Provider | 500 | Mar 2, 2026 | Hacking/IT Incident | Under investigation |
| Greater Boston Urology | MA | Healthcare Provider | 4,717 | Feb 28, 2026 | Hacking/IT Incident | Archive (closed) |
| Access Information Management Shared Services, LLC | MA | Business Associate | 1,522 | Feb 28, 2026 | Hacking/IT Incident | Under investigation |
| Insurance ACE/Humana Inc. | KY | Health Plan | 1,000 | Feb 28, 2026 | Hacking/IT Incident | Archive (closed) |
| IPPC Inc., IPPC of New York LLC, and Innovative Pharmacy LLC (collectively “IPPC”) | NJ | Healthcare Provider | 133,862 | Feb 27, 2026 | Hacking/IT Incident | Under investigation |
| Oscar Health | NY | Health Plan | 91,350 | Feb 27, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Lakeside Pediatrics & Adolescent Medicine, PLLC | ID | Healthcare Provider | 34,154 | Feb 27, 2026 | Hacking/IT Incident | Under investigation |
| Jackson Hospital and Clinic | AL | Healthcare Provider | 13,910 | Feb 27, 2026 | Hacking/IT Incident | Archive (closed) |
| Orthopaedic Institute of Western Kentucky | KY | Healthcare Provider | 11,474 | Feb 27, 2026 | Hacking/IT Incident | Archive (closed) |
| Providence St. Joseph Orange | CA | Healthcare Provider | 11,329 | Feb 27, 2026 | Hacking/IT Incident | Archive (closed) |
| Aetna | CT | Business Associate | 10,888 | Feb 27, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| CenterWell ACE/Home Solutions | KY | Healthcare Provider | 7,972 | Feb 27, 2026 | Hacking/IT Incident | Archive (closed) |
| Boston Mountain Rural Health Center, Inc. | AR | Healthcare Provider | 4,800 | Feb 27, 2026 | Hacking/IT Incident | Archive (closed) |
| Nephrology Associates Medical Group, Inc | CA | Healthcare Provider | 4,631 | Feb 27, 2026 | Hacking/IT Incident | Under investigation |
| Aetna | CT | Business Associate | 775 | Feb 27, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Orthopaedic Specialists of Massachusetts, PC | MA | Healthcare Provider | 20,659 | Feb 26, 2026 | Hacking/IT Incident | Under investigation |
| Manhattan Retirement Foundation d/b/a Meadowlark Hills | KS | Healthcare Provider | 14,442 | Feb 26, 2026 | Hacking/IT Incident | Under investigation |
| University of Michigan Health Plan | MI | Health Plan | 2,315 | Feb 26, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.