HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 90 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| State of North Dakota | ND | Healthcare Provider | 35,416 | Oct 27, 2020 | Hacking/IT Incident | Archive (closed) |
| AdventHealth Shawnee Mission | KS | Healthcare Provider | 28,766 | Oct 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Northwest Eye Surgeons, P.C. and Sight Partners LLC | WA | Healthcare Provider | 20,838 | Oct 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Jemez Health & Human Services | NM | Healthcare Provider | 4,290 | Oct 26, 2020 | Improper Disposal | Archive (closed) |
| Allergy & Asthma Center | TX | Healthcare Provider | 711 | Oct 26, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Centerstone of Tennessee, Inc. | TN | Healthcare Provider | 50,965 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| The Bridge, Inc. | NY | Healthcare Provider | 16,431 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Lycoming-Clinton Joinder Board Programs | PA | Business Associate | 14,500 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Centerstone of Indiana, Inc. | IN | Healthcare Provider | 11,638 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Arkansas Otolaryngology Center, PA | AR | Healthcare Provider | 12,217 | Oct 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Perry County Memorial Hospital | MO | Healthcare Provider | 4,538 | Oct 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Community Clinic of Maui | HI | Healthcare Provider | 1,784 | Oct 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| AdventHealth | FL | Healthcare Provider | 315,337 | Oct 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Moffitt Cancer Center | FL | Healthcare Provider | 95,695 | Oct 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Intellirad Imaging, LLC | FL | Healthcare Provider | 10,261 | Oct 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Provider Health Services | LA | Healthcare Provider | 1,700 | Oct 20, 2020 | Hacking/IT Incident | Archive (closed) |
| OSF HealthCare System | IL | Healthcare Provider | 94,171 | Oct 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Geisinger | PA | Healthcare Provider | 86,412 | Oct 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Ascend Clinical, LLC | CA | Healthcare Provider | 77,443 | Oct 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Arkansas Methodist Medical Center | AR | Healthcare Provider | 4,916 | Oct 19, 2020 | Hacking/IT Incident | Archive (closed) |
| BryLin Hospitals, Incorporated | NY | Healthcare Provider | 8,000 | Oct 17, 2020 | Hacking/IT Incident | Archive (closed) |
| DJO, LLC | CA | Healthcare Provider | 3,429 | Oct 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Center for Autism and Related Disorders | CA | Healthcare Provider | 1,440 | Oct 16, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 1,062 | Oct 16, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Mary Rutan Hospital | OH | Healthcare Provider | 1,676 | Oct 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Stamford Hospital | CT | Healthcare Provider | 1,050 | Oct 15, 2020 | Hacking/IT Incident | Archive (closed) |
| WellMed Medical Management | TX | Healthcare Provider | 591 | Oct 15, 2020 | Theft | Archive (closed) |
| Passavant Memorial Homes, Inc. | PA | Healthcare Provider | 36,000 | Oct 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Heavenly Hands Family Medical Clinic | TX | Healthcare Provider | 1,837 | Oct 14, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Bonnie Brae | NJ | Healthcare Provider | 884 | Oct 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Lawrence + Memorial Hospital | CT | Healthcare Provider | 21,617 | Oct 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Coast Dental | FL | Healthcare Provider | 1,700 | Oct 13, 2020 | Theft | Archive (closed) |
| Practice Transformation Solutions, LLC | VA | Business Associate | 1,678 | Oct 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Health and Wellness Clinic, PLLC | WA | Healthcare Provider | 883 | Oct 13, 2020 | Theft | Archive (closed) |
| The Medical College of Wisconsin, Inc. | WI | Healthcare Provider | 5,655 | Oct 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Einstein Healthcare Network | PA | Healthcare Provider | 353,616 | Oct 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Greenwich Hospital | CT | Healthcare Provider | 95,000 | Oct 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Georgia Department of Human Services | GA | Healthcare Clearing House | 45,732 | Oct 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Froedtert & the Medical College of Wisconsin Community Physicians, Inc. | WI | Healthcare Provider | 3,074 | Oct 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Milestone Electric, Inc. | TX | Health Plan | 4,973 | Oct 8, 2020 | Hacking/IT Incident | Archive (closed) |
| McLaren Oakland | MI | Healthcare Provider | 2,219 | Oct 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Cedar County Iowa | IA | Healthcare Provider | 1,138 | Oct 8, 2020 | Hacking/IT Incident | Archive (closed) |
| The Opportunity Alliance | ME | Healthcare Provider | 4,500 | Oct 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Clinical & Forensic Consultation, LLC d/b/a Thriveworks Bristol, Johnson City, and Knoxville | TN | Healthcare Provider | 1,360 | Oct 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Atlantic Medical Imaging | NJ | Healthcare Provider | 74,877 | Oct 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Body by Ravi Plastic Surgery and Aesthetics | TX | Healthcare Provider | 2,618 | Oct 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Mayo Clinic | MN | Healthcare Provider | 1,614 | Oct 5, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Premier Health Partners | OH | Healthcare Provider | 254,786 | Oct 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Presbyterian Healthcare Services | NM | Healthcare Provider | 193,223 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Beaufort Memorial Hospital | SC | Healthcare Provider | 12,636 | Oct 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.