HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 91 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Virginia Cancer Institute | VA | Healthcare Provider | 6,258 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Practice Transformation Solutions, LLC | VA | Business Associate | 1,016 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Adults and Children with Learning and Developmental Disabilities, Inc. | NY | Healthcare Provider | 603 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Sisters of Charity of St. Augustine Health System | OH | Healthcare Provider | 118,874 | Oct 1, 2020 | Hacking/IT Incident | Archive (closed) |
| North Memorial Health | MN | Healthcare Provider | 21,236 | Sep 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Oswego Health | NY | Healthcare Provider | 13,619 | Sep 30, 2020 | Hacking/IT Incident | Archive (closed) |
| White Plains Hospital | NY | Healthcare Provider | 7,164 | Sep 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Sonoma Recovery Services, LLC d/b/a/ Olympia House | CA | Healthcare Provider | 2,527 | Sep 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Alliance Spine and Pain Management, PLLC d/b/a Freedom Spine & Pain Center | TX | Healthcare Provider | 2,235 | Sep 30, 2020 | Hacking/IT Incident | Archive (closed) |
| University Muslim Medical Association | CA | Healthcare Provider | 563 | Sep 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| EyeMed Vision Care LLC | OH | Business Associate | 1,474,000 | Sep 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Century Specialty Script | NY | Healthcare Provider | 17,219 | Sep 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Voxx International Corp. | FL | Health Plan | 6,034 | Sep 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Excalibur Youth Services, LLC | SC | Healthcare Provider | 2,851 | Sep 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Preferred Care Home Health Services | FL | Healthcare Provider | 2,374 | Sep 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Legacy Community Health Services | TX | Healthcare Provider | 228,009 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Burke Rehabilitation Hospital | NY | Healthcare Provider | 64,840 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Oaklawn Hospital | MI | Healthcare Provider | 26,861 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Seven Counties Services, Inc. | KY | Healthcare Provider | 13,375 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Stark Summit Ambulance | OH | Healthcare Provider | 3,700 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Scottish Rite for Children | TX | Healthcare Provider | 3,414 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Mono County | CA | Healthcare Provider | 2,850 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| MedStar Health, Inc. | MD | Healthcare Provider | 668 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| South Shore Hospital | MA | Healthcare Provider | 74,328 | Sep 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Magnolia Pediatrics | LA | Healthcare Provider | 12,861 | Sep 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Lifetime Middleton LLC | WI | Healthcare Provider | 1,900 | Sep 23, 2020 | Theft | Archive (closed) |
| Geisinger Health | PA | Healthcare Provider | 717 | Sep 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| AdventHealth Orlando | FL | Healthcare Provider | 1,514 | Sep 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| UCare Minnesota | MN | Health Plan | 4,806 | Sep 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 4,004 | Sep 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Pollack, Barbaccia, & Guzman MD PC | NY | Healthcare Provider | 1,135 | Sep 18, 2020 | Theft | Archive (closed) |
| University of Missouri Health Care | MO | Healthcare Provider | 189,736 | Sep 17, 2020 | Hacking/IT Incident | Archive (closed) |
| OrthoAtlanta, LLC | GA | Healthcare Provider | 5,600 | Sep 17, 2020 | Hacking/IT Incident | Archive (closed) |
| HM Health Solutions | PA | Business Associate | 1,798 | Sep 17, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Accents on Health | CO | Healthcare Provider | 2,000 | Sep 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Sheltering Arms Physical Rehabilitation Centers | VA | Healthcare Provider | 683 | Sep 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Nuvance Health | NY | Healthcare Provider | 314,829 | Sep 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Catholic Health System | SC | Business Associate | 61,267 | Sep 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Community Surgical Supply of Toms River, Inc. | NJ | Healthcare Provider | 31,550 | Sep 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Piedmont Cancer Institute, P.C. | GA | Healthcare Provider | 5,226 | Sep 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Alameda Health System | CA | Healthcare Provider | 2,691 | Sep 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Trinity Health | MI | Business Associate | 3,320,726 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Tennessee Medical Center | TN | Healthcare Provider | 234,954 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| The Christ Hospital Health Network | OH | Healthcare Provider | 183,265 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Stony Brook University Hospital | NY | Healthcare Provider | 175,191 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Roswell Park Comprehensive Cancer Center | NY | Healthcare Provider | 149,126 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| UMass Memorial Medical Center | MA | Healthcare Provider | 87,404 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Lehigh Valley Health Network | PA | Healthcare Provider | 81,487 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| University Health Systems of Eastern Carolina, Inc. dba Vidant Health | NC | Healthcare Provider | 77,942 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | NY | Healthcare Provider | 76,068 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.