HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 92 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Memorial Sloan Kettering Cancer Center | NY | Healthcare Provider | 73,536 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Joslin Diabetes Center | MA | Healthcare Provider | 71,160 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| USA Health | AL | Healthcare Provider | 52,344 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Hospice & Palliative Care Buffalo, Inc. | NY | Healthcare Provider | 47,272 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | DC | Healthcare Provider | 44,308 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Our Lady of the Lake | LA | Healthcare Provider | 31,166 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Iowa Health System dba UnityPoint Health Affiliated Covered Entity | IA | Healthcare Provider | 27,410 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Catholic Medical Center | NH | Healthcare Provider | 18,623 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Samaritan Daytop Village, Inc. | NY | Healthcare Provider | 5,890 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Jewish Home Lifecare d/b/a The New Jewish Home | NY | Healthcare Provider | 5,242 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Samaritan Healthcare & Hospice | NJ | Healthcare Provider | 3,657 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Connecticut Children's Medical Center | CT | Healthcare Provider | 2,633 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Life Enriching Communities | OH | Healthcare Provider | 2,345 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Bluegrass Care Navigators | KY | Healthcare Provider | 2,343 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Texas Children's Hospital | TX | Healthcare Provider | 1,987 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Gillette Children's Specialty Healthcare | MN | Healthcare Provider | 1,766 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Devereux Advanced Behavioral Health | PA | Healthcare Provider | 1,758 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Christiana Care Health Services, Inc. | DE | Healthcare Provider | 1,229 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Prelude Behavioral Services | IA | Healthcare Provider | 699 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| June E. Nylen Cancer Center | IA | Healthcare Provider | 500 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Mount Sinai Health System | NY | Healthcare Provider | 87,535 | Sep 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Lynn Community Health Center | MA | Healthcare Provider | 4,271 | Sep 13, 2020 | Hacking/IT Incident | Archive (closed) |
| George West Mental Health Foundation dba Skyland Trail | GA | Healthcare Provider | 2,724 | Sep 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Allina Health | MN | Healthcare Provider | 199,389 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Children's Minnesota | MN | Healthcare Provider | 160,268 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Piedmont Healthcare, Inc. | GA | Healthcare Provider | 111,588 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Community Health Network, Inc. | IN | Healthcare Provider | 81,118 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Specialized Alternatives for Families & Youth of America, Inc. | OH | Business Associate | 58,123 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Medical University of South Carolina | SC | Healthcare Provider | 54,869 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Riverside Health System | VA | Healthcare Provider | 54,151 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Community Medical Centers | CA | Healthcare Provider | 43,667 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Hebrew SeniorLife, Inc. | MA | Healthcare Provider | 27,244 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Adventist HealthCare | MD | Healthcare Provider | 13,041 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Augusta Health Care, Inc. d/b/a Augusta Health | VA | Healthcare Provider | 3,061 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Southern Indian Health Council, Inc. | CA | Healthcare Provider | 727 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| SCL Health - Colorado | CO | Healthcare Provider | 343,493 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| SCL Health - Montana | CO | Healthcare Provider | 93,642 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Enloe Medical Center | CA | Healthcare Provider | 33,575 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Total Urology Care of New York PLLC | NY | Healthcare Provider | 17,000 | Sep 10, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| SCL Health - Kansas | CO | Healthcare Provider | 3,845 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | VA | Healthcare Provider | 1,045,270 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Baylor College of Medicine | TX | Healthcare Provider | 4,586 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Mental Health Center of Boulder County Inc. dba Mental Health Partners | CO | Healthcare Provider | 2,650 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Defense Health Headquarters | VA | Health Plan | 1,620 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Mason Medical Center | WA | Healthcare Provider | 244,761 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Kentucky HealthCare | KY | Healthcare Provider | 163,774 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Roper st. Francis Healthcare | SC | Healthcare Provider | 92,963 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| The Guthrie Clinic | PA | Healthcare Provider | 92,064 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Lycoming-Clinton Joinder Board Programs | PA | Business Associate | 3,905 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| NorthShore University HealthSystem | IL | Healthcare Provider | 348,746 | Sep 4, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.