HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 93 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Servicios de Salud Primarios de Barceloneta, Inc. | Healthcare Provider | 60,200 | Sep 4, 2020 | Hacking/IT Incident | Archive (closed) | |
| Regions Hospital | MN | Healthcare Provider | 52,795 | Sep 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Starling Physicians, PC | CT | Healthcare Provider | 7,777 | Sep 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health System | TN | Healthcare Provider | 4,938 | Sep 4, 2020 | Loss | Archive (closed) |
| Advocate Aurora Health | WI | Healthcare Provider | 2,979 | Sep 4, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Carnegie Tri-County Municipal Hospital | OK | Healthcare Provider | 1,076 | Sep 4, 2020 | Improper Disposal | Archive (closed) |
| Roper St. Francis Healthcare | SC | Healthcare Provider | 6,000 | Sep 3, 2020 | Hacking/IT Incident | Archive (closed) |
| The Baton Rouge Clinic, A Medical Corporation | LA | Healthcare Provider | 308,169 | Sep 2, 2020 | Hacking/IT Incident | Archive (closed) |
| H. Lee Moffitt Cancer Center & Research Institute | FL | Healthcare Provider | 4,056 | Sep 2, 2020 | Theft | Archive (closed) |
| Atrium Health | NC | Healthcare Provider | 165,000 | Sep 1, 2020 | Hacking/IT Incident | Archive (closed) |
| Spectrum Health | MI | Healthcare Provider | 52,711 | Sep 1, 2020 | Hacking/IT Incident | Archive (closed) |
| Quality of Life Medical and Research Center | AZ | Healthcare Provider | 6,000 | Aug 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Utah Pathology Services, Inc. | UT | Healthcare Provider | 148,594 | Aug 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Northwestern Memorial HealthCare | IL | Healthcare Provider | 55,983 | Aug 28, 2020 | Hacking/IT Incident | Archive (closed) |
| BEACON ORTHOPAEDICS & SPORTS MEDICINE | OH | Healthcare Provider | 2,869 | Aug 28, 2020 | Theft | Archive (closed) |
| Assured Imaging | AZ | Healthcare Provider | 244,813 | Aug 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Main Line Health | PA | Healthcare Provider | 60,595 | Aug 26, 2020 | Hacking/IT Incident | Archive (closed) |
| City of Lafayette | CO | Healthcare Provider | 9,149 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| OrthoSC, LLC | SC | Healthcare Provider | 3,027 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Glacier Surgical Associates | AK | Healthcare Provider | 1,538 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Waystar Health | KY | Business Associate | 1,021 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Consultant Anesthesiologists, Inc. | OH | Healthcare Provider | 740 | Aug 25, 2020 | Theft | Archive (closed) |
| MultiCare Health System | WA | Healthcare Provider | 179,189 | Aug 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Elwyn | PA | Healthcare Provider | 16,579 | Aug 21, 2020 | Hacking/IT Incident | Archive (closed) |
| HealthFirst Bluegrass | KY | Healthcare Provider | 971 | Aug 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Saint Luke's Foundation | MO | Healthcare Provider | 360,212 | Aug 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Washington State Department of Social and Health Services | WA | Health Plan | 648 | Aug 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | KY | Health Plan | 564 | Aug 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Hamilton Health Center, Inc. | PA | Healthcare Provider | 10,393 | Aug 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Arnot Health | NY | Healthcare Provider | 1,164 | Aug 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Imperium Health LLC | KY | Business Associate | 139,114 | Aug 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Richard J. Caron Foundation | PA | Healthcare Provider | 22,718 | Aug 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Cook Children's Medical Center | TX | Healthcare Provider | 2,827 | Aug 17, 2020 | Loss | Archive (closed) |
| Prospect Medical Holdings (Crozer-Keystone Health System) | PA | Healthcare Provider | 177,023 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Florida Health | FL | Healthcare Provider | 135,959 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Selected Benefits | PA | Business Associate | 8,100 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| D&S Residential Holdings, LLC | TX | Healthcare Provider | 2,102 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Advocate Aurora Health | WI | Healthcare Provider | 1,907 | Aug 14, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| UT Southwestern Medical Center | TX | Healthcare Provider | 15,535 | Aug 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Idaho State University Dental Hygiene | ID | Healthcare Provider | 543 | Aug 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The Iowa Clinic, P.C. | IA | Healthcare Provider | 914 | Aug 11, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| BeneSys, Inc. | MI | Business Associate | 1,070 | Aug 10, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The Connection, Inc. | CT | Healthcare Provider | 3,736 | Aug 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Ashley County Medical Center | AR | Healthcare Provider | 772 | Aug 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Dynasplint Systems, Inc. | MD | Healthcare Provider | 102,800 | Aug 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Associates | IN | Healthcare Provider | 7,264 | Aug 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Northern Light Health | ME | Business Associate | 304,399 | Aug 3, 2020 | Hacking/IT Incident | Archive (closed) |
| St. Peter's Health Partners Medical Associates, P.C. | NY | Healthcare Provider | 2,333 | Aug 3, 2020 | Loss | Archive (closed) |
| Comanche County Hospital Authority | OK | Health Plan | 1,112 | Aug 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Hoag Clinic | CA | Healthcare Provider | 738 | Aug 3, 2020 | Theft | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.