HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 94 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Freeport Regional Health Care Foundation | IL | Healthcare Provider | 80,795 | Jul 31, 2020 | Hacking/IT Incident | Archive (closed) |
| St. Christopher's Hospital for Children | PA | Healthcare Provider | 7,557 | Jul 31, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Muskingum Valley Health Centers | OH | Healthcare Provider | 7,447 | Jul 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Berkshire Farm Center and Services for Youth | NY | Healthcare Provider | 4,950 | Jul 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Elkins Rehabilitation & Care Center | WV | Healthcare Provider | 3,127 | Jul 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Rite Aid Corporation | PA | Healthcare Provider | 13,600 | Jul 29, 2020 | Theft | Archive (closed) |
| Aetna ACE | CT | Health Plan | 1,084 | Jul 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Beaumont Health | MI | Healthcare Provider | 6,073 | Jul 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Behavioral Health Network, Inc. | MA | Healthcare Provider | 129,571 | Jul 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Owens Ear Center | TX | Healthcare Provider | 19,908 | Jul 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Children's Hospital Colorado | CO | Healthcare Provider | 2,553 | Jul 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Walgreen Co. | IL | Healthcare Provider | 80,176 | Jul 24, 2020 | Theft | Archive (closed) |
| University of Maryland Faculty Physicians, Inc. / University of Maryland Medical Center | MD | Healthcare Provider | 33,896 | Jul 24, 2020 | Hacking/IT Incident | Archive (closed) |
| CVS Pharmacy | RI | Healthcare Provider | 26,234 | Jul 24, 2020 | Loss | Archive (closed) |
| Town of Babylon | NY | Healthcare Provider | 1,974 | Jul 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Supervalu Pharmacies, Inc. | MN | Healthcare Provider | 1,593 | Jul 24, 2020 | Theft | Archive (closed) |
| Foundation Surgical Hospital of San Antonio | TX | Healthcare Provider | 1,237 | Jul 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Highpoint Foot & Ankle Center | PA | Healthcare Provider | 25,554 | Jul 20, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Utah | UT | Healthcare Provider | 6,606 | Jul 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Mountain Peaks Family Practice | UT | Healthcare Provider | 1,505 | Jul 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| NCP Healthcare Management Company | MA | Business Associate | 78,070 | Jul 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Brandywine Counseling & Community Services, Inc | DE | Healthcare Provider | 4,139 | Jul 17, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Maryland Health Enterprises DBA Lorien Health Services | MD | Healthcare Provider | 537 | Jul 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Allergy and Asthma Clinic of Fort Worth | TX | Healthcare Provider | 69,777 | Jul 16, 2020 | Hacking/IT Incident | Archive (closed) |
| WellCare Health Plans | FL | Health Plan | 50,440 | Jul 16, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The Puerto Rican Organization to Motivate, Enlighten, and Serve Addicts, Inc. (PROMESA) | NY | Healthcare Provider | 3,129 | Jul 16, 2020 | Hacking/IT Incident | Archive (closed) |
| US HealthCenter, Inc. | WI | Business Associate | 1,441 | Jul 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Heartland Counseling Services, Inc. | NE | Healthcare Provider | 723 | Jul 16, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Wisconsin Department of Corrections | WI | Healthcare Provider | 1,853 | Jul 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| SRPMIC Employee Health Plan | AZ | Health Plan | 1,708 | Jul 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Coalinga Valley Health Clinics, Inc. | CA | Healthcare Provider | 1,463 | Jul 14, 2020 | Theft | Archive (closed) |
| City Dental | CA | Healthcare Provider | 900 | Jul 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Greenway Health, LLC | FL | Business Associate | 2,490 | Jul 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Jim Dinh, DC | TX | Business Associate | 500 | Jul 10, 2020 | Theft | Archive (closed) |
| Tak-ming Ko, M.D., LLC | AK | Healthcare Provider | 1,158 | Jul 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Hutton & Hale, D.D.S. | CA | Healthcare Provider | 8,394 | Jul 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Accu Copy of Greenville, Incorporated | NC | Business Associate | 21,800 | Jul 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Four Winds Behavioral Health | NM | Healthcare Provider | 500 | Jul 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Central California Alliance for Health | CA | Health Plan | 35,940 | Jul 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Independence Blue Cross | PA | Business Associate | 2,393 | Jul 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Florida Orthopaedic Institute | FL | Healthcare Provider | 651,527 | Jul 1, 2020 | Hacking/IT Incident | Archive (closed) |
| Carter and Hoff Dentistry | NC | Healthcare Provider | 7,000 | Jul 1, 2020 | Hacking/IT Incident | Archive (closed) |
| WellCare Health Plans, Inc. | FL | Health Plan | 2,794 | Jun 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Maxwell Aesthetics | TN | Healthcare Provider | 656 | Jun 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Premier Kids Care, Inc. | GA | Healthcare Provider | 6,265 | Jun 29, 2020 | Hacking/IT Incident | Archive (closed) |
| M&T Bank | NY | Business Associate | 5,878 | Jun 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Salinas Valley Memorial Healthcare System | CA | Healthcare Provider | 2,384 | Jun 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Benefit Recovery Specialists, Inc. | TX | Business Associate | 447,354 | Jun 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Rose Dental | TX | Healthcare Provider | 6,169 | Jun 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Rose Dental | TX | Healthcare Provider | 2,835 | Jun 26, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.