HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 95 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| The StayWell Company, LLC | PA | Business Associate | 971 | Jun 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Morneau Shepell Limited | IL | Healthcare Provider | 1,162 | Jun 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Sage Behavior Services, Inc | CA | Healthcare Provider | 763 | Jun 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Eye Physicians of Pinellas, PA dba The Eye Institute of West Florida | FL | Healthcare Provider | 1,650 | Jun 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Iowa Total Care, Inc. | IA | Health Plan | 11,581 | Jun 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Grace & Porta Benefits, inc. | MI | Health Plan | 572 | Jun 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Friendship Community Care, Inc. | AR | Healthcare Provider | 10,845 | Jun 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| CodeMetro, Inc. | CA | Business Associate | 62,807 | Jun 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Human Affairs International of California | CA | Business Associate | 15,843 | Jun 19, 2020 | Hacking/IT Incident | Archive (closed) |
| CHI St. Luke's Health Memorial | TX | Healthcare Provider | 1,045 | Jun 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Ledger Dentistry | FL | Healthcare Provider | 538 | Jun 19, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The Kroger Company | OH | Healthcare Provider | 132,258 | Jun 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| American Medical Technologies | CA | Healthcare Provider | 47,767 | Jun 18, 2020 | Hacking/IT Incident | Archive (closed) |
| North Shore Pain Management | MA | Healthcare Provider | 12,472 | Jun 18, 2020 | Hacking/IT Incident | Archive (closed) |
| ABA Pathways, LLC | MI | Healthcare Provider | 775 | Jun 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Oral and Maxillofacial Surgery Associates, P.A. | SC | Healthcare Provider | 35,498 | Jun 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Providence Health Plan | OR | Health Plan | 49,511 | Jun 16, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Senior Whole Health of New York | NY | Health Plan | 3,853 | Jun 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Frank D. Lanterman Regional Center | CA | Healthcare Provider | 3,489 | Jun 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Legacy Community Health Services | TX | Healthcare Provider | 19,000 | Jun 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Choice Health Management Services, LLC | NC | Business Associate | 8,692 | Jun 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Complete Care of Virginia, LLC | MD | Health Plan | 3,568 | Jun 15, 2020 | Hacking/IT Incident | Archive (closed) |
| The Waldorf Center | OR | Healthcare Provider | 608 | Jun 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Health Inc. | AZ | Health Plan | 1,013,956 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Rx Management | AZ | Business Associate | 314,704 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Healthcare Fiscal Management Inc. | NC | Business Associate | 130,573 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Merit Health Insurance Company | IL | Health Plan | 102,748 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Complete Care of Florida | FL | Health Plan | 76,236 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| UF Health Jacksonville | FL | Healthcare Provider | 54,002 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Healthcare | MD | Business Associate | 50,410 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Rx Pharmacy | MD | Healthcare Provider | 33,040 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Cano Health | FL | Healthcare Provider | 28,268 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| National Imaging Associates | MD | Business Associate | 22,560 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| UF Health Shands | FL | Healthcare Provider | 13,146 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Florida | FL | Healthcare Provider | 9,182 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Sunrise Treatment Center,LLC | OH | Healthcare Provider | 3,660 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
| Anil Mehta, MD, Inc. | CA | Healthcare Provider | 846 | Jun 12, 2020 | Theft | Archive (closed) |
| Integra Managed Care | NY | Health Plan | 644 | Jun 12, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Missouri Health Care | MO | Healthcare Provider | 5,074 | Jun 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Axis Neuromonitoring, Inc., d/b/a Apex IONM Solutions | TX | Business Associate | 1,876 | Jun 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Rangely District Hospital | CO | Healthcare Provider | 6,339 | Jun 8, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Utah | UT | Healthcare Provider | 1,909 | Jun 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Danube River Holdings LLC dba RiverPointe Post Acute | CA | Healthcare Provider | 633 | Jun 7, 2020 | Loss | Archive (closed) |
| Kentuckiana Regional Planning and Development Agency | KY | Healthcare Provider | 3,663 | Jun 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Yale New Haven Health Services | CT | Healthcare Provider | 506 | Jun 5, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Andrew Dang, DDS | CA | Healthcare Provider | 974 | Jun 4, 2020 | Theft | Archive (closed) |
| Allergy & Asthma Medical Group of the Bay Area, Inc. | CA | Healthcare Provider | 1,894 | Jun 2, 2020 | Theft | Archive (closed) |
| JDA eHealth Systems, Inc. | IL | Business Associate | 917 | Jun 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Philadelphia | PA | Health Plan | 233,543 | Jun 1, 2020 | Hacking/IT Incident | Archive (closed) |
| HEALTHY CONNECTIONS INC | AR | Healthcare Provider | 3,565 | Jun 1, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.