HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 96 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Rochester Regional Health | NY | Healthcare Provider | 1,945 | Jun 1, 2020 | Hacking/IT Incident | Archive (closed) |
| Catholic Charities Diocese of San Diego | CA | Business Associate | 36,205 | May 29, 2020 | Hacking/IT Incident | Archive (closed) |
| Hanger Prosthetics & Orthotics, Inc. d/b/a Hanger Clinic | TX | Healthcare Provider | 6,033 | May 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Ridgeview Institute - Monroe | GA | Healthcare Provider | 1,853 | May 29, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Sanitas Dental Management | FL | Healthcare Provider | 1,310 | May 29, 2020 | Loss | Archive (closed) |
| Michiana Hematology Oncology, PC | IN | Healthcare Provider | 500 | May 29, 2020 | Improper Disposal | Archive (closed) |
| Elkhart Emergency Physicians, Inc . | IN | Healthcare Provider | 550,000 | May 28, 2020 | Improper Disposal | Archive (closed) |
| Saint Joseph Regional Medical Center, Inc. | IN | Healthcare Provider | 1,000 | May 28, 2020 | Improper Disposal | Archive (closed) |
| New Avenues, Inc. | IN | Healthcare Provider | 1,000 | May 28, 2020 | Improper Disposal | Archive (closed) |
| Allied Physicians of Michiana, LLC | IN | Healthcare Provider | 976 | May 28, 2020 | Improper Disposal | Archive (closed) |
| Beacon Health systems, Inc. | IN | Healthcare Provider | 900 | May 28, 2020 | Improper Disposal | Archive (closed) |
| South Bend Medical Foundation, Inc. | IN | Healthcare Provider | 500 | May 28, 2020 | Improper Disposal | Archive (closed) |
| Renee Applebaum Phd Pc | MI | Healthcare Provider | 3,800 | May 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Everett & Hurite Ophthalmic Association | PA | Healthcare Provider | 34,113 | May 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Mediclaim, LLC | MI | Business Associate | 14,931 | May 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of the Mid-Atlantic States | MD | Health Plan | 2,756 | May 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Woodlawn Dental Center | OH | Healthcare Provider | 14,419 | May 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Geisinger Wyoming Valley Medical Center | PA | Healthcare Provider | 805 | May 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| PsyGenics, Inc. | MI | Business Associate | 614 | May 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Mat-Su Surgical Associates, APC | AK | Healthcare Provider | 13,146 | May 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Infor-Med Medical Information Systems Inc. | CA | Business Associate | 3,728 | May 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Alexander Chun, MD, PLLC | NY | Healthcare Provider | 595 | May 12, 2020 | Improper Disposal | Archive (closed) |
| Mille Lacs Health System | MN | Healthcare Provider | 10,630 | May 11, 2020 | Hacking/IT Incident | Archive (closed) |
| District Medical Group | AZ | Healthcare Provider | 10,190 | May 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Santa Rosa & Rohnert Park Oral Surgery | CA | Healthcare Provider | 5,357 | May 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Ashtabula County Medical Center | OH | Healthcare Provider | 3,683 | May 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Moorestown Visiting Nurse Association | NJ | Healthcare Provider | 26,465 | May 7, 2020 | Hacking/IT Incident | Archive (closed) |
| BJC Health System | MO | Business Associate | 287,876 | May 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Midmark RTLS Solutions, Inc. | MI | Business Associate | 7,422 | May 5, 2020 | Hacking/IT Incident | Archive (closed) |
| The Nebraska Medical Center | NE | Healthcare Provider | 1,311 | May 5, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Saint Francis Healthcare Partners | CT | Business Associate | 38,529 | May 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Management and Network Services, LLC | OH | Business Associate | 30,132 | May 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Ann & Robert H. Lurie Children's Hospital of Chicago | IL | Healthcare Provider | 4,824 | May 4, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Stamford Health | CT | Healthcare Provider | 1,255 | Apr 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Lisa Burkett DDS MS | TX | Healthcare Provider | 818 | Apr 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Meridian Health Services Corp. | IN | Healthcare Provider | 111,372 | Apr 27, 2020 | Hacking/IT Incident | Archive (closed) |
| City of Detroit Health Department | MI | Healthcare Provider | 1,945 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Moses Taylor Hospital | PA | Healthcare Provider | 1,905 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Poplar Bluff Regional Medical Center | MO | Healthcare Provider | 1,619 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Bayfront Health Port Charlotte | FL | Healthcare Provider | 1,162 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Tennova Healthcare Harton | TN | Healthcare Provider | 1,070 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Shands Lake Shore Regional Medical Center | FL | Healthcare Provider | 651 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Wilkes-Barre General Hospital | PA | Healthcare Provider | 518 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Customized Computer Software | TX | Business Associate | 500 | Apr 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Daniel Bendetowicz MD PA | FL | Healthcare Provider | 3,314 | Apr 24, 2020 | Hacking/IT Incident | Archive (closed) |
| United Cerebral Palsy Heartland | MO | Healthcare Provider | 576 | Apr 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Ascension Eastwood Clinics | MI | Healthcare Provider | 999 | Apr 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Agility Center Orthopedics | AR | Healthcare Provider | 13,968 | Apr 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Psychiatric Associates of North Carolina, Professional Association | NC | Healthcare Provider | 1,081 | Apr 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Good Samaritan Hospital, Inc. | CA | Healthcare Provider | 233,835 | Apr 17, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.