HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 97 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Beaumont Health | MI | Healthcare Provider | 112,211 | Apr 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Hebrew Home of Greater Washington | MD | Healthcare Provider | 5,693 | Apr 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Houston Methodist Hospital | TX | Healthcare Provider | 1,987 | Apr 17, 2020 | Theft | Archive (closed) |
| Advocate Aurora Health | WI | Healthcare Provider | 27,137 | Apr 16, 2020 | Hacking/IT Incident | Archive (closed) |
| John A. Grimaldi DO INC | CA | Healthcare Provider | 911 | Apr 16, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Medica Health Plans | MN | Health Plan | 1,710 | Apr 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Medica Insurance Company | MN | Health Plan | 802 | Apr 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Doctors Community Medical Center | MD | Healthcare Provider | 18,481 | Apr 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Hartford HealthCare | CT | Healthcare Provider | 2,651 | Apr 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Arizona Endocrinology Center | AZ | Healthcare Provider | 74,122 | Apr 10, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| UPMC Altoona Regional Health Services | PA | Healthcare Provider | 13,911 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Brandywine Counseling & Community Services, Inc | DE | Healthcare Provider | 11,852 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Beacon Health Options, Inc. | MA | Business Associate | 6,723 | Apr 10, 2020 | Loss | Archive (closed) |
| Saint Francis Ministries | KS | Healthcare Provider | 3,680 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Rehabilitation Hospital of Southern New Mexico | NM | Healthcare Provider | 1,843 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Corpus Christi Rehabilitation Hospital | TX | Healthcare Provider | 507 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Andrews Braces | NV | Healthcare Provider | 16,622 | Apr 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Human Services, Office of Behavioral Health | CO | Healthcare Provider | 8,132 | Apr 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthcare Resource Group, Inc. | WA | Business Associate | 5,387 | Apr 7, 2020 | Hacking/IT Incident | Archive (closed) |
| EVERSANA | WI | Healthcare Provider | 5,000 | Apr 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Doctors HealthCare Plans, Inc. | FL | Health Plan | 500 | Apr 7, 2020 | Hacking/IT Incident | Archive (closed) |
| New Jersey Urology, LLC | NJ | Healthcare Provider | 3,000 | Apr 6, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Utah | UT | Healthcare Provider | 5,096 | Apr 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Child, Family and Community Services, Inc. | CA | Health Plan | 1,658 | Apr 3, 2020 | Theft | Archive (closed) |
| Affordacare Urgent Care Clinics | TX | Healthcare Provider | 57,411 | Mar 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Washington University School of Medicine | MO | Healthcare Provider | 14,795 | Mar 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Confidio, LLC | MD | Business Associate | 14,016 | Mar 31, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Minnesota Physicians | MN | Healthcare Provider | 310,666 | Mar 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Mid-Delaware Imaging | DE | Healthcare Provider | 77,110 | Mar 30, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Brandywine Urology Consultants, PA | DE | Healthcare Provider | 131,825 | Mar 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Stockdale Radiology | CA | Healthcare Provider | 10,700 | Mar 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Crossroads Technologies, Inc. | PA | Business Associate | 897 | Mar 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Tryon Medical Partners, PLLC | NC | Healthcare Provider | 701 | Mar 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| UHHS Samaritan Medical Center | OH | Healthcare Provider | 1,520 | Mar 26, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| David S Daley, DMD | AZ | Healthcare Provider | 1,000 | Mar 26, 2020 | Theft | Archive (closed) |
| New Jersey Department of Human Services | NJ | Health Plan | 2,300 | Mar 25, 2020 | Hacking/IT Incident | Archive (closed) |
| VA Sierra Nevada Health Care System | NV | Healthcare Provider | 702 | Mar 25, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| FACKLER FAMILY CHIROPRACTIC, LLC | OH | Healthcare Provider | 1,731 | Mar 23, 2020 | Theft | Archive (closed) |
| Renew Wellness Center, PLLC | MT | Healthcare Provider | 730 | Mar 23, 2020 | Theft | Archive (closed) |
| Health Care Service Corporation | IL | Health Plan | 574 | Mar 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Ambry Genetics Corporation | CA | Healthcare Provider | 225,370 | Mar 22, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Utah Health | UT | Healthcare Provider | 3,670 | Mar 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Golden Valley Health Centers | CA | Healthcare Provider | 38,628 | Mar 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Otis R. Bowen Center for Human Services | IN | Healthcare Provider | 35,804 | Mar 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Behavioral Health and Developmental Services | VA | Healthcare Provider | 657 | Mar 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Georgia Department of Human Services | GA | Healthcare Clearing House | 500 | Mar 20, 2020 | Loss | Archive (closed) |
| Hawaii Pacific Health | HI | Business Associate | 836 | Mar 19, 2020 | Loss | Archive (closed) |
| NeoGenomics Laboratories, Inc. | FL | Healthcare Provider | 910 | Mar 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Tandem Diabetes Care, Inc. | CA | Healthcare Provider | 140,781 | Mar 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Lifesprk | MN | Healthcare Provider | 9,000 | Mar 17, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.