HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 98 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Augusta Foot & Ankle, P.C. | GA | Healthcare Provider | 4,854 | Mar 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Hawaii Pacific Health | HI | Business Associate | 3,772 | Mar 17, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Lakewood Health System | MN | Healthcare Provider | 1,415 | Mar 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Hao Rong DDS Inc dba Genuine Care Dental | CA | Healthcare Provider | 2,190 | Mar 14, 2020 | Theft | Archive (closed) |
| Randleman Eye Center | NC | Healthcare Provider | 19,556 | Mar 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Allegheny County, PA | PA | Health Plan | 3,394 | Mar 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Foundation Medicine, Inc. | MA | Healthcare Provider | 2,999 | Mar 13, 2020 | Hacking/IT Incident | Archive (closed) |
| TriHealth Cancer Institute | OH | Healthcare Provider | 912 | Mar 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| North Texas Institute of Neurology and Headache | TX | Healthcare Provider | 500 | Mar 13, 2020 | Theft | Archive (closed) |
| Northeast Radiology | NY | Healthcare Provider | 298,532 | Mar 11, 2020 | Hacking/IT Incident | Archive (closed) |
| The Prudential Insurance Company of America | NJ | Health Plan | 1,945 | Mar 11, 2020 | Hacking/IT Incident | Archive (closed) |
| OneDigital Health and Benefits | GA | Business Associate | 22,894 | Mar 6, 2020 | Theft | Archive (closed) |
| Torrance Memorial Medical Center | CA | Healthcare Provider | 3,498 | Mar 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Conagra Brands Welfare Benefit Wrap Plan | IL | Health Plan | 1,713 | Mar 6, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Stephan C Dean | CA | Business Associate | 70,000 | Mar 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Elk Ridge Dentistry | CO | Healthcare Provider | 2,793 | Mar 2, 2020 | Theft | Archive (closed) |
| Ozark Orthopaedics, PA | AR | Healthcare Provider | 15,240 | Feb 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Walgreen Company | IL | Healthcare Provider | 6,681 | Feb 28, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Riverview Health | IN | Healthcare Provider | 2,610 | Feb 28, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Alameda Alliance for Health | CA | Health Plan | 500 | Feb 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Interactive Medical Systems, Corp. | NC | Business Associate | 15,010 | Feb 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Harris County Hospital District d/b/a Harris Health System | TX | Healthcare Provider | 2,298 | Feb 27, 2020 | Loss | Archive (closed) |
| Fairfield Anesthesia Associates LLC | CT | Healthcare Provider | 800 | Feb 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Vail Clinic, Inc. dba Vail Health Hospital | CO | Healthcare Provider | 710 | Feb 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Munson Healthcare | MI | Healthcare Provider | 75,202 | Feb 26, 2020 | Hacking/IT Incident | Archive (closed) |
| AFTRA Retirement Fund | NY | Business Associate | 57,900 | Feb 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Engage Behavioral Health | FL | Healthcare Provider | 650 | Feb 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Government Employees Health Association, Inc. | MO | Health Plan | 696 | Feb 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Rady Children's Hospital San Diego | CA | Healthcare Provider | 2,360 | Feb 21, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Rainbow Hospice Care, Inc. | WI | Healthcare Provider | 2,029 | Feb 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Endeavor Energy Resources, L.P. | TX | Health Plan | 5,103 | Feb 20, 2020 | Hacking/IT Incident | Archive (closed) |
| The Queen’s Health Systems Affiliated Covered Entity | HI | Healthcare Provider | 2,852 | Feb 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Lake County Health Department | IL | Healthcare Provider | 14,488 | Feb 19, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| SOLO Laboratories, Inc. | PA | Business Associate | 60,000 | Feb 18, 2020 | Hacking/IT Incident | Archive (closed) |
| NCH Healthcare System, Inc. | FL | Healthcare Provider | 63,581 | Feb 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Monroe County Hospital & Clinics | IA | Healthcare Provider | 8,487 | Feb 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Armada Physical Therapy of Albuquerque, LLC | NM | Healthcare Provider | 1,850 | Feb 17, 2020 | Theft | Archive (closed) |
| East House Corporation | NY | Healthcare Provider | 1,306 | Feb 17, 2020 | Hacking/IT Incident | Archive (closed) |
| BST & Co. CPAs, LLP | NY | Business Associate | 170,000 | Feb 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Aveanna Healthcare | GA | Healthcare Provider | 166,077 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Tennessee Orthopaedic Alliance | TN | Healthcare Provider | 81,146 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Avalon Health Care Management, Inc. | UT | Business Associate | 2,717 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Peregrine Corporation d/b/a PSL Services | ME | Healthcare Provider | 2,401 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| United Regional Health Care System | TX | Healthcare Provider | 1,893 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| James F. Collette DDS & David N. Hamilton DDS PLLC | WA | Healthcare Provider | 544 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Capital Vision Services d/b/a MyEyeDr. (MED Southwest PLLC) | VA | Healthcare Provider | 7,983 | Feb 13, 2020 | Improper Disposal | Archive (closed) |
| Audiology Services Company USA, LLC | FL | Healthcare Provider | 3,917 | Feb 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Lakewood Resource and Referral Center dba Center for Health Education, Medicine and Dentistry | NJ | Healthcare Provider | 12,414 | Feb 12, 2020 | Hacking/IT Incident | Archive (closed) |
| SAMA HealthCare Services | AR | Healthcare Provider | 7,524 | Feb 12, 2020 | Improper Disposal | Archive (closed) |
| Walmart Inc. | AR | Healthcare Provider | 3,606 | Feb 12, 2020 | Loss | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.