HHS OCR breach portal data
HIPAA breach tracker: healthcare data breaches reported to HHS
Every breach of unsecured protected health information affecting 500 or more individuals reported to HHS OCR, newest first. Data from the OCR export October 2026; latest submission Sep 30, 2026.
8,024 reports, 1,094,628,651 individuals affected. Page 99 of 161. Clear filters
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Relation Insurance, Inc., d/b/a Relation Insurance Services of Georgia | GA | Business Associate | 4,335 | Feb 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Mercy Health Physician Partners | MI | Healthcare Provider | 2,487 | Feb 10, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| VibrantCare Rehabilitation, Inc. | CA | Healthcare Provider | 1,655 | Feb 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Overlake Medical Center & Clinics | WA | Healthcare Provider | 109,234 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| JDC Healthcare Management | TX | Healthcare Provider | 45,748 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Shields Health Solutions | MA | Business Associate | 39,762 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Lincoln National Life Insurance Company and its affiliate Lincoln Life & Annuity Company of New York | IN | Health Plan | 2,468 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Vision Care Specialists, P.C. a part of MyEyeDr. Optometry of Colorado, PC | VA | Healthcare Provider | 1,070 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Kaiser Health Plan, Southern California | CA | Health Plan | 167,095 | Feb 6, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Share of Oregon | OR | Health Plan | 654,362 | Feb 5, 2020 | Theft | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | MN | Health Plan | 3,335 | Feb 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Iredell-Statesville Schools Board of Eduction | NC | Health Plan | 959 | Feb 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Arizona Pain and Spine Institute | AZ | Healthcare Provider | 530 | Feb 3, 2020 | Theft | Archive (closed) |
| Hospital Sisters Health System | IL | Healthcare Provider | 16,167 | Jan 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Original Medicare | MD | Health Plan | 9,965 | Jan 31, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Robert S. Smith MD Inc DBA Boston Scientific Pathology | GA | Healthcare Provider | 6,940 | Jan 31, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| MHMR of Tarrant County | TX | Healthcare Provider | 6,524 | Jan 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services | VA | Health Plan | 6,120 | Jan 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Lake County Behavioral Health Services | CA | Healthcare Provider | 1,178 | Jan 31, 2020 | Theft | Archive (closed) |
| Jefferson Center for Mental Health | CO | Healthcare Provider | 1,319 | Jan 30, 2020 | Theft | Archive (closed) |
| Personal Touch Home Aides of New York, Inc. | NY | Healthcare Provider | 38,693 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of VA, Inc. | VA | Healthcare Provider | 33,324 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of KY, Inc. | KY | Healthcare Provider | 24,013 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Central Kansas Orthopedic Group, LLC | KS | Healthcare Provider | 17,214 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of Ohio, Inc. | NY | Healthcare Provider | 15,808 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of PA, Inc. | NY | Healthcare Provider | 9,302 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of Baltimore, Inc. | NY | Healthcare Provider | 9,058 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Services of San Antonio, Inc. | TX | Healthcare Provider | 5,930 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of Indiana, Inc. | IN | Healthcare Provider | 3,593 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of S.E. Mass., Inc. | NY | Healthcare Provider | 2,863 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home-Aides, Inc. | NY | Healthcare Provider | 2,633 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of Mass., Inc. | NY | Healthcare Provider | 2,015 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of Greater Portsmouth, Inc. | NY | Healthcare Provider | 1,957 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Aides Inc. | NY | Healthcare Provider | 1,890 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Services of Dallas, Inc. | TX | Healthcare Provider | 1,700 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Hospice of VA, Inc. | VA | Healthcare Provider | 1,657 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of W. VA, Inc. | WV | Healthcare Provider | 1,169 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Aides of Baltimore, Inc. | NY | Healthcare Provider | 804 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Iowa Department of Human Services | IA | Health Plan | 4,501 | Jan 27, 2020 | Improper Disposal | Archive (closed) |
| Manchester Ophthalmology, LLC | CT | Healthcare Provider | 6,846 | Jan 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Cook County Health | IL | Healthcare Provider | 2,713 | Jan 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Village Senior Services Corporation d/b/a VillageCareMAX | NY | Health Plan | 2,645 | Jan 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Lafayette Regional Rehabilitation Hospital | IN | Healthcare Provider | 1,360 | Jan 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Beaumont Health | MI | Healthcare Provider | 1,182 | Jan 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Cedarbrook Senior Care and Rehabilitation / County of Lehigh | PA | Healthcare Provider | 688 | Jan 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Village Center for Care d/b/a VillageCare Rehabilitative and Nursing Center | NY | Healthcare Provider | 674 | Jan 24, 2020 | Hacking/IT Incident | Archive (closed) |
| REVA, INC. | FL | Healthcare Provider | 1,000 | Jan 22, 2020 | Hacking/IT Incident | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | MN | Health Plan | 934 | Jan 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| NeurAbilities Healthcare | NJ | Healthcare Provider | 11,747 | Jan 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Fondren Orthopedic Group L.L.P. | TX | Healthcare Provider | 30,049 | Jan 17, 2020 | Hacking/IT Incident | Archive (closed) |
See also healthcare data breach statistics, breaches by state and how to read the OCR breach portal.
Frequently asked questions
What is a healthcare data breach?
Under HIPAA, a breach is generally an impermissible use or disclosure of protected health information that compromises its security or privacy. Covered entities must report breaches affecting 500 or more individuals to HHS, and those reports appear on the HHS OCR breach portal and in this tracker. See what is a HIPAA breach.