AL · HHS OCR reports
HIPAA breaches in Alabama
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Alabama.
Reports
101
Individuals affected
14,149,604
Under investigation
12
Top type: Hacking/IT Incident
State breach notification law
Ala. Code §§ 8-38-1 to 8-38-12 (Data Breach Notification Act of 2018) (amended 2018)
Timing: 45 days Alabama requires covered entities (including businesses) to notify affected individuals within 45
Read the Alabama data breach notification law summaryAll reports, newest first
Page 2 of 3. 101 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Cypress Healthcare, LLC | Healthcare Provider | 899 | May 9, 2022 | Theft | Archive (closed) |
| North Alabama Bone & Joint Clinic, P.C. | Healthcare Provider | 500 | May 6, 2022 | Hacking/IT Incident | Archive (closed) |
| HealthActions, P.A. | Healthcare Provider | 3,653 | Apr 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Alabama Department of Rehabilitation Services | Healthcare Provider | 934 | Dec 20, 2021 | Improper Disposal | Archive (closed) |
| Victory Health Partners | Healthcare Provider | 30,000 | Nov 2, 2021 | Hacking/IT Incident | Archive (closed) |
| NHS Management, LLC | Business Associate | 120,712 | Oct 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Medical Business Management | Business Associate | 1,750 | Aug 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Mobile County Commission | Business Associate | 1,337 | Jul 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Southern Orthopaedic Surgeons | Healthcare Provider | 4,983 | Apr 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Proteus Molecular and Clinical Lab, LLC | Healthcare Provider | 728 | Mar 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Public Education Employees' Health Insurance Plan d/b/a PEEHIP | Health Plan | 1,248 | Jan 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Physicians Apothecary | Healthcare Provider | 2,000 | Nov 6, 2020 | Improper Disposal | Archive (closed) |
| USA Health | Healthcare Provider | 52,344 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| CAH Holdings, Inc. | Business Associate | 1,158 | Jan 6, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Alabama at Birmingham | Healthcare Provider | 19,557 | Oct 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Sarrell Dental | Healthcare Provider | 363,617 | Sep 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Brewer Porch Children's Center / The University of Alabama | Healthcare Provider | 727 | Jul 16, 2019 | Hacking/IT Incident | Archive (closed) |
| KIM P. KORNEGAY, DMD | Healthcare Provider | 27,000 | Apr 19, 2019 | Theft | Archive (closed) |
| FastHealth Corporation | Business Associate | 18,192 | Feb 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Jemison Internal Medicine, PC | Health Plan | 6,550 | Feb 16, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Alabama at Birmingham | Healthcare Provider | 652 | Nov 27, 2017 | Loss | Archive (closed) |
| Lifestyle Therapy & Coaching | Healthcare Provider | 550 | Oct 9, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Surgical Dermatology Group | Healthcare Provider | 13,308 | Aug 5, 2017 | Hacking/IT Incident | Archive (closed) |
| FastHealth Corporation | Business Associate | 18,192 | Jun 29, 2017 | Hacking/IT Incident | Archive (closed) |
| Cove Family and Sports Medicine, LLC | Healthcare Provider | 4,300 | Jun 12, 2017 | Hacking/IT Incident | Archive (closed) |
| Escambia County Alabama Community Hospitals, Inc. D/B/A Atmore Community Hospital | Healthcare Provider | 1,090 | Jan 12, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Lister Healthcare | Healthcare Provider | 1,349 | Nov 9, 2016 | Theft | Archive (closed) |
| Public Education Employees' Health Insurance Plan | Health Plan | 1,349 | Sep 9, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| American Family Care, Inc. | Healthcare Provider | 7,200 | Jul 25, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Surgical Care Affiliates | Business Associate | 9,009 | May 16, 2016 | Theft | Archive (closed) |
| Locust Fork Pharmacy | Healthcare Provider | 5,000 | Feb 26, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Pathways Professional Counseling | Healthcare Provider | 986 | Nov 24, 2015 | Theft | Archive (closed) |
| LTC Dental, P.C. | Healthcare Provider | 1,680 | Oct 28, 2015 | Theft | Archive (closed) |
| Computer Programs and Systems, Inc. | Business Associate | 25,764 | Nov 26, 2014 | Theft | Archive (closed) |
| American Family Care, Inc. | Healthcare Provider | 2,588 | Sep 30, 2014 | Theft | Archive (closed) |
| InSync Computer Solutions, Inc. | Business Associate | 50,918 | Jul 11, 2014 | Other | Archive (closed) |
| D&J Optical Inc. | Health Plan | 1,100 | Jul 7, 2014 | Hacking/IT Incident | Archive (closed) |
| Alabama Department of Public Health | Healthcare Provider | 1,200 | Jun 26, 2014 | Theft | Archive (closed) |
| Flowers Hospital | Healthcare Provider | 629 | Apr 25, 2014 | Theft | Archive (closed) |
| PracMan, Inc. | Business Associate | 1,179 | Mar 10, 2014 | Hacking/IT Incident | Archive (closed) |
| PracMan, Inc. | Business Associate | 1,145 | Mar 7, 2014 | Hacking/IT Incident | Archive (closed) |
| Birmingham Printing and Publishing, Inc dba Paper Airplane | Business Associate | 1,085 | Jan 24, 2014 | Other | Archive (closed) |
| Community Services NW | Healthcare Provider | 2,400 | Feb 2, 2013 | Theft | Archive (closed) |
| Baptist Health System | Healthcare Provider | 1,655 | May 4, 2012 | Improper Disposal | Archive (closed) |
| Sutter Medical Foundation | Healthcare Provider | 943,434 | Nov 17, 2011 | Theft | Archive (closed) |
| Troy Regional Medical Center | Healthcare Provider | 880 | Jul 8, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Cahaba Government Benefit Administrators, LLC | Business Associate | 13,412 | May 25, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Rape & Brooks Orthodontics, P.C. | Healthcare Provider | 20,744 | Mar 28, 2011 | Theft | Archive (closed) |
| Southern Perioperative Services, P.C. | Healthcare Provider | 2,000 | Dec 30, 2010 | Theft | Archive (closed) |
| Computer Program and Systems, Inc. (CPSI) | Business Associate | 768 | Mar 30, 2010 | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.