AL · HHS OCR reports
HIPAA breaches in Alabama
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Alabama.
Reports
101
Individuals affected
14,149,604
Under investigation
12
Top type: Hacking/IT Incident
State breach notification law
Ala. Code §§ 8-38-1 to 8-38-12 (Data Breach Notification Act of 2018) (amended 2018)
Timing: 45 days Alabama requires covered entities (including businesses) to notify affected individuals within 45
Read the Alabama data breach notification law summaryAll reports, newest first
Page 3 of 3. 101 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Hypertension, Nephrology, Dialysis and Transplantation, PC | Healthcare Provider | 2,465 | Mar 27, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.