DC · HHS OCR reports
HIPAA breaches in District of Columbia
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in District of Columbia.
Reports
34
Individuals affected
741,808
Under investigation
3
Top type: Unauthorized Access/Disclosure
State breach notification law
D.C. Code §§ 28-3851 to 28-3853 (Consumer Security Breach Notification) (amended 2020)
Timing: Not applicable - government exempt DC explicitly excludes the District of Columbia government and its
Read the District of Columbia data breach notification law summaryAll reports, newest first
Page 1 of 1. 34 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Casper Orthopedic Associates, PC | Healthcare Provider | 56,197 | Jul 23, 2026 | Hacking/IT Incident | Under investigation |
| Community Connections | Healthcare Provider | 18,943 | May 18, 2026 | Hacking/IT Incident | Under investigation |
| World Trade Center Health Program | Health Plan | 1,071 | May 7, 2026 | Hacking/IT Incident | Archive (closed) |
| Washington VA Medical Center | Healthcare Provider | 1,467 | Apr 16, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Veterans Health Administration | Healthcare Provider | 1,847 | Jan 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Community Connections | Healthcare Provider | 18,949 | Dec 11, 2024 | Hacking/IT Incident | Under investigation |
| Veterans Health Administration | Healthcare Provider | 2,302 | Dec 3, 2024 | Hacking/IT Incident | Archive (closed) |
| CareFirst BlueCross BlueShield Community Health Plan - District of Columbia | Business Associate | 2,189 | Feb 16, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Veterans Health Administration | Healthcare Provider | 46,677 | Jan 30, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Fincantieri Marine Group, LLC | Health Plan | 11,535 | Jan 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | Healthcare Provider | 2,380 | Jan 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| United Bankshares, Inc. | Business Associate | 8,801 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| Community of Hope D.C. | Healthcare Provider | 580 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Foxhall Ob Gyn Associates | Healthcare Provider | 27,000 | Jun 24, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Howard University College of Dentistry | Healthcare Provider | 80,915 | Nov 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Washington DC VA Medical Center | Healthcare Provider | 1,193 | Nov 1, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The George Washington University Medical Faculty Associates | Healthcare Provider | 576 | Jul 13, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Trusted Health Plans, Inc. | Health Plan | 200,665 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Planned Parenthood of Metro Washington | Healthcare Provider | 142,982 | Nov 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Veterans Health Administration | Healthcare Provider | 44,308 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Service Benefit Plan Administrative Services Corporation | Business Associate | 11,536 | Dec 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Veterans Health Administration | Healthcare Provider | 19,254 | Nov 6, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Children’s National Medical Center | Healthcare Provider | 722 | Mar 30, 2018 | Theft | Archive (closed) |
| Braun Dermatology & Skin Cancer Center | Healthcare Provider | 1,200 | Jul 28, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Washington DC VA Medical Center | Healthcare Provider | 1,062 | May 31, 2016 | Theft | Archive (closed) |
| Children's National Medical Center | Healthcare Provider | 4,107 | Apr 25, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Howard University | Healthcare Provider | 1,445 | Jul 10, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Children's National Medical Center | Healthcare Provider | 18,000 | Feb 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Inclusion Research Institute | Business Associate | 2,200 | Apr 24, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Georgetown University Hospital | Healthcare Provider | 1,549 | Feb 15, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| DC Chartered Health Plan, Inc | Health Plan | 540 | Jul 23, 2010 | Theft | Archive (closed) |
| Georgetown University Hospital | Healthcare Provider | 2,416 | May 13, 2010 | Other, Theft | Archive (closed) |
| Service Benefits Plan Administrative Services Corp | Business Associate | 3,400 | Jan 8, 2010 | Theft | Archive (closed) |
| Health Services for Children with Special Needs, Inc. | Health Plan | 3,800 | Nov 17, 2009 | Loss | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.