Skip to content
Network USA

KY ยท HHS OCR reports

HIPAA breaches in Kentucky

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Kentucky.

Reports

124

Individuals affected

11,757,126

Under investigation

7

Top type: Hacking/IT Incident

State breach notification law

This state has 2 separate breach notification statutes

Timing: notify affected individuals in the most expedient time possible without unreasonable delay, consistent

Read the Kentucky data breach notification law summary

All reports, newest first

Page 1 of 3. 124 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Kentucky Mountain Health AllianceHealthcare Provider30,830Jun 19, 2026Hacking/IT IncidentUnder investigation
Kentucky MSO, LLCHealthcare Provider537Jun 13, 2026Hacking/IT IncidentArchive (closed)
Insurance ACE/Humana Inc.Health Plan1,761May 15, 2026Unauthorized Access/DisclosureUnder investigation
Stewart Home & SchoolHealthcare Provider3,677Apr 23, 2026Hacking/IT IncidentUnder investigation
Pennyroyal Healthcare ServicesHealthcare Provider24,122Mar 23, 2026Hacking/IT IncidentUnder investigation
Insurance ACE/Humana Inc.Health Plan1,000Feb 28, 2026Hacking/IT IncidentArchive (closed)
Orthopaedic Institute of Western KentuckyHealthcare Provider11,474Feb 27, 2026Hacking/IT IncidentArchive (closed)
CenterWell ACE/Home SolutionsHealthcare Provider7,972Feb 27, 2026Hacking/IT IncidentArchive (closed)
HealthPoint Family CareHealthcare Provider7,990Jan 5, 2026Unauthorized Access/DisclosureArchive (closed)
Physicians to Children & AdolescentsHealthcare Provider9,536Oct 24, 2025Hacking/IT IncidentUnder investigation
Dermatology AssociatesHealthcare Provider501Oct 3, 2025Hacking/IT IncidentArchive (closed)
Jordan Drug, Inc.Healthcare Provider4,947Jun 26, 2025Hacking/IT IncidentArchive (closed)
Central Kentucky RadiologyHealthcare Provider166,953Jun 13, 2025Hacking/IT IncidentUnder investigation
AffirmedRx PBCBusiness Associate1,089Jun 5, 2025Unauthorized Access/DisclosureArchive (closed)
Cumberland County Hospital AssociationHealthcare Provider36,659Jun 2, 2025Hacking/IT IncidentArchive (closed)
Topy America Inc.Health Plan1,827Mar 14, 2025Hacking/IT IncidentArchive (closed)
Insurance ACE/Humana Inc.Health Plan8,553Feb 6, 2025Unauthorized Access/DisclosureArchive (closed)
Inlet Health dba CommunicareHealthcare Provider3,771Jan 22, 2025Hacking/IT IncidentUnder investigation
Lexington Diagnostic CenterHealthcare Provider29,819Dec 24, 2024Hacking/IT IncidentArchive (closed)
Hardin County Emergency Medical ServicesHealthcare Provider1,046Nov 27, 2024Hacking/IT IncidentArchive (closed)
Seven Counties Services, Inc.Healthcare Provider132,609Oct 4, 2024Hacking/IT IncidentArchive (closed)
Insurance ACE/Humana Inc.Health Plan15,003Jun 5, 2024Unauthorized Access/DisclosureArchive (closed)
Hospice of the Bluegrass, Inc. dba Bluegrass Care NavigatorsHealthcare Provider2,282Apr 17, 2024Hacking/IT IncidentArchive (closed)
Cornerstone Healthcare Group Management Services LLCBusiness Associate484,957Mar 14, 2024Hacking/IT IncidentArchive (closed)
Insurance ACE/Humana Inc.Health Plan3,480Feb 14, 2024Unauthorized Access/DisclosureArchive (closed)
Humana Inc.Health Plan12,339Feb 8, 2024Unauthorized Access/DisclosureArchive (closed)
Humana Inc.Health Plan6,440Feb 6, 2024Unauthorized Access/DisclosureArchive (closed)
Kentucky Cabinet for Health and Family ServicesHealth Plan857Feb 5, 2024Unauthorized Access/DisclosureArchive (closed)
Humana Inc.Health Plan12,539Jan 22, 2024Unauthorized Access/DisclosureArchive (closed)
Humana Inc.Health Plan2,844Dec 21, 2023Hacking/IT IncidentArchive (closed)
KY Cabinet for Health and Family Services (CHFS)Healthcare Provider2,062Dec 3, 2023Hacking/IT IncidentArchive (closed)
Hospice of the Bluegrass, Inc. dba Bluegrass Care NavigatorsHealthcare Provider7,664Sep 26, 2023Hacking/IT IncidentArchive (closed)
UofL HealthHealthcare Provider8,175Aug 18, 2023Hacking/IT IncidentArchive (closed)
Norton Healthcare Inc.Healthcare Provider2,500,000Jul 7, 2023Hacking/IT IncidentArchive (closed)
Humana Inc.Health Plan9,372Jun 15, 2023Unauthorized Access/DisclosureArchive (closed)
PharMerica CorporationHealthcare Provider5,815,591May 12, 2023Hacking/IT IncidentArchive (closed)
Ethan Health, LLCHealthcare Provider4,047Apr 14, 2023Hacking/IT IncidentArchive (closed)
Banis Plastic SurgeryHealthcare Provider4,498Apr 4, 2023Unauthorized Access/DisclosureArchive (closed)
Associates in DermatologyHealthcare Provider12,060Mar 17, 2023Hacking/IT IncidentArchive (closed)
CorrectCare Integrated Health, Inc.Business Associate502,089Oct 31, 2022Unauthorized Access/DisclosureArchive (closed)
CorrectCare Integrated Health, Inc.Business Associate4,380Oct 31, 2022Unauthorized Access/DisclosureArchive (closed)
Taylor Regional HospitalHealthcare Provider190,209Mar 21, 2022Hacking/IT IncidentArchive (closed)
Southern Orthopaedic Associates d/b/a Orthopaedic Institute of Western KentuckyHealthcare Provider106,910Dec 20, 2021Hacking/IT IncidentArchive (closed)
Citizens Financial CorporationBusiness Associate688Nov 15, 2021Unauthorized Access/DisclosureArchive (closed)
Humana IncHealth Plan1,823Nov 9, 2021Hacking/IT IncidentArchive (closed)
Humana IncHealth Plan1,965Nov 4, 2021Hacking/IT IncidentArchive (closed)
Humana IncHealth Plan4,424Oct 12, 2021Hacking/IT IncidentArchive (closed)
Humana IncHealth Plan948Sep 28, 2021Unauthorized Access/DisclosureArchive (closed)
Electrical Workers Local 369Health Plan662Jul 23, 2021Hacking/IT IncidentArchive (closed)
Hosparus, Inc. dba Care Guide Partners Inc.Healthcare Provider1,545Jun 21, 2021Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.