KY ยท HHS OCR reports
HIPAA breaches in Kentucky
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Kentucky.
Reports
124
Individuals affected
11,757,126
Under investigation
7
Top type: Hacking/IT Incident
State breach notification law
This state has 2 separate breach notification statutes
Timing: notify affected individuals in the most expedient time possible without unreasonable delay, consistent
Read the Kentucky data breach notification law summaryAll reports, newest first
Page 2 of 3. 124 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| UofL Health, Inc. | Healthcare Provider | 42,465 | Jun 7, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | Health Plan | 64,654 | Feb 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Meade Physicians, Inc. dba Brandenburg Family Medicine | Healthcare Provider | 696 | Dec 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Bardstown Primary Care dba: Physicians to Children & Adolescents | Healthcare Provider | 859 | Nov 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Hi-Tech Artificial Limbs, Inc. | Healthcare Provider | 529 | Nov 20, 2020 | Loss | Archive (closed) |
| Seven Counties Services, Inc. | Healthcare Provider | 13,375 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Bluegrass Care Navigators | Healthcare Provider | 2,343 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Kentucky HealthCare | Healthcare Provider | 163,774 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Waystar Health | Business Associate | 1,021 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| HealthFirst Bluegrass | Healthcare Provider | 971 | Aug 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 564 | Aug 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Imperium Health LLC | Business Associate | 139,114 | Aug 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Kentuckiana Regional Planning and Development Agency | Healthcare Provider | 3,663 | Jun 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of KY, Inc. | Healthcare Provider | 24,013 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 756 | Oct 2, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Associates in Dermatology, PLLC | Healthcare Provider | 9,020 | Jul 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 863 | Jun 3, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospice Care Plus, Inc. | Healthcare Provider | 2,033 | May 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc | Health Plan | 5,569 | Feb 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Kentucky Counseling Center, LLC | Healthcare Provider | 16,440 | Feb 11, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc. | Health Plan | 598 | Jan 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 1,211 | Jan 9, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Physicians of Winter Park, Inc. | Healthcare Provider | 8,429 | Jan 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 684 | Dec 31, 2018 | Theft | Archive (closed) |
| MorshedEye, PLLC | Healthcare Provider | 1,100 | Apr 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| CarePlus Health Plan [case #HU1800066] | Health Plan | 11,248 | Feb 5, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Onco360 and CareMed Specialty Pharmacy | Healthcare Provider | 53,173 | Jan 12, 2018 | Hacking/IT Incident | Archive (closed) |
| Pulmonary Specialists of Louisville, PSC | Healthcare Provider | 32,000 | Nov 27, 2017 | Hacking/IT Incident | Archive (closed) |
| Humana Inc | Health Plan | 5,764 | Nov 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Baptist Health Louisville | Healthcare Provider | 880 | Nov 21, 2017 | Hacking/IT Incident | Archive (closed) |
| TJ Samson Community Hospital | Healthcare Provider | 683 | Oct 24, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc [case # HU17001CC] | Health Plan | 3,831 | Apr 18, 2017 | Hacking/IT Incident | Archive (closed) |
| Ashland Women's Health | Healthcare Provider | 19,727 | Apr 4, 2017 | Hacking/IT Incident | Archive (closed) |
| Women's Care of Somerset | Healthcare Provider | 1,806 | Mar 31, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Estill County Chiropractic, PLLC | Healthcare Provider | 5,335 | Mar 16, 2017 | Hacking/IT Incident | Archive (closed) |
| Commonwealth Health Corporation | Healthcare Provider | 697,800 | Mar 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| American Urgent Care Center, PSC | Healthcare Provider | 822 | Jan 5, 2017 | Theft | Archive (closed) |
| Humana Inc. [case #HU16004F3] | Health Plan | 3,674 | Dec 19, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Jennie Stuart Medical Center | Healthcare Provider | 1,500 | Sep 23, 2016 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Group, Inc. dba St. Elizabeth Physicians | Healthcare Provider | 674 | Aug 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Saints Mary and Elizabeth Hospital | Healthcare Provider | 1,682 | Jun 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Associates In EyeCare, P.S.C. | Healthcare Provider | 971 | May 16, 2016 | Theft | Archive (closed) |
| OH Muhlenberg, LLC | Healthcare Provider | 84,681 | Nov 13, 2015 | Hacking/IT Incident | Archive (closed) |
| CarePlus Health Plans [case 18772] | Health Plan | 2,873 | Oct 6, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc [Case 18652] | Health Plan | 2,815 | Sep 30, 2015 | Theft | Archive (closed) |
| T.J. Samson Community Hospital | Healthcare Provider | 2,060 | Aug 7, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| International Union of Operating Engineers Local Unions 181, 320 & TVA Health and Welfare Trust Fund | Health Plan | 5,440 | Apr 9, 2015 | Hacking/IT Incident | Archive (closed) |
| ReachOut Home Care [Case #16687] | Healthcare Provider | 4,500 | Dec 9, 2014 | Theft | Archive (closed) |
| Seven Counties Services, Inc. | Healthcare Provider | 727 | Oct 22, 2014 | Improper Disposal, Unauthorized Access/Disclosure | Archive (closed) |
| Owensboro Medical Practice, PLLC | Healthcare Provider | 4,077 | Sep 25, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.