KY ยท HHS OCR reports
HIPAA breaches in Kentucky
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Kentucky.
Reports
124
Individuals affected
11,757,126
Under investigation
7
Top type: Hacking/IT Incident
State breach notification law
This state has 2 separate breach notification statutes
Timing: notify affected individuals in the most expedient time possible without unreasonable delay, consistent
Read the Kentucky data breach notification law summaryAll reports, newest first
Page 3 of 3. 124 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Research Integrity, LLC | Business Associate | 4,077 | Sep 22, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Bon Secours Kentucky | Healthcare Provider | 697 | Sep 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Humana Inc [case #15381] | Health Plan | 2,962 | May 23, 2014 | Theft | Archive (closed) |
| Jewish Hospital | Healthcare Provider | 2,992 | Mar 28, 2014 | Other | Archive (closed) |
| Berea College | Healthcare Provider | 1,000 | Mar 20, 2014 | Other | Archive (closed) |
| Health Help, Inc. | Healthcare Provider | 535 | Dec 10, 2013 | Theft | Archive (closed) |
| HP Enterprise Services | Business Associate | 1,090 | Dec 28, 2012 | Theft | Archive (closed) |
| Alexander J. Tikhtman, M.D. | Healthcare Provider | 2,376 | Oct 12, 2012 | Theft | Archive (closed) |
| Cabinet for Health and Family Services, Department for Community Based Services | Healthcare Provider | 2,500 | Sep 19, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Wolf & Yun | Healthcare Provider | 824 | Jun 22, 2012 | Theft | Archive (closed) |
| University of Kentucky HealthCare | Healthcare Provider | 4,490 | Jun 19, 2012 | Theft | Archive (closed) |
| Robley Rex VA Medical Center | Healthcare Provider | 1,182 | Mar 6, 2012 | Other | Archive (closed) |
| University of Kentucky UK HealthCare | Healthcare Provider | 878 | Nov 23, 2011 | Loss | Archive (closed) |
| Lexington VAMC | Healthcare Provider | 1,432 | Aug 25, 2011 | Theft | Archive (closed) |
| University of Kentucky - UK HealthCare | Healthcare Provider | 3,604 | Jul 28, 2011 | Theft | Archive (closed) |
| Saint Joseph - Berea | Healthcare Provider | 1,986 | Jun 2, 2011 | Loss, Theft | Archive (closed) |
| Omnicare, Inc | Healthcare Provider | 8,845 | Mar 10, 2011 | Theft | Archive (closed) |
| Integranetics | Business Associate | 18,871 | Feb 7, 2011 | Hacking/IT Incident | Archive (closed) |
| Our Lady of Peace Hospital | Healthcare Provider | 24,600 | Dec 29, 2010 | Loss, Theft | Archive (closed) |
| Cumberland Gastroenterology, P.S.C. | Healthcare Provider | 2,200 | Oct 5, 2010 | Theft | Archive (closed) |
| Jewish Hospital | Healthcare Provider | 2,089 | Aug 5, 2010 | Theft | Archive (closed) |
| University of Kentucky | Healthcare Provider | 2,027 | Jun 18, 2010 | Theft | Archive (closed) |
| University of Louisville Research Foundation, Inc., DBA The Kidney Disease Program | Healthcare Provider | 708 | Jun 1, 2010 | Hacking/IT Incident | Archive (closed) |
| Medical Center At Bowling Green | Healthcare Provider | 5,148 | Apr 26, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.