Skip to content
Network USA

MD · HHS OCR reports

HIPAA breaches in Maryland

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Maryland.

Reports

172

Individuals affected

19,570,764

Under investigation

14

Top type: Hacking/IT Incident

State breach notification law

Md. Code Ann., Com. Law §§ 14-3501 to 14-3508 (Personal Information Protection) (amended

Timing: not later than 45 days after discovering or being notified of a breach. 33

Read the Maryland data breach notification law summary

All reports, newest first

Page 1 of 4. 172 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
District of Columbia, Department of Health Care FinanceHealth Plan399,086Sep 3, 2026Unauthorized Access/DisclosureArchive (closed)
Pennsylvanie Dermatology PartnersHealthcare Provider500Jul 30, 2026Hacking/IT IncidentUnder investigation
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic PartnersHealthcare Provider7,213Apr 17, 2026Hacking/IT IncidentUnder investigation
Medi-Rents & Sales, Inc.Healthcare Provider1,524Mar 25, 2026Hacking/IT IncidentArchive (closed)
MCS, P.C.Business Associate3,478Feb 2, 2026Hacking/IT IncidentArchive (closed)
Mindoula Health, Inc.Business Associate626Feb 2, 2026Hacking/IT IncidentArchive (closed)
180 Health Partners, Inc.Business Associate1,167Jan 30, 2026Hacking/IT IncidentArchive (closed)
Axis Healthcare Group P.C.Healthcare Provider3,537Jan 28, 2026Hacking/IT IncidentArchive (closed)
Baltimore City Health DepartmentHealthcare Provider2,597Jan 28, 2026Hacking/IT IncidentArchive (closed)
True RCM, a Rapid Care Transcription, Inc., CompanyBusiness Associate1,247Jan 20, 2026Hacking/IT IncidentUnder investigation
Insightin Health, Inc.Business Associate1,949,534Jan 16, 2026Hacking/IT IncidentUnder investigation
Sheppard PrattHealthcare Provider753Jan 9, 2026Hacking/IT IncidentArchive (closed)
Affiliates of Nexion Health, Inc.Healthcare Provider1,027Dec 12, 2025Unauthorized Access/DisclosureArchive (closed)
Columbia Medical PracticeHealthcare Provider94,131Dec 5, 2025Hacking/IT IncidentUnder investigation
MedStar Health, Inc.Healthcare Provider64,332Dec 3, 2025Hacking/IT IncidentUnder investigation
Adventist HealthCareHealthcare Provider1,300Nov 13, 2025LossArchive (closed)
Bay Medical LLCHealthcare Provider1,483Oct 9, 2025Hacking/IT IncidentUnder investigation
Healthcare InteractiveBusiness Associate501Sep 22, 2025Hacking/IT IncidentUnder investigation
People Encouraging PeopleHealthcare Provider13,083Sep 19, 2025Hacking/IT IncidentUnder investigation
Anne Arundel DermatologyHealthcare Provider1,905,000Jul 11, 2025Hacking/IT IncidentUnder investigation
Centers for Medicare & Medicaid ServicesHealth Plan107,154Jun 30, 2025Hacking/IT IncidentUnder investigation
Skin Care Specialty PhysiciansHealthcare Provider1,038Jun 19, 2025Hacking/IT IncidentUnder investigation
MedStar St. Mary's HospitalHealthcare Provider172,915May 29, 2025Hacking/IT IncidentArchive (closed)
Anne Arundel County Department of HealthHealthcare Provider500May 15, 2025Hacking/IT IncidentUnder investigation
Rheumatology Associates of BaltimoreHealthcare Provider28,968Apr 21, 2025Hacking/IT IncidentArchive (closed)
Kelly & Associates Insurance Group, Inc.Business Associate553,332Apr 9, 2025Hacking/IT IncidentUnder investigation
Frederick HealthHealthcare Provider934,326Mar 28, 2025Hacking/IT IncidentArchive (closed)
Fundamental Administrative Services, LLCBusiness Associate56,325Mar 21, 2025Hacking/IT IncidentArchive (closed)
Precision Orthopedics and Sports MedicineHealthcare Provider1,903Feb 13, 2025Hacking/IT IncidentArchive (closed)
Infosys Public Services, Inc. (“Infosys”)Business Associate2,985Jan 31, 2025Unauthorized Access/DisclosureArchive (closed)
LifeBridge Health, IncHealthcare Provider25,895Jan 8, 2025Hacking/IT IncidentArchive (closed)
Center for Vein RestorationBusiness Associate446,094Dec 5, 2024Hacking/IT IncidentArchive (closed)
Potomac Medical Aesthetics, LLCHealthcare Provider2,876Nov 1, 2024Unauthorized Access/DisclosureArchive (closed)
Family Medical CenterHealthcare Provider2,100Oct 29, 2024Hacking/IT IncidentArchive (closed)
Cheasapeake Regional Information System for our Patients, Inc. (CRISP)Business Associate8,008Oct 11, 2024Unauthorized Access/DisclosureArchive (closed)
Easter Seals DC | MD | VA, Inc.Healthcare Provider584Oct 4, 2024Hacking/IT IncidentArchive (closed)
Centers for Medicare & Medicaid ServicesHealth Plan3,112,815Sep 6, 2024Hacking/IT IncidentArchive (closed)
United Urology GroupBusiness Associate10,704Aug 14, 2024Hacking/IT IncidentArchive (closed)
MedStar Health, Inc.Healthcare Provider183,079May 3, 2024Hacking/IT IncidentArchive (closed)
Advarra, Inc.Business Associate596Apr 19, 2024Hacking/IT IncidentArchive (closed)
Moveable Feast, Inc.Healthcare Provider568Apr 16, 2024Improper DisposalArchive (closed)
Forward Healthcare, LLCHealthcare Provider3,999Feb 8, 2024Hacking/IT IncidentArchive (closed)
Bloom Health CentersHealthcare Provider1,954Feb 1, 2024Hacking/IT IncidentArchive (closed)
Coastal Hospice & Palliative CareHealthcare Provider29,100Jan 22, 2024Hacking/IT IncidentArchive (closed)
Retina Group of Washington, PLLCHealthcare Provider455,935Dec 22, 2023Hacking/IT IncidentArchive (closed)
Primary Health & Wellness Center, LLCHealthcare Provider4,792Dec 17, 2023Hacking/IT IncidentArchive (closed)
Westat, Inc.Business Associate20,045Nov 3, 2023Hacking/IT IncidentArchive (closed)
Westat, Inc.Business Associate51,513Oct 13, 2023Hacking/IT IncidentArchive (closed)
Bloom Health CentersHealthcare Provider1,545Sep 1, 2023Hacking/IT IncidentArchive (closed)
Monocacy Valley DentalHealthcare Provider4,000Aug 15, 2023TheftArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.