MD · HHS OCR reports
HIPAA breaches in Maryland
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Maryland.
Reports
172
Individuals affected
19,570,764
Under investigation
14
Top type: Hacking/IT Incident
State breach notification law
Md. Code Ann., Com. Law §§ 14-3501 to 14-3508 (Personal Information Protection) (amended
Timing: not later than 45 days after discovering or being notified of a breach. 33
Read the Maryland data breach notification law summaryAll reports, newest first
Page 2 of 4. 172 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Howard County General Hospital | Healthcare Provider | 2,975 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Johns Hopkins Health System Corporation | Business Associate | 2,584 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| Centers for Medicare & Medicaid Services | Health Plan | 2,342,357 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| Johns Hopkins Medicine | Healthcare Provider | 310,405 | Jul 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Advanced Medical Management, LLC | Business Associate | 319,485 | Jun 29, 2023 | Hacking/IT Incident | Archive (closed) |
| T. Rowe Price Group, Inc. | Health Plan | 684 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Centers for Medicare & Medicaid Services | Health Plan | 10,011 | Apr 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Atlantic General Hospital | Healthcare Provider | 132,817 | Mar 24, 2023 | Hacking/IT Incident | Archive (closed) |
| US Wellness Inc. | Business Associate | 15,818 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| West Cecil Health Center | Healthcare Provider | 1,136 | Feb 17, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Blakehurst | Healthcare Provider | 1,047 | Dec 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Hope Health Systems Inc. | Healthcare Provider | 9,972 | Nov 21, 2022 | Hacking/IT Incident | Archive (closed) |
| CareFirst Administrators | Health Plan | 14,538 | Nov 18, 2022 | Hacking/IT Incident | Archive (closed) |
| Forest Hill Pediatrics, LLC | Healthcare Provider | 4,850 | Oct 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Family Medicine Shady Grove LLC | Healthcare Provider | 6,482 | Oct 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Magellan Rx Management | Business Associate | 13,663 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Anesthesia Associates of Maryland LLC | Healthcare Provider | 12,405 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Onyx Technology LLC | Business Associate | 96,814 | Aug 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Keswick Multi-Care Center | Healthcare Provider | 1,508 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| New Schryver, LLC d/b/a/ TridentCare | Healthcare Provider | 6,190 | Jun 16, 2022 | Theft | Archive (closed) |
| Chesapeake Eye Center PA | Healthcare Provider | 32,770 | Jun 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Healthcare Assistance Plan for Employees of Seventh-day Adventist Organization of the North American Division | Health Plan | 2,008 | May 13, 2022 | Hacking/IT Incident | Archive (closed) |
| National Imaging Associates, Inc. | Business Associate | 744 | May 2, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| JM Pension Advisory Inc. | Business Associate | 897 | Apr 22, 2022 | Loss | Archive (closed) |
| National Imaging Associates, Inc. | Business Associate | 616 | Apr 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Major League Baseball Players Benefit Plan | Health Plan | 13,156 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Skin Care Specialty Physicians | Healthcare Provider | 1,553 | Dec 21, 2021 | Theft | Archive (closed) |
| The Centers for Advanced Orthopaedics, LLC | Healthcare Provider | 21,162 | Nov 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Maxim Healthcare Group | Healthcare Provider | 65,267 | Nov 4, 2021 | Hacking/IT Incident | Archive (closed) |
| JEV Plastic Surgery & Medical Aesthetics | Healthcare Provider | 1,620 | Nov 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Luminis Health Anne Arundel Medical Center | Healthcare Provider | 824,450 | Nov 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Griffith Energy Services Inc. Welfare Benefit Plan | Health Plan | 2,693 | Sep 24, 2021 | Hacking/IT Incident | Archive (closed) |
| University of Maryland, Baltimore | Business Associate | 37,263 | Jul 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Turning Point Clinic | Healthcare Provider | 700 | Jun 3, 2021 | Hacking/IT Incident | Archive (closed) |
| TidalHealth Peninsula Regional | Healthcare Provider | 4,070 | May 26, 2021 | Hacking/IT Incident | Archive (closed) |
| St. Agnes Healthcare Inc. | Healthcare Provider | 2,821 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| LifeBridge Community Gastroenterology, LLC dba Woodholme Gastroenterology | Healthcare Provider | 66,342 | Apr 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Health Prime International | Business Associate | 17,562 | Mar 31, 2021 | Hacking/IT Incident | Archive (closed) |
| Three Lower Counties Community Services, Inc. d/b/a Chesapeake Health Care | Healthcare Provider | 2,505 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| The Centers for Advanced Orthopaedics | Healthcare Provider | 125,291 | Mar 25, 2021 | Hacking/IT Incident | Archive (closed) |
| Montgomery Hospice, Inc. | Healthcare Provider | 6,741 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
| US Fertility LLC | Business Associate | 878,550 | Nov 25, 2020 | Hacking/IT Incident | Archive (closed) |
| The Tree House Child Advocacy Center of Montgomery County | Business Associate | 514 | Nov 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| MedStar Health, Inc. | Healthcare Provider | 668 | Sep 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Adventist HealthCare | Healthcare Provider | 13,041 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Dynasplint Systems, Inc. | Healthcare Provider | 102,800 | Aug 6, 2020 | Hacking/IT Incident | Archive (closed) |
| University of Maryland Faculty Physicians, Inc. / University of Maryland Medical Center | Healthcare Provider | 33,896 | Jul 24, 2020 | Hacking/IT Incident | Archive (closed) |
| Maryland Health Enterprises DBA Lorien Health Services | Healthcare Provider | 537 | Jul 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Complete Care of Virginia, LLC | Health Plan | 3,568 | Jun 15, 2020 | Hacking/IT Incident | Archive (closed) |
| Magellan Healthcare | Business Associate | 50,410 | Jun 12, 2020 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.