MD · HHS OCR reports
HIPAA breaches in Maryland
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Maryland.
Reports
172
Individuals affected
19,570,764
Under investigation
14
Top type: Hacking/IT Incident
State breach notification law
Md. Code Ann., Com. Law §§ 14-3501 to 14-3508 (Personal Information Protection) (amended
Timing: not later than 45 days after discovering or being notified of a breach. 33
Read the Maryland data breach notification law summaryAll reports, newest first
Page 4 of 4. 172 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| CareFirst Blue Cross Blue Shield | Health Plan | 1,300,000 | May 20, 2015 | Hacking/IT Incident | Archive (closed) |
| Saint Agnes Health Care, Inc. | Healthcare Provider | 24,967 | Apr 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of the Mid-Atlantic States, Inc. | Health Plan | 630 | Jan 29, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Indian Health Service -Rosebud | Healthcare Provider | 620 | Jul 15, 2014 | Loss | Archive (closed) |
| The Union Labor Life Insurance Company | Healthcare Provider | 42,713 | Jun 27, 2014 | Theft | Archive (closed) |
| IHS | Health Plan | 620 | Jun 19, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Service Coordination, Inc. | Business Associate | 10,766 | Apr 17, 2014 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| IHS | Health Plan | 5,000 | Apr 15, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Indian Health Service | Health Plan | 214,000 | Apr 1, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospice of the Chesapeake | Healthcare Provider | 7,606 | Nov 12, 2013 | Theft | Archive (closed) |
| Catoctin Dental/Richard B. Love, D.D.S., P.A. | Healthcare Provider | 6,400 | Feb 20, 2013 | Hacking/IT Incident | Archive (closed) |
| Center for Pain Management, LLC | Healthcare Provider | 5,822 | Feb 12, 2013 | Theft | Archive (closed) |
| Riderwood Village | Healthcare Provider | 3,230 | Jan 17, 2013 | Theft | Archive (closed) |
| PrevMED | Business Associate | 1,444 | Jun 4, 2012 | Theft | Archive (closed) |
| Lee Miller Rehabilitation Associates | Healthcare Provider | 10,480 | Feb 29, 2012 | Theft | Archive (closed) |
| Catalyst Health Solutions, Inc. | Business Associate | 632 | Feb 28, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Joseph Medical Center | Healthcare Provider | 5,000 | Nov 3, 2011 | Theft | Archive (closed) |
| Coventry Health Care, Inc. | Business Associate | 765 | Mar 18, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Zenith Administrators, Inc. | Business Associate | 800 | Dec 29, 2010 | Theft | Archive (closed) |
| Gary C. Spinks, DMD, PC | Healthcare Provider | 1,000 | Dec 13, 2010 | Hacking/IT Incident | Archive (closed) |
| Johns Hopkins University Applied Physics Laboratory (JHU/APL) Medical and Dental Insurance Plan | Health Plan | 692 | Oct 6, 2010 | Other | Archive (closed) |
| Merkle Direct Marketing | Business Associate | 15,000 | Jan 11, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.