MN ยท HHS OCR reports
HIPAA breaches in Minnesota
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Minnesota.
Reports
194
Individuals affected
212,076,397
Under investigation
26
Top type: Hacking/IT Incident
State breach notification law
This state has 2 separate breach notification statutes
Timing: Most expedient time possible and without unreasonable delay Minnesota requires businesses and
Read the Minnesota data breach notification law summaryAll reports, newest first
Page 3 of 4. 194 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Regions Hospital | Healthcare Provider | 52,795 | Sep 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Supervalu Pharmacies, Inc. | Healthcare Provider | 1,593 | Jul 24, 2020 | Theft | Archive (closed) |
| Mille Lacs Health System | Healthcare Provider | 10,630 | May 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Medica Health Plans | Health Plan | 1,710 | Apr 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Medica Insurance Company | Health Plan | 802 | Apr 15, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Minnesota Physicians | Healthcare Provider | 310,666 | Mar 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Lifesprk | Healthcare Provider | 9,000 | Mar 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Lakewood Health System | Healthcare Provider | 1,415 | Mar 16, 2020 | Hacking/IT Incident | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | Health Plan | 3,335 | Feb 4, 2020 | Hacking/IT Incident | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | Health Plan | 934 | Jan 22, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Douglas County Hospital dba Alomere Health | Healthcare Provider | 49,859 | Jan 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Southeastern Minnesota Oral & Maxillofacial Surgery | Healthcare Provider | 80,000 | Nov 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Children's Minnesota | Healthcare Provider | 37,942 | Oct 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Fraser | Healthcare Provider | 2,890 | Aug 30, 2019 | Hacking/IT Incident | Archive (closed) |
| Bayview Dental | Healthcare Provider | 1,938 | Aug 13, 2019 | Hacking/IT Incident | Archive (closed) |
| Hennepin Healthcare System, Inc. dba Hennepin Healthcare | Healthcare Provider | 820 | Jul 25, 2019 | Hacking/IT Incident | Archive (closed) |
| CentraCare Health System | Healthcare Provider | 2,085 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Essentia Health - Duluth | Healthcare Provider | 1,377 | Jul 10, 2019 | Hacking/IT Incident | Archive (closed) |
| St. Croix Hospice | Healthcare Provider | 21,407 | Jul 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Nemadji Research Corporation d/b/a California Reimbursement Enterprises | Business Associate | 14,591 | Jul 8, 2019 | Hacking/IT Incident | Archive (closed) |
| Optum360, LLC | Business Associate | 11,500,000 | Jul 1, 2019 | Hacking/IT Incident | Archive (closed) |
| TenX Systems, LLC d/b/a ResiDex Software | Business Associate | 90,000 | Jun 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Elim Care | Healthcare Provider | 2,500 | Jun 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwestern Health Sciences University | Healthcare Provider | 1,198 | May 21, 2019 | Hacking/IT Incident | Archive (closed) |
| UnitedHealth Group Health Plan Single Affiliated Covered Entity | Health Plan | 20,536 | May 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| American Baptist Homes of the Midwest | Healthcare Provider | 10,993 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Minnesota Eye Consultants | Healthcare Provider | 4,556 | Apr 16, 2019 | Improper Disposal | Archive (closed) |
| Dakota County | Healthcare Provider | 1,026 | Apr 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Riverplace Counseling Center, Inc. | Healthcare Provider | 11,639 | Apr 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Minnesota Department of Human Services | Healthcare Provider | 10,263 | Apr 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Mayo Clinic | Healthcare Provider | 1,902 | Mar 22, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Human Development Center | Healthcare Provider | 1,200 | Mar 22, 2019 | Hacking/IT Incident | Archive (closed) |
| United Hospital District, Inc. | Healthcare Provider | 2,143 | Feb 4, 2019 | Hacking/IT Incident | Archive (closed) |
| Reproductive Medicine and Infertility Associates, P.A. | Healthcare Provider | 40,000 | Feb 1, 2019 | Hacking/IT Incident | Archive (closed) |
| CHI - Lakewood Health | Healthcare Provider | 885 | Jan 31, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Virtual Radiologic Professionals, LLC | Healthcare Provider | 2,568 | Dec 19, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| VIRTUAL RADIOLOGIC PROFESSIONALS, LLC | Healthcare Provider | 846 | Dec 19, 2018 | Hacking/IT Incident | Archive (closed) |
| Smile Designs by Sandwick | Healthcare Provider | 900 | Dec 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Ramsey County | Healthcare Provider | 117,905 | Dec 11, 2018 | Hacking/IT Incident | Archive (closed) |
| Minnesota Department of Human Services | Health Plan | 20,800 | Oct 9, 2018 | Hacking/IT Incident | Archive (closed) |
| Healthland Inc. | Business Associate | 614 | Jun 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Associates in Psychiatry and Psychology | Healthcare Provider | 6,546 | May 18, 2018 | Hacking/IT Incident | Archive (closed) |
| ViaTech Publishing Solutions, Inc. | Health Plan | 2,431 | Apr 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| UnitedHealth Group | Health Plan | 896 | Apr 10, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| UnitedHealth Group | Health Plan | 1,755 | Mar 15, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Miracle-Ear, Inc. and Amplifon (USA), Inc. | Business Associate | 554 | Dec 28, 2017 | Hacking/IT Incident | Archive (closed) |
| CCRM Minneapolis, P.C. | Healthcare Provider | 3,280 | Dec 1, 2017 | Hacking/IT Incident | Archive (closed) |
| MN Urology | Healthcare Provider | 939 | Sep 18, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Ridgeview Medical Center | Healthcare Provider | 1,074 | Sep 8, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Allina Health System | Healthcare Provider | 776 | Feb 23, 2017 | Improper Disposal | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.