NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 10 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| New York City Health & Hospitals Corporation | Healthcare Provider | 10,058 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| NYU Urology Associates | Healthcare Provider | 835 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Mount Sinai Beth Israel | Healthcare Provider | 10,793 | Oct 3, 2014 | Theft | Archive (closed) |
| Thomas Cristello, Chiropractor PC | Healthcare Provider | 914 | Sep 9, 2014 | Loss | Archive (closed) |
| Group Health Incorporated | Health Plan | 802 | Aug 27, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Sloane Stecker Physical Therapy, PC | Healthcare Provider | 2,000 | Jun 24, 2014 | Theft | Archive (closed) |
| NRAD Medical Associates, P.C. | Healthcare Provider | 97,000 | Jun 20, 2014 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| NYU Hospitals Center | Healthcare Provider | 872 | Jun 20, 2014 | Theft | Archive (closed) |
| Jamaica Hospital Medical Center | Healthcare Provider | 26,162 | May 23, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Willis North America Inc. Medical Expense Benefit Plan | Health Plan | 4,830 | Apr 24, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Lewis J. Sims, DPM, PC dba Sims and Associates Podiatry | Healthcare Provider | 6,475 | Feb 12, 2014 | Other, Theft | Archive (closed) |
| The Brooklyn Hospital Center | Healthcare Provider | 2,172 | Jan 22, 2014 | Theft | Archive (closed) |
| Hospital for Special Surgery | Healthcare Provider | 937 | Jan 21, 2014 | Theft | Archive (closed) |
| Memorial Sloan-Kettering Cancer Center | Healthcare Provider | 2,279 | Nov 13, 2013 | Loss | Archive (closed) |
| Martin Luther King Jr. Health Center, Inc. | Business Associate | 37,000 | Oct 25, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Bronx Lebanon Hospital Center | Business Associate | 10,930 | Oct 25, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Mount Sinai Medical Center | Healthcare Provider | 610 | Oct 21, 2013 | Loss | Archive (closed) |
| Mount SInai Medical Center | Healthcare Provider | 1,586 | Oct 4, 2013 | Improper Disposal | Archive (closed) |
| South Shore Physicians, PC | Healthcare Provider | 8,000 | Sep 16, 2013 | Theft | Archive (closed) |
| The Brookdale Hospital and Medical Center | Healthcare Provider | 2,700 | Jul 20, 2013 | Loss | Archive (closed) |
| Independence Care System | Healthcare Provider | 2,434 | May 24, 2013 | Theft | Archive (closed) |
| Dent Neurologic Institute | Healthcare Provider | 10,000 | May 14, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Rochester Medical Center & Affiliates | Healthcare Provider | 537 | May 6, 2013 | Loss | Archive (closed) |
| The Guidance Center of Westchester | Healthcare Provider | 1,416 | Apr 17, 2013 | Theft | Archive (closed) |
| Health Plus Amerigroup | Business Associate | 28,187 | Mar 1, 2013 | Theft | Archive (closed) |
| BlueCross BlueShield of Western New York | Business Associate | 725 | Jan 22, 2013 | Theft | Archive (closed) |
| Lee D. Pollan, DMD, PC | Healthcare Provider | 19,178 | Jan 11, 2013 | Theft | Archive (closed) |
| Group Health Incorporated | Health Plan | 1,771 | Jan 2, 2013 | Theft | Archive (closed) |
| OHP PHSP, Inc. | Business Associate | 28,187 | Dec 21, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Columbia University Medical Center and NewYork-Presbyterian Hospital | Healthcare Provider | 4,929 | Dec 14, 2012 | Theft | Archive (closed) |
| QUANTERION SOLUTIONS INC | Business Associate | 1,017 | Nov 1, 2012 | Theft | Archive (closed) |
| The Feinstein Institute for Medical Reserch | Healthcare Provider | 13,000 | Sep 14, 2012 | Theft | Archive (closed) |
| NYU School of Medicine Faculty Group Practice | Healthcare Provider | 8,488 | Jul 23, 2012 | Theft | Archive (closed) |
| Memorial Sloan-Kettering Cancer Center | Healthcare Provider | 568 | Jun 8, 2012 | Theft | Archive (closed) |
| Rhinebeck Health Center/Center for Progressive Medicine | Healthcare Provider | 6,745 | Apr 12, 2012 | Theft | Archive (closed) |
| Affinity Health Plan | Health Plan | 933 | Apr 10, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| CenterLight Healthcare | Health Plan | 642 | Apr 3, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| William F. DeLuca Jr., M.D. | Healthcare Provider | 577 | Mar 13, 2012 | Theft | Archive (closed) |
| Oldendorf Medical Services, PLLC | Healthcare Provider | 549 | Jan 24, 2012 | Theft | Archive (closed) |
| Blue Vantage Group | Business Associate | 7,226 | Dec 9, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Morris Heights Health Center | Healthcare Provider | 927 | Oct 27, 2011 | Theft | Archive (closed) |
| NYU Hospital for Joint Diseases Inventory Management Department | Healthcare Provider | 2,600 | Sep 26, 2011 | Theft | Archive (closed) |
| The Mount Sinai Hospital | Healthcare Provider | 712 | Jul 8, 2011 | Theft | Archive (closed) |
| St. Mary's Hospital for Children | Business Associate | 550 | May 19, 2011 | Theft | Archive (closed) |
| IBM | Business Associate | 1,900,000 | Apr 14, 2011 | Unknown | Archive (closed) |
| NYU School of Medicine Faculty Group Practice | Healthcare Provider | 670 | Mar 28, 2011 | Theft | Archive (closed) |
| Kings County Hospital Center | Healthcare Provider | 542 | Nov 30, 2010 | Theft | Archive (closed) |
| Professional Transcription Company, Inc. | Business Associate | 1,744 | Nov 24, 2010 | Theft | Archive (closed) |
| Visiting Nurse Service Association of Schenectady County | Healthcare Provider | 535 | Nov 12, 2010 | Theft | Archive (closed) |
| WESTMED Medical Group | Healthcare Provider | 578 | Oct 5, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.