NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 11 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| NewYork-Presbyterian Hospital and Columbia University Medical Center | Healthcare Provider | 6,800 | Sep 24, 2010 | Theft | Archive (closed) |
| Counseling and Psychotherapy of Throggs Neck | Healthcare Provider | 9,000 | Sep 21, 2010 | Theft | Archive (closed) |
| University of Rochester Medical Center and Affiliates | Healthcare Provider | 857 | Sep 7, 2010 | Loss | Archive (closed) |
| NYU School of Medicine--Aging and Dementia Clinical Research Center | Healthcare Provider | 1,200 | Aug 27, 2010 | Loss | Archive (closed) |
| KPMG LLP | Business Associate | 3,630 | Aug 26, 2010 | Theft | Archive (closed) |
| KPMG LLP | Business Associate | 956 | Aug 26, 2010 | Theft | Archive (closed) |
| Matrix Imaging | Business Associate | 2,631 | Jul 30, 2010 | Theft | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 23,753 | Jul 23, 2010 | Theft | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 16,820 | Jul 23, 2010 | Theft | Archive (closed) |
| NYU Hospitals Center | Healthcare Provider | 2,563 | Jul 7, 2010 | Theft | Archive (closed) |
| Long Island Consultation Center | Healthcare Provider | 800 | Jul 7, 2010 | Theft | Archive (closed) |
| Comprehensive Care Management Corporation | Health Plan | 1,020 | Jun 14, 2010 | Theft | Archive (closed) |
| University of Rochester Medical Center and Affiliates | Healthcare Provider | 2,628 | May 20, 2010 | Other | Archive (closed) |
| Affinity Health Plan, Inc. | Health Plan | 344,579 | Apr 14, 2010 | Theft | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 625 | Mar 9, 2010 | Theft | Archive (closed) |
| Central Brooklyn Medical Group, PC | Healthcare Provider | 500 | Feb 25, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.