Skip to content
Network USA

NY · HHS OCR reports

HIPAA breaches in New York

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.

Reports

516

Individuals affected

42,558,825

Under investigation

44

Top type: Hacking/IT Incident

State breach notification law

N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)

Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient

Read the New York data breach notification law summary

All reports, newest first

Page 2 of 11. 516 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Human Development Services of WestchesterHealthcare Provider607Jul 18, 2025Hacking/IT IncidentUnder investigation
Amalgamated Meat Cutters and Retail Food Store Employees Union Local 342 Health Care FundHealth Plan56,615Jun 26, 2025Hacking/IT IncidentUnder investigation
Kelley Drye & Warren LLPBusiness Associate771Jun 12, 2025Hacking/IT IncidentUnder investigation
Apex Global Solutions, LLCBusiness Associate14,741Jun 10, 2025Hacking/IT IncidentArchive (closed)
NYC Health + HospitalsHealthcare Provider5,728Jun 6, 2025Hacking/IT IncidentUnder investigation
The Smith Institute for UrologyHealthcare Provider2,263May 28, 2025Unauthorized Access/DisclosureArchive (closed)
North Shore University Hospital Sleep Disorders CenterHealthcare Provider13,332May 23, 2025Unauthorized Access/DisclosureUnder investigation
Sports Physical Therapy, Occupational Therapy and Rehabilitation Services of the North Shore, P.L.L.CHealthcare Provider6,195May 23, 2025Unauthorized Access/DisclosureUnder investigation
NHPP Physical Medicine and RehabilitationHealthcare Provider1,353May 23, 2025Unauthorized Access/DisclosureUnder investigation
Bassett Healthcare NetworkHealthcare Provider5,565Apr 14, 2025Unauthorized Access/DisclosureArchive (closed)
Allegany Council on Alcoholism & Substance Abuse, Inc.Healthcare Provider696Apr 2, 2025Hacking/IT IncidentUnder investigation
Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty PharmacyHealthcare Provider2,348Mar 14, 2025Hacking/IT IncidentArchive (closed)
Liberty Resources, Inc.Healthcare Provider103,711Mar 4, 2025Hacking/IT IncidentArchive (closed)
Stram Center for Integrative MedicineHealthcare Provider15,263Feb 28, 2025TheftArchive (closed)
Atlantis Operating LLC d/b/a The Phoenix Rehabilitation and Nursing CenterHealthcare Provider6,459Feb 26, 2025Hacking/IT IncidentArchive (closed)
HHH Acquisition, LLC d/b/a The Grove at Valhalla Rehabilitation and Nursing CenterHealthcare Provider4,196Feb 26, 2025Hacking/IT IncidentArchive (closed)
Roswell Park Comprehensive Cancer CenterHealthcare Provider11,435Feb 24, 2025TheftArchive (closed)
Central New York CardiologyHealthcare Provider93,983Feb 19, 2025Hacking/IT IncidentArchive (closed)
Somnia, Inc.Business Associate19,069Feb 14, 2025Hacking/IT IncidentArchive (closed)
The League Treatment CenterHealthcare Provider1,826Feb 6, 2025Hacking/IT IncidentArchive (closed)
Jewish Child Care Association of New YorkBusiness Associate1,962Jan 31, 2025Hacking/IT IncidentArchive (closed)
Endo Group, LLCHealthcare Provider4,498Jan 27, 2025Hacking/IT IncidentArchive (closed)
University Diagnostic Medical Imaging, PCHealthcare Provider138,080Jan 21, 2025Hacking/IT IncidentArchive (closed)
Buffalo Surgery CenterHealthcare Provider64,000Jan 4, 2025Hacking/IT IncidentArchive (closed)
Richmond University Medical CenterHealthcare Provider674,033Dec 19, 2024Hacking/IT IncidentArchive (closed)
Maternal Fetal Medicine Associates, PLLC, Carnegie Hill Imaging for Women, and Carnegie Women’s Health (collectively, “the Practices”)Healthcare Provider79,691Nov 15, 2024Hacking/IT IncidentArchive (closed)
Equinox, Inc.Healthcare Provider21,565Nov 15, 2024Hacking/IT IncidentArchive (closed)
Liberty Endo, LLCHealthcare Provider942Nov 13, 2024Hacking/IT IncidentArchive (closed)
MDLand International CorporationBusiness Associate63,073Nov 7, 2024Hacking/IT IncidentArchive (closed)
Mohawk Valley Cardiology, P.C.Healthcare Provider4,973Nov 4, 2024Unauthorized Access/DisclosureArchive (closed)
Brunswick Hospital CenterHealthcare Provider40,764Nov 1, 2024Hacking/IT IncidentArchive (closed)
Oregon Reproductive Medicine, LLC d/b/a ORM FertilityHealthcare Provider2,322Oct 25, 2024Hacking/IT IncidentArchive (closed)
Advanced Recovery Equipment & Supplies, LLCHealthcare Provider56,000Oct 18, 2024Hacking/IT IncidentUnder investigation
Center for Urban Community ServicesBusiness Associate38,000Oct 11, 2024Hacking/IT IncidentArchive (closed)
ATSG, IncBusiness Associate909,469Oct 4, 2024Hacking/IT IncidentArchive (closed)
General Physician, P.C.Healthcare Provider167,387Oct 4, 2024Hacking/IT IncidentArchive (closed)
Long Island Plastic Surgical Group, P.C.Healthcare Provider161,707Oct 4, 2024Hacking/IT IncidentArchive (closed)
Seneca Nation Health SystemHealthcare Provider16,879Sep 6, 2024Hacking/IT IncidentArchive (closed)
Project HospitalityHealthcare Provider42,432Sep 4, 2024Hacking/IT IncidentArchive (closed)
Excelsior Orthopaedics, LLCHealthcare Provider286,935Aug 21, 2024Hacking/IT IncidentArchive (closed)
Gramercy Surgery Center, Inc.Healthcare Provider52,372Aug 9, 2024Hacking/IT IncidentArchive (closed)
PG Dental d/b/a Aire Dental ArtsHealthcare Provider10,200Aug 9, 2024Hacking/IT IncidentArchive (closed)
Hamilton-Madison HouseHealthcare Provider1,114Aug 2, 2024Hacking/IT IncidentArchive (closed)
Sheet Metal Workers Local Union #83 Insurance Fund and Annuity FundHealth Plan2,184Jul 3, 2024Hacking/IT IncidentArchive (closed)
The Mount Kisco Surgery Center LLC d/b/a The Ambulatory Surgery Center of WestchesterHealthcare Provider22,139Jun 25, 2024Hacking/IT IncidentArchive (closed)
Memorial Sloan Kettering Cancer CenterHealthcare Provider12,274Jun 25, 2024Hacking/IT IncidentArchive (closed)
Ambulnz Holdings, LLCHealthcare Provider43,773Jun 21, 2024Hacking/IT IncidentArchive (closed)
Zwanger-Pesiri RadiologyHealthcare Provider985Jun 18, 2024Unauthorized Access/DisclosureArchive (closed)
Aptihealth, Inc.Healthcare Provider19,805Jun 12, 2024Hacking/IT IncidentArchive (closed)
Orchard Park Fire District EMSHealthcare Provider2,089May 29, 2024Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.