NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 3 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| iCircle Services of the Finger Lakes, Inc. | Health Plan | 3,414 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Montefiore Einstein Advance Care | Healthcare Provider | 2,356 | May 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Columbia University Irving Medical Center | Healthcare Provider | 29,629 | May 6, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Marpai Health | Healthcare Provider | 1,129 | May 2, 2024 | Hacking/IT Incident | Archive (closed) |
| The Epilepsy Foundation of Metro New York | Healthcare Provider | 3,852 | Apr 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Island Ambulatory Surgery Center, LLC | Healthcare Provider | 8,266 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Cattaraugus-Allegany Board of Cooperative Education Services | Business Associate | 15,203 | Apr 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Human Development Services of Westchester, Inc. | Healthcare Provider | 506 | Mar 23, 2024 | Hacking/IT Incident | Archive (closed) |
| M&D Capital Premier Billing LLC | Business Associate | 284,326 | Mar 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Ezras Choilim Health Center, Inc. | Healthcare Provider | 59,861 | Mar 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Western New York Independent Living, Inc. | Healthcare Provider | 2,886 | Mar 19, 2024 | Hacking/IT Incident | Archive (closed) |
| Healthfirst | Health Plan | 6,836 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| A5 PHARMACY INC. | Healthcare Provider | 3,000 | Mar 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Jewish Home Lifecare, Inc. | Healthcare Provider | 104,234 | Mar 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Northeast Orthopedics and Sports Medicine, PLLC | Healthcare Provider | 177,101 | Feb 27, 2024 | Hacking/IT Incident | Archive (closed) |
| OrthopedicsNY, LLP | Healthcare Provider | 656,086 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| UNITE HERE | Business Associate | 95,797 | Feb 23, 2024 | Hacking/IT Incident | Archive (closed) |
| Roswell Park Comprehensive Cancer Center | Healthcare Provider | 755 | Feb 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Tiegerman | Healthcare Provider | 19,000 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Spectrum Vision Partners | Business Associate | 592,237 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Morgan Stanley Health Benefits and Insurance Plan | Health Plan | 2,442 | Jan 4, 2024 | Hacking/IT Incident | Archive (closed) |
| NYC Health + Hospitals | Healthcare Provider | 3,000 | Dec 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Diagnostic Management, LLC | Business Associate | 1,863 | Dec 12, 2023 | Hacking/IT Incident | Archive (closed) |
| Health Alliance Hospital Mary's Avenue Campus | Healthcare Provider | 264,197 | Dec 11, 2023 | Hacking/IT Incident | Archive (closed) |
| VNS CHOICE d/b/a VNS Health Health Plans | Health Plan | 13,584 | Dec 8, 2023 | Hacking/IT Incident | Archive (closed) |
| New Partners, Inc. d/b/a VNS Health Personal Care | Healthcare Provider | 5,175 | Dec 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Affinity Legacy, Inc. | Health Plan | 5,538 | Dec 7, 2023 | Hacking/IT Incident | Archive (closed) |
| The Children’s Home of Wyoming Conference | Healthcare Provider | 1,111 | Dec 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Healthcare Network, Inc. | Healthcare Provider | 500 | Nov 30, 2023 | Hacking/IT Incident | Archive (closed) |
| East River Medical Imaging, PC | Healthcare Provider | 605,809 | Nov 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Wyoming County Community Health System | Healthcare Provider | 26,000 | Nov 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Medical Eye Services, Inc. | Business Associate | 377,931 | Nov 14, 2023 | Hacking/IT Incident | Archive (closed) |
| BBRx Pharmacy | Healthcare Provider | 8,786 | Nov 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Mannings 8th Ave Inc. | Healthcare Provider | 5,796 | Nov 7, 2023 | Hacking/IT Incident | Archive (closed) |
| Confucius Pharmacy | Healthcare Provider | 501 | Nov 7, 2023 | Hacking/IT Incident | Archive (closed) |
| WellLife Network Inc. | Healthcare Provider | 43,875 | Nov 6, 2023 | Hacking/IT Incident | Archive (closed) |
| Catholic Charities of the Diocese of Rockville Centre d/b/a Catholic Charities of Long Island | Healthcare Provider | 13,000 | Nov 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Claxton-Hepburn Medical Center | Healthcare Provider | 757 | Nov 2, 2023 | Hacking/IT Incident | Under investigation |
| Greater Rochester Independent Practice Association, Inc. | Healthcare Provider | 279,156 | Oct 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Oscar Insurance Company of Florida | Health Plan | 1,399 | Oct 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Brooklyn Premier Orthopedics | Healthcare Provider | 48,459 | Oct 6, 2023 | Hacking/IT Incident | Archive (closed) |
| International Business Machines Corporation | Business Associate | 630,755 | Sep 29, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Physio Logic Chiropractic and Physical Therapy, PLLC and Dr. Patty DiBlasio, PC | Healthcare Provider | 9,580 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Physio Logic Medicine, PC | Healthcare Provider | 1,280 | Sep 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Riverdale Mental Health d/b/a Mosaic Mental Health | Healthcare Provider | 7,281 | Sep 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Enzo Clinical Labs, Inc. | Healthcare Provider | 1,700 | Aug 31, 2023 | Hacking/IT Incident | Archive (closed) |
| TAG Urgent Care Support Services, LLC | Business Associate | 516,985 | Aug 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Aspen Dental Management, Inc. | Business Associate | 62,183 | Aug 18, 2023 | Hacking/IT Incident | Archive (closed) |
| SUNY at Buffalo School of Dental Medicine | Healthcare Provider | 765 | Aug 16, 2023 | Hacking/IT Incident | Archive (closed) |
| VNS Health Health Plans | Health Plan | 103,775 | Aug 14, 2023 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.