NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 4 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Parsley Health, Inc. | Business Associate | 1,004 | Jul 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Quatela Center for Plastic Surgery | Healthcare Provider | 1,085 | Jun 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Enzo Clinical Labs, Inc. | Healthcare Provider | 2,470,000 | Jun 5, 2023 | Hacking/IT Incident | Archive (closed) |
| CareNet Medical Group, PC | Healthcare Provider | 10,059 | Jun 2, 2023 | Hacking/IT Incident | Archive (closed) |
| Maimonides Medical Center | Healthcare Provider | 33,000 | Jun 1, 2023 | Hacking/IT Incident | Archive (closed) |
| North Shore Medical Labs | Healthcare Provider | 500 | May 26, 2023 | Hacking/IT Incident | Archive (closed) |
| Albany ENT & Allergy Services, PC. | Healthcare Provider | 224,486 | May 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Goodwill Industries of Greater New York and Northern NJ, Inc. | Healthcare Provider | 10,172 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| Essen Medical Associates, P.C. | Healthcare Provider | 904,672 | May 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Sesame, Inc. | Business Associate | 1,809 | May 12, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Catholic Health System | Healthcare Provider | 12,759 | May 11, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| University Urology | Healthcare Provider | 56,816 | May 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Unlimited Care, Inc. | Healthcare Provider | 8,453 | Apr 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Delphi Drug & Alcohol Council | Healthcare Provider | 6,288 | Apr 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Morgan Stanley | Health Plan | 535 | Apr 18, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Monument, Inc. | Business Associate | 108,584 | Mar 31, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Atlantic Dialysis Management Services - Mattoo and Bhat Medical Associates | Business Associate | 3,851 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Ridgewood Dialysis Center Inc. | Business Associate | 2,204 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Central Park Dialysis Center | Business Associate | 1,345 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - New York Renal Associates | Business Associate | 1,126 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - New Hyde Park Dialysis Center LLC | Business Associate | 1,119 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Central Brooklyn Dialysis Center LLC | Business Associate | 1,052 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Newtown Dialysis Center Inc. | Business Associate | 970 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Springfield Dialysis Center | Business Associate | 922 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - West Nassau Dialysis Center Inc. | Business Associate | 795 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - East End Dialysis Center LLC | Business Associate | 745 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Morrisania Dialysis Center | Business Associate | 653 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Prospect Park Dialysis Center | Business Associate | 563 | Mar 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services | Business Associate | 3,851 | Mar 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Atlantic Dialysis Management Services - Broadway Dialysis Center | Business Associate | 776 | Mar 21, 2023 | Hacking/IT Incident | Archive (closed) |
| NewYork-Presbyterian Hospital | Healthcare Provider | 54,396 | Mar 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| SundaySky, Inc. | Business Associate | 37,095 | Mar 7, 2023 | Hacking/IT Incident | Archive (closed) |
| The Chautauqua Center Inc. | Healthcare Provider | 745 | Mar 6, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Valera Health | Healthcare Provider | 2,317 | Feb 28, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Frank R. Laurri, M.D. and Associates, P.C. | Healthcare Provider | 2,673 | Feb 7, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| One Brooklyn Health System | Healthcare Provider | 211,347 | Jan 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Barclay Damon LLP | Business Associate | 1,039 | Jan 3, 2023 | Hacking/IT Incident | Archive (closed) |
| The Kelberman Center | Healthcare Provider | 3,501 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Cedar Cares, Inc. f/k/a Careportal | Business Associate | 1,205 | Dec 23, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| NYC Health + Hospitals | Healthcare Provider | 2,174 | Dec 2, 2022 | Loss | Archive (closed) |
| NewYork-Presbyterian Hospital | Healthcare Provider | 12,000 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Manassas Surgery Center Anesthesia Services | Healthcare Provider | 726 | Nov 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Eastside Pediatrics, PLLC | Healthcare Provider | 1,721 | Nov 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of PA PC | Healthcare Provider | 1,372 | Nov 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Administrative Fund of the Detectives’ Endowment Association, Inc., Police Department City of New York | Health Plan | 21,544 | Oct 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of NM Inc | Healthcare Provider | 42,617 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Primary Anesthesia Services | Healthcare Provider | 30,952 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Somnia Pain Management of Kentucky | Healthcare Provider | 10,848 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates Of KY PSC | Healthcare Provider | 8,980 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of CT PC | Healthcare Provider | 5,240 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.