NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 5 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Resource Anesthesiology Associates of VA LLC | Healthcare Provider | 4,209 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of IN LLC | Healthcare Provider | 2,317 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Somnia, Inc. | Healthcare Provider | 1,892 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Mid-Westchester Anesthesia Services PC | Healthcare Provider | 871 | Oct 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Lifespire Services, Inc. | Healthcare Provider | 15,375 | Oct 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Berkshire Farm Center & Services for Youth | Healthcare Provider | 951 | Oct 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Trillium Health Inc. | Healthcare Provider | 3,191 | Sep 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Extended MLTC | Health Plan | 5,494 | Sep 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Providence WA Anesthesia Services PC | Healthcare Provider | 98,414 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Palm Springs Anesthesia Services PC | Healthcare Provider | 58,411 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Anesthesia Services of San Joaquin PC | Healthcare Provider | 43,924 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Anesthesia Associates of El Paso PA | Healthcare Provider | 43,168 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates PC | Healthcare Provider | 37,897 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Resource Anesthesiology Associates of IL PC | Healthcare Provider | 18,262 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Bronx Anesthesia Services PC | Healthcare Provider | 17,802 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Hazleton Anesthesia Services PC | Healthcare Provider | 13,560 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Upstate Anesthesia Services PC | Healthcare Provider | 9,025 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Fredericksburg Anesthesia Services LLC | Healthcare Provider | 7,052 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Lynbrook Anesthesia Services PC | Healthcare Provider | 3,787 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 1,332 | Sep 23, 2022 | Theft | Archive (closed) |
| Berkshire Farm Center & Services for Youth | Healthcare Provider | 23,058 | Sep 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Empress Ambulance Service LLC | Healthcare Provider | 305,056 | Sep 9, 2022 | Hacking/IT Incident | Archive (closed) |
| NYSARC Columbia County Chapter d/b/a COARC | Healthcare Provider | 5,701 | Aug 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Priti Patel Physician PC | Healthcare Provider | 6,877 | Aug 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Niagara County Department of Mental Health and Substance Abuse | Healthcare Provider | 17,000 | Aug 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Practice Resources, LLC | Business Associate | 942,138 | Aug 4, 2022 | Hacking/IT Incident | Archive (closed) |
| The Bronx Accountable Healthcare Network | Healthcare Provider | 17,161 | Jul 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Catholic Health System | Healthcare Provider | 904 | Jun 29, 2022 | Hacking/IT Incident | Archive (closed) |
| University Pediatric Dentistry | Healthcare Provider | 6,843 | Jun 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Mason Tenders’ District Council Welfare Fund | Health Plan | 13,344 | Jun 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Bayshore Brightwaters Rescue Ambulance, Inc. | Healthcare Provider | 679 | Jun 10, 2022 | Hacking/IT Incident | Archive (closed) |
| Allied Urological Services, LLC | Business Associate | 50,640 | May 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Capsule | Healthcare Provider | 27,625 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Oswego County Opportunities, Inc. | Healthcare Provider | 7,766 | May 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Heidell, Pittoni, Murphy & Bach, LLP | Business Associate | 114,979 | May 16, 2022 | Hacking/IT Incident | Archive (closed) |
| EmblemHealth Plan, Inc. | Health Plan | 11,399 | May 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Insurance Plan of Greater New York | Health Plan | 792 | May 16, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthfirst | Health Plan | 5,048 | May 9, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Refuah Health Center | Healthcare Provider | 260,740 | Apr 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 3,717 | Apr 22, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthplex, Inc. | Health Plan | 89,955 | Apr 20, 2022 | Hacking/IT Incident | Archive (closed) |
| La Casa de Salud | Healthcare Provider | 9,969 | Apr 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Canon Business Process Services Inc | Business Associate | 8,015 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Canon Business Process Services Inc | Business Associate | 1,625 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Canon Business Process Services Inc | Business Associate | 745 | Apr 15, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Local 295 IBT Employer Group Welfare Fund | Health Plan | 6,123 | Mar 11, 2022 | Hacking/IT Incident | Archive (closed) |
| The Puerto Rican Organization to Motivate, Enltighten, and Serve Addicts, Inc. | Healthcare Provider | 33,933 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Ultimate Care, Inc. | Healthcare Provider | 15,788 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Bronx Addiction Services Integrated Concepts Systems, Inc. | Healthcare Provider | 823 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Community Association of Progressive Dominicans, Inc. | Healthcare Provider | 656 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.