NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 6 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Extend Fertility | Healthcare Provider | 10,373 | Feb 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Seneca Nation Health System | Healthcare Provider | 12,000 | Feb 8, 2022 | Hacking/IT Incident | Archive (closed) |
| North Shore University Hospital | Healthcare Provider | 7,614 | Feb 1, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| OneDigital OBO Guardian Life Insurance Company of America | Business Associate | 800 | Jan 24, 2022 | Hacking/IT Incident | Archive (closed) |
| Raveco Medical | Healthcare Provider | 4,897 | Jan 17, 2022 | Hacking/IT Incident | Archive (closed) |
| NYU Langone Hospitals | Healthcare Provider | 1,141 | Jan 6, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Welfare, Pension and Annuity Funds of Local No. ONE, I.A.T.S.E. | Health Plan | 20,579 | Dec 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Nippon Life Insurance Company of America | Health Plan | 4,109 | Dec 3, 2021 | Hacking/IT Incident | Archive (closed) |
| Commission on Economic Opportunity | Business Associate | 29,454 | Nov 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Huntington Hospital | Healthcare Provider | 12,925 | Nov 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Upstate HomeCare | Healthcare Provider | 5,114 | Nov 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Onondaga County Chapter NYSARC, Inc. | Healthcare Provider | 5,425 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Weill Cornell Medicine | Healthcare Provider | 25,697 | Nov 12, 2021 | Hacking/IT Incident | Archive (closed) |
| New York Psychotherapy and Counseling Center | Healthcare Provider | 28,000 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Association to Benefit Children | Healthcare Provider | 9,142 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Samaritan Daytop Village, Inc. | Healthcare Provider | 15,459 | Oct 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Family of Woodstock | Healthcare Provider | 8,214 | Oct 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Syracuse ASC, LLC | Healthcare Provider | 24,891 | Oct 14, 2021 | Hacking/IT Incident | Archive (closed) |
| Independent Health Corporation | Business Associate | 541 | Oct 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| elizabeth ortof MD | Healthcare Provider | 5,000 | Sep 23, 2021 | Theft | Archive (closed) |
| Rehabilitation Support Services, Inc. | Healthcare Provider | 23,907 | Sep 10, 2021 | Hacking/IT Incident | Archive (closed) |
| Long Island Jewish Forest Hills Hospital | Healthcare Provider | 10,333 | Aug 6, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sisters of Charity Hospital | Healthcare Provider | 10,464 | Jul 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Mount St. Mary's Hospital | Healthcare Provider | 6,538 | Jul 30, 2021 | Hacking/IT Incident | Archive (closed) |
| St. Vincent's Services, Inc. D/B/A HeartShare St. Vincent's Services | Healthcare Provider | 1,927 | Jul 2, 2021 | Hacking/IT Incident | Archive (closed) |
| HeartShare Wellness, LTD | Healthcare Provider | 586 | Jul 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Business Systems, Inc., d/b/a Practicefirst Medical Management Solutions and PBS Medcode Corp., | Business Associate | 1,210,688 | Jul 1, 2021 | Hacking/IT Incident | Archive (closed) |
| NYC Health + Hospitals | Healthcare Provider | 43,727 | Jun 30, 2021 | Hacking/IT Incident | Archive (closed) |
| MultiPlan | Business Associate | 214,956 | Jun 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Jawonio | Healthcare Provider | 13,313 | Jun 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Falcon Group International Corp | Healthcare Provider | 1,900 | Jun 9, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Jones Memorial Hospital | Healthcare Provider | 8,962 | Jun 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Tri-County Family Medicine | Healthcare Provider | 1,438 | Jun 1, 2021 | Hacking/IT Incident | Archive (closed) |
| Adirondack Medical Center d/b/a Adirondack Health | Healthcare Provider | 877 | May 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Aspen Dental Management LLC | Business Associate | 9,620 | May 21, 2021 | Theft | Archive (closed) |
| Massena Hospital | Healthcare Provider | 1,897 | May 21, 2021 | Hacking/IT Incident | Archive (closed) |
| Ascension - Our Lady of Lourdes Memorial Hospital Inc., | Healthcare Provider | 1,745 | May 7, 2021 | Hacking/IT Incident | Archive (closed) |
| Orthopedic Associates of Dutchess County | Healthcare Provider | 330,143 | May 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Faxton St. Luke's Healthcare | Healthcare Provider | 17,656 | Apr 26, 2021 | Hacking/IT Incident | Archive (closed) |
| ElderServe Health, Inc. dba RiverSpring Health Plans | Health Plan | 31,195 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Chautauqua County | Healthcare Provider | 537 | Apr 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 943 | Apr 13, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Sloan Kettering Cancer Center | Healthcare Provider | 18,913 | Mar 31, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Personal Touch Holding Corp. | Business Associate | 753,107 | Mar 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Villa of Hope | Healthcare Provider | 2,410 | Mar 18, 2021 | Hacking/IT Incident | Archive (closed) |
| Assistcare Home Health Services LLC dba Preferred Home Care of NY/Preferred Gold | Healthcare Provider | 57,345 | Mar 10, 2021 | Hacking/IT Incident | Archive (closed) |
| Jewish Home Lifecare d/b/a The New Jewish Home | Healthcare Provider | 2,091 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| New Directions Youth & Family Services | Healthcare Provider | 941 | Feb 24, 2021 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 1,670 | Jan 29, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Center for Alternative Sentencing and Employment Services | Healthcare Provider | 3,994 | Jan 15, 2021 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.