Skip to content
Network USA

NY · HHS OCR reports

HIPAA breaches in New York

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.

Reports

516

Individuals affected

42,558,825

Under investigation

44

Top type: Hacking/IT Incident

State breach notification law

N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)

Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient

Read the New York data breach notification law summary

All reports, newest first

Page 7 of 11. 516 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
American Anesthesiology, Inc.Healthcare Provider1,269,074Jan 8, 2021Hacking/IT IncidentArchive (closed)
Apex Laboratory, Inc.Healthcare Provider7,102Dec 31, 2020Hacking/IT IncidentArchive (closed)
Workplace Vitality, Inc.Healthcare Provider2,850Dec 31, 2020Hacking/IT IncidentArchive (closed)
Comprehensive Neurology, PCHealthcare Provider6,800Dec 17, 2020Hacking/IT IncidentArchive (closed)
Montefiore Medical CenterHealthcare Provider670Dec 1, 2020Unauthorized Access/DisclosureArchive (closed)
Interim HealthCare of the Capital RegionHealthcare Provider1,127Nov 23, 2020Hacking/IT IncidentArchive (closed)
Open Door Family Medical Center, Inc.Healthcare Provider36,474Nov 12, 2020Hacking/IT IncidentArchive (closed)
NYU Langone HospitalsHealthcare Provider44,009Oct 30, 2020Hacking/IT IncidentArchive (closed)
The Bridge, Inc.Healthcare Provider16,431Oct 23, 2020Hacking/IT IncidentArchive (closed)
BryLin Hospitals, IncorporatedHealthcare Provider8,000Oct 17, 2020Hacking/IT IncidentArchive (closed)
Adults and Children with Learning and Developmental Disabilities, Inc.Healthcare Provider603Oct 2, 2020Hacking/IT IncidentArchive (closed)
Oswego HealthHealthcare Provider13,619Sep 30, 2020Hacking/IT IncidentArchive (closed)
White Plains HospitalHealthcare Provider7,164Sep 30, 2020Hacking/IT IncidentArchive (closed)
Century Specialty ScriptHealthcare Provider17,219Sep 28, 2020Hacking/IT IncidentArchive (closed)
Burke Rehabilitation HospitalHealthcare Provider64,840Sep 25, 2020Hacking/IT IncidentArchive (closed)
Montefiore Medical CenterHealthcare Provider4,004Sep 18, 2020Unauthorized Access/DisclosureArchive (closed)
Pollack, Barbaccia, & Guzman MD PCHealthcare Provider1,135Sep 18, 2020TheftArchive (closed)
Nuvance HealthHealthcare Provider314,829Sep 15, 2020Hacking/IT IncidentArchive (closed)
Stony Brook University HospitalHealthcare Provider175,191Sep 14, 2020Hacking/IT IncidentArchive (closed)
Roswell Park Comprehensive Cancer CenterHealthcare Provider149,126Sep 14, 2020Hacking/IT IncidentArchive (closed)
Montefiore Medical CenterHealthcare Provider76,068Sep 14, 2020Hacking/IT IncidentArchive (closed)
Memorial Sloan Kettering Cancer CenterHealthcare Provider73,536Sep 14, 2020Hacking/IT IncidentArchive (closed)
Hospice & Palliative Care Buffalo, Inc.Healthcare Provider47,272Sep 14, 2020Hacking/IT IncidentArchive (closed)
Samaritan Daytop Village, Inc.Healthcare Provider5,890Sep 14, 2020Hacking/IT IncidentArchive (closed)
Jewish Home Lifecare d/b/a The New Jewish HomeHealthcare Provider5,242Sep 14, 2020Hacking/IT IncidentArchive (closed)
Mount Sinai Health SystemHealthcare Provider87,535Sep 13, 2020Hacking/IT IncidentArchive (closed)
Total Urology Care of New York PLLCHealthcare Provider17,000Sep 10, 2020Unauthorized Access/DisclosureArchive (closed)
Arnot HealthHealthcare Provider1,164Aug 18, 2020Hacking/IT IncidentArchive (closed)
St. Peter's Health Partners Medical Associates, P.C.Healthcare Provider2,333Aug 3, 2020LossArchive (closed)
Berkshire Farm Center and Services for YouthHealthcare Provider4,950Jul 30, 2020Hacking/IT IncidentArchive (closed)
Town of BabylonHealthcare Provider1,974Jul 24, 2020Hacking/IT IncidentArchive (closed)
The Puerto Rican Organization to Motivate, Enlighten, and Serve Addicts, Inc. (PROMESA)Healthcare Provider3,129Jul 16, 2020Hacking/IT IncidentArchive (closed)
M&T BankBusiness Associate5,878Jun 29, 2020Unauthorized Access/DisclosureArchive (closed)
Senior Whole Health of New YorkHealth Plan3,853Jun 16, 2020Hacking/IT IncidentArchive (closed)
Integra Managed CareHealth Plan644Jun 12, 2020Unauthorized Access/DisclosureArchive (closed)
Rochester Regional HealthHealthcare Provider1,945Jun 1, 2020Hacking/IT IncidentArchive (closed)
Alexander Chun, MD, PLLCHealthcare Provider595May 12, 2020Improper DisposalArchive (closed)
Northeast RadiologyHealthcare Provider298,532Mar 11, 2020Hacking/IT IncidentArchive (closed)
AFTRA Retirement FundBusiness Associate57,900Feb 25, 2020Hacking/IT IncidentArchive (closed)
East House CorporationHealthcare Provider1,306Feb 17, 2020Hacking/IT IncidentArchive (closed)
BST & Co. CPAs, LLPBusiness Associate170,000Feb 16, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Aides of New York, Inc.Healthcare Provider38,693Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of Ohio, Inc.Healthcare Provider15,808Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of PA, Inc.Healthcare Provider9,302Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of Baltimore, Inc.Healthcare Provider9,058Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of S.E. Mass., Inc.Healthcare Provider2,863Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home-Aides, Inc.Healthcare Provider2,633Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of Mass., Inc.Healthcare Provider2,015Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Care of Greater Portsmouth, Inc.Healthcare Provider1,957Jan 28, 2020Hacking/IT IncidentArchive (closed)
Personal Touch Home Aides Inc.Healthcare Provider1,890Jan 28, 2020Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.