NY · HHS OCR reports
HIPAA breaches in New York
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in New York.
Reports
516
Individuals affected
42,558,825
Under investigation
44
Top type: Hacking/IT Incident
State breach notification law
N.Y. Gen. Bus. Law §§ 899-aa to 899-bb (Notification of Unauthorized Acquisition of Private Information; Data Security Protections (SHIELD Act)) (amended 2025)
Timing: 30 days New York requires businesses and persons to notify affected individuals in the most expedient
Read the New York data breach notification law summaryAll reports, newest first
Page 9 of 11. 516 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Elderplan, Inc. | Health Plan | 65,235 | Aug 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Kaleida Health | Healthcare Provider | 2,789 | Jul 21, 2017 | Hacking/IT Incident | Archive (closed) |
| Metropolitan Life Insurance Company | Health Plan | 4,220 | Jul 19, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Pediatric Healthcare Solutions, P.C. | Healthcare Provider | 6,932 | Jun 28, 2017 | Hacking/IT Incident | Archive (closed) |
| New York City Health and Hospitals Corporation - Coney Island Hospital | Healthcare Provider | 3,494 | May 9, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| MVP Health Care, Inc. | Health Plan | 951 | Apr 14, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Emblem Health - GHI | Health Plan | 703 | Feb 17, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| MetroPlus Health Plan | Health Plan | 808 | Jan 3, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Waiting Room Solutions Limited Liability Limited Partnership | Business Associate | 700 | Dec 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Young Adult Institute, Inc. | Healthcare Provider | 913 | Nov 28, 2016 | Theft | Archive (closed) |
| Emblem Health - GHI | Health Plan | 81,122 | Nov 22, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Stony Brook Internists, University Faculty Practice Corporation (UFPC) | Healthcare Provider | 1,878 | Nov 22, 2016 | Theft | Archive (closed) |
| Kinetorehab Physical Therapy, PLLC | Healthcare Provider | 665 | Nov 4, 2016 | Theft | Archive (closed) |
| New York State Office of Mental Health | Healthcare Provider | 21,880 | Aug 15, 2016 | Hacking/IT Incident | Archive (closed) |
| Newkirk Products, Inc. | Business Associate | 3,466,120 | Aug 9, 2016 | Hacking/IT Incident | Archive (closed) |
| Ceaton C Falgiano | Healthcare Provider | 650 | Jun 27, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Metropolitan Jewish Health System, Inc. d/b/a MJHS | Business Associate | 50,000 | Mar 22, 2016 | Hacking/IT Incident | Archive (closed) |
| Lindsay House Surgery Center, LLC | Healthcare Provider | 773 | Mar 18, 2016 | Theft | Archive (closed) |
| Hospital for Special Surgery | Healthcare Provider | 647 | Mar 17, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| JASACare | Healthcare Provider | 1,154 | Mar 14, 2016 | Hacking/IT Incident | Archive (closed) |
| Centers Plan for Healthy Living | Health Plan | 6,893 | Mar 3, 2016 | Theft | Archive (closed) |
| ELLIOT J MARTIN CHIROPRACTIC PC | Healthcare Provider | 1,200 | Feb 24, 2016 | Hacking/IT Incident | Archive (closed) |
| Rite Aid Store 01617 | Healthcare Provider | 976 | Feb 3, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| AHRC Nassau | Healthcare Provider | 1,200 | Jan 6, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| St. Luke's Cornwall Hospital | Healthcare Provider | 29,156 | Dec 30, 2015 | Theft | Archive (closed) |
| Fidelis Care | Health Plan | 738 | Dec 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Fidelis Care | Health Plan | 687 | Dec 15, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Mary Ruth Buchness, MD, Dermatologist, P.C. | Healthcare Provider | 14,910 | Dec 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Good Care Pediatric, LLP | Healthcare Provider | 2,300 | Nov 12, 2015 | Hacking/IT Incident | Archive (closed) |
| Woodhull Medical and Mental Health Center | Healthcare Provider | 1,581 | Oct 19, 2015 | Theft | Archive (closed) |
| Affinity Health Plan, Inc. | Health Plan | 721 | Sep 14, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Excellus Health Plan, Inc. | Health Plan | 9,358,891 | Sep 9, 2015 | Hacking/IT Incident | Archive (closed) |
| Healthfirst Affiliates that include Healthfirst PHSP, Inc., Managed Health, Inc., HF Management Services, LLC, and Senior Health Partners | Health Plan | 5,338 | Jul 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Montefiore Medical Center | Healthcare Provider | 12,517 | Jul 22, 2015 | Theft | Archive (closed) |
| Amsterdam Nursing Home Corporation (1992) | Healthcare Provider | 621 | Jul 10, 2015 | Loss | Archive (closed) |
| Episcopal Health Services Inc. d/b/a St. John's Episcopal Hospital | Healthcare Provider | 509 | Jun 25, 2015 | Theft | Archive (closed) |
| Central Brooklyn Medical Group, PC | Healthcare Provider | 4,223 | Jun 19, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| New York City Health and Hospitals Corporation - Metropolitan Hospital Center | Healthcare Provider | 3,957 | Jun 1, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| BUFFALO HEART GROUP | Healthcare Provider | 567 | May 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Rochester Medical Center and Affiliates | Healthcare Provider | 3,403 | May 22, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Jacobi Medical Center | Healthcare Provider | 90,060 | Apr 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Bellevue Hospital Center | Healthcare Provider | 3,334 | Apr 28, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| New York State Office of Mental Health | Healthcare Provider | 563 | Apr 10, 2015 | Loss | Archive (closed) |
| Freelancers Insurance Company | Health Plan | 43,068 | Mar 24, 2015 | Hacking/IT Incident | Archive (closed) |
| Dr. Anthony T. R. Green DDS | Healthcare Provider | 7,448 | Mar 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Senior Health Partners, a Healthfirst company | Health Plan | 2,772 | Feb 6, 2015 | Theft | Archive (closed) |
| St. Peter's Health Partners | Healthcare Provider | 5,117 | Jan 23, 2015 | Theft | Archive (closed) |
| MetroPlus Health Plan, Inc. | Health Plan | 31,980 | Nov 20, 2014 | Other | Archive (closed) |
| Weill Cornell Medical College | Healthcare Provider | 3,936 | Nov 7, 2014 | Theft | Archive (closed) |
| Quraishi, Nisar A | Healthcare Provider | 20,000 | Oct 22, 2014 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.