OH · HHS OCR reports
HIPAA breaches in Ohio
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Ohio.
Reports
278
Individuals affected
18,927,883
Under investigation
26
Top type: Hacking/IT Incident
State breach notification law
This state has 2 separate breach notification statutes
Timing: 45 days Ohio requires businesses and persons to notify affected individuals in the most expedient time
Read the Ohio data breach notification law summaryAll reports, newest first
Page 2 of 6. 278 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| HCF of Fostoria Inc. ("St. Catherine's Manor of Fostoria") | Healthcare Provider | 1,253 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Roselawn Inc. ("Roselawn Manor") | Healthcare Provider | 1,208 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| HCF of Garbry Ridge ("Garbry Ridge") | Healthcare Provider | 512 | Jan 9, 2025 | Hacking/IT Incident | Archive (closed) |
| Rumpke Consolidated Companies, Inc. & Affiliates Benefits Plan | Health Plan | 16,946 | Dec 10, 2024 | Hacking/IT Incident | Archive (closed) |
| Athens County Board of Developmental Disabilities | Healthcare Provider | 1,458 | Nov 19, 2024 | Hacking/IT Incident | Archive (closed) |
| TriHealth H, LLC d/b/a TriHealth Physician Partners (“TriHealth”) | Healthcare Provider | 36,753 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Mid-Ohio Psychological Services Inc. | Healthcare Provider | 40,345 | Nov 1, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Northeast Professional Home Care, Inc. | Healthcare Provider | 648 | Nov 1, 2024 | Hacking/IT Incident | Under investigation |
| Prentke Romich Company dba PRC-Saltillo | Healthcare Provider | 51,627 | Sep 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Premier Health Family Care - North and Premier Health Family Care of Vandalia | Healthcare Provider | 3,092 | Sep 3, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Mount Carmel Behavioral Health | Healthcare Provider | 1,221 | Aug 30, 2024 | Hacking/IT Incident | Archive (closed) |
| CBIZ Benefits & Insurance Services, Inc. | Business Associate | 9,602 | Aug 28, 2024 | Hacking/IT Incident | Archive (closed) |
| Carespring Health Care Management LLC | Healthcare Provider | 64,609 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Butler Health Plan, SW Division of OHI | Health Plan | 5,911 | Jul 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Patented Acquisition Corporation | Business Associate | 12,787 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Aultman Hospital | Healthcare Provider | 6,892 | Jul 3, 2024 | Hacking/IT Incident | Archive (closed) |
| Mayfield Dental Arts LLC | Healthcare Provider | 3,318 | Jun 26, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Aultman Hospital | Healthcare Provider | 26,206 | Jun 21, 2024 | Hacking/IT Incident | Archive (closed) |
| OB GYN Specialists of Lima Inc | Healthcare Provider | 1,241 | Jun 17, 2024 | Improper Disposal | Archive (closed) |
| Neurobehavioral Medicine Consultants, P.C. | Healthcare Provider | 18,182 | Jun 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Montgomery County Board of Developmental Disabilities Services | Business Associate | 8,819 | Apr 18, 2024 | Hacking/IT Incident | Archive (closed) |
| CompuNet Clinical Laboratories | Healthcare Provider | 6,963 | Apr 10, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Sleep Management Institute | Healthcare Provider | 500 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Rehabilitation Hospital of Northwest Ohio | Healthcare Provider | 3,671 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Summa Rehabilitation Hospital | Healthcare Provider | 2,986 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| City of Conneaut | Healthcare Provider | 771 | Mar 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Ada Technologies, Inc. | Health Plan | 2,398 | Feb 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Ohio Neurologic Institute | Healthcare Provider | 5,548 | Feb 28, 2024 | Theft | Archive (closed) |
| Coleman Professional Services Inc. | Healthcare Provider | 51,889 | Feb 12, 2024 | Hacking/IT Incident | Archive (closed) |
| CBIZ Marks Paneth, LLC | Business Associate | 5,562 | Feb 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Greater Cincinnati Behavioral Health Services | Healthcare Provider | 50,000 | Feb 2, 2024 | Hacking/IT Incident | Archive (closed) |
| Catholic Heath Initiative Trinity Medical Center | Healthcare Provider | 797 | Jan 8, 2024 | Hacking/IT Incident | Archive (closed) |
| Columbus Aesthetic and Plastic Surgery | Healthcare Provider | 12,677 | Nov 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Mariner Management Group | Healthcare Provider | 1,756 | Nov 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Premier Health Partners and wholly owned covered entities listed in description section below | Healthcare Provider | 10,833 | Oct 12, 2023 | Hacking/IT Incident | Under investigation |
| Baesman Group, Inc. | Business Associate | 1,170,094 | Aug 17, 2023 | Hacking/IT Incident | Archive (closed) |
| CareSource | Business Associate | 3,180,537 | Jul 27, 2023 | Hacking/IT Incident | Archive (closed) |
| ACUPUNCTURE AND INTEGRATIVE SOLUTIONS INCORPORATED | Healthcare Provider | 750 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| The MetroHealth System | Healthcare Provider | 1,230 | Jun 23, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Marshall & Melhorn, LLC | Business Associate | 9,412 | Jun 7, 2023 | Hacking/IT Incident | Archive (closed) |
| MedInform, Inc. | Business Associate | 14,453 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| PartsSource, Inc. Welfare Benefit Plan | Health Plan | 1,474 | May 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Marshall Information Services, LLC dba Primary Solutions | Business Associate | 7,456 | May 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Buckeye Health Plan | Health Plan | 686 | May 16, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Graceworks Lutheran Services | Healthcare Provider | 6,737 | Apr 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Henry County Hospital | Healthcare Provider | 3,689 | Apr 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Healthy Options dba Postal Prescription Services - Kroger | Healthcare Provider | 82,466 | Mar 15, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| The M K Morse Company Health Plan | Health Plan | 2,730 | Mar 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Health Centers of Greater Dayton | Healthcare Provider | 516 | Mar 8, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| City of Cleveland Health Plan | Health Plan | 15,206 | Jan 20, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.