PA · HHS OCR reports
HIPAA breaches in Pennsylvania
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.
Reports
345
Individuals affected
21,205,627
Under investigation
34
Top type: Hacking/IT Incident
State breach notification law
73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)
Timing: notify affected individuals within 7 business days following determination of a breach. 34
Read the Pennsylvania data breach notification law summaryAll reports, newest first
Page 1 of 7. 345 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Novocure Inc. | Healthcare Provider | 1,464 | Sep 9, 2026 | Hacking/IT Incident | Under investigation |
| Beaver County Behavioral Health | Healthcare Provider | 501 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| COMHAR, Inc. | Healthcare Provider | 501 | Sep 4, 2026 | Hacking/IT Incident | Under investigation |
| The Foot and Ankle Wellness Center of Western Pennsylvania | Healthcare Provider | 653 | Aug 31, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Allergic Disease Associates, P.C. dba The Asthma Center | Healthcare Provider | 5,321 | Aug 21, 2026 | Hacking/IT Incident | Under investigation |
| AdaptHealth, LLC | Healthcare Provider | 4,115,802 | Aug 14, 2026 | Hacking/IT Incident | Under investigation |
| Alta Orthopaedics Medical Group, Inc. | Healthcare Provider | 24,496 | Jul 3, 2026 | Hacking/IT Incident | Under investigation |
| Henry Rossi & Company, LLP | Business Associate | 2,720 | Jun 2, 2026 | Hacking/IT Incident | Under investigation |
| Nottingham Village | Healthcare Provider | 5,240 | May 22, 2026 | Hacking/IT Incident | Under investigation |
| Jefferson Health Plans | Health Plan | 1,855 | May 18, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Laurel Eye Clinic | Healthcare Provider | 145,221 | Apr 22, 2026 | Hacking/IT Incident | Under investigation |
| Shore Gardens Rehabilitation and Nursing Center, LLC | Healthcare Provider | 755 | Apr 6, 2026 | Hacking/IT Incident | Under investigation |
| UPMC | Healthcare Provider | 687 | Mar 14, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Perseus House, Inc. | Healthcare Provider | 969 | Feb 20, 2026 | Hacking/IT Incident | Under investigation |
| VPS Medical PLLC | Healthcare Provider | 4,600 | Feb 13, 2026 | Hacking/IT Incident | Under investigation |
| WIRX Pharmacy | Healthcare Provider | 20,047 | Feb 5, 2026 | Hacking/IT Incident | Under investigation |
| CashFlow Solutions, LLC | Healthcare Provider | 1,007 | Jan 28, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| 360 Dental PC | Healthcare Provider | 11,273 | Jan 15, 2026 | Hacking/IT Incident | Under investigation |
| Pinnacle Holdings, LTD | Business Associate | 18,313 | Jan 13, 2026 | Hacking/IT Incident | Under investigation |
| Devereux Foundation | Healthcare Provider | 501 | Jan 8, 2026 | Hacking/IT Incident | Under investigation |
| Center for Urologic Care of Berks CO | Healthcare Provider | 543 | Nov 26, 2025 | Hacking/IT Incident | Under investigation |
| Davies, McFarland & Carroll LLC | Business Associate | 54,712 | Nov 24, 2025 | Hacking/IT Incident | Under investigation |
| Tri Century Eye Care PC | Healthcare Provider | 200,000 | Oct 31, 2025 | Hacking/IT Incident | Under investigation |
| Saint Mary’s Home of Erie | Healthcare Provider | 5,013 | Oct 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Firetree, Ltd | Healthcare Provider | 17,979 | Oct 17, 2025 | Hacking/IT Incident | Under investigation |
| Intercommunity Action Inc. | Healthcare Provider | 2,680 | Sep 26, 2025 | Hacking/IT Incident | Archive (closed) |
| Philadelphia Corporation for Aging (PCA) | Business Associate | 410,491 | Sep 23, 2025 | Hacking/IT Incident | Under investigation |
| Herr Foods, Inc. | Healthcare Provider | 1,164 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Pennsylvania Hospitalist Group, LLC | Healthcare Provider | 615 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| North Penn Comprehensive Health Services d.b.a Laurel Health Centers | Healthcare Provider | 991 | Sep 12, 2025 | Hacking/IT Incident | Under investigation |
| PGA Development, Inc. | Healthcare Provider | 23,899 | Sep 10, 2025 | Hacking/IT Incident | Under investigation |
| Somerset County Children and Youth Services | Healthcare Provider | 2,251 | Sep 5, 2025 | Hacking/IT Incident | Archive (closed) |
| Greater Pittsburgh Orthopaedics Associates | Healthcare Provider | 35,000 | Aug 27, 2025 | Hacking/IT Incident | Under investigation |
| Bevel Health Medical Group | Healthcare Provider | 510 | Aug 18, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Alert Medical Alarms | Healthcare Provider | 39,218 | Aug 15, 2025 | Hacking/IT Incident | Under investigation |
| David A. Nover, M.D., P.C. | Healthcare Provider | 4,703 | Jul 31, 2025 | Hacking/IT Incident | Archive (closed) |
| Equilibria Mental Health Services | Healthcare Provider | 3,232 | Jul 20, 2025 | Hacking/IT Incident | Under investigation |
| Clinical Practices of the University of Pennsylvania | Healthcare Provider | 1,432 | Jun 30, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Select Medical Holdings Corporation | Healthcare Provider | 119,525 | Jun 6, 2025 | Hacking/IT Incident | Archive (closed) |
| Upper Dublin Family Dentistry | Healthcare Provider | 5,000 | May 30, 2025 | Hacking/IT Incident | Under investigation |
| Mary B. Toporcer, MD, P.C. | Healthcare Provider | 501 | May 28, 2025 | Hacking/IT Incident | Under investigation |
| Mercy Surgical Dressing Group, Inc. | Business Associate | 4,159 | May 16, 2025 | Hacking/IT Incident | Under investigation |
| Union County Children and Youth Services | Healthcare Provider | 4,157 | May 13, 2025 | Hacking/IT Incident | Archive (closed) |
| THE CARING HEALTHCARE NETWORK, LLC | Healthcare Provider | 1,019 | May 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Drug and Alcohol Treatment Services, Inc. | Healthcare Provider | 22,215 | Apr 24, 2025 | Hacking/IT Incident | Under investigation |
| True Dental Care For Kids and Adults LLC | Healthcare Provider | 17,640 | Apr 2, 2025 | Hacking/IT Incident | Archive (closed) |
| Lake Psychological Services | Healthcare Provider | 987 | Mar 14, 2025 | Hacking/IT Incident | Archive (closed) |
| CHC Solutions, Inc. | Healthcare Provider | 794 | Mar 13, 2025 | Hacking/IT Incident | Archive (closed) |
| Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle Center | Healthcare Provider | 602 | Mar 3, 2025 | Theft | Archive (closed) |
| Allegheny Health Network Home Medical Equipment LLC and Allegheny Health Network Home Infusion LLC | Healthcare Provider | 292,773 | Jan 17, 2025 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.