Skip to content
Network USA

PA · HHS OCR reports

HIPAA breaches in Pennsylvania

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.

Reports

345

Individuals affected

21,205,627

Under investigation

34

Top type: Hacking/IT Incident

State breach notification law

73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)

Timing: notify affected individuals within 7 business days following determination of a breach. 34

Read the Pennsylvania data breach notification law summary

All reports, newest first

Page 2 of 7. 345 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
HCF of Hempfield Inc. ("Hempfield Manor")Healthcare Provider4,744Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Fairview Inc. ("Fairview Manor")Healthcare Provider2,935Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Edinboro Inc. ("Edinboro Manor")Healthcare Provider2,844Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Warren Inc. ("Warren Manor")Healthcare Provider2,709Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Corry Inc. ("Corry Manor")Healthcare Provider2,620Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Sweden Valley Inc. ("Sweden Valley Manor")Healthcare Provider1,768Jan 9, 2025Hacking/IT IncidentArchive (closed)
HCF of Bradford Inc. ("Bradford Manor")Healthcare Provider1,565Jan 9, 2025Hacking/IT IncidentArchive (closed)
Teton OrthopaedicsHealthcare Provider13,409Dec 16, 2024Hacking/IT IncidentArchive (closed)
York CountyHealthcare Provider841Nov 20, 2024Hacking/IT IncidentArchive (closed)
Familylinks Inc.Healthcare Provider3,775Nov 12, 2024Hacking/IT IncidentArchive (closed)
TheraCom, L.L.C.Healthcare Provider9,271Oct 8, 2024Hacking/IT IncidentArchive (closed)
Jefferson PA Heart and VascularHealthcare Provider755Sep 18, 2024Unauthorized Access/DisclosureArchive (closed)
Service Access & Management, Inc.Healthcare Provider1,450Sep 2, 2024Hacking/IT IncidentArchive (closed)
Behavioral Health Alliance of Rural PennsylvaniaHealth Plan642Aug 16, 2024Hacking/IT IncidentArchive (closed)
Imagine360, LLCBusiness Associate6,926Jul 17, 2024Hacking/IT IncidentArchive (closed)
GeisingerHealthcare Provider1,276,026Jun 21, 2024Unauthorized Access/DisclosureArchive (closed)
The Lash Group, LLCBusiness Associate15,196Jun 21, 2024Hacking/IT IncidentArchive (closed)
Altoona Logan Township Mobile Medical Emergency Department AuthorityHealthcare Provider6,169Jun 21, 2024Hacking/IT IncidentArchive (closed)
WAREHOUSE EMPLOYEES LOCAL 169 CONTRIBUTING EMPLOYERS HEALTH & WELFARE FUNDHealth Plan1,061Jun 11, 2024Hacking/IT IncidentArchive (closed)
Financial Business and Consumer Solutions, Inc.Business Associate117,567Jun 4, 2024Hacking/IT IncidentArchive (closed)
AmerisourceBergen Specialty Group, LLCHealthcare Provider3,102May 31, 2024Hacking/IT IncidentArchive (closed)
AmerisourceBergen Specialty Group, LLCHealthcare Provider252,214May 24, 2024Hacking/IT IncidentArchive (closed)
Hypertension-Nephrology Associates, P.C.Healthcare Provider39,491May 14, 2024Hacking/IT IncidentArchive (closed)
Tobii DynavoxHealthcare Provider1,098May 14, 2024Hacking/IT IncidentArchive (closed)
Philips RespironicsBusiness Associate7,539Apr 16, 2024Hacking/IT IncidentArchive (closed)
Philips RespironicsBusiness Associate5,576Apr 16, 2024Hacking/IT IncidentArchive (closed)
Philips RespironicsBusiness Associate1,338Apr 16, 2024Hacking/IT IncidentArchive (closed)
HighmarkHealth Plan6,205Mar 29, 2024Unauthorized Access/DisclosureArchive (closed)
Risas Dental & BracesHealthcare Provider618,189Mar 28, 2024Hacking/IT IncidentArchive (closed)
Washington County Department of Human ServicesHealthcare Provider13,583Mar 26, 2024Hacking/IT IncidentArchive (closed)
Bonney Forge CorporationHealth Plan672Mar 18, 2024Hacking/IT IncidentArchive (closed)
Philips RespironicsBusiness Associate1,125Mar 15, 2024Hacking/IT IncidentArchive (closed)
Philips RespironicsBusiness Associate457,152Mar 4, 2024Hacking/IT IncidentArchive (closed)
Erie Indemnity Company Group Dental Assistance PlanHealth Plan3,122Feb 12, 2024Hacking/IT IncidentArchive (closed)
Allies for Health + WellbeingHealthcare Provider680Jan 30, 2024Hacking/IT IncidentArchive (closed)
Azura Vascular CareBusiness Associate348,000Jan 13, 2024Hacking/IT IncidentArchive (closed)
Keystone FirstHealth Plan1,965Jan 2, 2024Hacking/IT IncidentArchive (closed)
Warren General HospitalHealthcare Provider168,921Nov 9, 2023Hacking/IT IncidentArchive (closed)
City of PhiladelphiaHealth Plan6,107Oct 20, 2023Hacking/IT IncidentArchive (closed)
Radius Global SolutionsBusiness Associate135,742Oct 19, 2023Hacking/IT IncidentArchive (closed)
Peerstar LLCHealthcare Provider11,438Oct 16, 2023Hacking/IT IncidentArchive (closed)
Allegheny County, PennsylvaniaBusiness Associate1,505Sep 22, 2023Hacking/IT IncidentArchive (closed)
Temple University Health System,Inc.Healthcare Provider431,563Sep 15, 2023Hacking/IT IncidentArchive (closed)
A-Family Dental Care Center PCHealthcare Provider2,800Aug 16, 2023Unauthorized Access/DisclosureArchive (closed)
Cranberry Township Emergency Medical ServiceHealthcare Provider1,247Aug 7, 2023Hacking/IT IncidentArchive (closed)
Grane Supply, Inc.Healthcare Provider798Aug 1, 2023Unauthorized Access/DisclosureArchive (closed)
Allegheny CountyHealthcare Provider689,686Jul 28, 2023Hacking/IT IncidentArchive (closed)
Pennsylvania Department of Human ServicesHealthcare Provider11,687Jul 21, 2023Hacking/IT IncidentArchive (closed)
Rite Aid CorporationHealthcare Provider23,433Jul 19, 2023Hacking/IT IncidentArchive (closed)
Public Health Management CorporationHealthcare Provider206,113Jul 6, 2023Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.