Skip to content
Network USA

PA · HHS OCR reports

HIPAA breaches in Pennsylvania

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.

Reports

345

Individuals affected

21,205,627

Under investigation

34

Top type: Hacking/IT Incident

State breach notification law

73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)

Timing: notify affected individuals within 7 business days following determination of a breach. 34

Read the Pennsylvania data breach notification law summary

All reports, newest first

Page 3 of 7. 345 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Imagine360Business Associate132,807Jun 30, 2023Hacking/IT IncidentArchive (closed)
Recovery Centers of AmericaHealthcare Provider2,220Jun 30, 2023Hacking/IT IncidentArchive (closed)
University of Pittsburgh Medical CenterHealthcare Provider1,533Jun 26, 2023Hacking/IT IncidentArchive (closed)
Senior Choice dba The Atrium; Beacon Ridge; and The PatriotHealthcare Provider5,057Jun 23, 2023Hacking/IT IncidentArchive (closed)
The Williamsport HomeHealthcare Provider3,660Jun 23, 2023Hacking/IT IncidentArchive (closed)
Limbach Facility Services LLC Group Benefit PlanHealth Plan1,392Jun 22, 2023Hacking/IT IncidentArchive (closed)
CORE PERFORMANCE PHYSICIANS, DBA VINCERA CORE PHYSICIANS10,000Jun 20, 2023Hacking/IT IncidentArchive (closed)
VINCERA IMAGING LLCHealthcare Provider5,000Jun 20, 2023Hacking/IT IncidentArchive (closed)
VINCERA REHAB LLCHealthcare Provider5,000Jun 20, 2023Hacking/IT IncidentArchive (closed)
VINCERA SURGERY CENTERHealthcare Provider5,000Jun 20, 2023Hacking/IT IncidentArchive (closed)
Commonwealth Health Physician Network - Great Valley CardiologyHealthcare Provider181,764Jun 12, 2023Hacking/IT IncidentArchive (closed)
Onix GroupBusiness Associate387,830May 26, 2023Hacking/IT IncidentArchive (closed)
Lancaster Orthopedic GroupHealthcare Provider1,784May 26, 2023Hacking/IT IncidentArchive (closed)
Lehigh Valley Health Network (blackcat)Healthcare Provider248,359May 15, 2023Hacking/IT IncidentArchive (closed)
Mars Area School DistrictHealth Plan1,270Apr 24, 2023Hacking/IT IncidentArchive (closed)
United Steelworkers Local 286Health Plan37,965Apr 14, 2023Hacking/IT IncidentArchive (closed)
NORTHEAST BEHAVIORAL HEALTH CARE CONSORTIUMHealth Plan13,240Apr 5, 2023Hacking/IT IncidentArchive (closed)
UHS of Delaware, Inc.Business Associate40,290Mar 29, 2023Hacking/IT IncidentArchive (closed)
Nonstop Administration and Insurance Services, Inc.Business Associate10,504Mar 27, 2023Hacking/IT IncidentArchive (closed)
Adams County Children and Youth ServicesHealthcare Provider722Mar 24, 2023Hacking/IT IncidentArchive (closed)
Yardley Dermatology Associates, PCHealthcare Provider523Mar 21, 2023Unauthorized Access/DisclosureArchive (closed)
Highmark, Inc.Health Plan239,039Feb 10, 2023Hacking/IT IncidentArchive (closed)
Highmark IncBusiness Associate36,600Feb 10, 2023Hacking/IT IncidentArchive (closed)
NR Pennsylvania Associates, LLCHealthcare Provider14,335Feb 7, 2023Hacking/IT IncidentArchive (closed)
Macoby Street Operations LLC d/b/a Pennsburg ManorHealthcare Provider1,547Jan 10, 2023Hacking/IT IncidentArchive (closed)
225 Evergreen Road Operations LLCHealthcare Provider931Jan 10, 2023Hacking/IT IncidentArchive (closed)
1020 South Main Street Operations LLCHealthcare Provider702Jan 10, 2023Hacking/IT IncidentArchive (closed)
Dr. Douglas C. Shoenberger, PCBusiness Associate8,179Nov 30, 2022Hacking/IT IncidentArchive (closed)
Pendurthi Surgical AssociatesBusiness Associate7,925Nov 30, 2022Hacking/IT IncidentArchive (closed)
Peter J. Isaac, D.O.Business Associate6,390Nov 30, 2022Hacking/IT IncidentArchive (closed)
Dermatology & Skin Cancer CenterBusiness Associate5,423Nov 30, 2022Hacking/IT IncidentArchive (closed)
Lehigh Valley Women's Medical Specialties, P.C.Business Associate4,535Nov 30, 2022Hacking/IT IncidentArchive (closed)
Ellen M. Field, M.D.Business Associate4,438Nov 30, 2022Hacking/IT IncidentArchive (closed)
MaryAnne Freeman Brndjar, DO, PCBusiness Associate2,491Nov 30, 2022Hacking/IT IncidentArchive (closed)
Easton Cardiovascular AssociatesBusiness Associate883Nov 30, 2022Hacking/IT IncidentArchive (closed)
NU House Calls, PCBusiness Associate552Nov 30, 2022Hacking/IT IncidentArchive (closed)
Gateway Rehabilitation CenterHealthcare Provider119,000Nov 18, 2022Hacking/IT IncidentArchive (closed)
Rosenfeld VanWirt, PCBusiness Associate18,719Nov 16, 2022Hacking/IT IncidentArchive (closed)
Connexin Software, Inc.Business Associate2,846,039Nov 11, 2022Hacking/IT IncidentArchive (closed)
PrimeCare Medical, Inc.Healthcare Provider22,254Oct 31, 2022Unauthorized Access/DisclosureArchive (closed)
Keystone HealthHealthcare Provider235,237Oct 14, 2022Hacking/IT IncidentArchive (closed)
Aesthetic Dermatology Associates, PCHealthcare Provider33,793Oct 10, 2022Hacking/IT IncidentArchive (closed)
Medical Associates of the Lehigh ValleyHealthcare Provider75,628Sep 9, 2022Hacking/IT IncidentArchive (closed)
The Sargent’s GroupBusiness Associate1,650Sep 9, 2022Hacking/IT IncidentArchive (closed)
Maternal and Family Health ServicesHealthcare Provider461,070Aug 8, 2022Hacking/IT IncidentArchive (closed)
Allegheny Heath NetworkHealthcare Provider8,071Jul 26, 2022Hacking/IT IncidentArchive (closed)
Patriot Growth Insurance Services, LLCBusiness Associate4,614Jul 21, 2022Hacking/IT IncidentArchive (closed)
Acts Retirement Services, Inc. and AffiliatesHealthcare Provider2,236Jul 15, 2022Hacking/IT IncidentArchive (closed)
Family Practice Center PCHealthcare Provider83,969Jul 11, 2022Hacking/IT IncidentArchive (closed)
Phoenixville HospitalHealthcare Provider934Jul 7, 2022Unauthorized Access/DisclosureArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.