Skip to content
Network USA

PA · HHS OCR reports

HIPAA breaches in Pennsylvania

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.

Reports

345

Individuals affected

21,205,627

Under investigation

34

Top type: Hacking/IT Incident

State breach notification law

73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)

Timing: notify affected individuals within 7 business days following determination of a breach. 34

Read the Pennsylvania data breach notification law summary

All reports, newest first

Page 4 of 7. 345 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Highmark, Inc.Health Plan511Jun 30, 2022Hacking/IT IncidentArchive (closed)
The Rothman Orthopaedic InstituteHealthcare Provider874Jun 2, 2022Unauthorized Access/DisclosureArchive (closed)
Altoona Area School DistrictHealth Plan9,196Apr 11, 2022Hacking/IT IncidentArchive (closed)
Resources for Human DevelopmentHealthcare Provider46,673Mar 29, 2022TheftArchive (closed)
Law Enforcement Health Benefits, Inc.Health Plan85,282Mar 28, 2022Hacking/IT IncidentArchive (closed)
Highmark IncHealth Plan67,147Mar 11, 2022Hacking/IT IncidentArchive (closed)
FamilylinksHealthcare Provider1,494Mar 4, 2022Hacking/IT IncidentArchive (closed)
Bible Fellowship Church Homes, Inc. dba Fellowship CommunityHealthcare Provider3,500Feb 18, 2022Hacking/IT IncidentArchive (closed)
Liberty of Oklahoma CorporationBusiness Associate5,746Feb 17, 2022Hacking/IT IncidentArchive (closed)
Philadelphia FIGHT Community Health CentersHealthcare Provider17,992Jan 28, 2022Hacking/IT IncidentArchive (closed)
Allegheny Health Network Home Infusion, LLCHealthcare Provider15,342Jan 21, 2022Hacking/IT IncidentArchive (closed)
Independence Blue CrossHealth Plan591Jan 21, 2022Hacking/IT IncidentArchive (closed)
Thomas Jefferson University Hospital, Inc.Healthcare Provider5,239Jan 20, 2022Hacking/IT IncidentArchive (closed)
Abington Memorial Hospital dba Jefferson Abington HospitalHealthcare Provider3,475Jan 20, 2022Hacking/IT IncidentArchive (closed)
Vantage Holding Company, LLCHealthcare Provider1,762Jan 14, 2022Hacking/IT IncidentArchive (closed)
Medsurant Holdings, LLCHealthcare Provider129,127Nov 29, 2021Hacking/IT IncidentArchive (closed)
Quantum Imaging and Therapeutics Associates, Inc.Healthcare Provider394,506Nov 24, 2021Hacking/IT IncidentArchive (closed)
TriValley Primary CareHealthcare Provider122,806Nov 23, 2021Hacking/IT IncidentArchive (closed)
OAA Orthopaedic AssociatesHealthcare Provider18,052Nov 23, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance, LLCHealthcare Provider47,173Oct 1, 2021Unauthorized Access/DisclosureArchive (closed)
Professional Dental Alliance of Michigan, PLLCHealthcare Provider26,054Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Georgia, PLLCHealthcare Provider23,974Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Florida, LLCHealthcare Provider18,626Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Illinois, PLLCHealthcare Provider16,673Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Tennessee, LLCHealthcare Provider11,217Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of New York, PLLCHealthcare Provider10,778Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Indiana, PLLCHealthcare Provider7,359Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Connecticut, PLLCHealthcare Provider6,237Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of Texas, PLLCHealthcare Provider4,235Oct 1, 2021Hacking/IT IncidentArchive (closed)
NADG Hopewell, Inc.Healthcare Provider1,143Oct 1, 2021Hacking/IT IncidentArchive (closed)
Professional Dental Alliance of MassachusettsHealthcare Provider607Oct 1, 2021Hacking/IT IncidentArchive (closed)
Horizon House, Inc.Healthcare Provider27,823Sep 17, 2021Hacking/IT IncidentArchive (closed)
Indian Creek FoundationHealthcare Provider2,405Sep 13, 2021Hacking/IT IncidentArchive (closed)
The Wedge Medical CenterHealthcare Provider25,491Aug 24, 2021Hacking/IT IncidentArchive (closed)
Thomas Jefferson University HospitalBusiness Associate1,346Jul 22, 2021Hacking/IT IncidentArchive (closed)
Penn FoundationHealthcare Provider768Jun 29, 2021Hacking/IT IncidentArchive (closed)
Refresh Mental Health d/b/a Springfield PsychologicalHealthcare Provider948Jun 18, 2021Unauthorized Access/DisclosureArchive (closed)
Pennsylvania Health & WellnessHealth Plan1,325Jun 7, 2021Hacking/IT IncidentArchive (closed)
Temple University Hospital, Inc.Healthcare Provider17,041Jun 2, 2021Hacking/IT IncidentArchive (closed)
Charles Cole Memorial Hospital, d/b/a UPMC ColeHealthcare Provider7,376May 7, 2021Hacking/IT IncidentArchive (closed)
Achievement Center of LECOM HealthHealthcare Provider1,671Apr 30, 2021Hacking/IT IncidentArchive (closed)
Squirrel Hill Health CenterHealthcare Provider23,869Apr 2, 2021Hacking/IT IncidentArchive (closed)
BioTelemetry, Inc.Healthcare Provider38,575Mar 26, 2021Hacking/IT IncidentArchive (closed)
University of Pittsburgh Medical Center, St. Margaret Hospital (“UPMC St. Margaret”)Healthcare Provider11,135Mar 5, 2021Unauthorized Access/DisclosureArchive (closed)
Geisinger Health PlanHealth Plan2,872Feb 28, 2021Unauthorized Access/DisclosureArchive (closed)
Cornerstone Care, Inc.Healthcare Provider12,081Feb 25, 2021Hacking/IT IncidentArchive (closed)
Pennsylvania Adult & Teen ChallengeHealthcare Provider7,771Feb 9, 2021Hacking/IT IncidentArchive (closed)
The University of Pittsburgh Medical CenterHealthcare Provider36,086Feb 5, 2021Hacking/IT IncidentArchive (closed)
University of Pittsburgh Medical Center Health PlanHealth Plan18,900Feb 5, 2021Hacking/IT IncidentArchive (closed)
Krapf GroupHealth Plan610Jan 19, 2021Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.