PA · HHS OCR reports
HIPAA breaches in Pennsylvania
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.
Reports
345
Individuals affected
21,205,627
Under investigation
34
Top type: Hacking/IT Incident
State breach notification law
73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)
Timing: notify affected individuals within 7 business days following determination of a breach. 34
Read the Pennsylvania data breach notification law summaryAll reports, newest first
Page 5 of 7. 345 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Simpson Senior Services, Inc. | Healthcare Provider | 3,259 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Holy Redeemer Ambulatory Surgical Center | Healthcare Provider | 1,295 | Dec 11, 2020 | Hacking/IT Incident | Archive (closed) |
| RXN, Inc. d/b/a Lancaster Pharmacy | Healthcare Provider | 856 | Dec 10, 2020 | Theft | Archive (closed) |
| Diamond Pharmacy | Healthcare Provider | 616 | Dec 10, 2020 | Theft | Archive (closed) |
| 26th & Lehigh Pharmacy | Healthcare Provider | 549 | Dec 10, 2020 | Theft | Archive (closed) |
| Wellness Pharmacy | Healthcare Provider | 545 | Dec 10, 2020 | Theft | Archive (closed) |
| Allegheny Health Network | Healthcare Provider | 299,507 | Dec 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Regional Women's Health Group, LLC d/b/a Sincera Reproductive Medicine | Healthcare Provider | 37,989 | Dec 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Herron Business Law | Business Associate | 1,419 | Nov 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Lycoming-Clinton Joinder Board Programs | Business Associate | 14,500 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Geisinger | Healthcare Provider | 86,412 | Oct 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Passavant Memorial Homes, Inc. | Healthcare Provider | 36,000 | Oct 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Einstein Healthcare Network | Healthcare Provider | 353,616 | Oct 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Geisinger Health | Healthcare Provider | 717 | Sep 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| HM Health Solutions | Business Associate | 1,798 | Sep 17, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Lehigh Valley Health Network | Healthcare Provider | 81,487 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Devereux Advanced Behavioral Health | Healthcare Provider | 1,758 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| The Guthrie Clinic | Healthcare Provider | 92,064 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Lycoming-Clinton Joinder Board Programs | Business Associate | 3,905 | Sep 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Main Line Health | Healthcare Provider | 60,595 | Aug 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Elwyn | Healthcare Provider | 16,579 | Aug 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Hamilton Health Center, Inc. | Healthcare Provider | 10,393 | Aug 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Richard J. Caron Foundation | Healthcare Provider | 22,718 | Aug 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Prospect Medical Holdings (Crozer-Keystone Health System) | Healthcare Provider | 177,023 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Selected Benefits | Business Associate | 8,100 | Aug 14, 2020 | Hacking/IT Incident | Archive (closed) |
| St. Christopher's Hospital for Children | Healthcare Provider | 7,557 | Jul 31, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Rite Aid Corporation | Healthcare Provider | 13,600 | Jul 29, 2020 | Theft | Archive (closed) |
| Highpoint Foot & Ankle Center | Healthcare Provider | 25,554 | Jul 20, 2020 | Hacking/IT Incident | Archive (closed) |
| Independence Blue Cross | Business Associate | 2,393 | Jul 2, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| The StayWell Company, LLC | Business Associate | 971 | Jun 26, 2020 | Hacking/IT Incident | Archive (closed) |
| City of Philadelphia | Health Plan | 233,543 | Jun 1, 2020 | Hacking/IT Incident | Archive (closed) |
| Everett & Hurite Ophthalmic Association | Healthcare Provider | 34,113 | May 22, 2020 | Hacking/IT Incident | Archive (closed) |
| Geisinger Wyoming Valley Medical Center | Healthcare Provider | 805 | May 18, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Moses Taylor Hospital | Healthcare Provider | 1,905 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Wilkes-Barre General Hospital | Healthcare Provider | 518 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| UPMC Altoona Regional Health Services | Healthcare Provider | 13,911 | Apr 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Crossroads Technologies, Inc. | Business Associate | 897 | Mar 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Allegheny County, PA | Health Plan | 3,394 | Mar 13, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| SOLO Laboratories, Inc. | Business Associate | 60,000 | Feb 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Cedarbrook Senior Care and Rehabilitation / County of Lehigh | Healthcare Provider | 688 | Jan 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Healthcare Administrative Partners | Business Associate | 17,693 | Dec 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Human Services, Inc. | Healthcare Provider | 1,559 | Nov 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Gateway Health Plan LP | Health Plan | 753 | Nov 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Source 1 Healthcare Solutions LLC | Business Associate | 15,450 | Aug 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Lyons Companies | Business Associate | 1,982 | Aug 23, 2019 | Hacking/IT Incident | Archive (closed) |
| Drexel Medicine | Healthcare Provider | 4,340 | Aug 7, 2019 | Hacking/IT Incident | Archive (closed) |
| Temple University Health System | Healthcare Provider | 2,399 | Jul 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Cosmetic Surgery Specialists, P.C. | Healthcare Provider | 3,000 | Jul 23, 2019 | Improper Disposal | Archive (closed) |
| City of Philadelphia | Health Plan | 1,458 | Jul 19, 2019 | Loss | Archive (closed) |
| Cancer Treatment Centers of America (CTCA) at Eastern Regional Medical Center | Healthcare Provider | 3,904 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.