PA · HHS OCR reports
HIPAA breaches in Pennsylvania
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.
Reports
345
Individuals affected
21,205,627
Under investigation
34
Top type: Hacking/IT Incident
State breach notification law
73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)
Timing: notify affected individuals within 7 business days following determination of a breach. 34
Read the Pennsylvania data breach notification law summaryAll reports, newest first
Page 6 of 7. 345 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Byham's Insurance Services Inc. | Healthcare Clearing House | 1,600 | Jun 27, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Penn Medicine | Healthcare Provider | 917 | May 21, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners For Quality, Inc. | Healthcare Provider | 3,673 | Apr 19, 2019 | Hacking/IT Incident | Archive (closed) |
| Main Line Endoscopy Centers | Healthcare Provider | 14,305 | Mar 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Northeast Philadelphia Vascular Surgeons, P.C. | Healthcare Provider | 8,193 | Mar 27, 2019 | Hacking/IT Incident | Archive (closed) |
| ZOLL Services LLC | Healthcare Provider | 277,319 | Mar 18, 2019 | Hacking/IT Incident | Archive (closed) |
| Lebanon VA Medical Center | Healthcare Provider | 1,002 | Jan 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund | Health Plan | 911 | Dec 21, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Tandigm Health | Business Associate | 7,376 | Nov 21, 2018 | Hacking/IT Incident | Archive (closed) |
| The Children's Hospital of Philadelphia | Healthcare Provider | 5,368 | Oct 23, 2018 | Hacking/IT Incident | Archive (closed) |
| The May Eye Care Center | Healthcare Provider | 30,000 | Oct 11, 2018 | Hacking/IT Incident | Archive (closed) |
| Independence Blue Cross, LLC | Business Associate | 16,762 | Sep 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Carpenters Benefit Funds of Philadelphia | Health Plan | 20,015 | Aug 31, 2018 | Hacking/IT Incident | Archive (closed) |
| PA Dept. of Human Services | Healthcare Provider | 2,130 | Jul 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Charles Cole Memorial Hospital | Healthcare Provider | 790 | Jul 13, 2018 | Hacking/IT Incident | Archive (closed) |
| Progressions Behavioral Health Services, Inc. | Healthcare Provider | 1,303 | Jun 25, 2018 | Hacking/IT Incident | Archive (closed) |
| Worldwide Insurance Services, LLC | Business Associate | 1,692 | Apr 30, 2018 | Hacking/IT Incident | Archive (closed) |
| Penn Medicine | Healthcare Provider | 1,050 | Jan 2, 2018 | Theft | Archive (closed) |
| UnitedHealthcare Community Plan of Pennsylvania | Business Associate | 614 | Dec 27, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Washington Health System Greene | Healthcare Provider | 4,145 | Dec 1, 2017 | Theft | Archive (closed) |
| UPMC Susquehanna | Healthcare Provider | 1,208 | Nov 15, 2017 | Hacking/IT Incident | Archive (closed) |
| Premier Medical Associates | Healthcare Provider | 876 | Sep 15, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Department of Human Services, Commonwealth of Pennsylvania | Health Plan | 517 | Sep 7, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Women's Health Care Group of PA, LLC | Healthcare Provider | 300,000 | Jul 15, 2017 | Hacking/IT Incident | Archive (closed) |
| Ledet Family Chiropractic Cener | Healthcare Provider | 530 | Jul 9, 2017 | Hacking/IT Incident | Archive (closed) |
| Harrisburg Gastroenterology Ltd | Healthcare Provider | 93,323 | Apr 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Harrisburg Endoscopy and Surgery Center | Healthcare Provider | 9,092 | Apr 28, 2017 | Hacking/IT Incident | Archive (closed) |
| Specialty Dental Partners of Philadelphia, PLLC.- DBA Rich Orthodontics | Healthcare Provider | 960 | Mar 23, 2017 | Theft | Archive (closed) |
| WellSpan Health | Health Plan | 732 | Mar 23, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Brodhead Dental Center | Healthcare Provider | 5,872 | Dec 19, 2016 | Hacking/IT Incident | Archive (closed) |
| Washington Health System | Healthcare Provider | 544 | Dec 2, 2016 | Theft | Archive (closed) |
| Lebanon Cardiology Associates, PC | Healthcare Provider | 537 | Nov 14, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| KidsPeace | Healthcare Provider | 1,456 | Sep 19, 2016 | Loss | Archive (closed) |
| King of Prussia Dental Associates | Healthcare Provider | 16,228 | Sep 13, 2016 | Hacking/IT Incident | Archive (closed) |
| Geisinger Health Plan | Health Plan | 2,814 | Sep 7, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Center for Minimmally Invasive Bariatric and General Surgery | Healthcare Provider | 992 | Aug 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| The Ambulatory Surgery Center at St. Mary (ACASM) | Healthcare Provider | 13,000 | Jul 7, 2016 | Hacking/IT Incident | Archive (closed) |
| Integrated Health Solutions PC | Healthcare Provider | 19,776 | May 25, 2016 | Hacking/IT Incident | Archive (closed) |
| Keystone Rural Health Consortia, Inc. | Healthcare Provider | 800 | May 24, 2016 | Theft | Archive (closed) |
| Einstein Healthcare Network | Healthcare Provider | 2,939 | Apr 1, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Robert D. Chatlos DMD & Assoc | Business Associate | 2,900 | Oct 18, 2015 | Theft | Archive (closed) |
| UPMC Health Plan | Health Plan | 722 | Jul 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Rite Aid Corporation | Healthcare Provider | 2,345 | Jun 3, 2015 | Theft | Archive (closed) |
| UPMC | Healthcare Provider | 2,259 | May 15, 2015 | Theft | Archive (closed) |
| Duke LifePoint Conemaugh Memorial Medical Center | Healthcare Provider | 1,551 | May 15, 2015 | Theft | Archive (closed) |
| City of Philadelphia Fire Department Emergency Medical Services Unit | Healthcare Provider | 81,463 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Independence Blue Cross and AmeriHealth New Jersey | Health Plan | 12,450 | Dec 26, 2014 | Improper Disposal | Archive (closed) |
| Kirkbride Center | Healthcare Provider | 860 | Nov 19, 2014 | Theft | Archive (closed) |
| Coordinated Health | Healthcare Provider | 13,907 | Oct 31, 2014 | Theft | Archive (closed) |
| VARO Healthcare | Business Associate | 1,667 | Oct 7, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.