TN · HHS OCR reports
HIPAA breaches in Tennessee
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Tennessee.
Reports
200
Individuals affected
39,597,433
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Tenn. Code Ann. §§ 47-18-2101 to 47-18-2111 (Tennessee Identity Theft Deterrence Act of 1999) (amended 2025)
Timing: 45 days Tennessee requires businesses and persons to notify affected individuals no later than 45 days
Read the Tennessee data breach notification law summaryAll reports, newest first
Page 1 of 4. 200 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Lexington Hospital Corporation | Healthcare Provider | 67,000 | Sep 8, 2026 | Hacking/IT Incident | Archive (closed) |
| Life Bridges, Inc. | Healthcare Provider | 5,194 | Aug 20, 2026 | Hacking/IT Incident | Under investigation |
| Well Child, Inc. | Healthcare Provider | 500 | Aug 14, 2026 | Hacking/IT Incident | Under investigation |
| American Addiction Centers | Business Associate | 327,754 | Aug 7, 2026 | Hacking/IT Incident | Under investigation |
| TennCare | Health Plan | 2,300 | Jul 27, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Vanderbilt University Medical Center | Healthcare Provider | 3,298 | Jul 24, 2026 | Hacking/IT Incident | Under investigation |
| Erlanger Health | Healthcare Provider | 4,237 | Jul 1, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Anatomic and Clinical Laboratory Associates, P.C. | Healthcare Provider | 169,626 | Jun 23, 2026 | Hacking/IT Incident | Under investigation |
| Open Arms Care Corporation | Healthcare Provider | 893 | Jun 11, 2026 | Hacking/IT Incident | Under investigation |
| Xsolis, Inc. | Business Associate | 1,396,519 | Jun 5, 2026 | Hacking/IT Incident | Under investigation |
| Acadia Healthcare Company, Inc | Business Associate | 1,807 | May 22, 2026 | Hacking/IT Incident | Under investigation |
| Tri-Cities Gastroenterology | Healthcare Provider | 67,115 | Apr 29, 2026 | Hacking/IT Incident | Under investigation |
| Interventional Pain Center, PLLC | Healthcare Provider | 3,171 | Mar 31, 2026 | Hacking/IT Incident | Under investigation |
| QualDerm Partners, LLC | Healthcare Provider | 2,951,318 | Feb 22, 2026 | Hacking/IT Incident | Under investigation |
| BlueCross BlueShield of Tennessee, Inc. | Business Associate | 1,670 | Feb 11, 2026 | Hacking/IT Incident | Archive (closed) |
| Wakefield & Associates, LLC | Business Associate | 31,751 | Jan 30, 2026 | Hacking/IT Incident | Archive (closed) |
| Chattanooga C.A.R.E.S. d/b/a Cempa Community Care | Healthcare Provider | 1,341 | Jan 30, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Surgery Center of Oak Ridge, LLC dba Advanced Family Surgery Center | Healthcare Provider | 10,320 | Jan 23, 2026 | Hacking/IT Incident | Under investigation |
| Mid-South Pulmonary & Sleep Specialists P.C. | Healthcare Provider | 70,211 | Dec 30, 2025 | Hacking/IT Incident | Under investigation |
| BlueCross BlueShield of Tennessee, Inc. | Business Associate | 780 | Dec 26, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Artemis Healthcare Inc. | Healthcare Provider | 45,867 | Dec 23, 2025 | Hacking/IT Incident | Archive (closed) |
| FPMCM LLC | Business Associate | 2,072 | Dec 15, 2025 | Unauthorized Access/Disclosure | Under investigation |
| FedEx Corporation Group Health Plan | Health Plan | 1,066 | Dec 1, 2025 | Hacking/IT Incident | Under investigation |
| Methodist Healthcare - Memphis Hospitals | Healthcare Provider | 1,658 | Oct 27, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Tennessee River Physicians, PLLC | Healthcare Provider | 2,363 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Germantown Emergency Physicians, PLLC | Healthcare Provider | 2,084 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist University Emergency Physicians, PLLC | Healthcare Provider | 1,070 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist North Emergency Physicians, PLLC | Healthcare Provider | 699 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Cookeville Hospitalist Group, PLLC | Healthcare Provider | 654 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Methodist South Emergency Physicians, PLLC | Healthcare Provider | 601 | Sep 16, 2025 | Hacking/IT Incident | Archive (closed) |
| Cookeville Regional Medical Center | Healthcare Provider | 500 | Sep 12, 2025 | Hacking/IT Incident | Archive (closed) |
| Franklin Dermatology Group, PLC | Healthcare Provider | 2,457 | Sep 11, 2025 | Hacking/IT Incident | Archive (closed) |
| PhyNet Dermatology, LLC | Business Associate | 1,308 | Jul 29, 2025 | Hacking/IT Incident | Under investigation |
| Integrated Oncology Network | Business Associate | 4,174 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health | Healthcare Provider | 3,371 | May 28, 2025 | Hacking/IT Incident | Archive (closed) |
| City of Bristol, Tennessee | Healthcare Provider | 4,708 | Apr 22, 2025 | Hacking/IT Incident | Archive (closed) |
| RHEA MEDICAL CENTER | Healthcare Provider | 8,309 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health | Healthcare Provider | 3,193 | Apr 10, 2025 | Hacking/IT Incident | Archive (closed) |
| Hamilton County Government | Healthcare Provider | 14,081 | Apr 3, 2025 | Hacking/IT Incident | Archive (closed) |
| CDHA Management, LLC and Spark DSO, LLC dba Chord Specialty Dental Partners | Healthcare Provider | 173,430 | Mar 14, 2025 | Hacking/IT Incident | Under investigation |
| United Seating and Mobility, LLC d/b/a Numotion | Healthcare Provider | 529,004 | Mar 7, 2025 | Hacking/IT Incident | Archive (closed) |
| Children's Dental Center at Preston Trail, P.C. d/b/a Park Place Pediatric Dentistry (Arlington, TX) | Healthcare Provider | 1,690 | Feb 14, 2025 | Theft | Archive (closed) |
| Lucent Health Solutions, LLC | Business Associate | 37,000 | Jan 30, 2025 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Group, PLLC | Healthcare Provider | 464,159 | Dec 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Insured Recovery | Healthcare Provider | 850 | Dec 11, 2024 | Hacking/IT Incident | Archive (closed) |
| FC Compassus, LLC | Healthcare Provider | 2,703 | Dec 2, 2024 | Hacking/IT Incident | Archive (closed) |
| American Addiction Centers, Inc. | Business Associate | 410,747 | Nov 25, 2024 | Hacking/IT Incident | Archive (closed) |
| United Seating and Mobility, LLC dba Numotion | Healthcare Provider | 2,319 | Nov 11, 2024 | Hacking/IT Incident | Archive (closed) |
| GPS Sango Family Dentistry, PLLC d/b/a Sango Family Dentistry | Healthcare Provider | 27,000 | Oct 24, 2024 | Hacking/IT Incident | Archive (closed) |
| Ad Valorem Records, Inc. | Business Associate | 590 | Oct 11, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.