TN · HHS OCR reports
HIPAA breaches in Tennessee
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Tennessee.
Reports
200
Individuals affected
39,597,433
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Tenn. Code Ann. §§ 47-18-2101 to 47-18-2111 (Tennessee Identity Theft Deterrence Act of 1999) (amended 2025)
Timing: 45 days Tennessee requires businesses and persons to notify affected individuals no later than 45 days
Read the Tennessee data breach notification law summaryAll reports, newest first
Page 2 of 4. 200 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Specialty Networks, Inc. | Business Associate | 411,037 | Aug 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Regional Obstetrical Consultants PC | Healthcare Provider | 25,650 | Jul 2, 2024 | Hacking/IT Incident | Under investigation |
| Human Technology Inc., and its affiliates | Healthcare Provider | 24,580 | Jul 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Core Dental Health | Healthcare Provider | 2,349 | Jul 1, 2024 | Hacking/IT Incident | Archive (closed) |
| Delta Specialty Hospital | Healthcare Provider | 1,998 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Crestwyn Behavioral Health Hospital, Inc. | Healthcare Provider | 1,757 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| FC Compassus, LLC | Healthcare Provider | 1,383 | May 31, 2024 | Hacking/IT Incident | Archive (closed) |
| Delta Specialty Hospital | Healthcare Provider | 1,019 | May 8, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| United Seating and Mobility, L.L.C., d/b/a Numotion | Healthcare Provider | 688,852 | May 1, 2024 | Hacking/IT Incident | Archive (closed) |
| AMERICAN RENAL MANAGEMENT | Business Associate | 501 | Apr 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Cumberland Heights Foundation, Inc. | Healthcare Provider | 5,078 | Apr 19, 2024 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | Business Associate | 717 | Apr 5, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Politzer and Durocher, PLC d/b/a Optometric Physicians of Middle Tennessee | Healthcare Provider | 24,996 | Apr 4, 2024 | Hacking/IT Incident | Archive (closed) |
| University of Tennessee Health Science Center | Healthcare Provider | 19,353 | Apr 1, 2024 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus Tennessee | Health Plan | 1,251 | Mar 5, 2024 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus Tennessee | Health Plan | 790 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| FedEx Corporation Group Health Plan | Health Plan | 553 | Jan 24, 2024 | Hacking/IT Incident | Archive (closed) |
| AHS Management Company, Inc. | Business Associate | 38,361 | Jan 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Summit Medical Group, PLLC | Healthcare Provider | 4,135 | Jan 12, 2024 | Hacking/IT Incident | Archive (closed) |
| RevSpring, Inc. | Business Associate | 1,053 | Dec 22, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Plaza Radiology, LLC | Healthcare Provider | 569,022 | Dec 20, 2023 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | Health Plan | 1,676 | Dec 19, 2023 | Hacking/IT Incident | Archive (closed) |
| International Paper Company Group Health and Welfare Plan | Health Plan | 78,692 | Nov 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health, Inc. | Healthcare Provider | 2,753 | Sep 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Unum Group SACE | Health Plan | 559,315 | Aug 3, 2023 | Hacking/IT Incident | Archive (closed) |
| HCA Healthcare | Business Associate | 11,270,000 | Jul 31, 2023 | Hacking/IT Incident | Archive (closed) |
| The Chattanooga Heart Institute | Healthcare Provider | 545,491 | Jul 28, 2023 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | Business Associate | 2,688 | Jul 25, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Associated Pathologists, LLC dba PathGroup Health Plan | Health Plan | 2,031 | Jul 18, 2023 | Hacking/IT Incident | Archive (closed) |
| Murfreesboro Medical Clinic & SurgiCenter | Healthcare Provider | 559,000 | Jun 21, 2023 | Hacking/IT Incident | Archive (closed) |
| Intellihartx, LLC | Business Associate | 489,830 | Jun 8, 2023 | Hacking/IT Incident | Archive (closed) |
| Tennessee Orthopaedic Clinics | Healthcare Provider | 46,679 | May 19, 2023 | Hacking/IT Incident | Archive (closed) |
| Community Health Systems Professional Services Corporations (CHSPSC), LLC | Business Associate | 1,173,555 | Mar 16, 2023 | Hacking/IT Incident | Archive (closed) |
| Skin MD, PLLC | Healthcare Provider | 7,558 | Feb 6, 2023 | Improper Disposal | Archive (closed) |
| Epic Management LLC | Healthcare Provider | 10,050 | Nov 14, 2022 | Hacking/IT Incident | Archive (closed) |
| The Stern Cardiovascular Foundation, Inc. | Healthcare Provider | 270,645 | Nov 5, 2022 | Hacking/IT Incident | Archive (closed) |
| Center for a Brighter Tomorrow PLLC | Healthcare Provider | 1,082 | Sep 26, 2022 | Loss | Archive (closed) |
| Dyersburg Family Walk-In Clinic, LLC dba Reelfoot Family Walk-In Clinic | Healthcare Provider | 58,562 | Sep 23, 2022 | Hacking/IT Incident | Archive (closed) |
| Centerstone of Tennessee, Inc. | Healthcare Provider | 3,675 | Sep 12, 2022 | Hacking/IT Incident | Archive (closed) |
| TennCare | Health Plan | 1,694 | Sep 9, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| FEDERAL EXPRESS CORPORATION GROUP HEALTH PLAN FOR PILOTS | Health Plan | 668 | Sep 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Surgery Partners (North Carolina Specialty Hospital) | Business Associate | 8,258 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Surgery Partners (Lafayette Surgical Specialty Hospital) | Business Associate | 3,527 | Jun 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Methodist Le Bonheur Healthcare | Healthcare Provider | 1,370 | May 2, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| SUMMIT EYE ASSOCIATES P.C. | Healthcare Provider | 53,818 | Apr 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Ballad Health | Healthcare Provider | 4,295 | Apr 8, 2022 | Hacking/IT Incident | Archive (closed) |
| East Tennessee Children's Hospital | Healthcare Provider | 422,531 | Apr 7, 2022 | Hacking/IT Incident | Archive (closed) |
| Urgent Team Holdings | Healthcare Provider | 166,601 | Mar 31, 2022 | Hacking/IT Incident | Archive (closed) |
| Molecular Pathology Laboratory Network, Inc. | Healthcare Provider | 339,471 | Mar 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Norwood Clinic | Healthcare Provider | 228,000 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.