TN · HHS OCR reports
HIPAA breaches in Tennessee
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Tennessee.
Reports
200
Individuals affected
39,597,433
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Tenn. Code Ann. §§ 47-18-2101 to 47-18-2111 (Tennessee Identity Theft Deterrence Act of 1999) (amended 2025)
Timing: 45 days Tennessee requires businesses and persons to notify affected individuals no later than 45 days
Read the Tennessee data breach notification law summaryAll reports, newest first
Page 3 of 4. 200 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Advent Health Partners, Inc. | Business Associate | 37,183 | Jan 6, 2022 | Hacking/IT Incident | Archive (closed) |
| Vanderbilt University Medical Center | Healthcare Provider | 556 | Jan 5, 2022 | Hacking/IT Incident | Archive (closed) |
| WyndRidge Health and Rehabilitation Center | Healthcare Provider | 1,958 | Nov 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Hermitage Eye Care, PLLC dba Dover Eye Care | Healthcare Provider | 11,672 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Professional Healthcare Management, Inc. | Healthcare Provider | 12,306 | Oct 28, 2021 | Hacking/IT Incident | Archive (closed) |
| QRS, Inc. | Business Associate | 430,334 | Oct 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Vista Radiology, P.C. | Healthcare Provider | 3,664 | Sep 9, 2021 | Hacking/IT Incident | Archive (closed) |
| UTMP Surgical Oncology | Healthcare Provider | 1,310 | Aug 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| CleanSlate Centers, Inc. | Healthcare Provider | 890 | Jul 16, 2021 | Hacking/IT Incident | Archive (closed) |
| United Neighborhood Health Services d/b/a Neighborhood Health | Healthcare Provider | 1,519 | Jun 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Cancer Care Center | Healthcare Provider | 17,809 | Jun 9, 2021 | Hacking/IT Incident | Archive (closed) |
| State of TN Finance & Administration | Health Plan | 947 | May 27, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| SEES Group, LLC | Healthcare Provider | 3,797 | Apr 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Haven Behavioral Healthcare | Business Associate | 21,714 | Mar 23, 2021 | Hacking/IT Incident | Archive (closed) |
| Summit Behavioral Healthcare | Healthcare Provider | 70,822 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Volunteer State Health Plan, Inc. d/b/a BlueCare Tennessee | Business Associate | 1,435 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Nissan North America, Inc. | Health Plan | 50,410 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| BlueCross BlueShield of Tennessee, Inc. | Health Plan | 1,340 | Dec 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Meharry Medical College | Healthcare Provider | 20,963 | Dec 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Centerstone of Tennessee, Inc. | Healthcare Provider | 50,965 | Oct 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Clinical & Forensic Consultation, LLC d/b/a Thriveworks Bristol, Johnson City, and Knoxville | Healthcare Provider | 1,360 | Oct 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Tennessee Medical Center | Healthcare Provider | 234,954 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Erlanger Health System | Healthcare Provider | 4,938 | Sep 4, 2020 | Loss | Archive (closed) |
| Maxwell Aesthetics | Healthcare Provider | 656 | Jun 30, 2020 | Hacking/IT Incident | Archive (closed) |
| Tennova Healthcare Harton | Healthcare Provider | 1,070 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Tennessee Orthopaedic Alliance | Healthcare Provider | 81,146 | Feb 14, 2020 | Hacking/IT Incident | Archive (closed) |
| SEES Group, LLC | Healthcare Provider | 13,000 | Dec 31, 2019 | Hacking/IT Incident | Archive (closed) |
| Speight Family Medical, LLC | Healthcare Provider | 2,000 | Dec 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Alive Hospice | Healthcare Provider | 533 | Sep 6, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Quorum Health | Healthcare Provider | 1,269 | Aug 11, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Perry County Medical Center Inc. d/b/a Three Rivers Community Health Group | Healthcare Provider | 3,812 | Jul 26, 2019 | Hacking/IT Incident | Archive (closed) |
| Memphis Pathology Laboratory d/b/a American Esoteric Laboratories | Healthcare Provider | 417,146 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Alive Hospice | Healthcare Provider | 608 | Jul 3, 2019 | Hacking/IT Incident | Archive (closed) |
| Alana Healthcare | Healthcare Provider | 2,691 | Apr 18, 2019 | Hacking/IT Incident | Archive (closed) |
| National Seating & Mobility, Inc. | Healthcare Provider | 3,800 | Apr 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Unum Group, on behalf of its subsidiaries - Unum Life Insurance and Colonial Life & Accident Insurance | Health Plan | 532 | Jan 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Monroe Operations, LLC d/b/a Newport Academy and Center for Families | Healthcare Provider | 1,165 | Aug 17, 2018 | Hacking/IT Incident | Archive (closed) |
| Alive Hospice | Healthcare Provider | 1,868 | Jul 13, 2018 | Hacking/IT Incident | Archive (closed) |
| MSK Group | Healthcare Provider | 566,236 | May 22, 2018 | Hacking/IT Incident | Archive (closed) |
| Knoxville Heart Group, Inc. | Healthcare Provider | 15,995 | Apr 27, 2018 | Hacking/IT Incident | Archive (closed) |
| Center for Sports Medicine and Orthopedics | Healthcare Provider | 800 | Feb 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Decatur County General Hospital | Healthcare Provider | 24,000 | Jan 26, 2018 | Hacking/IT Incident | Archive (closed) |
| Robert Smith DMD, PC | Healthcare Provider | 1,500 | Jan 22, 2018 | Hacking/IT Incident | Archive (closed) |
| Memphis Pathology Laboratory d/b/a American Esoteric Laboratory | Healthcare Provider | 500 | Dec 14, 2017 | Theft | Archive (closed) |
| EMERGENCY COVERAGE CORPORATION | Healthcare Provider | 719 | Oct 20, 2017 | Loss | Archive (closed) |
| BlueCross BlueShield of TN, Inc. | Health Plan | 2,117 | Jul 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Professional Counseling & Medical Associates | Healthcare Provider | 2,500 | Jul 13, 2017 | Hacking/IT Incident | Archive (closed) |
| Saint Thomas Rutherford Hospital | Healthcare Provider | 2,837 | Jun 22, 2017 | Improper Disposal | Archive (closed) |
| Cleveland Medical Associates, PLLC | Healthcare Provider | 22,000 | Jun 20, 2017 | Hacking/IT Incident | Archive (closed) |
| Tennessee Rural Health Improvement Association | Health Plan | 588 | Jun 8, 2017 | Loss | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.