VA · HHS OCR reports
HIPAA breaches in Virginia
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Virginia.
Reports
158
Individuals affected
25,324,969
Under investigation
13
Top type: Hacking/IT Incident
State breach notification law
Va. Code Ann. § 18.2-186.6 (Crimes Involving Fraud - Breach of Personal Information Notification) (amended 2020)
Timing: Without unreasonable delay Virginia requires businesses and individuals to notify affected residents and
Read the Virginia data breach notification law summaryAll reports, newest first
Page 1 of 4. 158 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Averhealth Holdings | Healthcare Provider | 9,909 | Jul 2, 2026 | Hacking/IT Incident | Under investigation |
| Radiology Associates of Richmond | Healthcare Provider | 266,183 | May 21, 2026 | Hacking/IT Incident | Under investigation |
| Defense Health Agency (TriWest) | Health Plan | 11,844 | May 21, 2026 | Hacking/IT Incident | Archive (closed) |
| Stafford Oral Surgery P.C. | Healthcare Provider | 7,019 | May 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Garrisonville Dental L.L.C | Healthcare Provider | 5,204 | May 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Belmont Aesthetic and Reconstructive Plastic Surgery | Healthcare Provider | 528 | Apr 23, 2026 | Hacking/IT Incident | Under investigation |
| Defense Health Agency | Health Plan | 1,300 | Apr 14, 2026 | Unauthorized Access/Disclosure | Under investigation |
| Virginia Department of Behavioral Health and Developmental Services | Healthcare Provider | 724 | Apr 7, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Defense Health Agency | Health Plan | 96,271 | Mar 12, 2026 | Hacking/IT Incident | Archive (closed) |
| About Women Ob/Gyn, PC | Healthcare Provider | 23,018 | Feb 4, 2026 | Hacking/IT Incident | Under investigation |
| Fair Oaks Ortho P.C. | Healthcare Provider | 1,544 | Feb 2, 2026 | Hacking/IT Incident | Under investigation |
| Avosina Healthcare Solutions | Business Associate | 44,425 | Jan 10, 2026 | Hacking/IT Incident | Under investigation |
| Richmond Behavioral Health Authority | Healthcare Provider | 113,232 | Nov 28, 2025 | Hacking/IT Incident | Under investigation |
| SomnoSleep Consultants, LLC | Healthcare Provider | 913 | Nov 24, 2025 | Hacking/IT Incident | Archive (closed) |
| Med Atlantic, Inc. | Business Associate | 410,326 | Nov 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Delta Dental of Virginia | Health Plan | 126,953 | Nov 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Personic Management Company LLC | Business Associate | 10,929 | Nov 19, 2025 | Hacking/IT Incident | Under investigation |
| Sentara Health | Healthcare Provider | 696 | Sep 3, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Williamsburg Area Medical Assistance Corporation d/b/a Olde Towne Medical and Dental Center (OTMDC) | Healthcare Provider | 2,567 | Jul 13, 2025 | Hacking/IT Incident | Under investigation |
| Radiology Associates of Richmond, Inc. | Healthcare Provider | 1,419,091 | Jul 1, 2025 | Hacking/IT Incident | Under investigation |
| Mount Rogers Community Services | Healthcare Provider | 38,191 | Jun 13, 2025 | Hacking/IT Incident | Under investigation |
| Sentara Health | Healthcare Provider | 13,278 | Jun 9, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwestern Community Services Board | Healthcare Provider | 21,856 | May 29, 2025 | Hacking/IT Incident | Under investigation |
| Maximus, Inc. | Business Associate | 4,955 | Apr 25, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Horizon Behavioral Health | Healthcare Provider | 49,303 | Apr 21, 2025 | Hacking/IT Incident | Archive (closed) |
| Cardiology Associates of Fredericksburg | Healthcare Provider | 75,476 | Apr 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Sentara Health | Healthcare Provider | 1,620 | Mar 28, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Cardiology of Virginia, Inc. | Healthcare Provider | 21,085 | Jan 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Tycon Medical Systems, Inc. | Healthcare Provider | 112,847 | Dec 30, 2024 | Hacking/IT Incident | Archive (closed) |
| Colonial Behavioral Health | Healthcare Provider | 29,930 | Nov 27, 2024 | Hacking/IT Incident | Archive (closed) |
| Vann Virginia Center for Orthopaedics, PC dba Atlantic Orthopaedic Specialists | Healthcare Provider | 15,264 | Nov 22, 2024 | Hacking/IT Incident | Archive (closed) |
| Universal Health Corporation | Healthcare Provider | 583 | Nov 6, 2024 | Hacking/IT Incident | Archive (closed) |
| Goodwin Living Incorporated | Healthcare Provider | 7,170 | Aug 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Fairfax Radiological Consultants | Healthcare Provider | 3,512 | Jul 12, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Virginia Oral, Maxillofacial & Implant Surgery | Healthcare Provider | 4,333 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Employee Benefits Corporation of America and Benefit Design Group, Inc. | Health Plan | 38,912 | Feb 15, 2024 | Hacking/IT Incident | Archive (closed) |
| Mount Vernon Dental Smiles | Healthcare Provider | 1,074 | Jan 19, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Hampton-Newport News Community Services Board | Healthcare Provider | 44,312 | Jan 11, 2024 | Hacking/IT Incident | Archive (closed) |
| The Foleck Center, LTD | Healthcare Provider | 6,965 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Chesapeake Regional Healthcare | Healthcare Provider | 31,679 | Nov 29, 2023 | Hacking/IT Incident | Archive (closed) |
| Fredericksburg Foot & Ankle Center, PLC | Healthcare Provider | 14,912 | Oct 25, 2023 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services | Health Plan | 1,229,333 | Sep 18, 2023 | Hacking/IT Incident | Archive (closed) |
| VA Department of Medical Assistance Services | Health Plan | 928 | Sep 14, 2023 | Hacking/IT Incident | Archive (closed) |
| Serco Inc. Group Health Plan | Health Plan | 10,140 | Aug 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services | Health Plan | 423,824 | Aug 9, 2023 | Hacking/IT Incident | Archive (closed) |
| Maximus, Inc. | Business Associate | 9,179,390 | Aug 4, 2023 | Hacking/IT Incident | Archive (closed) |
| Fairfax Oral and Maxillofacial Surgery | Healthcare Provider | 235,931 | Jul 14, 2023 | Hacking/IT Incident | Archive (closed) |
| SEVA Medical Group LLC | Healthcare Provider | 690 | Jun 19, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| R&B Corporation of Virginia d/b/a Credit Control Corporation | Business Associate | 607,787 | May 13, 2023 | Hacking/IT Incident | Archive (closed) |
| Grohler Hearing Aid Center, INC DBA Beltone Hearing Aid Centers | Healthcare Provider | 5,272 | Apr 28, 2023 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.