VA · HHS OCR reports
HIPAA breaches in Virginia
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Virginia.
Reports
158
Individuals affected
25,324,969
Under investigation
13
Top type: Hacking/IT Incident
State breach notification law
Va. Code Ann. § 18.2-186.6 (Crimes Involving Fraud - Breach of Personal Information Notification) (amended 2020)
Timing: Without unreasonable delay Virginia requires businesses and individuals to notify affected residents and
Read the Virginia data breach notification law summaryAll reports, newest first
Page 2 of 4. 158 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Sentara Healthcare | Healthcare Provider | 741 | Feb 24, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Henrico Doctors Hospital | Healthcare Provider | 990 | Feb 21, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Verisma Systems, Inc. | Business Associate | 1,586 | Dec 29, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Verisma Systems, Inc. | Business Associate | 1,031 | Dec 29, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Mediko, Inc. | Healthcare Provider | 2,809 | Oct 31, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Defense Health Agency | Health Plan | 1,279 | Oct 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Thomas J. Hubbard, MD, Inc. DBA Hubbard Plastic Surgery & Skin Enhancement Center | Healthcare Provider | 914 | Oct 7, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Williamsburg Regional Medical Center | Healthcare Provider | 591 | Aug 1, 2022 | Loss | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 1,457 | Jul 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 5,004 | Jul 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Arlington Skin | Healthcare Provider | 17,468 | Jul 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 1,089 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 878 | Jul 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 628 | Jun 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 1,145 | Jun 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 1,267 | Jun 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Benefit Plan Administrators, Inc. | Business Associate | 735 | Jun 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Virginia Commonwealth University Health System | Healthcare Provider | 4,441 | May 27, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Health Care Administrative Services | Healthcare Provider | 500 | May 20, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Genetics & IVF Institute | Healthcare Provider | 606 | May 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Homestead Building Systems | Health Plan | 727 | Apr 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Pediatric Associates, P.C. | Healthcare Provider | 13,000 | Apr 8, 2022 | Hacking/IT Incident | Archive (closed) |
| River City Insurance Group d/b/a Lavinder Group & Associates | Business Associate | 1,118 | Apr 5, 2022 | Hacking/IT Incident | Archive (closed) |
| The Art & Science of Dermatology, P.C. | Healthcare Provider | 4,500 | Feb 25, 2022 | Loss | Archive (closed) |
| Zoe Therapy Services | Healthcare Provider | 1,100 | Feb 23, 2022 | Hacking/IT Incident | Archive (closed) |
| EPIC Pharmacy Network, Inc. | Healthcare Provider | 28,776 | Feb 8, 2022 | Hacking/IT Incident | Archive (closed) |
| Virtual Private Network Solutions, LLC d/b/a VPN Solutions, LLC | Business Associate | 6,400 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Dr. Kochurani Puthumana | Healthcare Provider | 3,805 | Dec 30, 2021 | Hacking/IT Incident | Archive (closed) |
| Apple Blossom Family Practice | Healthcare Provider | 12,053 | Dec 16, 2021 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Behavioral Health and Developmental Services | Healthcare Provider | 4,037 | Dec 3, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Healthcare | Healthcare Provider | 72,121 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| North Spring Behavioral Healthcare, Inc. | Healthcare Provider | 3,245 | Nov 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Rockbridge Area Community Services Board | Healthcare Provider | 2,000 | Oct 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Lakewood Manor Baptist Retirement Community, Inc. d/b/a Lakewood | Healthcare Provider | 1,205 | Sep 27, 2021 | Hacking/IT Incident | Archive (closed) |
| Children's Hospital of The King's Daughters | Healthcare Provider | 914 | Aug 11, 2021 | Hacking/IT Incident | Archive (closed) |
| Hospice of the Piedmont | Healthcare Provider | 10,682 | Aug 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Guidehouse | Business Associate | 91,331 | Jul 15, 2021 | Hacking/IT Incident | Archive (closed) |
| Eastern Shore Rural Health System Inc. | Healthcare Provider | 23,282 | Apr 16, 2021 | Hacking/IT Incident | Archive (closed) |
| AllyAlign Health, Inc. | Health Plan | 33,932 | Feb 26, 2021 | Hacking/IT Incident | Archive (closed) |
| Fairfax County Public Schools' Health Plan | Business Associate | 11,056 | Feb 2, 2021 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | Healthcare Provider | 1,680 | Jan 22, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Kristina T Nguyen, DDS, PC | Healthcare Provider | 8,182 | Dec 21, 2020 | Hacking/IT Incident | Archive (closed) |
| Galstan & Ward Family and Cosmetic Dentistry | Healthcare Provider | 11,258 | Nov 6, 2020 | Hacking/IT Incident | Archive (closed) |
| Chesapeake Regional Healthcare | Healthcare Provider | 24,000 | Nov 3, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Hospital Center Health System | Healthcare Provider | 23,846 | Oct 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Practice Transformation Solutions, LLC | Business Associate | 1,678 | Oct 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Cancer Institute | Healthcare Provider | 6,258 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Practice Transformation Solutions, LLC | Business Associate | 1,016 | Oct 2, 2020 | Hacking/IT Incident | Archive (closed) |
| Sheltering Arms Physical Rehabilitation Centers | Healthcare Provider | 683 | Sep 16, 2020 | Hacking/IT Incident | Archive (closed) |
| Riverside Health System | Healthcare Provider | 54,151 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.