VA · HHS OCR reports
HIPAA breaches in Virginia
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Virginia.
Reports
158
Individuals affected
25,324,969
Under investigation
13
Top type: Hacking/IT Incident
State breach notification law
Va. Code Ann. § 18.2-186.6 (Crimes Involving Fraud - Breach of Personal Information Notification) (amended 2020)
Timing: Without unreasonable delay Virginia requires businesses and individuals to notify affected residents and
Read the Virginia data breach notification law summaryAll reports, newest first
Page 3 of 4. 158 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Augusta Health Care, Inc. d/b/a Augusta Health | Healthcare Provider | 3,061 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | Healthcare Provider | 1,045,270 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Defense Health Headquarters | Health Plan | 1,620 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Behavioral Health and Developmental Services | Healthcare Provider | 657 | Mar 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Capital Vision Services d/b/a MyEyeDr. (MED Southwest PLLC) | Healthcare Provider | 7,983 | Feb 13, 2020 | Improper Disposal | Archive (closed) |
| Vision Care Specialists, P.C. a part of MyEyeDr. Optometry of Colorado, PC | Healthcare Provider | 1,070 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services | Health Plan | 6,120 | Jan 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Home Care of VA, Inc. | Healthcare Provider | 33,324 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Personal Touch Hospice of VA, Inc. | Healthcare Provider | 1,657 | Jan 28, 2020 | Hacking/IT Incident | Archive (closed) |
| Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC") | Healthcare Provider | 15,575 | Nov 27, 2019 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Behavioral Health & Developmental Services | Healthcare Provider | 1,442 | Oct 25, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Defense Health Headquarters | Health Plan | 3,500 | Oct 4, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| One Care Medical, LLC | Healthcare Provider | 651 | Aug 6, 2019 | Hacking/IT Incident | Archive (closed) |
| Dominion Dental Services, Inc., Dominion National Insurance Company, and Dominion Dental Services USA, Inc. | Health Plan | 2,964,778 | Jun 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Portsmouth Community Health Center | Healthcare Provider | 12,000 | Feb 14, 2019 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | Business Associate | 1,265 | Nov 19, 2018 | Hacking/IT Incident | Archive (closed) |
| Inova Health System | Healthcare Provider | 12,331 | Nov 2, 2018 | Hacking/IT Incident | Archive (closed) |
| Wardell Orthopaedics, P.C. | Healthcare Provider | 552 | Aug 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Physicians of Old Town Fairfax PC | Healthcare Provider | 500 | Jul 19, 2018 | Hacking/IT Incident | Archive (closed) |
| VCU Health System | Healthcare Provider | 4,686 | Jul 6, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| MAXIMUS, Inc. / Business Ink, Co. | Business Associate | 3,029 | Apr 17, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Chesapeake Regional Medical Center | Healthcare Provider | 2,100 | Apr 6, 2018 | Theft | Archive (closed) |
| University of Virginia Medical Center | Healthcare Provider | 1,882 | Feb 21, 2018 | Hacking/IT Incident | Archive (closed) |
| Valley Family Medicine | Healthcare Provider | 8,450 | Nov 3, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Martinsville Henry County Coalition for Health and Wellness | Healthcare Provider | 5,806 | Oct 13, 2017 | Theft | Archive (closed) |
| Virginia Commonwealth University Health System | Healthcare Provider | 2,716 | Mar 10, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Sentara Healthcare | Healthcare Provider | 5,454 | Jan 16, 2017 | Hacking/IT Incident | Archive (closed) |
| Harrisonburg OB GYN Associates, P.C. | Healthcare Provider | 800 | Oct 20, 2016 | Theft | Archive (closed) |
| Professional Dermatology Care, P.C. | Healthcare Provider | 13,237 | Aug 9, 2016 | Hacking/IT Incident | Archive (closed) |
| Linda J White, DDS, PC | Healthcare Provider | 2,000 | Jun 27, 2016 | Improper Disposal | Archive (closed) |
| Riverside Health System | Healthcare Provider | 578 | Jun 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| National Counseling Group | Healthcare Provider | 23,000 | Mar 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Sentara Healthcare | Healthcare Provider | 1,040 | Oct 2, 2015 | Theft | Archive (closed) |
| Heartland Health Clinic | Healthcare Provider | 3,650 | Sep 21, 2015 | Hacking/IT Incident | Archive (closed) |
| Virginia Department of Medical Assistance Services (VA-DMAS) | Health Plan | 697,586 | Mar 12, 2015 | Hacking/IT Incident | Archive (closed) |
| Southwest Virginia Physicians for Women | Healthcare Provider | 568 | Oct 10, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Cancer Specialists of Tidewater | Healthcare Provider | 2,318 | Jul 31, 2014 | Theft | Archive (closed) |
| Amerigroup Texas, Inc. | Business Associate | 75,026 | Apr 10, 2014 | Theft | Archive (closed) |
| NOVA Chiropractic & Rehab Center | Healthcare Provider | 5,534 | Mar 27, 2014 | Loss, Other | Archive (closed) |
| Care Advantage, Inc. | Healthcare Provider | 3,458 | Feb 26, 2014 | Theft | Archive (closed) |
| Sentara Healthcare | Healthcare Provider | 3,861 | Jan 16, 2014 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Riverside Medical Group | Healthcare Provider | 919 | Jan 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Virginia Premier Health Plan (VPHP) | Business Associate | 25,513 | Jan 10, 2014 | Theft | Archive (closed) |
| Region Ten Community Services Board | Healthcare Provider | 10,228 | Sep 26, 2013 | Theft | Archive (closed) |
| Bon Secours Mary Immaculate Hospital | Healthcare Provider | 5,764 | May 29, 2013 | Theft | Archive (closed) |
| PORTAL HEALTHCARE SOLUTIONS LLC | Business Associate | 2,360 | Apr 4, 2013 | Theft | Archive (closed) |
| University of Virginia Medical Center | Healthcare Provider | 1,846 | Nov 30, 2012 | Loss | Archive (closed) |
| Valley Plastic Surgery, P.C. | Healthcare Provider | 4,873 | Sep 13, 2012 | Theft | Archive (closed) |
| ACS, Affiliated Computer Services, Inc., A Xerox Company | Business Associate | 1,444 | Jan 23, 2012 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Science Applications International Corporation (SA | Business Associate | 4,900,000 | Nov 4, 2011 | Loss | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.