VA · HHS OCR reports
HIPAA breaches in Virginia
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Virginia.
Reports
158
Individuals affected
25,324,969
Under investigation
13
Top type: Hacking/IT Incident
State breach notification law
Va. Code Ann. § 18.2-186.6 (Crimes Involving Fraud - Breach of Personal Information Notification) (amended 2020)
Timing: Without unreasonable delay Virginia requires businesses and individuals to notify affected residents and
Read the Virginia data breach notification law summaryAll reports, newest first
Page 4 of 4. 158 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Benefits Administration Services, Inc. | Business Associate | 4,000 | Sep 22, 2011 | Loss | Archive (closed) |
| Andersen Air Force Base, Guam | Healthcare Provider | 700 | Jul 22, 2011 | Improper Disposal | Archive (closed) |
| Centra | Healthcare Provider | 11,982 | Jan 12, 2011 | Theft | Archive (closed) |
| Curtis R. Bryan, M.D. | Healthcare Provider | 2,739 | Sep 8, 2010 | Theft | Archive (closed) |
| Prince William County Community Services (CS) | Healthcare Provider | 669 | Jul 15, 2010 | Theft | Archive (closed) |
| Rockbridge Area Community Services | Healthcare Provider | 500 | Apr 29, 2010 | Theft | Archive (closed) |
| TOWERS WATSON | Business Associate | 1,874 | Apr 27, 2010 | Theft | Archive (closed) |
| Democracy Data & Communications, LLC ( | Business Associate | 83,000 | Dec 8, 2009 | Other | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.