HHS OCR breach register
Breaches of unsecured protected health information affecting 500 or more individuals, as reported to the Office for Civil Rights. Refreshed daily from the OCR breach portal (about this source).
Reports per month
Last 24 months by submission date
By type
Last 24 months
| Entity | State | Entity type | Individuals | Submitted | Breach type | Location of PHI | BA | Status |
|---|---|---|---|---|---|---|---|---|
| ConnectiCare | CT | Health Plan | 1,834 | 02/21/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| Tufts Associated Health Maintenance Organization, Inc. | MA | Health Plan | 70,320 | 02/16/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| Jemison Internal Medicine, PC | AL | Health Plan | 6,550 | 02/16/2018 | Hacking/IT Incident | Network Server | No | Archived |
| Flexible Benefit Service Corporation | IL | Business Associate | 5,123 | 02/16/2018 | Hacking/IT Incident | Yes | Archived | |
| City of Detroit | MI | Healthcare Provider | 544 | 02/05/2018 | Loss | Other Portable Electronic Device | No | Archived |
| CarePlus Health Plan [case #HU1800066] | KY | Health Plan | 11,248 | 02/05/2018 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Partners HealthCare System, Inc. | MA | Healthcare Provider | 2,450 | 02/05/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | Archived |
| Triple-S Advantage, Inc. | Health Plan | 36,305 | 02/02/2018 | Unauthorized Access/Disclosure | Paper/Films | No | Archived | |
| Eastern Maine Medical Center | ME | Healthcare Provider | 660 | 02/02/2018 | Theft | Other Portable Electronic Device | Yes | Archived |
| Ron's Pharmacy Services | CA | Healthcare Provider | 6,781 | 02/02/2018 | Hacking/IT Incident | No | Archived | |
| Forrest General Hospital | MS | Healthcare Provider | 1,670 | 02/01/2018 | Hacking/IT Incident | Yes | Archived | |
| Coastal Cape Fear Eye Associates, P.A. | NC | Healthcare Provider | 925 | 02/01/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | Archived |
| Children's Mercy Hospital | MO | Healthcare Provider | 65,930 | 01/31/2018 | Hacking/IT Incident | No | Archived | |
| QuadMed, LLC (Whirlpool) | WI | Healthcare Provider | 4,549 | 01/29/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | Archived |
| Decatur County General Hospital | TN | Healthcare Provider | 24,000 | 01/26/2018 | Hacking/IT Incident | Network Server | No | Archived |
| Steven Yang, D.D.S., INC. | CA | Healthcare Provider | 3,202 | 01/26/2018 | Theft | Laptop | No | Archived |
| Zachary E. Adkins, DDS | NM | Healthcare Provider | 3,677 | 01/25/2018 | Theft | Other Portable Electronic Device | No | Archived |
| Rocky Mountain Women's Health Center, Inc. | UT | Healthcare Provider | 1,123 | 01/25/2018 | Improper Disposal | Paper/Films | No | Archived |
| Central States Southeast and Southwest Areas Health and Welfare Fund | IL | Health Plan | 634 | 01/23/2018 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Robert Smith DMD, PC | TN | Healthcare Provider | 1,500 | 01/22/2018 | Hacking/IT Incident | Network Server | No | Archived |
| RGH Enterprises, Inc. | OH | Healthcare Provider | 4,586 | 01/22/2018 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc. | MD | Healthcare Provider | 5,228 | 01/19/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | Archived |
| Gillette Medical Imaging | WY | Healthcare Provider | 4,476 | 01/18/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| The Pediatric Endocrinology and Diabetes Specialists | NV | Healthcare Provider | 1,021 | 01/18/2018 | Hacking/IT Incident | Desktop Computer, Electronic Medical Record, Laptop | No | Archived |
| High Plains Surgical Associates | WY | Healthcare Provider | 607 | 01/15/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| Onco360 and CareMed Specialty Pharmacy | KY | Healthcare Provider | 53,173 | 01/12/2018 | Hacking/IT Incident | No | Archived | |
| Pedes Orange County, Inc. | CA | Healthcare Provider | 917 | 01/12/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | Archived |
| Western Washington Medical Group Inc. | WA | Healthcare Provider | 842 | 01/12/2018 | Improper Disposal | Paper/Films | No | Archived |
| Alicia Ann Oswald | CA | Healthcare Provider | 800 | 01/09/2018 | Unauthorized Access/Disclosure | No | Archived | |
| Charles River Medical Associates, pc | MA | Healthcare Provider | 9,387 | 01/08/2018 | Loss | Other Portable Electronic Device | No | Archived |
| Palomar Health (Palomar Medical Center (Escondido) | CA | Healthcare Provider | 1,309 | 01/08/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | Archived |
| DJO, LLC | CA | Healthcare Provider | 1,203 | 01/06/2018 | Loss | Paper/Films | Yes | Archived |
| Oklahoma State University | OK | Healthcare Provider | 279,865 | 01/05/2018 | Hacking/IT Incident | Network Server | No | Archived |
| Agency for Health Care Administration | FL | Health Plan | 30,000 | 01/05/2018 | Hacking/IT Incident | No | Archived | |
| Penn Medicine | PA | Healthcare Provider | 1,050 | 01/02/2018 | Theft | Laptop | No | Archived |
| Coplin Health Systems | WV | Healthcare Provider | 43,000 | 12/29/2017 | Theft | Laptop | No | Archived |
| Miracle-Ear, Inc. and Amplifon (USA), Inc. | MN | Business Associate | 554 | 12/28/2017 | Hacking/IT Incident | Yes | Archived | |
| SSM Health | MO | Healthcare Provider | 29,579 | 12/28/2017 | Unauthorized Access/Disclosure | Electronic Medical Record | No | Archived |
| UnitedHealthcare Community Plan of Pennsylvania | PA | Business Associate | 614 | 12/27/2017 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| Colorado Department of Human Services | CO | Healthcare Provider | 639 | 12/27/2017 | Hacking/IT Incident | Desktop Computer | No | Archived |
| Longs Peak Family Practice, P.C. | CO | Healthcare Provider | 16,238 | 12/27/2017 | Hacking/IT Incident | Desktop Computer, Network Server | No | Archived |
| Blue Cross Blue Shield of Massachusetts | MA | Health Plan | 1,843 | 12/26/2017 | Unauthorized Access/Disclosure | No | Archived | |
| SAY San Diego | CA | Healthcare Provider | 1,272 | 12/22/2017 | Loss | Paper/Films | No | Archived |
| Kaiser Foundation Health Plan, Inc. | CA | Health Plan | 638 | 12/22/2017 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Molina Healthcare | FL | Health Plan | 1,380 | 12/21/2017 | Unauthorized Access/Disclosure | Other | No | Archived |
| Absolute Dental Hygiene, LLC | OR | Healthcare Provider | 871 | 12/20/2017 | Hacking/IT Incident | Desktop Computer, Electronic Medical Record, Network Server | No | Archived |
| BEE Reno Dental, LLC | NV | Healthcare Provider | 3,898 | 12/20/2017 | Hacking/IT Incident | Desktop Computer, Network Server | No | Archived |
| MidMichigan Medical Center-Alpena | MI | Healthcare Provider | 1,900 | 12/19/2017 | Loss | Paper/Films | No | Archived |
| Sheldon M. Golden O.D., Optometric Corporation | CA | Healthcare Provider | 7,583 | 12/19/2017 | Hacking/IT Incident | Network Server | No | Archived |
| Dignity Health Medical Foundation | CA | Healthcare Provider | 2,189 | 12/19/2017 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |