HHS OCR breach register
Breaches of unsecured protected health information affecting 500 or more individuals, as reported to the Office for Civil Rights. Refreshed daily from the OCR breach portal.
Reports per month
Last 24 months by submission date
By type
Last 24 months
| Entity | State | Entity type | Individuals | Submitted | Breach type | Location of PHI | BA | Status |
|---|---|---|---|---|---|---|---|---|
| Grohler Hearing Aid Center, INC DBA Beltone Hearing Aid Centers | VA | Healthcare Provider | 5,272 | 04/28/2023 | Hacking/IT Incident | No | Archived | |
| HealthPlan Services, Inc. | FL | Business Associate | 9,650 | 04/28/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Link Audiology LLC | WA | Healthcare Provider | 2,608 | 04/28/2023 | Hacking/IT Incident | No | Archived | |
| Delphi Drug & Alcohol Council | NY | Healthcare Provider | 6,288 | 04/27/2023 | Hacking/IT Incident | No | Archived | |
| Unlimited Care, Inc. | NY | Healthcare Provider | 8,453 | 04/27/2023 | Hacking/IT Incident | Network Server | No | Archived |
| University of California, San Francisco | CA | Healthcare Provider | 676 | 04/26/2023 | Hacking/IT Incident | No | Archived | |
| Lake County Health Department and Community Health Center | IL | Healthcare Provider | 23,376 | 04/25/2023 | Hacking/IT Incident | No | Archived | |
| CounSol, LLC | FL | Business Associate | 4,277 | 04/25/2023 | Unauthorized Access/Disclosure | Network Server | Yes | Archived |
| Mars Area School District | PA | Health Plan | 1,270 | 04/24/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Upstream RollCo, LLC | AL | Healthcare Provider | 748,678 | 04/22/2023 | Hacking/IT Incident | No | Archived | |
| Robeson Health Care Corporation | NC | Healthcare Provider | 62,627 | 04/21/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Upper Peninsula Health Plan | MI | Health Plan | 833 | 04/20/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 180,694 | 04/20/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Graceworks Lutheran Services | OH | Healthcare Provider | 6,737 | 04/19/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Modern Cardiology Associates | Healthcare Provider | 10,000 | 04/19/2023 | Hacking/IT Incident | Network Server | No | Archived | |
| Morgan Stanley | NY | Health Plan | 535 | 04/18/2023 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Integrated Medical Services | AZ | Healthcare Provider | 6,591 | 04/17/2023 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Henry County Hospital | OH | Healthcare Provider | 3,689 | 04/14/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Presence Healthcare Services dba Presence Medical Group | IL | Healthcare Provider | 921 | 04/14/2023 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| Two Rivers Public Health Department | NE | Healthcare Provider | 15,168 | 04/14/2023 | Hacking/IT Incident | No | Archived | |
| United Steelworkers Local 286 | PA | Health Plan | 37,965 | 04/14/2023 | Hacking/IT Incident | No | Archived | |
| Dallas County | TX | Healthcare Provider | 501 | 04/14/2023 | Improper Disposal | Desktop Computer | No | Archived |
| MiniMed Distribution Corp. | CA | Healthcare Provider | 58,374 | 04/14/2023 | Unauthorized Access/Disclosure | Network Server | No | Archived |
| Ethan Health, LLC | KY | Healthcare Provider | 4,047 | 04/14/2023 | Hacking/IT Incident | No | Archived | |
| John Muir Health - Walnut Creek Medical Center | CA | Healthcare Provider | 821 | 04/13/2023 | Unauthorized Access/Disclosure | Network Server | No | Archived |
| NationsBenefits Holdings, LLC | FL | Business Associate | 3,099,502 | 04/13/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 49,968 | 04/13/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Cummins Behavioral Health Systems | IN | Healthcare Provider | 154,285 | 04/12/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Multnomah County Health Department | OR | Healthcare Provider | 2,719 | 04/12/2023 | Theft | Paper/Films | No | Archived |
| Pathway Healthcare, LLC | AL | Healthcare Provider | 1,304 | 04/11/2023 | Unauthorized Access/Disclosure | No | Archived | |
| Iowa Department of Health and Human Services - Iowa Medicaid Enterprise | IA | Health Plan | 20,815 | 04/10/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| St. Vincent’s Ambulatory Care, Inc. | FL | Healthcare Provider | 768 | 04/10/2023 | Unauthorized Access/Disclosure | Electronic Medical Record | No | Archived |
| Yukon Kuskokwim Health Corporation | AK | Healthcare Provider | 51,787 | 04/10/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Retina & Vitreous of Texas, PLLC | TX | Healthcare Provider | 35,766 | 04/10/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Centers for Medicare & Medicaid Services | MD | Health Plan | 10,011 | 04/07/2023 | Unauthorized Access/Disclosure | Paper/Films | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 7,672 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 473,467 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 4,044 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 31,440 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 7,411 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Gretna Family Health | NE | Healthcare Provider | 845 | 04/07/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Brightline, Inc. | CA | Business Associate | 21,830 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Brightline, Inc. | CA | Business Associate | 199,753 | 04/07/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| La Clínica de La Raza, Inc. | CA | Healthcare Provider | 125,794 | 04/07/2023 | Hacking/IT Incident | No | Archived | |
| St. Luke's Health System, Ltd. | ID | Healthcare Provider | 15,246 | 04/06/2023 | Unauthorized Access/Disclosure | Paper/Films | No | Archived |
| NORTHEAST BEHAVIORAL HEALTH CARE CONSORTIUM | PA | Health Plan | 13,240 | 04/05/2023 | Hacking/IT Incident | No | Archived | |
| California Physicians’ Services dba Blue Shield of California | CA | Health Plan | 1,553 | 04/05/2023 | Hacking/IT Incident | Network Server | Yes | Archived |
| Chippewa County | WI | Healthcare Provider | 842 | 04/04/2023 | Hacking/IT Incident | Network Server | No | Archived |
| Banis Plastic Surgery | KY | Healthcare Provider | 4,498 | 04/04/2023 | Unauthorized Access/Disclosure | No | Archived | |
| California Physicians' Services d/b/a Blue Shield of California | CA | Business Associate | 61,788 | 04/04/2023 | Hacking/IT Incident | Network Server | Yes | Archived |