Public Record · Breach Portal Analysis
HIPAA Breach
Statistics & Analytics
Unsecured protected health information, reported. Every breach of 500 or more records disclosed to the HHS Office for Civil Rights, as published on the federal breach portal. Filter, cross-tabulate, and export the full register below.
HIPAA Breach Statistics at a Glance
The U.S. Department of Health & Human Services, Office for Civil Rights (OCR) publishes every breach of unsecured protected health information (PHI) affecting 500 or more individuals. This page tracks 7,812 reported breaches submitted between 2009 and 2026, together affecting 1,066,656,927 individuals across 52 states and territories.
Of those, 816 remain under active investigation by OCR and 6,996 have been archived following resolution. The largest single incident on record affected 192,700,000 individuals (Change Healthcare, Inc.), while the median breach affected 4,000 individuals.
Use the tools below to filter the register by state, covered-entity type, breach type, location of the breached information, business-associate involvement, and submission date. Charts cover breach trends over time, geographic distribution, investigation duration from submission to resolution, and breach magnitude. The full filtered register can be exported as CSV or JSON. The most recent breach in this dataset was submitted on .
Key metrics
Total Breaches
8K
7,812 total
Under Investigation
816
10% of filtered
Archived
7K
90% of filtered
Individuals Affected
1,066.7M
1,066,656,927 total
Breach Size
192.7M
Max — Change Healthcare, Inc.
Median — 4K
States Impacted
52
52 states
Refine the record
Breach Trends
Click a bar or segment to filter the table
Chart type
No data matches the current filters.
Geography
Click a state to filter
Time to Resolution
Archived cases — submission to resolution
No archived cases with resolution dates in this filter.
Breach Magnitude
Individuals affected per breach
No breaches with individual counts in this filter.
Breach Type × Entity Type
Count per cell — click to filter both dimensions
Repeat Offenders
Entities with more than one breach — click a name to filter
Breach Records
Sort any column · expand a row for the full narrative
| Expand row | Entity name | State | Type | Individuals | Date | Breach type | Location | BA | Status |
|---|---|---|---|---|---|---|---|---|---|
Monongalia County General Hospital Company |
WV | Healthcare Provider |
2K | Hacking/IT Incident |
Email |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate No Status Under Investigation Individuals Affected 2,173 |
|||||||||
Pennsylvanie Dermatology Partners |
MD | Healthcare Provider |
500 | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 500 |
|||||||||
Associated Endocrinologists |
MI | Healthcare Provider |
5K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 4,979 |
|||||||||
Quantum Health |
OH | Business Associate |
2K | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 2,104 |
|||||||||
Brookhaven ENT Allergy and Facial Surgery |
MS | Healthcare Provider |
30K | Hacking/IT Incident |
Electronic Medical Record, Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Electronic Medical Record, Network Server Business Associate Yes Status Under Investigation Individuals Affected 30,403 |
|||||||||
CareCloud, Inc. |
NJ | Business Associate |
3.8M | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 3,756,469 |
|||||||||
Vanderbilt University Medical Center |
TN | Healthcare Provider |
3K | Hacking/IT Incident |
Email |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate No Status Under Investigation Individuals Affected 3,298 |
|||||||||
Risk Program Administrators LLC |
CA | Business Associate |
8K | Hacking/IT Incident |
Email |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate Yes Status Under Investigation Individuals Affected 8,309 |
|||||||||
SunCloud Health |
IL | Healthcare Provider |
3K | Hacking/IT Incident |
Email |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate No Status Under Investigation Individuals Affected 2,594 |
|||||||||
Blue Cross Blue Shield of Minnesota |
MN | Health Plan |
4K | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 3,640 |
|||||||||
Unlimited Technology Systems, LLC |
OH | Business Associate |
3.8M | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 3,803,750 |
|||||||||
Beltrami County Health and Human Services |
MN | Healthcare Provider |
1K | Hacking/IT Incident |
Email |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate No Status Under Investigation Individuals Affected 1,491 |
|||||||||
Minnesota Health Insurance Network |
MN | Business Associate |
4K | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 3,656 |
|||||||||
Open Door Health Center of Illinois |
WA | Healthcare Provider |
501 | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 501 |
|||||||||
Community Based Care of Brevard dba Family Partnerships of Central Florida |
FL | Health Plan |
8K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 8,151 |
|||||||||
James C. Standring, DDS |
CA | Healthcare Provider |
7K | Hacking/IT Incident |
Network Server |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate Yes Status Under Investigation Individuals Affected 6,658 |
|||||||||
One Medical Group, Inc. |
CA | Healthcare Provider |
153K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 153,174 |
|||||||||
The Association for Neurologically Impaired Brain Injured |
NY | Healthcare Provider |
2K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 1,918 |
|||||||||
ZenPatient, Inc. |
CA | Healthcare Provider |
16K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 15,749 |
|||||||||
DentaQuest, LLC |
MA | Health Plan |
15.0M | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 15,000,000 |
|||||||||
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA |
MA | Healthcare Provider |
312K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 311,760 |
|||||||||
Resource Center of Dallas, Inc. |
TX | Healthcare Provider |
12K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 12,490 |
|||||||||
Alpine Agency of the Midlands, LLC |
SC | Business Associate |
500 | Hacking/IT Incident |
Email |
Yes | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate Yes Status Under Investigation Individuals Affected 500 |
|||||||||
Madera Community Hospital |
CA | Healthcare Provider |
151K | Hacking/IT Incident |
Network Server |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Network Server Business Associate No Status Under Investigation Individuals Affected 150,810 |
|||||||||
Youth Home, Inc. |
AR | Healthcare Provider |
689 | Hacking/IT Incident |
Email |
No | Under Inv. | ||
Breach Type Hacking/IT Incident Location of Info Email Business Associate No Status Under Investigation Individuals Affected 689 |
|||||||||