LIVE HIPAA BREACH TRACKER
Every Breach Below Was Reported to Federal Regulators
A live mirror of the official HHS OCR breach portal — the federal record of reported PHI breaches affecting 500+ individuals.
Search the Federal Breach Database
Search by organization, state, breach type, or location of breached information.
| Covered Entity | State | Entity Type | Individuals Affected ▾ | Submission Date | Type of Breach | Location of Breached Info | BA Present |
|---|---|---|---|---|---|---|---|
| White River Junction VA Medical Center | VT | Healthcare Provider | 1,408 | 08/28/2026 | Unauthorized Access/Disclosure | No | |
| AnMed Health | SC | Healthcare Provider | 501 | 08/27/2026 | Hacking/IT Incident | Network Server | No |
| Shoshone Medical Center | ID | Healthcare Provider | 553 | 08/25/2026 | Hacking/IT Incident | No | |
| Desert Pulmonary & Sleep Consultants, P.L.C. | AZ | Healthcare Provider | 3,000 | 08/25/2026 | Unauthorized Access/Disclosure | Electronic Medical Record, Network Server | No |
| Magnolia Medical Clinic PA | FL | Healthcare Provider | 1,601 | 08/25/2026 | Unauthorized Access/Disclosure | Paper/Films | No |
| Grafton City Hospital, Inc. | WV | Healthcare Provider | 1,215 | 08/22/2026 | Hacking/IT Incident | No | |
| Hawaii Dental Group, Inc DBA Hawaii Family Dental | HI | Healthcare Provider | 45,853 | 08/21/2026 | Hacking/IT Incident | No | |
| Baraga County Memorial Hospital | MI | Healthcare Provider | 501 | 08/21/2026 | Hacking/IT Incident | Network Server | No |
| North Dakota Department of Health and Human Services, Developmental Disabilities Section | ND | Healthcare Provider | 1,750 | 08/21/2026 | Hacking/IT Incident | No | |
| Life Bridges, Inc. | TN | Healthcare Provider | 5,194 | 08/20/2026 | Hacking/IT Incident | Network Server | No |
| Blue Cross Blue Shield of Illinois | IL | Business Associate | 3,831 | 08/20/2026 | Unauthorized Access/Disclosure | Paper/Films | Yes |
| Midwest Spine & Brain Institute | MN | Healthcare Provider | 108,487 | 08/14/2026 | Unauthorized Access/Disclosure | Network Server, Other | Yes |
| Well Child, Inc. | TN | Healthcare Provider | 500 | 08/14/2026 | Hacking/IT Incident | Network Server | No |
| Integrative Emergency Services, LLC | TX | Business Associate | 2,009 | 08/14/2026 | Hacking/IT Incident | Yes | |
| Mountain Rheumatology Professional, LLC | CO | Healthcare Provider | 5,378 | 08/14/2026 | Hacking/IT Incident | Network Server | No |
| Baylor Genetics | TX | Healthcare Provider | 2,810,878 | 08/14/2026 | Hacking/IT Incident | Network Server | No |
| AdaptHealth, LLC | PA | Healthcare Provider | 4,115,802 | 08/14/2026 | Hacking/IT Incident | Network Server | No |
| Gardiner Family Chiropractic, PC | ME | Healthcare Provider | 5,000 | 08/14/2026 | Hacking/IT Incident | Network Server | No |
| BestCare Treatment Services, Inc. | IL | Healthcare Provider | 4,216 | 08/13/2026 | Unauthorized Access/Disclosure | Network Server | No |
| Longview ER Operations, LLC | TX | Healthcare Provider | 501 | 08/11/2026 | Hacking/IT Incident | Network Server | No |
| Community Health Care, Inc. | OH | Healthcare Provider | 808 | 08/11/2026 | Hacking/IT Incident | No | |
| Westchester Institute for Human Development, Inc. | NY | Healthcare Provider | 938 | 08/10/2026 | Hacking/IT Incident | No | |
| Central Arkansas Pediatrics, P.A. | AR | Healthcare Provider | 1,500 | 08/07/2026 | Hacking/IT Incident | Network Server | No |
| Deseye, PLLC d/b/a Princeton Family Eye Care | TX | Healthcare Provider | 1,050 | 08/07/2026 | Hacking/IT Incident | No | |
| Indico Data Solutions, Inc. | MA | Business Associate | 4,840 | 08/07/2026 | Hacking/IT Incident | Network Server | Yes |
| Horizon Eye Care Laser & Eye Surgery Center | NJ | Healthcare Provider | 501 | 08/07/2026 | Hacking/IT Incident | Network Server | No |
| NFI North, Inc. | NH | Healthcare Provider | 49,540 | 08/05/2026 | Hacking/IT Incident | Network Server | No |
| PAMCAH-UA Local 675 Health and Welfare Fund | HI | Health Plan | 8,319 | 08/03/2026 | Hacking/IT Incident | No | |
| Interim HealthCare of Oklahoma City, Inc. | OK | Healthcare Provider | 500 | 07/31/2026 | Hacking/IT Incident | Email, Network Server | No |
| A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons | AR | Healthcare Provider | 64,831 | 07/31/2026 | Hacking/IT Incident | Network Server | No |
| Manning Regional Healthcare Center | IA | Healthcare Provider | 746 | 07/31/2026 | Hacking/IT Incident | No | |
| Aesto, LLC | AL | Business Associate | 9,540,683 | 07/31/2026 | Hacking/IT Incident | Network Server | Yes |
| Monongalia County General Hospital Company | WV | Healthcare Provider | 2,173 | 07/31/2026 | Hacking/IT Incident | No | |
| Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation | NC | Healthcare Provider | 1,045 | 07/31/2026 | Hacking/IT Incident | Desktop Computer, Network Server | Yes |
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation | NC | Healthcare Provider | 1,551 | 07/31/2026 | Hacking/IT Incident | Desktop Computer, Network Server | Yes |
| Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation | NC | Healthcare Provider | 1,397 | 07/31/2026 | Hacking/IT Incident | Electronic Medical Record, Network Server | Yes |
| MPS Enterprises, Inc. | TX | Health Plan | 675 | 07/30/2026 | Hacking/IT Incident | Network Server | No |
| Pennsylvanie Dermatology Partners | MD | Healthcare Provider | 500 | 07/30/2026 | Hacking/IT Incident | Network Server | No |
| Nephrology Associates, M.D., P.A. | KS | Healthcare Provider | 24,088 | 07/29/2026 | Hacking/IT Incident | Network Server | No |
| Associated Endocrinologists | MI | Healthcare Provider | 4,979 | 07/29/2026 | Hacking/IT Incident | Network Server | No |
| Central Texas Oral Health | TX | Healthcare Provider | 1,389 | 07/29/2026 | Hacking/IT Incident | Desktop Computer, Email | No |
| Quantum Health | OH | Business Associate | 2,104 | 07/29/2026 | Hacking/IT Incident | Network Server | Yes |
| TennCare | TN | Health Plan | 2,300 | 07/27/2026 | Unauthorized Access/Disclosure | Paper/Films | No |
| Regional Center of Orange County | CA | Business Associate | 16,545 | 07/27/2026 | Improper Disposal | Paper/Films | Yes |
| Jeffrey David Reuben, M.D. | TX | Healthcare Provider | 17,017 | 07/27/2026 | Hacking/IT Incident | Network Server | No |
| Cornerstone Behavioral Healthcare | ME | Healthcare Provider | 14,830 | 07/27/2026 | Hacking/IT Incident | Network Server | No |
| Lifespark Management Services, LLC | MN | Healthcare Provider | 6,611 | 07/24/2026 | Hacking/IT Incident | No | |
| Bridgeway Benefit Technologies LLC | FL | Business Associate | 9,268 | 07/24/2026 | Hacking/IT Incident | Yes | |
| CareCloud, Inc. | NJ | Business Associate | 3,756,469 | 07/24/2026 | Hacking/IT Incident | Network Server | Yes |
| Vanderbilt University Medical Center | TN | Healthcare Provider | 3,298 | 07/24/2026 | Hacking/IT Incident | No | |
| Brookhaven ENT Allergy and Facial Surgery | MS | Healthcare Provider | 30,403 | 07/24/2026 | Hacking/IT Incident | Electronic Medical Record, Network Server | Yes |
| Risk Program Administrators LLC | CA | Business Associate | 8,309 | 07/23/2026 | Hacking/IT Incident | Yes | |
| SunCloud Health | IL | Healthcare Provider | 2,594 | 07/23/2026 | Hacking/IT Incident | No | |
| Suvida Healthcare, LLC | TX | Healthcare Provider | 1,421 | 07/23/2026 | Hacking/IT Incident | No | |
| Unlimited Technology Systems, LLC | OH | Business Associate | 3,803,750 | 07/21/2026 | Hacking/IT Incident | Network Server | Yes |
| Beltrami County Health and Human Services | MN | Healthcare Provider | 1,491 | 07/20/2026 | Hacking/IT Incident | No | |
| Minnesota Health Insurance Network | MN | Business Associate | 3,656 | 07/19/2026 | Hacking/IT Incident | Network Server | Yes |
| Open Door Health Center of Illinois | WA | Healthcare Provider | 501 | 07/18/2026 | Hacking/IT Incident | Network Server | No |
| Community Based Care of Brevard dba Family Partnerships of Central Florida | FL | Health Plan | 8,151 | 07/17/2026 | Hacking/IT Incident | Network Server | No |
| ZenPatient, Inc. | CA | Healthcare Provider | 15,749 | 07/17/2026 | Hacking/IT Incident | Network Server | No |
| James C. Standring, DDS | CA | Healthcare Provider | 6,658 | 07/17/2026 | Hacking/IT Incident | Network Server | Yes |
| One Medical Group, Inc. | CA | Healthcare Provider | 153,174 | 07/17/2026 | Hacking/IT Incident | Network Server | No |
| The Association for Neurologically Impaired Brain Injured | NY | Healthcare Provider | 1,918 | 07/17/2026 | Hacking/IT Incident | Network Server | No |
| Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA | MA | Healthcare Provider | 311,760 | 07/16/2026 | Hacking/IT Incident | Network Server | No |
| DentaQuest, LLC | MA | Health Plan | 15,000,000 | 07/16/2026 | Hacking/IT Incident | Network Server | No |
| Resource Center of Dallas, Inc. | TX | Healthcare Provider | 12,490 | 07/15/2026 | Hacking/IT Incident | Network Server | No |
| TELUS Health (US) LTD. | MA | Healthcare Provider | 2,641 | 07/14/2026 | Unauthorized Access/Disclosure | Network Server | No |
| Parkhurst Chiropractic Life Center PLC | MI | Healthcare Provider | 728 | 07/14/2026 | Unauthorized Access/Disclosure | Network Server | No |
| Madera Community Hospital | CA | Healthcare Provider | 150,810 | 07/13/2026 | Hacking/IT Incident | Network Server | No |
| Alpine Agency of the Midlands, LLC | SC | Business Associate | 500 | 07/13/2026 | Hacking/IT Incident | Yes | |
| Youth Home, Inc. | AR | Healthcare Provider | 689 | 07/13/2026 | Hacking/IT Incident | No | |
| Health Payment Systems, Inc. | WI | Business Associate | 9,380 | 07/10/2026 | Hacking/IT Incident | Yes | |
| Sunshine Health | FL | Health Plan | 41,569 | 07/10/2026 | Hacking/IT Incident | Laptop, Network Server | No |
| Heart Care Centers of Illinois | IL | Healthcare Provider | 52,562 | 07/10/2026 | Hacking/IT Incident | No | |
| Claremedica Viking, LLC | FL | Healthcare Provider | 675 | 07/08/2026 | Hacking/IT Incident | No | |
| SportsMed PT, LLC | NJ | Healthcare Provider | 3,400 | 07/07/2026 | Hacking/IT Incident | No | |
| Hollister Family Dental & Implant Center | CA | Healthcare Provider | 3,809 | 07/07/2026 | Hacking/IT Incident | Network Server | No |
| Hudson Valley Medical Billing & Credentialing, LLC | NY | Business Associate | 5,459 | 07/07/2026 | Hacking/IT Incident | Desktop Computer, Network Server | Yes |
| Champaign-Urbana Public Health District | IL | Healthcare Provider | 501 | 07/06/2026 | Hacking/IT Incident | Network Server | No |
| HP Dental | NY | Healthcare Provider | 548 | 07/06/2026 | Hacking/IT Incident | No | |
| The Medical Imaging Partnership dba Precision Imaging Center | FL | Healthcare Provider | 501 | 07/06/2026 | Hacking/IT Incident | Network Server | No |
| Hancock Regional Hospital | IN | Healthcare Provider | 1,530 | 07/06/2026 | Unauthorized Access/Disclosure | No | |
| Alta Orthopaedics Medical Group, Inc. | PA | Healthcare Provider | 24,496 | 07/03/2026 | Hacking/IT Incident | Network Server | No |
| Averhealth Holdings | VA | Healthcare Provider | 9,909 | 07/02/2026 | Hacking/IT Incident | No | |
| Family Medical Associates of Raleigh, PA | NC | Healthcare Provider | 500 | 07/02/2026 | Hacking/IT Incident | Network Server | No |
| The Connecticut Institute for the Blind Inc. d/b/a Oak Hill | CT | Healthcare Provider | 1,556 | 07/01/2026 | Hacking/IT Incident | Network Server | No |
| Kubota Tractor Corporation Employee Welfare Benefit Plan | TX | Health Plan | 5,891 | 06/30/2026 | Hacking/IT Incident | Network Server | No |
| Washington Department of Social and Health Services | WA | Healthcare Provider | 8,600 | 06/30/2026 | Unauthorized Access/Disclosure | Laptop | No |
| Virta Health | CO | Business Associate | 602 | 06/30/2026 | Hacking/IT Incident | Network Server | Yes |
| Optalis Management Solutions | MI | Healthcare Provider | 13,723 | 06/29/2026 | Hacking/IT Incident | Network Server | No |
| Community First Health Plans, Inc. | TX | Health Plan | 1,549 | 06/29/2026 | Unauthorized Access/Disclosure | Laptop | No |
| Center for Hearing and Speech dba Texas Hearing Institute | TX | Healthcare Provider | 29,774 | 06/29/2026 | Hacking/IT Incident | Network Server | No |
| SKR Group, Inc. | MN | Business Associate | 1,718 | 06/26/2026 | Hacking/IT Incident | Network Server | Yes |
| Women’s Center for Radiology | FL | Healthcare Provider | 66,422 | 06/26/2026 | Hacking/IT Incident | Network Server | No |
| MCBS, LLC | GA | Business Associate | 1,261,464 | 06/26/2026 | Hacking/IT Incident | Network Server | Yes |
| Operation PAR, Inc. | FL | Business Associate | 145,714 | 06/25/2026 | Hacking/IT Incident | Network Server | Yes |
| Cure Dental | TX | Healthcare Provider | 878 | 06/23/2026 | Hacking/IT Incident | Network Server | No |
| Elara Caring | TX | Healthcare Provider | 22,172 | 06/23/2026 | Hacking/IT Incident | No | |
| Advocate Warriors LLC | ID | Healthcare Provider | 750 | 06/23/2026 | Hacking/IT Incident | No | |
| Anatomic and Clinical Laboratory Associates, P.C. | TN | Healthcare Provider | 169,626 | 06/23/2026 | Hacking/IT Incident | Network Server | No |
Breach information is derived from publicly available HHS Office for Civil Rights data. ePHIShield is not affiliated with or endorsed by HHS or OCR. Records may be amended, archived, under investigation, resolved, or closed, and inclusion in the public portal does not by itself establish that OCR determined a HIPAA violation occurred. The official OCR breach portal and HHS publications remain the authoritative sources.
The Scale of the Problem
205average reported breach incidents per day in 2024*
203of those daily incidents affected fewer than 500 individuals*
≈112:1smaller reported incidents for every 500+ breach on the public list*
*ePHIShield annualized calculations based on the official totals in the HHS 2024 Breach Notification Report to Congress: 663 breaches of 500+ individuals and 74,299 breaches under 500 — 74,962 combined reported incidents. Roughly 99.1% of reported 2024 incidents fell below the public 500+ reporting threshold.
Only breaches affecting 500+ individuals appear below — the visible tip of a much larger iceberg.
AI Is Changing the Threat — Regulators Are Taking Notice
Federal agencies have published official guidance on how artificial intelligence is being used to target the health sector — from AI-augmented phishing to social-engineering attacks on practice help desks. Read the government’s own analysis:
Methodology: Records shown are sourced from the HHS Office for Civil Rights public breach portal (breaches affecting 500+ individuals currently under investigation or archived). ePHIShield synchronizes this data on a recurring basis and verifies imports against the official export format. ePHIShield is not affiliated with, or endorsed by, the U.S. Department of Health & Human Services. For the authoritative record, always consult the official portal.
Don’t Wait Until Your Practice Is on This List
Every entry above represents a practice that thought it was doing enough. An expert-led HIPAA risk assessment shows you exactly where you stand — before regulators or attackers do.