Geography
Arizona: 164 healthcare breach filings.
Arizona entities have reported 164 breaches of 500 or more individuals to HHS since 2010, the 18th most of the 52 states and territories on the register, covering 16,196,141 individuals (20th by people affected). 12 are still under investigation. Hacking/IT Incident is the breach type on 57% of them, and network server the most common location (43%).
Filings
164
18th of 52 states and territories
Individuals affected
16,196,141
Median filing 3,146
Largest filing
3,620,000
Banner Health, 2016
Hacking / IT share
57%
35 filings involve a business associate
Direct answer / Arizona on the HHS portal
The largest Arizona filing is Banner Health (3,620,000 individuals, submitted 3 August 2016). The busiest year was 2023 with 17 filings. Healthcare Providers account for 76% of the state's filings. 52 filings of 10,000 or more individuals have their own page; the remaining 112 are listed in the table at the foot of this page.
Section AZ.1 / Largest filings
Ten largest Arizona breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Banner Health | Healthcare Provider | 3,620,000 | 3 Aug 2016 | |||
| 2 | Medical Management Resource Group, L.L.C. | Business Associate | 2,264,157 | 6 Feb 2024 | |||
| 3 | OnePoint Patient Care | Healthcare Provider | 1,741,152 | 14 Oct 2024 | |||
| 4 | SimonMed Imaging | Healthcare Provider | 1,275,669 | 27 Mar 2025 | |||
| 5 | Magellan Health Inc. | Health Plan | 1,013,956 | 12 Jun 2020 | |||
| 6 | Valley Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain Consultants | Healthcare Provider | 882,590 | 12 Aug 2016 | |||
| 7 | Yuma Regional Medical Center | Healthcare Provider | 738,145 | 9 Jun 2022 | |||
| 8 | PracticeMax, Inc. | Business Associate | 685,574 | 30 Jun 2021 | |||
| 9 | SightCare, Inc. | Health Plan | 637,999 | 28 Oct 2022 | |||
| 10 | Cardiovascular Consultants Ltd. | Healthcare Provider | 484,000 | 1 Dec 2023 |
Section AZ.2 / By year
Arizona filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2010 | 3 | 9,766 | 0% | 0 |
| 2011 | 8 | 30,039 | 13% | 1 |
| 2012 | 5 | 92,758 | 20% | 2 |
| 2013 | 5 | 10,914 | 0% | 0 |
| 2014 | 6 | 76,231 | 0% | 2 |
| 2015 | 4 | 6,854 | 0% | 0 |
| 2016 | 9 | 4,524,278 | 67% | 3 |
| 2017 | 8 | 35,339 | 38% | 1 |
| 2018 | 8 | 50,274 | 38% | 1 |
| 2019 | 12 | 70,701 | 58% | 2 |
| 2020 | 12 | 1,806,511 | 67% | 6 |
| 2021 | 15 | 1,020,464 | 87% | 9 |
| 2022 | 16 | 1,601,333 | 75% | 7 |
| 2023 | 17 | 787,780 | 71% | 5 |
| 2024 | 16 | 4,379,572 | 81% | 5 |
| 2025 | 17 | 1,616,781 | 71% | 7 |
| 2026 | 3 | 76,546 | 100% | 1 |
Section AZ.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section AZ.4 / Notification law
What Arizona law required alongside HIPAA
State notification statute
Arizona: A.R.S. 18-551, 18-552
- Notice to individuals
- Within 45 days after determining a breach occurred
- Attorney general threshold
- More than 1,000 Arizona residents (AG and Dept. of Homeland Security) (Within the same 45-day window)
- Private right of action
- No: Only the Arizona Attorney General may enforce
- Penalty
- Up to $10,000 per affected individual, capped at $500,000 per breach, under the Consumer Fraud Act
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section AZ.5 / Filing pages
52 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section AZ.6 / All other filings
112 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| The Neighborhood Christian Clinic | Healthcare Provider | 9,565 | 9 Apr 2012 | |||
| Phoenix Health Plan | Health Plan | 9,393 | 25 Apr 2011 | |||
| Equality Health, LLC | Healthcare Provider | 9,240 | 27 Nov 2023 | |||
| Desert Healthcare Services, LLC | Healthcare Provider | 8,000 | 11 Jun 2019 | |||
| Desert Valley Dental of Glendale | Healthcare Provider | 7,500 | 26 Mar 2019 | |||
| Northwest Rheumatology | Healthcare Provider | 7,468 | 31 Jul 2017 | |||
| City of San Luis | Healthcare Provider | 6,848 | 20 Jun 2023 | |||
| Saliba's Extended Care Pharmacy | Healthcare Provider | 6,599 | 3 Mar 2017 | |||
| Integrated Medical Services | Healthcare Provider | 6,591 | 17 Apr 2023 | |||
| Stephen Harkins, DDS, PC, dba: Harkins Pain & Sleep Management Group | Healthcare Provider | 6,411 | 18 Jul 2023 | |||
| Panoramic Health | Business Associate | 6,228 | 28 Aug 2024 | |||
| Quality of Life Medical and Research Center | Healthcare Provider | 6,000 | 31 Aug 2020 | |||
| Mountain Valley Regional Rehabilitation Hospital | Healthcare Provider | 5,963 | 29 Mar 2024 | |||
| Arizona Dermatopathology | Healthcare Provider | 5,903 | 25 Jul 2019 | |||
| Mary M. Desch,MD/PathHealer, LTD | Healthcare Provider | 5,893 | 28 Jun 2010 | |||
| AZ Plastic Surgery Center | Healthcare Provider | 5,524 | 8 Feb 2019 | |||
| Arizona Arthritis and Rheumatology Associates, P.C. | Healthcare Provider | 5,509 | 2 May 2025 | |||
| Panoramic Health | Business Associate | 5,445 | 3 May 2024 | |||
| Jeffrey Paul Edelstein M.D. | Healthcare Provider | 4,800 | 27 Jul 2012 | |||
| TriWest Healthcare Alliance Corp. | Business Associate | 4,500 | 1 Mar 2011 | |||
| Ijaola, LLC d/b/a Mercy Grace Private Practice | Healthcare Provider | 4,450 | 30 Aug 2021 | |||
| CVS Caremark | Business Associate | 4,305 | 2 Jul 2013 | |||
| Hospice of the Valley | Healthcare Provider | 3,840 | 3 Feb 2023 | |||
| Arizona Counseling & Treatment Services, LLC | Healthcare Provider | 3,800 | 1 May 2013 | |||
| Urological Associates of Southern Arizona, P.C. | Healthcare Provider | 3,529 | 25 Jul 2014 | |||
| Skin and Cancer Center of Arizona | Healthcare Provider | 3,311 | 21 Sep 2015 | |||
| Rehabilitation Hospital of Northern Arizona | Healthcare Provider | 3,287 | 29 Mar 2024 | |||
| NVW Newco, LLC | Healthcare Provider | 3,232 | 28 Feb 2025 | |||
| Arizona Health Care Cost Containment System- State Medicaid AgencyOpen | Health Plan | 3,177 | 3 Oct 2025 | |||
| Arizona Health Care Cost Containment System | Health Plan | 3,146 | 11 Mar 2019 | |||
| MGA Home Healthcare Colorado, Inc. | Healthcare Provider | 3,119 | 19 Oct 2016 | |||
| Gladden Farms Family Dentistry | Healthcare Provider | 3,085 | 27 Jul 2023 | |||
| Sun Pain Management, LLC | Healthcare Provider | 2,988 | 27 Jan 2024 | |||
| Catalina Post-Acute Care and Rehabilitation | Healthcare Provider | 2,953 | 2 Feb 2017 | |||
| Integrated Orthopedics of Arizona | Healthcare Provider | 2,916 | 11 Aug 2025 | |||
| MGA Home Healthcare Colorado, Inc. | Healthcare Provider | 2,898 | 25 Oct 2017 | |||
| Laboratory Corporation of America / US LABS / Dianon Systems, Inc | Healthcare Provider | 2,773 | 1 Apr 2010 | |||
| Orthopedic Specialists of North America, PLLC dba OrthoArizona | Healthcare Provider | 2,748 | 15 Jul 2022 | |||
| Core Recovery, Inc. | Healthcare Provider | 2,656 | 16 Jun 2023 | |||
| Arizona Health Care Cost Containment System | Health Plan | 2,632 | 30 Jun 2023 | |||
| COSE Healthcloud Solutions, LLC | Healthcare Clearing House | 2,606 | 31 Mar 2025 | |||
| Arizona Department of Health Services | Healthcare Provider | 2,500 | 26 May 2017 | |||
| Southwest Behavioral Health Services.orgOpen | Healthcare Provider | 2,316 | 20 May 2026 | |||
| Mountain Vista Medical Center | Healthcare Provider | 2,291 | 21 Feb 2011 | |||
| Sunquest Information Systems | Business Associate | 2,100 | 24 Sep 2015 | |||
| TUBA CITY REGIONAL HEALTH CARE CORPORATION | Healthcare Provider | 2,000 | 9 Jun 2011 | |||
| Valley Physical Medicine & Rehabilitation | Health Plan | 1,866 | 2 Aug 2021 | |||
| Summit Healthcare Medical AssociatesOpen | Healthcare Provider | 1,861 | 11 Apr 2025 | |||
| Phoenix Children's Hospital | Healthcare Provider | 1,860 | 14 Jan 2020 | |||
| TMC HealthCare | Healthcare Provider | 1,776 | 7 Sep 2018 | |||
| Echo Canyon Healthcare, Incorporated dba Heritage Court Post Acute of Scottsdale | Healthcare Provider | 1,765 | 21 May 2018 | |||
| SRPMIC Employee Health Plan | Health Plan | 1,708 | 15 Jul 2020 | |||
| Hospitalists of Arizona | Healthcare Provider | 1,706 | 16 Mar 2014 | |||
| Arizona State Urological Institute | Healthcare Provider | 1,626 | 10 Jul 2023 | |||
| Terros Incorporated | Healthcare Provider | 1,618 | 5 Jun 2018 | |||
| Hope Group LLC | Healthcare Provider | 1,510 | 7 Dec 2021 | |||
| Pima County | Health Plan | 1,498 | 12 Sep 2019 | |||
| All Source Medical Management | Business Associate | 1,456 | 13 Nov 2013 | |||
| Summit Healthcare Association | Healthcare Provider | 1,410 | 11 May 2022 | |||
| Southwest Behavioral & Health Services | Healthcare Provider | 1,337 | 2 Aug 2022 | |||
| Colorado River Indian Tribes | Healthcare Provider | 1,296 | 14 Nov 2014 | |||
| Clear Dermatology and Aesthetics Center | Healthcare Provider | 1,282 | 17 Jun 2019 | |||
| The Institute for Liver Health dba Arizona Liver Health-Arizona Clinical Trials | Healthcare Provider | 1,277 | 1 Feb 2023 | |||
| Kingman Healthcare Incorporated | Healthcare Provider | 1,100 | 7 Jun 2019 | |||
| Center for Neurosciences | Healthcare Provider | 1,100 | 10 Feb 2010 | |||
| Emergency Room Associates doing business as Emergency Medicine Associates | Healthcare Provider | 1,067 | 19 May 2016 | |||
| The Biomechanics LLC | Healthcare Provider | 1,049 | 16 Nov 2016 | |||
| Smile Doctors of Arizona dba Grinz Orthodontics | Healthcare Provider | 1,034 | 9 May 2023 | |||
| VirMedice, LLCOpen | Business Associate | 1,000 | 25 Oct 2025 | |||
| David S Daley, DMD | Healthcare Provider | 1,000 | 26 Mar 2020 | |||
| Abdul Memon, MD PLLC | Business Associate | 1,000 | 11 Oct 2019 | |||
| Fort Defiance Indian Hospital | Healthcare Provider | 1,000 | 17 Dec 2018 | |||
| Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC | Healthcare Provider | 1,000 | 12 Dec 2018 | |||
| Team Select | Healthcare Provider | 949 | 12 Mar 2026 | |||
| Summit Healthcare Regional Medical Center | Healthcare Provider | 905 | 23 May 2024 | |||
| City of Yuma, Privacy Manager Breach | Business Associate | 905 | 13 Dec 2012 | |||
| Healthcare Collections - I, LLC | Business Associate | 900 | 11 Apr 2022 | |||
| LCS Westminster Partnership IV, LLP d/b/a Sagewood | Healthcare Provider | 863 | 22 Nov 2016 | |||
| Arizona Department of Economic Security, Division of Developmental Disabilities | Healthcare Provider | 857 | 10 Mar 2023 | |||
| Athletes' Performance Los Angeles, LLC | Healthcare Provider | 854 | 28 Jul 2016 | |||
| SilverScript Insurance Company | Health Plan | 852 | 8 Jan 2013 | |||
| State of Arizona Department of Administration | Health Plan | 820 | 5 Apr 2022 | |||
| La Posada at Park Centre, Inc. | Health Plan | 812 | 8 Feb 2022 | |||
| Camelback Women's Health | Healthcare Provider | 810 | 3 Dec 2015 | |||
| Navajo County Sheriff's Office | Healthcare Provider | 797 | 31 Oct 2022 | |||
| Ascend Healthcare Management LLC | Healthcare Provider | 791 | 26 Feb 2024 | |||
| Merchants Benefit Administration | Health Plan | 767 | 30 Apr 2024 | |||
| Rim Country Health and Rehabilitation | Healthcare Provider | 720 | 16 Sep 2024 | |||
| Arizona Oncology Associates, PC | Healthcare Provider | 717 | 5 Mar 2021 | |||
| OSR Physical Therapy | Healthcare Provider | 714 | 7 Dec 2021 | |||
| Southwestern Eye Center | Healthcare Provider | 667 | 1 Aug 2018 | |||
| CVS CAREMARK | Healthcare Provider | 654 | 11 May 2011 | |||
| Park Avenue Obstetrics & Gynecology, PC | Healthcare Provider | 635 | 31 Mar 2011 | |||
| Maricopa Special Health Care District - Maricopa Integrated Health System | Healthcare Provider | 633 | 14 Jul 2015 | |||
| St. Joseph's Hospital and Medical Center | Healthcare Provider | 623 | 13 Feb 2017 | |||
| District Medical Group, Privacy Manager Breach | Healthcare Provider | 616 | 12 Dec 2014 | |||
| Winslow Memorial Hospital d/b/a Little Colorado Medical Center | Healthcare Provider | 604 | 21 Jun 2022 | |||
| SW General Inc | Healthcare Provider | 566 | 14 Apr 2011 | |||
| Mohave County Adult Detention Facility | Healthcare Provider | 558 | 31 Oct 2022 | |||
| Marana Health Center, Inc. | Health Plan | 542 | 2 Jul 2024 | |||
| Arizona Pain and Spine Institute | Healthcare Provider | 530 | 3 Feb 2020 | |||
| Ambetter for Arizona Complete Health | Health Plan | 518 | 29 Dec 2020 | |||
| Beatitudes Campus | Healthcare Provider | 514 | 27 Sep 2019 | |||
| Consumer Direct Care Network Arizona | Healthcare Provider | 504 | 10 Sep 2021 | |||
| Glendale Obstetrics & Gynecology PCAOpen | Healthcare Provider | 501 | 24 Dec 2025 | |||
| Better Vision Eyecare, LLCOpen | Healthcare Provider | 501 | 28 Oct 2025 | |||
| Coalesce, LLC dba BenefitelectOpen | Business Associate | 501 | 15 Oct 2025 | |||
| Dragonfly HealthOpen | Business Associate | 501 | 27 Dec 2024 | |||
| Arizona Oncology | Healthcare Provider | 501 | 21 Feb 2013 | |||
| Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis Mammography | Healthcare Provider | 500 | 16 Dec 2018 | |||
| Bloom Physical Therapy, LLC dba Physicians Physical Therapy Service | Healthcare Provider | 500 | 9 Feb 2017 | |||
| Desert Care Family and Sports Medicine | Healthcare Provider | 500 | 20 Dec 2016 |
Index / Other states
Every state on the register
98
32
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
55
38
174
57
511
207
19
276
80
120
339
32
41
86
15
196
633
68
15
157
185
47
126
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.