State File GA / HHS OCR Breach Register226 filings, 2010 to 2026Retrieved 28 August 2026

Geography

Georgia: 226 healthcare breach filings.

Georgia entities have reported 226 breaches of 500 or more individuals to HHS since 2010, the 10th most of the 52 states and territories on the register, covering 38,854,537 individuals (9th by people affected). 18 are still under investigation. Hacking/IT Incident is the breach type on 63% of them, and network server the most common location (46%).

Filings

226

10th of 52 states and territories

Individuals affected

38,854,537

Median filing 5,232

Largest filing

13,924,906

Aflac Incorporated ("Aflac"), 2025

Hacking / IT share

63%

77 filings involve a business associate

Direct answer / Georgia on the HHS portal

The largest Georgia filing is Aflac Incorporated ("Aflac") (13,924,906 individuals, submitted 8 August 2025). The busiest year was 2022 with 26 filings. Healthcare Providers account for 66% of the state's filings. 97 filings of 10,000 or more individuals have their own page; the remaining 129 are listed in the table at the foot of this page.

Section GA.1 / Largest filings

Ten largest Georgia breaches

#	Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
1	Aflac Incorporated ("Aflac")Open	Health Plan	13,924,906	8 Aug 2025	Hacking/IT Incident	Network Server	No
2	Managed Care of North America	Business Associate	8,627,242	26 May 2023	Hacking/IT Incident	Network Server	Yes
3	NASCO	Business Associate	1,744,655	10 Oct 2023	Hacking/IT Incident	Network Server	Yes
4	St. Joseph's/Candler Health System, Inc.	Healthcare Provider	1,400,000	10 Aug 2021	Hacking/IT Incident	Network Server	No
5	MCBS, LLCOpen	Business Associate	1,261,464	26 Jun 2026	Hacking/IT Incident	Network Server	Yes
6	Southeast Series of Lockton Companies, LLC (Lockton)Open	Business Associate	1,124,727	28 Feb 2025	Hacking/IT Incident	Network Server	Yes
7	Young Consulting LLC	Business Associate	961,003	11 Sep 2024	Hacking/IT Incident	Network Server	Yes
8	ApolloMD Business Services, LLC	Business Associate	626,540	10 Feb 2026	Hacking/IT Incident	Network Server	Yes
9	Georgia Department of Community Health	Health Plan	557,779	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
10	Peachtree Orthopaedic Clinic	Healthcare Provider	531,000	18 Nov 2016	Hacking/IT Incident	Network Server	No

Section GA.2 / By year

Georgia filings by submission year

Each year links to the national year page.

Year	Filings	Individuals affected	Hacking / IT share	Filings with a page
2010	3	26,100	0%	2
2011	4	88,788	0%	2
2012	8	351,094	0%	3
2013	11	45,987	9%	1
2014	15	69,948	20%	4
2015	7	924,383	43%	1
2016	8	782,956	38%	4
2017	11	308,569	73%	3
2018	8	955,775	75%	5
2019	15	480,845	53%	4
2020	20	413,327	65%	5
2021	17	1,814,330	82%	11
2022	26	1,473,888	77%	16
2023	22	11,772,563	82%	11
2024	17	1,711,996	88%	8
2025	25	15,628,846	88%	12
2026	9	2,005,142	100%	5

Section GA.3 / Composition

Breach type, location and who filed

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident143 (63%)

Unauthorized Access/Disclosure42 (19%)

Theft28 (12%)

Loss6 (3%)

Other5 (2%)

Improper Disposal4 (2%)

Unknown1 (0%)

Location of breached information

Network Server104 (46%)

Email52 (23%)

Paper/Films29 (13%)

Laptop18 (8%)

Other12 (5%)

Electronic Medical Record9 (4%)

Desktop Computer9 (4%)

Other Portable Electronic Device6 (3%)

Covered entity type

Healthcare Provider149 (66%)

Business Associate48 (21%)

Health Plan26 (12%)

Healthcare Clearing House3 (1%)

Section GA.4 / Notification law

What Georgia law required alongside HIPAA

State notification statute

Georgia: Ga. Code 10-1-912

Personal Identity Protection Act

Notice to individuals: In the most expedient time possible and without unreasonable delay
Attorney general threshold: No general AG requirement (reporting agencies at 10,000+ residents)
Private right of action: No: No direct individual lawsuits for notification failures
Penalty: No explicit statutory penalties; possible exposure under the Fair Business Practices Act

The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.

Georgia notification law in full HIPAA breach penalties

Section GA.5 / Filing pages

97 filings of 10,000 or more individuals

Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Aflac Incorporated ("Aflac")Open	Health Plan	13,924,906	8 Aug 2025	Hacking/IT Incident	Network Server	No
Managed Care of North America	Business Associate	8,627,242	26 May 2023	Hacking/IT Incident	Network Server	Yes
NASCO	Business Associate	1,744,655	10 Oct 2023	Hacking/IT Incident	Network Server	Yes
St. Joseph's/Candler Health System, Inc.	Healthcare Provider	1,400,000	10 Aug 2021	Hacking/IT Incident	Network Server	No
MCBS, LLCOpen	Business Associate	1,261,464	26 Jun 2026	Hacking/IT Incident	Network Server	Yes
Southeast Series of Lockton Companies, LLC (Lockton)Open	Business Associate	1,124,727	28 Feb 2025	Hacking/IT Incident	Network Server	Yes
Young Consulting LLC	Business Associate	961,003	11 Sep 2024	Hacking/IT Incident	Network Server	Yes
ApolloMD Business Services, LLC	Business Associate	626,540	10 Feb 2026	Hacking/IT Incident	Network Server	Yes
Georgia Department of Community Health	Health Plan	557,779	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
Peachtree Orthopaedic Clinic	Healthcare Provider	531,000	18 Nov 2016	Hacking/IT Incident	Network Server	No
AU Medical Center, INC	Healthcare Provider	472,413	16 Aug 2018	Hacking/IT Incident	Email	No
SouthCoast Medical Group, LLC	Healthcare Provider	450,860	17 Aug 2023	Hacking/IT Incident	Network Server	No
Georgia Department of Human Services	Business Associate	435,339	30 Nov 2018	Unauthorized Access/Disclosure	Network Server, Other Portable Electronic Device	Yes
Navicent Health, Inc.	Healthcare Provider	404,993	22 Mar 2019	Hacking/IT Incident	Email	No
Emory Healthcare	Healthcare Provider	315,000	18 Apr 2012	Other, Unknown	Other	No
Cytometry Specialists, Inc., d/b/a CSI Laboratories	Healthcare Provider	312,000	25 Mar 2022	Hacking/IT Incident	Network Server	No
Synergy Healthcare Services	Business Associate	296,956	31 Jul 2023	Hacking/IT Incident	Network Server	Yes
Cytometry Specialists, Inc. d/b/a CSI Laboratories	Healthcare Provider	244,850	26 Sep 2022	Hacking/IT Incident	Email	No
CF Medical	Business Associate	242,200	26 Sep 2024	Hacking/IT Incident	Network Server	Yes
Horizon Actuarial Services, LLC	Business Associate	227,953	9 Mar 2022	Hacking/IT Incident	Network Server	Yes
Smith, Gambrell & Russell LLP	Business Associate	220,000	9 Jul 2024	Hacking/IT Incident	Network Server	Yes
Privia Medical Group of Georgia, LLC	Healthcare Provider	212,789	18 Aug 2023	Hacking/IT Incident	Network Server	Yes
Athens Orthopedic Clinic, P.A.	Healthcare Provider	201,000	29 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Peachtree Neurological Clinic, P.C.	Healthcare Provider	183,505	7 Jul 2017	Hacking/IT Incident	Network Server	No
Tift Regional Health System	Healthcare Provider	180,142	14 Oct 2022	Hacking/IT Incident	Network Server	No
Harbin Clinic, LLCOpen	Healthcare Provider	176,149	16 May 2025	Hacking/IT Incident	Network Server	Yes
Aveanna Healthcare	Healthcare Provider	166,077	14 Feb 2020	Hacking/IT Incident	Email	No
Financial Asset Management Systems	Business Associate	164,796	4 Nov 2023	Hacking/IT Incident	Network Server	Yes
Authority of the City of Bainbridge and Decatur County ("Memorial Hospital & Manor")	Healthcare Provider	120,085	8 Feb 2025	Hacking/IT Incident	Network Server	No
The Medibase Group, Inc.	Business Associate	117,957	5 Jul 2024	Hacking/IT Incident	Network Server	Yes
Piedmont Healthcare, Inc.	Healthcare Provider	111,588	11 Sep 2020	Hacking/IT Incident	Network Server	Yes
Data Media Associates	Business Associate	100,644	24 Aug 2023	Hacking/IT Incident	Network Server	Yes
OrthoMinds, LLC	Business Associate	89,371	24 Jan 2025	Hacking/IT Incident	Network Server	Yes
Emory Healthcare	Healthcare Provider	79,930	21 Feb 2017	Hacking/IT Incident	Network Server	No
Urology of Greater Atlanta, LLC	Healthcare Provider	79,795	7 Oct 2022	Hacking/IT Incident	Network Server, Other	No
Gore Medical Management, LLC	Healthcare Provider	79,100	8 Feb 2021	Hacking/IT Incident	Desktop Computer	No
ERMI LLCOpen	Healthcare Provider	74,074	26 May 2026	Hacking/IT Incident	Email	No
Ascension St. Vincent's Coastal Cardiology	Healthcare Provider	71,227	14 Oct 2022	Hacking/IT Incident	Network Server	No
Milan Eye Center	Healthcare Provider	67,336	23 Aug 2023	Hacking/IT Incident	Network Server	Yes
Atlanta Allergy & Asthma	Healthcare Provider	66,330	5 Apr 2021	Hacking/IT Incident	Network Server	No
Aveanna Healthcare	Healthcare Provider	65,482	15 Mar 2024	Hacking/IT Incident	Email	No
The Neurological Institute of Savannah & Center for Spine	Healthcare Provider	63,425	15 Aug 2011	Theft	Other, Other Portable Electronic Device	No
PruittHealth, Inc.	Business Associate	56,405	26 Jan 2024	Hacking/IT Incident	Network Server	Yes
Peachtree Orthopaedic Clinic	Healthcare Provider	53,686	3 Jan 2022	Hacking/IT Incident	Other	Yes
AU Health	Healthcare Provider	49,623	27 May 2022	Hacking/IT Incident	Electronic Medical Record	Yes
Georgia Department of Human Services	Healthcare Clearing House	45,732	9 Oct 2020	Hacking/IT Incident	Email	No
Ciox Health	Business Associate	43,033	30 Dec 2021	Hacking/IT Incident	Email	Yes
Hospital Authority of Valdosta and Lowndes County Georgia	Healthcare Provider	41,692	12 Jan 2022	Unauthorized Access/Disclosure	Desktop Computer	No
Georgia Bone & Joint Surgeons, P.C.	Healthcare Provider	39,300	21 Dec 2021	Hacking/IT Incident	Network Server	No
The Physicians' Spine and Rehabilitation Specialists of Georgia, P.C.	Healthcare Provider	38,589	2 Sep 2022	Hacking/IT Incident	Network Server	No
Reproductive Biology Associates, LLC and its affiliate My Egg Bank, LLC	Healthcare Provider	38,000	15 Jun 2021	Hacking/IT Incident	Network Server	No
Peachtree Orthopaedic Clinic, P.A.	Healthcare Provider	37,750	19 Jun 2023	Hacking/IT Incident	Network Server	No
Vascular Surgical Associates	Healthcare Provider	36,496	10 Nov 2016	Hacking/IT Incident	Network Server	No
Healthgrades Operating Company, Inc.	Business Associate	35,485	26 Mar 2021	Hacking/IT Incident	Email	Yes
Internal Medicine Associates of Jasper, PC, dba Prestige Medical Group	Healthcare Provider	34,203	10 May 2021	Hacking/IT Incident	Network Server	No
Thomas Eye Group	Healthcare Provider	33,994	30 Aug 2021	Unauthorized Access/Disclosure	Network Server	No
Atlanta Women's Health Group, P.C.	Healthcare Provider	33,839	11 Jun 2023	Hacking/IT Incident	Network Server	No
The Neurological Institute of Savannah & Center for Spine, P.C	Healthcare Provider	32,548	1 May 2025	Hacking/IT Incident	Network Server	No
Medical Center, LLPOpen	Healthcare Provider	32,090	19 Dec 2025	Hacking/IT Incident	Network Server	No
WellStar Health System, Inc.	Healthcare Provider	30,417	8 Apr 2022	Hacking/IT Incident	Email	No
Emanuel Medical CenterOpen	Healthcare Provider	28,963	17 Feb 2026	Hacking/IT Incident	Network Server	No
Creative Hospice Care, Inc. dba Homestead Hospice & Palliative Care	Healthcare Provider	28,332	23 May 2022	Hacking/IT Incident	Email	No
Bako Diagnostics	Healthcare Provider	25,745	25 Feb 2022	Hacking/IT Incident	Network Server	No
Northeast Georgia Health System	Healthcare Provider	24,849	8 Apr 2025	Hacking/IT Incident	Network Server	Yes
Decisely Insurance Services, LLC	Business Associate	24,737	13 Jun 2025	Hacking/IT Incident	Network Server, Other	Yes
EyeSouth Partners	Business Associate	24,113	23 Jan 2019	Hacking/IT Incident	Email	Yes
MAK Anesthesia	Healthcare Provider	24,079	26 Mar 2025	Hacking/IT Incident	Network Server	Yes
Georgia Pines CSB	Healthcare Provider	24,000	8 Apr 2022	Theft	Laptop, Other Portable Electronic Device, Paper/Films	No
Emory Healthcare	Healthcare Provider	24,000	15 Dec 2017	Unauthorized Access/Disclosure	Email	No
OneDigital Health and Benefits	Business Associate	22,894	6 Mar 2020	Theft	Laptop	Yes
Employee Group Insurance Benefits Plan of Acuity Brands, Inc.	Health Plan	20,849	6 Dec 2022	Hacking/IT Incident	Network Server	No
Georgia Hand, Shoulder & Elbow, PC	Healthcare Provider	20,498	1 Sep 2023	Hacking/IT Incident	Email	No
Pineland Community Service Board	Healthcare Provider	19,010	20 Mar 2025	Hacking/IT Incident	Network Server	No
NorthStar HealthCare Consulting LLC	Business Associate	18,354	26 Aug 2022	Unauthorized Access/Disclosure	Email	Yes
Terrell County Health Department	Healthcare Provider	18,000	18 Feb 2013	Unauthorized Access/Disclosure	Network Server	No
Three Rivers Regional Commission	Business Associate	17,560	5 Nov 2021	Hacking/IT Incident	Network Server	Yes
Roberts S. Smith M.D. Inc.	Healthcare Provider	17,000	13 Dec 2011	Theft	Laptop	No
Cancer Treatment Centers of America® (CTCA) at Southeastern Regional Medical Center	Healthcare Provider	16,819	10 May 2019	Hacking/IT Incident	Email	No
Mind and Motion, LLC	Healthcare Provider	16,000	30 Nov 2018	Hacking/IT Incident	Network Server	No
Georgia Department of Human Services	Healthcare Clearing House	15,938	17 Sep 2021	Hacking/IT Incident	Network Server	Yes
Augusta Data Storage, Inc	Business Associate	14,000	21 Jun 2010	Loss	Other	Yes
AGC Flat Glass North America, Inc. Welfare Benefits Plan	Health Plan	13,079	12 Feb 2024	Hacking/IT Incident	Network Server	No
PST Services, Inc	Business Associate	13,074	8 Oct 2012	Improper Disposal	Paper/Films	Yes
Phoebe Putney Memorial Hospital	Healthcare Provider	12,937	7 Jan 2014	Theft	Electronic Medical Record, Paper/Films	No
Phoebe Putney Memorial Hospital, Inc.	Healthcare Provider	12,937	24 May 2012	Theft	Electronic Medical Record, Paper/Films	No
Georgia Urology	Healthcare Provider	12,398	27 Mar 2025	Hacking/IT Incident	Email	No
Athens Heart Center, P.C.	Healthcare Provider	12,158	16 Apr 2018	Hacking/IT Incident	Electronic Medical Record	No
McKesson Pharmacy Systems LLC	Business Associate	11,440	5 Aug 2010	Other	Other, Other Portable Electronic Device	Yes
Monroe County Hospital	Healthcare Provider	10,970	25 May 2019	Hacking/IT Incident	Email	No
Thomasville Eye Center	Healthcare Provider	10,891	28 Sep 2016	Unauthorized Access/Disclosure	Desktop Computer	No
Aveanna Healthcare, LLC	Healthcare Provider	10,482	12 Jul 2024	Unauthorized Access/Disclosure	Email	No
AFLAC	Health Plan	10,396	29 May 2018	Hacking/IT Incident	Email	Yes
Kaiser Foundation Health Plan of Georgia, Inc.	Health Plan	10,205	6 Nov 2020	Unauthorized Access/Disclosure	Paper/Films	No
24 ON Physicians PC	Business Associate	10,104	15 Aug 2014	Hacking/IT Incident	Network Server	No
PST Services Inc, a McKesson Co.	Business Associate	10,104	8 Aug 2014	Hacking/IT Incident	Network Server	Yes
Good Samaritan Health CenterOpen	Healthcare Provider	10,000	16 Mar 2026	Hacking/IT Incident	Network Server	No
Bulloch Pediatric Group, LLC	Healthcare Provider	10,000	4 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No

Section GA.6 / All other filings

129 filings below 10,000 individuals

Listed in full from the HHS export, largest first. These filings do not have their own page.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Georgia Department of Community Health	Health Plan	355,127	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
Georgia Kidney Associates, Inc.Open	Healthcare Provider	9,940	28 Jun 2024	Theft	Other	No
The Georgia Institute for Plastic Surgery	Healthcare Provider	8,111	22 Apr 2024	Hacking/IT Incident	Network Server	No
DeKalb Medical Center, Inc. d/b/a DeKalb Medical Hillandale	Healthcare Provider	7,500	15 Jul 2011	Theft	Paper/Films	No
Jekyll Island-State Park Authority - Jekyll Island Fire/EMS	Healthcare Provider	7,046	9 Nov 2020	Hacking/IT Incident	Desktop Computer, Network Server	No
Diamond Computing Company	Business Associate	7,016	7 Aug 2014	Unauthorized Access/Disclosure	Network Server	Yes
Georgia Spine & Orthopaedics of Atlanta, LLC	Healthcare Provider	7,012	16 Nov 2018	Hacking/IT Incident	Email	No
Phoebe Putney Memorial Hospital	Healthcare Provider	6,989	3 Jan 2014	Loss	Desktop Computer	No
Robert S. Smith MD Inc DBA Boston Scientific Pathology	Healthcare Provider	6,940	31 Jan 2020	Unauthorized Access/Disclosure	Paper/Films	No
Premier Kids Care, Inc.	Healthcare Provider	6,265	29 Jun 2020	Hacking/IT Incident	Desktop Computer, Network Server	No
Aflac	Health Plan	6,166	15 May 2015	Unauthorized Access/Disclosure	Paper/Films	No
AU Medical Center, Inc.	Healthcare Provider	6,109	15 Sep 2017	Hacking/IT Incident	Email	No
Wayne Family Practice Associates, PC	Healthcare Provider	5,944	19 Apr 2022	Hacking/IT Incident	Network Server	No
OrthoAtlanta, LLC	Healthcare Provider	5,600	17 Sep 2020	Hacking/IT Incident	Network Server	No
AU Medical Center, Inc.	Healthcare Provider	5,600	26 May 2017	Hacking/IT Incident	Email	No
TSYS Employee Health Plan	Health Plan	5,232	2 Oct 2013	Theft	Email	Yes
Piedmont Cancer Institute, P.C.	Healthcare Provider	5,226	15 Sep 2020	Hacking/IT Incident	Email	No
The Good Samaritan Health Center	Healthcare Provider	5,000	6 Dec 2013	Hacking/IT Incident	Desktop Computer	No
Northside Hospital, Inc.	Healthcare Provider	4,879	10 Dec 2013	Loss	Laptop	No
Augusta Foot & Ankle, P.C.	Healthcare Provider	4,854	17 Mar 2020	Hacking/IT Incident	Network Server	No
Administrative Advantage, LLC	Business Associate	4,852	5 Apr 2021	Hacking/IT Incident	Email	Yes
Smith, Gambrell & Russell, LLP	Business Associate	4,688	28 Sep 2022	Hacking/IT Incident	Network Server	Yes
Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center	Healthcare Provider	4,559	12 Jul 2019	Hacking/IT Incident	Email	No
PruittHealth Corporation	Healthcare Provider	4,500	6 Dec 2013	Theft	Laptop	No
Relation Insurance, Inc., d/b/a Relation Insurance Services of Georgia	Business Associate	4,335	11 Feb 2020	Hacking/IT Incident	Email	Yes
South Georgia Center for Cancer Care, LLC	Healthcare Provider	4,108	27 Jun 2025	Hacking/IT Incident	Email	Yes
Tricounty Behavioral Health Clinic	Healthcare Provider	4,000	31 Aug 2012	Theft	Laptop	No
PhySynergy LLC	Healthcare Provider	3,667	13 Nov 2020	Hacking/IT Incident	Network Server	Yes
Carrollton Ear, Nose and Throat, PCOpen	Healthcare Provider	3,569	29 Aug 2025	Hacking/IT Incident	Network Server	No
Peach State Health Plan	Health Plan	3,443	30 Dec 2020	Unauthorized Access/Disclosure	Paper/Films	Yes
Coastal home Respiratory, LLP	Healthcare Provider	3,440	18 Oct 2012	Theft	Other	No
Region Six of the Georgia Department of Behavioral Health and Developmental Disabilities	Healthcare Provider	3,397	9 Oct 2014	Theft	Laptop	No
Life University	Healthcare Provider	3,389	17 Feb 2025	Hacking/IT Incident	Network Server	No
Skin Cancer Specialists, P.C.	Healthcare Provider	3,365	31 Mar 2017	Hacking/IT Incident	Network Server	No
Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center	Healthcare Provider	3,290	27 Sep 2019	Hacking/IT Incident	Email	No
1st Franklin Financial Corporation Master Welfare Benefit Plan	Health Plan	3,039	13 Jan 2023	Hacking/IT Incident	Email	No
WOMENS HEALTH ENTERPRISE, INC.	Healthcare Provider	3,000	27 Feb 2013	Theft	Laptop	No
Georgia Department of Human Services	Health Plan	2,983	8 Jul 2015	Unauthorized Access/Disclosure	Email	No
SunLink Health Systems, Inc.	Healthcare Provider	2,856	6 May 2025	Hacking/IT Incident	Network Server	Yes
The Multiple Sclerosis Center of Atlanta	Healthcare Provider	2,820	25 May 2022	Hacking/IT Incident	Email	No
NORTH ATLANTA MEDICAL CLINIC	Healthcare Provider	2,800	6 Jan 2019	Hacking/IT Incident	Desktop Computer	No
OneDigital/Digital Insurance, LLC	Business Associate	2,763	15 Feb 2019	Theft	Laptop	Yes
George West Mental Health Foundation dba Skyland Trail	Healthcare Provider	2,724	12 Sep 2020	Hacking/IT Incident	Network Server	No
Eye Consultants of Atlanta / Piedmont System Ambulatory Surgery Center, LLC	Healthcare Provider	2,662	19 Jun 2021	Improper Disposal	Paper/Films	No
Innovative Service Technology Management Services, Inc.	Health Plan	2,654	17 Nov 2022	Hacking/IT Incident	Network Server	No
Peachtree Immediate Care FP, LLC	Healthcare Provider	2,555	23 Jan 2023	Unauthorized Access/Disclosure	Paper/Films	Yes
Courier Express/Atlanta, Courier Express/Charlotte & Courier Express US, Inc.	Business Associate	2,523	17 Apr 2014	Theft, Unauthorized Access/Disclosure	Paper/Films	Yes
Apex Spine & Neurosurgery, LLCOpen	Healthcare Provider	2,500	6 Feb 2026	Hacking/IT Incident	Network Server	No
Wayne Memorial Hospital	Healthcare Provider	2,500	2 Aug 2024	Hacking/IT Incident	Network Server	No
Center for Primary Care	Healthcare Provider	2,400	25 Jul 2022	Hacking/IT Incident	Email	No
Specialty Clinics Of Georgia - Orthopaedics	Healthcare Provider	2,350	25 Aug 2014	Theft	Paper/Films	No
Highland Rivers Behavioral Health	Healthcare Provider	2,253	15 Apr 2025	Hacking/IT Incident	Network Server	Yes
The Cardiovascular Group	Healthcare Provider	2,168	23 Aug 2019	Unauthorized Access/Disclosure	Electronic Medical Record	No
Digital Insurance, LLC doing business as OneDigital	Business Associate	2,051	14 Jan 2022	Hacking/IT Incident	Network Server	Yes
Data Media Associates	Business Associate	2,035	9 Oct 2023	Unauthorized Access/Disclosure	Paper/Films	Yes
Simmons Family Chiropractic	Healthcare Provider	2,000	6 Sep 2019	Theft	Laptop, Other Portable Electronic Device	No
Lanier Family & Cosmetic Dentistry, P.C.	Healthcare Provider	1,950	29 Jan 2019	Unauthorized Access/Disclosure	Email	No
GI Care for Kids Endoscopy Center	Healthcare Provider	1,923	27 Jun 2017	Hacking/IT Incident	Network Server	No
Emory Healthcare	Healthcare Provider	1,891	6 Dec 2022	Unauthorized Access/Disclosure	Electronic Medical Record	No
TOTS, Inc. dba Kiddos' Clubhouse	Healthcare Provider	1,868	2 Jun 2022	Hacking/IT Incident	Network Server	No
Ridgeview Institute - Monroe	Healthcare Provider	1,853	29 May 2020	Unauthorized Access/Disclosure	Email, Paper/Films	No
Heyman HospiceCare at Floyd	Healthcare Provider	1,819	15 Feb 2013	Theft	Laptop	No
Ascension Health Services LLC dba Alpha Wellness & Alpha Medical Centre	Healthcare Provider	1,714	8 Jul 2025	Hacking/IT Incident	Network Server	No
Express MRI, LLC (Norcross)	Business Associate	1,707	11 Aug 2021	Hacking/IT Incident	Email	Yes
Jonathan Woolfson, MD, PC	Healthcare Provider	1,693	19 Nov 2020	Theft	Laptop	No
Buckhead Smile Center, P.C.	Healthcare Provider	1,655	17 Oct 2019	Unauthorized Access/Disclosure	Email	No
AFLAC	Health Plan	1,601	16 Dec 2019	Unauthorized Access/Disclosure	Network Server	No
Atlanta Perinatal Consultants, LLP	Healthcare Provider	1,508	2 Jul 2024	Hacking/IT Incident	Network Server	Yes
The Bortolazzo Group, LLC	Healthcare Provider	1,491	16 Sep 2025	Hacking/IT Incident	Network Server	Yes
Peachtree Immediate Care FP, LLC	Healthcare Provider	1,462	23 Nov 2020	Hacking/IT Incident	Email	No
Saint Francis Hospital	Healthcare Provider	1,412	14 Mar 2018	Improper Disposal	Other	No
Tattnall County, Georgia	Healthcare Provider	1,337	9 Feb 2023	Hacking/IT Incident	Network Server	No
James M. McGee, D.M.D., P.C.	Healthcare Provider	1,306	27 Nov 2012	Theft	Paper/Films	No
RiverMend Health, LLC	Healthcare Provider	1,300	9 Oct 2017	Hacking/IT Incident	Email	No
UHS-Pruitt Corporation	Healthcare Provider	1,300	15 Nov 2013	Theft	Laptop	No
Colquitt Complete Care, LLC	Healthcare Provider	1,282	10 Mar 2023	Hacking/IT Incident	Network Server	Yes
Change Healthcare	Business Associate	1,262	7 Jul 2022	Unauthorized Access/Disclosure	Paper/Films	Yes
Peach State Health Plan	Health Plan	1,246	15 Sep 2023	Hacking/IT Incident	Network Server	Yes
Five Points Optometrists, P.C. dba Five Points Eye Care	Healthcare Provider	1,223	24 Dec 2020	Hacking/IT Incident	Network Server	No
National DCP Health Plan	Health Plan	1,190	8 Aug 2017	Hacking/IT Incident	Email	No
St. Francis Hospital	Healthcare Provider	1,175	9 Jun 2014	Unauthorized Access/Disclosure	Email	No
LifeGas	Business Associate	1,103	4 Feb 2013	Theft	Laptop	Yes
Pinnacle Orthopaedics & Sports Medicine Specialists LLC	Healthcare Provider	1,100	21 Jun 2024	Hacking/IT Incident	Network Server	No
Georgia Pain and Spine Care	Healthcare Provider	1,056	20 May 2022	Unauthorized Access/Disclosure	Email	Yes
Tift Regional Medical Center	Healthcare Provider	1,045	18 Dec 2018	Hacking/IT Incident	Email	No
Alliant Health Plans, Inc.	Health Plan	1,042	20 Dec 2016	Hacking/IT Incident	Network Server	No
Tanner Medical CenterOpen	Healthcare Provider	1,000	25 Nov 2025	Unauthorized Access/Disclosure	Electronic Medical Record	No
Healthsoft LLC	Business Associate	1,000	6 Nov 2023	Hacking/IT Incident	Network Server	Yes
Martin Army Community Hospital	Healthcare Provider	1,000	9 Sep 2016	Theft	Paper/Films	No
Highland Rivers Community Service Board	Healthcare Provider	967	20 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
Magnolia Manor Inc.	Healthcare Provider	960	15 Apr 2025	Hacking/IT Incident	Network Server	No
CDC/NIOSH World Trade Center Health Program (WTCHP)	Health Plan	958	2 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
Aflac	Health Plan	930	20 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Piedmont Healthcare, Inc.	Healthcare Provider	895	29 Sep 2023	Hacking/IT Incident	Network Server	Yes
Digital Insurance, LLC doing business as OneDigital	Health Plan	895	24 Sep 2021	Hacking/IT Incident	Network Server	No
Diversified Resources, Inc.	Healthcare Provider	863	15 Sep 2011	Theft	Laptop	No
PruittHealth Pharmacy Services	Healthcare Provider	841	7 Feb 2014	Theft	Laptop	No
Charlie Norwood VA Medical Center	Healthcare Provider	824	4 Jun 2012	Loss	Other Portable Electronic Device	No
Metropolitan Atlanta Rapid Transit Authority	Health Plan	800	27 Aug 2015	Unauthorized Access/Disclosure	Paper/Films	No
Wellstar Health System	Healthcare Provider	779	21 Sep 2023	Hacking/IT Incident	Network Server	Yes
Spire Power Solutions, L.P.	Health Plan	771	2 Jun 2021	Hacking/IT Incident	Email	Yes
The Longstreet Clinic, P. C.	Healthcare Provider	720	28 Aug 2014	Improper Disposal	Other	No
Alliant Health Plans	Health Plan	695	16 Jan 2025	Unauthorized Access/Disclosure	Paper/Films	No
Braun Internal Medicine, P.C.	Healthcare Provider	680	14 Jul 2017	Unauthorized Access/Disclosure	Email	No
IACT Health	Healthcare Provider	676	6 Jun 2024	Hacking/IT Incident	Network Server	Yes
Heard County EMA	Business Associate	672	22 Oct 2014	Theft	Desktop Computer	No
McKesson Information Solutions, LLC	Business Associate	660	9 Apr 2010	Other	Paper/Films	Yes
Atlanta Center for Reproductive Medicine	Healthcare Provider	654	30 Aug 2013	Unauthorized Access/Disclosure	Email	No
Navicent Health, Inc.	Healthcare Provider	634	23 Aug 2019	Hacking/IT Incident	Email	No
Centivo CorporationOpen	Business Associate	630	6 Jun 2025	Unauthorized Access/Disclosure	Email	Yes
OrthoAtlanta LLC	Business Associate	626	21 Jul 2025	Hacking/IT Incident	Email	Yes
Repay Management Services, LLCOpen	Health Plan	606	10 Jun 2025	Hacking/IT Incident	Network Server	Yes
Georgia Vascual Specialists PCOpen	Healthcare Provider	600	13 Mar 2026	Hacking/IT Incident	Network Server	No
Data Media	Business Associate	600	28 Feb 2014	Other	Other	Yes
CDC/NIOSH/ World Trade Center Health Program (WTCHP)	Health Plan	597	15 Jan 2016	Unauthorized Access/Disclosure	Paper/Films	No
Advance Rehabilitation & Consulting LTD	Healthcare Provider	570	2 Mar 2015	Hacking/IT Incident	Network Server	No
Georgia Department of Public Health	Healthcare Provider	532	26 Nov 2024	Hacking/IT Incident	Email	No
Anwan Wellness LLC	Healthcare Provider	530	9 Dec 2019	Unauthorized Access/Disclosure	Electronic Medical Record	No
ASBESTOS WORKERS LOCAL 42 WELFARE PLAN	Health Plan	520	11 Jun 2024	Hacking/IT Incident	Network Server	Yes
24 ON Physicians, PC/In Compass Health,Inc.	Business Associate	520	14 Aug 2014	Hacking/IT Incident, Other	Network Server	Yes
Advanced Care Partners, LLC	Healthcare Provider	518	3 Aug 2023	Unauthorized Access/Disclosure	Email	No
Georgia Health Sciences University	Healthcare Provider	513	15 Mar 2012	Theft	Laptop	No
AppleCare, LLC	Healthcare Provider	512	23 Jan 2023	Unauthorized Access/Disclosure	Paper/Films	Yes
Secure Health Plans of Georgia, LLCOpen	Business Associate	501	23 Mar 2026	Hacking/IT Incident	Network Server	Yes
Nationwide Recovery Services, Inc.Open	Business Associate	501	9 Sep 2024	Hacking/IT Incident	Network Server	Yes
New Horizons Behavioral HealthOpen	Healthcare Provider	500	18 Mar 2026	Hacking/IT Incident	Network Server	No
Hope Medical LLC	Healthcare Provider	500	7 Jul 2021	Unauthorized Access/Disclosure	Paper/Films	No
Georgia Department of Human Services	Healthcare Clearing House	500	20 Mar 2020	Loss	Paper/Films	No
West Georgia Ambulance	Healthcare Provider	500	11 Feb 2013	Loss	Laptop	No

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.