State File IN / HHS OCR Breach Register200 filings, 2010 to 2026Retrieved 28 August 2026

Geography

Indiana: 200 healthcare breach filings.

Indiana entities have reported 200 breaches of 500 or more individuals to HHS since 2010, the 12th most of the 52 states and territories on the register, covering 93,061,324 individuals (2nd by people affected). 10 are still under investigation. Hacking/IT Incident is the breach type on 60% of them, and network server the most common location (42%).

Filings

200

12th of 52 states and territories

Individuals affected

93,061,324

Median filing 3,600

Largest filing

78,800,000

Anthem Inc., 2015

Hacking / IT share

60%

62 filings involve a business associate

Direct answer / Indiana on the HHS portal

The largest Indiana filing is Anthem Inc. (78,800,000 individuals, submitted 13 February 2015). The busiest year was 2024 with 20 filings. Healthcare Providers account for 64% of the state's filings. 61 filings of 10,000 or more individuals have their own page; the remaining 139 are listed in the table at the foot of this page.

Section IN.1 / Largest filings

Ten largest Indiana breaches

#	Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
1	Anthem Inc.	Health Plan	78,800,000	13 Feb 2015	Hacking/IT Incident	Network Server	No
2	Medical Informatics Engineering	Business Associate	3,500,000	23 Jul 2015	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
3	Apria Healthcare LLC	Healthcare Provider	1,868,831	16 May 2022	Hacking/IT Incident	Email	No
4	Eskenazi Health	Healthcare Provider	1,515,918	1 Oct 2021	Hacking/IT Incident	Network Server	No
5	Community Health Network, Inc. as an Affiliated Covered Entity	Healthcare Provider	1,500,000	18 Nov 2022	Unauthorized Access/Disclosure	Network Server	No
6	Blue & Co., LLC	Business Associate	591,713	7 Feb 2025	Hacking/IT Incident	Email	Yes
7	CNO ACE	Health Plan	566,217	25 Oct 2018	Hacking/IT Incident	Network Server	No
8	Elkhart Emergency Physicians, Inc .	Healthcare Provider	550,000	28 May 2020	Improper Disposal	Paper/Films	Yes
9	Goodman Campbell Brain and Spine	Healthcare Provider	362,833	19 Jul 2022	Hacking/IT Incident	Network Server	No
10	Otolaryngology Associates, LLC	Healthcare Provider	316,802	1 Apr 2024	Hacking/IT Incident	Network Server	No

Section IN.2 / By year

Indiana filings by submission year

Each year links to the national year page.

Year	Filings	Individuals affected	Hacking / IT share	Filings with a page
2010	6	37,086	17%	1
2011	7	41,142	29%	2
2012	10	117,221	20%	3
2013	11	219,762	9%	2
2014	5	68,300	20%	1
2015	10	82,759,421	50%	6
2016	12	257,174	33%	2
2017	9	176,272	11%	3
2018	5	590,090	80%	2
2019	13	356,488	77%	6
2020	17	813,015	53%	5
2021	16	1,630,676	88%	3
2022	15	3,962,724	80%	7
2023	15	242,232	80%	4
2024	20	514,167	95%	5
2025	19	1,224,753	84%	8
2026	10	50,801	60%	1

Section IN.3 / Composition

Breach type, location and who filed

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident119 (60%)

Unauthorized Access/Disclosure38 (19%)

Theft30 (15%)

Improper Disposal11 (6%)

Other3 (2%)

Loss1 (1%)

Location of breached information

Network Server84 (42%)

Email50 (25%)

Paper/Films30 (15%)

Laptop18 (9%)

Other13 (7%)

Electronic Medical Record8 (4%)

Desktop Computer6 (3%)

Other Portable Electronic Device4 (2%)

Covered entity type

Healthcare Provider128 (64%)

Health Plan44 (22%)

Business Associate27 (14%)

Healthcare Clearing House1 (1%)

Section IN.4 / Notification law

What Indiana law required alongside HIPAA

State notification statute

Indiana: Ind. Code 24-4.9

Notice to individuals: Without unreasonable delay, no more than 45 days after discovery
Attorney general threshold: All qualifying breaches (Within the 45-day consumer notification window)
Private right of action: No: Enforced exclusively by the Indiana Attorney General
Penalty: Up to $150,000 per deceptive act, plus investigation costs

The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.

Indiana notification law in full HIPAA breach penalties

Section IN.5 / Filing pages

61 filings of 10,000 or more individuals

Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Anthem Inc.	Health Plan	78,800,000	13 Feb 2015	Hacking/IT Incident	Network Server	No
Medical Informatics Engineering	Business Associate	3,500,000	23 Jul 2015	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
Apria Healthcare LLC	Healthcare Provider	1,868,831	16 May 2022	Hacking/IT Incident	Email	No
Eskenazi Health	Healthcare Provider	1,515,918	1 Oct 2021	Hacking/IT Incident	Network Server	No
Community Health Network, Inc. as an Affiliated Covered Entity	Healthcare Provider	1,500,000	18 Nov 2022	Unauthorized Access/Disclosure	Network Server	No
Blue & Co., LLC	Business Associate	591,713	7 Feb 2025	Hacking/IT Incident	Email	Yes
CNO ACE	Health Plan	566,217	25 Oct 2018	Hacking/IT Incident	Network Server	No
Elkhart Emergency Physicians, Inc .	Healthcare Provider	550,000	28 May 2020	Improper Disposal	Paper/Films	Yes
Goodman Campbell Brain and Spine	Healthcare Provider	362,833	19 Jul 2022	Hacking/IT Incident	Network Server	No
Otolaryngology Associates, LLC	Healthcare Provider	316,802	1 Apr 2024	Hacking/IT Incident	Network Server	No
Beacon Health System	Healthcare Provider	306,789	22 May 2015	Hacking/IT Incident	Email	No
Union Health System, Inc.	Healthcare Provider	262,831	21 Apr 2025	Hacking/IT Incident	Network Server	Yes
Horizon Healthcare RCM	Healthcare Clearing House	210,901	27 Jun 2025	Hacking/IT Incident	Network Server	No
Premier Healthcare, LLC	Healthcare Provider	205,748	4 Mar 2016	Theft	Laptop	No
RCR Technology Corporation	Business Associate	187,533	1 Jul 2013	Other	Paper/Films	Yes
Cummins Behavioral Health Systems	Healthcare Provider	154,285	12 Apr 2023	Hacking/IT Incident	Network Server	No
Meridian Health Services Corp.	Healthcare Provider	111,372	27 Apr 2020	Hacking/IT Incident	Email	No
Talley Medical Surgical Eyecare Associates, PC	Healthcare Provider	106,000	24 May 2019	Hacking/IT Incident	Network Server	No
Schneck Medical Center	Healthcare Provider	92,311	13 May 2022	Hacking/IT Incident	Network Server	No
VisionQuest Eyecare	Healthcare Provider	85,995	2 Mar 2017	Hacking/IT Incident	Network Server	No
Central Indiana Orthopedics	Healthcare Provider	83,705	7 Mar 2022	Hacking/IT Incident	Network Server	No
Community Health Network, Inc.	Healthcare Provider	81,118	11 Sep 2020	Hacking/IT Incident	Network Server	Yes
The Methodist Hospitals, Inc.	Healthcare Provider	68,039	4 Oct 2019	Hacking/IT Incident	Email	No
CNO ACE	Health Plan	65,295	26 Jan 2024	Hacking/IT Incident	Network Server	No
St.Vincent Hospital and Health Care Center, Inc.	Healthcare Provider	63,325	27 Feb 2015	Unauthorized Access/Disclosure	Paper/Films	No
St. Vincent Hospital and Health Care Center, Inc.	Business Associate	63,325	9 Jul 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Woodlawn Hospital	Healthcare Provider	62,278	25 Aug 2025	Hacking/IT Incident	Network Server	No
Select Health Network	Business Associate	56,790	13 Nov 2019	Hacking/IT Incident	Email	Yes
Enterprise Services LLC	Business Associate	56,075	27 Jun 2017	Unauthorized Access/Disclosure	Network Server, Other	Yes
Cancer Care Group, P.C.	Healthcare Provider	55,000	28 Aug 2012	Theft	Other Portable Electronic Device	No
LCP Transportation, Inc	Business Associate	54,528	15 Mar 2019	Hacking/IT Incident	Email	Yes
Valley Oaks Health	Healthcare Provider	50,034	18 Mar 2024	Hacking/IT Incident	Network Server	No
CarePointe ENT	Healthcare Provider	48,742	23 Aug 2021	Hacking/IT Incident	Network Server	No
Aspire Indiana, Inc.	Healthcare Provider	43,890	7 Jan 2015	Theft	Laptop	No
Indiana State Medical Association	Health Plan	38,351	6 Mar 2015	Theft	Other Portable Electronic Device	No
Otis R. Bowen Center for Human Services	Healthcare Provider	35,804	20 Mar 2020	Hacking/IT Incident	Email	No
WellPoint, Inc.	Health Plan	31,700	30 Jul 2010	Hacking/IT Incident	Network Server	No
Managed Health Services	Health Plan	31,300	3 Jan 2019	Hacking/IT Incident	Email	Yes
Gibson General Hospital	Healthcare Provider	28,893	26 Dec 2012	Theft	Laptop	No
Fort Wayne Medical Education ProgramOpen	Healthcare Provider	28,502	6 Mar 2025	Hacking/IT Incident	Network Server	No
Lakeshore Bone & Joint Institute, PC	Healthcare Provider	23,627	10 Jan 2022	Hacking/IT Incident	Email	No
Reid Hospital & Health Care Services	Healthcare Provider	22,001	6 May 2011	Theft	Laptop	No
Indiana University Health	Health Plan	21,383	4 Aug 2023	Hacking/IT Incident	Network Server	Yes
Community Health Network, Inc.	Healthcare Provider	20,777	17 Nov 2023	Hacking/IT Incident	Email, Other	No
Indiana Internal Medicine Consultants	Healthcare Provider	20,000	9 Mar 2012	Theft	Laptop	No
Indiana University Health, Affiliated Covered Entity	Healthcare Provider	19,827	17 Dec 2024	Hacking/IT Incident	Email	No
Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan	Health Plan	19,320	28 Sep 2018	Hacking/IT Incident	Email	No
Anthem, Inc.	Health Plan	18,580	24 Jul 2017	Unauthorized Access/Disclosure	Email	Yes
Community Health Network, Inc.	Healthcare Provider	15,410	7 Jul 2025	Hacking/IT Incident	Email	No
Healthcare Therapy Services, Inc.	Healthcare Provider	15,027	8 Nov 2025	Hacking/IT Incident	Email	No
Westminster Village Greenwood, Inc.Open	Healthcare Provider	14,386	4 Aug 2025	Hacking/IT Incident	Network Server	No
Anthem ACE	Health Plan	13,406	30 Sep 2022	Unauthorized Access/Disclosure	Network Server	Yes
Fairbanks Hospital	Healthcare Provider	12,994	16 Dec 2016	Unauthorized Access/Disclosure	Network Server	No
Jefferson Dental Center, Inc.	Healthcare Provider	12,340	27 Nov 2024	Hacking/IT Incident	Network Server	No
Valley Professionals Community Health Center	Healthcare Provider	12,029	25 Jan 2019	Hacking/IT Incident	Email	No
Wellpoint Washington, Inc.	Health Plan	12,020	20 May 2026	Hacking/IT Incident	Email	Yes
Managed Health Services (MHS)	Health Plan	11,988	8 Jan 2021	Unauthorized Access/Disclosure	Paper/Films	Yes
Centerstone of Indiana, Inc.	Healthcare Provider	11,638	23 Oct 2020	Hacking/IT Incident	Email	No
Jay C. Platt, DDS	Healthcare Provider	10,705	5 Dec 2011	Theft	Other	No
Indiana University Health Arnett	Healthcare Provider	10,350	13 May 2013	Theft	Laptop	No
Northwest Health - La Porte	Healthcare Provider	10,256	2 May 2023	Unauthorized Access/Disclosure	Paper/Films	No

Section IN.6 / All other filings

139 filings below 10,000 individuals

Listed in full from the HHS export, largest first. These filings do not have their own page.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
DMEscripts, LLC	Business Associate	9,993	8 Oct 2024	Hacking/IT Incident	Email	Yes
Golden Rule Insurance Company	Health Plan	9,305	4 Dec 2017	Unauthorized Access/Disclosure	Network Server	Yes
Goshen Health	Healthcare Provider	9,160	30 Sep 2019	Hacking/IT Incident	Email	No
WindRose Health NetworkOpen	Healthcare Provider	9,087	27 Jan 2026	Hacking/IT Incident	Network Server	No
Deaconess Health System	Healthcare Provider	8,941	20 Mar 2026	Hacking/IT Incident	Network Server	Yes
Easterseals Rehabilitation Center Evansville	Healthcare Provider	8,394	25 Oct 2024	Hacking/IT Incident	Network Server	No
Logansport Memorial Hospital	Healthcare Provider	7,877	23 Apr 2019	Hacking/IT Incident	Email	No
Lafayette Pain Care PC	Healthcare Provider	7,500	9 May 2016	Hacking/IT Incident	Network Server	Yes
Summit Medical Associates	Healthcare Provider	7,264	4 Aug 2020	Hacking/IT Incident	Network Server	No
Anthem Affiliated Covered Entities	Health Plan	7,250	30 Dec 2021	Hacking/IT Incident	Network Server	Yes
Gibson Insurance Agency, Inc.	Business Associate	7,242	14 Oct 2016	Theft	Laptop	Yes
Duneland School Corporation	Health Plan	7,000	23 Dec 2021	Hacking/IT Incident	Network Server	No
Orleans Medical Clinic	Healthcare Provider	6,890	19 Aug 2016	Hacking/IT Incident	Network Server	No
SMC Corporation of America	Health Plan	6,566	27 Feb 2025	Hacking/IT Incident	Network Server	No
Anthem, Inc.	Business Associate	6,118	19 Nov 2021	Hacking/IT Incident	Network Server	Yes
Aldrich Pediatric DentistryOpen	Healthcare Provider	5,900	24 Apr 2026	Hacking/IT Incident	Email	No
Anthem, Inc.	Business Associate	5,505	27 Oct 2021	Theft	Other Portable Electronic Device, Paper/Films	Yes
Julie D. Kinsler DDS LLC dba Kinsler Family Dentistry	Healthcare Provider	5,500	12 Aug 2024	Hacking/IT Incident	Network Server	No
Managed Health Services	Health Plan	5,500	29 Nov 2016	Unauthorized Access/Disclosure	Email, Laptop	No
Anthem BCBS of GA	Business Associate	5,497	13 Aug 2013	Theft	Other	Yes
Just the Connection Inc	Business Associate	5,388	20 May 2013	Improper Disposal	Other	Yes
Weddell Pediatric Dental Specialists, LLC	Healthcare Provider	5,356	8 Dec 2021	Hacking/IT Incident	Email	No
South Suburban Surgical Suites, LLC	Healthcare Provider	5,340	30 Jun 2023	Hacking/IT Incident	Email	No
Allison Transmission Inc. Health Care Program for Hourly Employees / Wellness Program for Salaried Employees	Business Associate	5,330	10 Aug 2023	Hacking/IT Incident	Network Server	Yes
Adams County Memorial HospitalOpen	Healthcare Provider	5,305	11 May 2026	Hacking/IT Incident	Email	No
Douglas C Morrow ODPC	Healthcare Provider	5,269	28 Dec 2021	Hacking/IT Incident	Network Server	No
Tangoe, Inc.	Health Plan	4,765	25 Sep 2023	Hacking/IT Incident	Network Server	No
Indiana Hemophilia and Thrombosis Center, Inc.	Healthcare Provider	4,750	4 Mar 2022	Hacking/IT Incident	Email	No
Renaissance Life & Health Insurance Company of America	Health Plan	4,727	30 Jul 2021	Hacking/IT Incident	Network Server	Yes
Barrett Eye Care	Healthcare Provider	4,648	19 Jul 2024	Hacking/IT Incident	Network Server	No
Batesville Tool & Die, Inc.	Health Plan	4,549	21 Jul 2023	Hacking/IT Incident	Network Server	No
Southwestern Indiana Regional Council on Aging	Healthcare Provider	4,250	19 May 2021	Hacking/IT Incident	Email	No
Indiana University Health	Healthcare Provider	4,194	22 Sep 2023	Hacking/IT Incident	Network Server	Yes
Eye Group of Southern Indiana	Healthcare Provider	4,002	15 Mar 2022	Hacking/IT Incident	Network Server	No
St. Mary's Health	Healthcare Provider	3,952	5 Mar 2015	Hacking/IT Incident	Email	No
Artistic Family Dental	Healthcare Provider	3,915	25 Feb 2025	Hacking/IT Incident	Network Server	No
Kathalene Keller Riney NP, LLC DBA Life in Motion Family Wellness Center	Healthcare Provider	3,747	12 Aug 2025	Unauthorized Access/Disclosure	Electronic Medical Record	No
Hartson-Kennedy Inc. Group Benefit Plan	Health Plan	3,600	9 Dec 2024	Hacking/IT Incident	Network Server	No
Community Health Network, Inc.	Healthcare Provider	3,600	6 May 2019	Hacking/IT Incident	Email	No
Personal Touch Home Care of Indiana, Inc.	Healthcare Provider	3,593	28 Jan 2020	Hacking/IT Incident	Network Server, Other	Yes
Assurance Health System, LLC	Healthcare Provider	3,565	28 Oct 2022	Hacking/IT Incident	Email	No
Anthem, Inc.	Health Plan	3,525	26 Oct 2016	Unauthorized Access/Disclosure	Email	No
Sycamore Rehabilitation Services, Inc.	Healthcare Provider	3,414	18 Mar 2024	Hacking/IT Incident	Network Server	No
Beacon Health System	Healthcare Provider	3,304	10 Mar 2023	Unauthorized Access/Disclosure	Electronic Medical Record	No
Indiana University	Health Plan	3,266	5 Nov 2012	Theft	Laptop	No
Indiana University	Healthcare Provider	3,266	4 Oct 2011	Theft	Laptop	No
East Central Indiana School Trust	Health Plan	3,259	3 Sep 2019	Hacking/IT Incident	Email	No
Easterseals Northeast IndianaOpen	Healthcare Provider	3,158	16 Feb 2026	Hacking/IT Incident	Network Server	No
Schneck Medical Center	Healthcare Provider	3,131	12 Apr 2013	Unauthorized Access/Disclosure	Other	No
Lincoln National Corporation d/b/a Lincoln Financial	Health Plan	3,070	2 Jun 2026	Unauthorized Access/Disclosure	Paper/Films	No
Logan Community Resources, Inc.	Healthcare Provider	2,900	23 Oct 2012	Hacking/IT Incident	Network Server	No
Lafayette Regional Rehabilitation Hospital	Healthcare Provider	2,861	29 Mar 2024	Hacking/IT Incident	Network Server	Yes
The Arbors Operator, LLC	Healthcare Provider	2,808	18 Nov 2024	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
Erskine Family Dentistry	Healthcare Provider	2,723	21 May 2013	Hacking/IT Incident	Desktop Computer	No
Majestic Care Middletown Assisted Living LLC	Healthcare Provider	2,636	17 Mar 2023	Hacking/IT Incident	Network Server	No
Riverview Health	Healthcare Provider	2,610	28 Feb 2020	Unauthorized Access/Disclosure	Paper/Films	Yes
Advantage Health Solutions, Inc.	Business Associate	2,575	26 Nov 2012	Other	Other	Yes
LittleStar ABA Therapy	Healthcare Provider	2,530	21 Jan 2025	Hacking/IT Incident	Email	No
Lincoln National Life Insurance Company and its affiliate Lincoln Life & Annuity Company of New York	Health Plan	2,468	7 Feb 2020	Hacking/IT Incident	Email	No
ADVANTAGE Health Solutions	Health Plan	2,387	22 Dec 2016	Hacking/IT Incident	Network Server	No
Tom Wood Inc. Health Care Plan	Health Plan	2,235	11 Nov 2021	Hacking/IT Incident	Network Server	No
Franciscan Alliance, Inc.	Healthcare Provider	2,180	24 Jun 2019	Unauthorized Access/Disclosure	Electronic Medical Record	No
Jonathan Noel MD	Healthcare Provider	2,059	8 Sep 2011	Theft	Other, Other Portable Electronic Device	No
Anthem Inc.	Health Plan	2,023	15 Oct 2021	Hacking/IT Incident	Network Server	Yes
Ault Chiropractic Center	Healthcare Provider	2,000	15 Sep 2010	Theft	Desktop Computer, Laptop	No
ADEC, Inc.	Healthcare Provider	1,999	3 Sep 2021	Hacking/IT Incident	Email	No
Crown Point Health Center	Healthcare Provider	1,854	29 Jan 2016	Improper Disposal	Paper/Films	No
Indiana Exceptional Medical care LLC	Healthcare Provider	1,850	20 Aug 2025	Unauthorized Access/Disclosure	Electronic Medical Record	No
St.Vincent Hospital - Indianapolis	Healthcare Provider	1,848	12 Jan 2011	Hacking/IT Incident	Email, Network Server	No
The Trustees of Purdue University	Healthcare Provider	1,711	25 May 2018	Hacking/IT Incident	Desktop Computer	No
Physicians Health Plan of Northern Indiana, Inc.	Health Plan	1,708	18 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
Centerstone of Indiana, Inc.	Healthcare Provider	1,700	4 Aug 2022	Hacking/IT Incident	Email	No
Indiana Health Centers, Inc.	Healthcare Provider	1,697	12 Sep 2017	Theft	Desktop Computer, Laptop	No
Connextions c/o Anthem BCBS	Business Associate	1,678	14 Mar 2013	Theft, Unauthorized Access/Disclosure	Network Server	Yes
Rehabilitation Hospital of Northern Indiana	Healthcare Provider	1,643	29 Mar 2024	Hacking/IT Incident	Network Server	Yes
Pithadia Medical Professional Services, Inc.	Healthcare Provider	1,624	28 Dec 2021	Hacking/IT Incident	Network Server	No
Riverview Health	Healthcare Provider	1,562	25 Oct 2024	Hacking/IT Incident	Network Server	No
Hancock Regional HospitalOpen	Healthcare Provider	1,530	6 Jul 2026	Unauthorized Access/Disclosure	Email	No
Our Sunday Visitor, Inc.	Health Plan	1,508	5 May 2023	Hacking/IT Incident	Network Server	No
Kindred Healthcare Inc d/b/a Kindred Transitional Care and Rehabilitation-Sellersburg	Healthcare Provider	1,504	25 Jul 2012	Theft	Other	No
Jones Chiropractic and Maximum Health	Healthcare Provider	1,500	26 Nov 2013	Theft	Desktop Computer	No
1st Source Bank	Business Associate	1,477	20 Nov 2023	Hacking/IT Incident	Network Server	Yes
Peabody Retirement Community	Healthcare Provider	1,466	14 Oct 2016	Hacking/IT Incident	Email, Network Server	No
The WellPoint Affiliated Covered Entities	Health Plan	1,464	8 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
Washington National Insurance Company	Health Plan	1,458	18 Nov 2016	Theft	Paper/Films	Yes
Indiana University Health, Affiliated Covered Entity	Healthcare Provider	1,446	7 Jan 2025	Hacking/IT Incident	Email	No
Indiana University School of Medicine	Healthcare Provider	1,431	11 Oct 2018	Theft	Paper/Films	No
St.Vincent Physician Network	Healthcare Provider	1,423	26 Jan 2012	Theft, Unauthorized Access/Disclosure	Paper/Films	No
Hopebridge	Healthcare Provider	1,411	31 Aug 2018	Hacking/IT Incident	Email	No
Indiana University Health	Healthcare Provider	1,399	3 Nov 2017	Improper Disposal	Paper/Films	No
Hancock OB/GYN	Healthcare Provider	1,396	12 Aug 2013	Unauthorized Access/Disclosure	Electronic Medical Record	No
School Employees' Benefit Trust	Health Plan	1,371	5 Jul 2024	Hacking/IT Incident	Network Server	Yes
TIC International Corporation ("TIC")	Business Associate	1,362	1 Nov 2022	Hacking/IT Incident	Network Server	Yes
Ferguson Advertising, Inc.	Business Associate	1,361	25 Apr 2014	Hacking/IT Incident	Network Server	Yes
Lafayette Regional Rehabilitation Hospital	Healthcare Provider	1,360	24 Jan 2020	Hacking/IT Incident	Email	No
Compton & Broomhead Dental Center	Healthcare Provider	1,307	23 Nov 2022	Hacking/IT Incident	Email	No
South Bend Orthopaedic Associates Inc	Healthcare Provider	1,272	18 Aug 2017	Theft	Laptop	No
Beacon Health System	Healthcare Provider	1,239	26 May 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Community Health Network, Inc.	Business Associate	1,237	13 Jan 2023	Unauthorized Access/Disclosure	Network Server	Yes
St. Vincent Hospital and Health Care Center, Inc.	Healthcare Provider	1,199	23 Sep 2010	Theft	Laptop	No
Bloomington Regional Rehabilitation Hospital	Healthcare Provider	1,191	29 Mar 2024	Hacking/IT Incident	Network Server	Yes
Indiana University Health	Health Plan	1,191	31 Aug 2023	Hacking/IT Incident	Network Server	Yes
Youth Opportunity Center, Inc.	Healthcare Provider	1,150	14 May 2019	Unauthorized Access/Disclosure	Paper/Films	No
St. Vincent Hospital and Healthcare Inc	Healthcare Provider	1,142	18 Feb 2014	Theft	Laptop	No
Lincoln National Corporation d/b/a Lincoln Financial	Health Plan	1,123	2 May 2025	Hacking/IT Incident	Network Server	Yes
South Western Communications, Inc.	Health Plan	1,115	26 Jul 2024	Hacking/IT Incident	Network Server	No
Amerigroup Iowa, Inc	Business Associate	1,023	3 Jan 2024	Unauthorized Access/Disclosure	Network Server	Yes
KEYSTONE INSURERS GROUP	Business Associate	1,008	6 May 2014	Other	Email	Yes
New Avenues, Inc.	Healthcare Provider	1,000	28 May 2020	Improper Disposal	Paper/Films	Yes
Saint Joseph Regional Medical Center, Inc.	Healthcare Provider	1,000	28 May 2020	Improper Disposal	Paper/Films	Yes
IU Medical Group	Healthcare Provider	1,000	12 Apr 2012	Improper Disposal	Paper/Films	No
Lincoln National Corporation d/b/a/ Lincoln Financial	Health Plan	998	30 Jan 2026	Unauthorized Access/Disclosure	Paper/Films	No
Allied Physicians of Michiana, LLC	Healthcare Provider	976	28 May 2020	Improper Disposal	Paper/Films	Yes
Tom Wood East, Inc.	Health Plan	912	23 Dec 2020	Hacking/IT Incident	Network Server	No
Beacon Health systems, Inc.	Healthcare Provider	900	28 May 2020	Improper Disposal	Paper/Films	Yes
Manor Care Indy (South), LLC.	Healthcare Provider	845	12 Nov 2010	Unauthorized Access/Disclosure	Paper/Films	No
Health and Hospital Corporation of Marion County	Healthcare Provider	792	30 Jan 2026	Unauthorized Access/Disclosure	Email, Laptop	No
Bloomington Meadows Hospital	Healthcare Provider	788	23 Sep 2022	Unauthorized Access/Disclosure	Email	No
Indiana University School of Optometry	Healthcare Provider	757	25 Oct 2011	Theft	Network Server	No
The Southwestern Indiana Regional Council on Aging	Business Associate	757	27 Dec 2010	Theft	Laptop	Yes
St.Vincent Medical Group, Inc.	Healthcare Provider	756	10 Apr 2015	Hacking/IT Incident	Email	No
Boatright Inc.	Healthcare Provider	746	29 Oct 2024	Hacking/IT Incident	Email	No
Apria Healthcare LLC	Healthcare Provider	713	28 Mar 2025	Unauthorized Access/Disclosure	Paper/Films	No
Shiel Sexton	Health Plan	710	27 Jan 2017	Unauthorized Access/Disclosure	Other	Yes
Newburgh Healthcare Residential Center, Inc.Open	Healthcare Provider	700	4 Apr 2025	Hacking/IT Incident	Network Server	No
Blue Cross of California	Health Plan	672	27 Oct 2021	Hacking/IT Incident	Network Server	Yes
Goshen Health System, Inc.	Healthcare Provider	660	14 Feb 2012	Hacking/IT Incident	Other	No
Community Health Network	Healthcare Provider	650	20 Mar 2015	Loss	Paper/Films	No
Managed Health Services	Health Plan	610	1 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Hils Transcription	Business Associate	585	27 Dec 2010	Unauthorized Access/Disclosure	Other	Yes
Wellpoint, Inc.Open	Business Associate	579	7 Oct 2025	Hacking/IT Incident	Network Server	Yes
Managed Health Services	Health Plan	576	3 Jan 2019	Unauthorized Access/Disclosure	Paper/Films	No
Access Counseling LLC	Healthcare Provider	566	14 Oct 2013	Theft	Laptop	No
Anthem Health Plans of Kentucky, Incorporated	Business Associate	537	29 Sep 2022	Hacking/IT Incident	Network Server	Yes
Broadwest Specialty Surgical CenterOpen	Healthcare Provider	536	17 Jun 2025	Hacking/IT Incident	Network Server	Yes
Ashley Industrial Molding, Inc. Employee Welfare Benefit Plan	Business Associate	506	8 Aug 2011	Hacking/IT Incident	Network Server	Yes
Michiana Hematology Oncology, PC	Healthcare Provider	500	29 May 2020	Improper Disposal	Paper/Films	Yes
South Bend Medical Foundation, Inc.	Healthcare Provider	500	28 May 2020	Improper Disposal	Paper/Films	Yes
Valperaiso Fire Department	Health Plan	not given	3 Sep 2013	Theft	Desktop Computer	No

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.