State File MN / HHS OCR Breach Register189 filings, 2010 to 2026Retrieved 28 August 2026

Geography

Minnesota: 189 healthcare breach filings.

Minnesota entities have reported 189 breaches of 500 or more individuals to HHS since 2010, the 14th most of the 52 states and territories on the register, covering 211,719,522 individuals (1st by people affected). 22 are still under investigation. Hacking/IT Incident is the breach type on 60% of them, and network server the most common location (43%).

Filings

189

14th of 52 states and territories

Individuals affected

211,719,522

Median filing 3,159

Largest filing

192,700,000

Change Healthcare, Inc., 2024

Hacking / IT share

60%

67 filings involve a business associate

Direct answer / Minnesota on the HHS portal

The largest Minnesota filing is Change Healthcare, Inc. (192,700,000 individuals, submitted 19 July 2024). The busiest year was 2019 with 24 filings. Healthcare Providers account for 65% of the state's filings. 57 filings of 10,000 or more individuals have their own page; the remaining 132 are listed in the table at the foot of this page.

Section MN.1 / Largest filings

Ten largest Minnesota breaches

#	Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
1	Change Healthcare, Inc.	Business Associate	192,700,000	19 Jul 2024	Hacking/IT Incident	Network Server	Yes
2	Optum360, LLC	Business Associate	11,500,000	1 Jul 2019	Hacking/IT Incident	Network Server	Yes
3	Pension Benefit Information, LLC	Business Associate	1,866,694	14 Jul 2023	Hacking/IT Incident	Network Server	Yes
4	MNGI Digestive Health, PA	Healthcare Provider	767,670	24 Oct 2023	Hacking/IT Incident	Network Server	No
5	Radius Global Solutions	Business Associate	632,204	4 Aug 2023	Hacking/IT Incident	Network Server	Yes
6	Consulting Radiologists LTD.	Healthcare Provider	583,824	14 Jun 2024	Hacking/IT Incident	Network Server	No
7	University of Minnesota Physicians	Healthcare Provider	310,666	30 Mar 2020	Hacking/IT Incident	Email	No
8	Minnesota Department of Human Services	Health Plan	303,965	16 Jan 2026	Unauthorized Access/Disclosure	Network Server	Yes
9	Allina Health	Healthcare Provider	199,389	11 Sep 2020	Hacking/IT Incident	Network Server	Yes
10	PDG, P.A. dba Park Dental	Healthcare Provider	185,606	9 Aug 2024	Hacking/IT Incident	Email	No

Section MN.2 / By year

Minnesota filings by submission year

Each year links to the national year page.

Year	Filings	Individuals affected	Hacking / IT share	Filings with a page
2010	5	23,022	0%	1
2011	4	27,935	0%	1
2012	4	32,311	0%	1
2013	3	12,971	33%	0
2014	13	57,705	8%	2
2015	7	184,755	14%	2
2016	7	15,399	57%	0
2017	6	23,660	50%	1
2018	10	155,261	50%	2
2019	24	11,861,891	79%	11
2020	21	932,264	67%	9
2021	18	386,789	67%	4
2022	6	106,116	83%	3
2023	18	3,454,522	78%	6
2024	12	193,689,321	92%	7
2025	18	260,611	67%	4
2026	13	494,989	92%	3

Section MN.3 / Composition

Breach type, location and who filed

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident114 (60%)

Unauthorized Access/Disclosure53 (28%)

Theft13 (7%)

Loss6 (3%)

Improper Disposal4 (2%)

Other3 (2%)

Unknown1 (1%)

Location of breached information

Network Server81 (43%)

Email54 (29%)

Paper/Films28 (15%)

Laptop14 (7%)

Other8 (4%)

Electronic Medical Record7 (4%)

Other Portable Electronic Device7 (4%)

Desktop Computer5 (3%)

Covered entity type

Healthcare Provider122 (65%)

Business Associate36 (19%)

Health Plan31 (16%)

Section MN.4 / Notification law

What Minnesota law required alongside HIPAA

State notification statute

Minnesota: Minn. Stat. 325E.61

Notice to individuals: In the most expedient time possible and without unreasonable delay
Attorney general threshold: No general AG requirement (reporting agencies at 500+ residents within 48 hours)
Private right of action: No: Only the Minnesota Attorney General may enforce
Penalty: Up to $25,000 per violation; contractual waivers of notification are void

The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.

Minnesota notification law in full HIPAA breach penalties

Section MN.5 / Filing pages

57 filings of 10,000 or more individuals

Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Change Healthcare, Inc.	Business Associate	192,700,000	19 Jul 2024	Hacking/IT Incident	Network Server	Yes
Optum360, LLC	Business Associate	11,500,000	1 Jul 2019	Hacking/IT Incident	Network Server	Yes
Pension Benefit Information, LLC	Business Associate	1,866,694	14 Jul 2023	Hacking/IT Incident	Network Server	Yes
MNGI Digestive Health, PA	Healthcare Provider	767,670	24 Oct 2023	Hacking/IT Incident	Network Server	No
Radius Global Solutions	Business Associate	632,204	4 Aug 2023	Hacking/IT Incident	Network Server	Yes
Consulting Radiologists LTD.	Healthcare Provider	583,824	14 Jun 2024	Hacking/IT Incident	Network Server	No
University of Minnesota Physicians	Healthcare Provider	310,666	30 Mar 2020	Hacking/IT Incident	Email	No
Minnesota Department of Human Services	Health Plan	303,965	16 Jan 2026	Unauthorized Access/Disclosure	Network Server	Yes
Allina Health	Healthcare Provider	199,389	11 Sep 2020	Hacking/IT Incident	Network Server	Yes
PDG, P.A. dba Park Dental	Healthcare Provider	185,606	9 Aug 2024	Hacking/IT Incident	Email	No
Children's Minnesota	Healthcare Provider	160,268	11 Sep 2020	Hacking/IT Incident	Network Server	Yes
Empi Inc and DJO, LLC	Healthcare Provider	160,000	20 Aug 2015	Theft	Laptop	No
Apple Valley Clinic	Healthcare Provider	157,939	26 Mar 2021	Hacking/IT Incident	Network Server	Yes
Community Dental Care, Inc.Open	Healthcare Provider	134,903	28 Mar 2025	Hacking/IT Incident	Network Server	No
Clay County Social Services	Business Associate	123,847	22 Dec 2023	Hacking/IT Incident	Network Server	Yes
Ramsey County	Healthcare Provider	117,905	11 Dec 2018	Hacking/IT Incident	Email	No
TenX Systems, LLC d/b/a ResiDex Software	Business Associate	90,000	7 Jun 2019	Hacking/IT Incident	Network Server	Yes
CCM Health	Healthcare Provider	84,329	12 Mar 2024	Hacking/IT Incident	Network Server	No
Aitkin County Health and Human ServicesOpen	Business Associate	83,114	17 Jun 2026	Hacking/IT Incident	Email	Yes
Minnesota Epilepsy Group, P.A.Open	Healthcare Provider	80,061	5 Jun 2026	Hacking/IT Incident	Network Server	No
Southeastern Minnesota Oral & Maxillofacial Surgery	Healthcare Provider	80,000	22 Nov 2019	Hacking/IT Incident	Network Server	No
Ophthalmology Associates	Healthcare Provider	76,000	11 Nov 2021	Hacking/IT Incident	Electronic Medical Record, Network Server	No
South Country Health Alliance	Health Plan	66,874	31 Dec 2020	Hacking/IT Incident	Email	No
Minnesota Community Care	Healthcare Provider	64,855	8 Jun 2021	Hacking/IT Incident	Network Server	Yes
Fraser Child and Family Center	Healthcare Provider	64,131	2 Aug 2024	Hacking/IT Incident	Network Server	No
Regions Hospital	Healthcare Provider	52,795	4 Sep 2020	Hacking/IT Incident	Network Server	Yes
Douglas County Hospital dba Alomere Health	Healthcare Provider	49,859	3 Jan 2020	Hacking/IT Incident	Email	No
Electromed	Healthcare Provider	47,200	9 Aug 2021	Hacking/IT Incident	Network Server	No
Pediatric Home Respiratory Services, LLC d/b/a Pediatric Home Service	Healthcare Provider	41,792	6 Jan 2025	Hacking/IT Incident	Network Server	No
Associated Eye Care	Healthcare Provider	40,793	8 Jul 2022	Hacking/IT Incident	Network Server	Yes
Reproductive Medicine and Infertility Associates, P.A.	Healthcare Provider	40,000	1 Feb 2019	Hacking/IT Incident	Network Server	No
Dental Specialists of Minnesota, PLLC dba The Dental Specialists	Healthcare Provider	38,442	9 Aug 2024	Hacking/IT Incident	Email	No
Minnesota Epilepsy GroupOpen	Healthcare Provider	38,401	28 Apr 2025	Hacking/IT Incident	Network Server	No
Children's Minnesota	Healthcare Provider	37,942	25 Oct 2019	Unauthorized Access/Disclosure	Network Server	No
Regions Hospital	Healthcare Provider	31,094	24 Oct 2022	Hacking/IT Incident	Network Server	No
Central Minnesota Mental Health Center	Healthcare Provider	28,725	17 Mar 2022	Hacking/IT Incident	Email	No
HealthPartners Inc	Health Plan	27,839	21 Mar 2014	Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	No
People Incorporated	Healthcare Provider	27,500	6 Nov 2020	Hacking/IT Incident	Email	No
Children's Health Care	Healthcare Provider	24,183	10 May 2024	Hacking/IT Incident	Email	No
Episource	Business Associate	23,557	2 Jun 2023	Hacking/IT Incident	Network Server	Yes
St. Croix Hospice	Healthcare Provider	21,407	9 Jul 2019	Hacking/IT Incident	Email	No
North Memorial Health	Healthcare Provider	21,236	30 Sep 2020	Hacking/IT Incident	Network Server	Yes
Minnesota Department of Human Services	Health Plan	20,800	9 Oct 2018	Hacking/IT Incident	Email	No
UnitedHealth Group Health Plan Single Affiliated Covered Entity	Health Plan	20,536	8 May 2019	Unauthorized Access/Disclosure	Network Server	No
UnitedHealth Group health plan single affiliated covered entity	Health Plan	19,100	18 May 2012	Unauthorized Access/Disclosure	Other	No
Solutran	Business Associate	17,728	12 May 2023	Hacking/IT Incident	Network Server	Yes
Family Service Rochester	Healthcare Provider	17,037	17 Feb 2017	Hacking/IT Incident	Network Server	No
UnitedHealth Group health plan single affiliated covered entity	Health Plan	16,291	4 Jun 2010	Other	Paper/Films	No
Fairview Health Services	Healthcare Provider	14,623	27 Sep 2011	Theft	Laptop	No
Nemadji Research Corporation d/b/a California Reimbursement Enterprises	Business Associate	14,591	8 Jul 2019	Hacking/IT Incident	Email	Yes
Riverplace Counseling Center, Inc.	Healthcare Provider	11,639	11 Apr 2019	Hacking/IT Incident	Network Server	No
American Baptist Homes of the Midwest	Healthcare Provider	10,993	6 May 2019	Hacking/IT Incident	Email, Network Server	No
SUPERVALU Group Health Plan	Health Plan	10,946	3 Apr 2015	Hacking/IT Incident	Network Server	Yes
Mille Lacs Health System	Healthcare Provider	10,630	11 May 2020	Hacking/IT Incident	Email	No
Minnesota Department of Human Services	Healthcare Provider	10,263	9 Apr 2019	Hacking/IT Incident	Email	No
StayWell Health Management, LLC	Business Associate	10,024	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Nice Healthcare Management Company, IncOpen	Healthcare Provider	10,000	10 Mar 2025	Hacking/IT Incident	Network Server	Yes

Section MN.6 / All other filings

132 filings below 10,000 individuals

Listed in full from the HHS export, largest first. These filings do not have their own page.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
North Memorial Health Care	Healthcare Provider	9,497	27 Sep 2011	Theft	Laptop	No
Lifesprk	Healthcare Provider	9,000	17 Mar 2020	Hacking/IT Incident	Email	No
County of Ramsey	Healthcare Provider	8,687	29 Jan 2021	Hacking/IT Incident	Network Server	Yes
Bigfork Valley HospitalOpen	Healthcare Provider	8,496	25 Mar 2025	Hacking/IT Incident	Email	No
UnitedHealth Group health plan single affiliated covered entity	Health Plan	6,678	1 Feb 2012	Other	Paper/Films	No
Associates in Psychiatry and Psychology	Healthcare Provider	6,546	18 May 2018	Hacking/IT Incident	Network Server	No
Viverant PT, LLC	Healthcare Provider	6,540	29 Oct 2021	Hacking/IT Incident	Email	No
Patterson Dental Supply/Patterson Companies	Business Associate	6,400	12 Mar 2013	Hacking/IT Incident	Network Server	Yes
Allina Health	Healthcare Provider	6,195	23 Dec 2015	Improper Disposal	Paper/Films	No
PRIME THERAPEUTICS LLC	Business Associate	6,050	23 Aug 2023	Hacking/IT Incident	Network Server	Yes
Northwoods Surgery CenterOpen	Healthcare Provider	5,385	29 Apr 2026	Hacking/IT Incident	Network Server	No
illumifin CorporationOpen	Business Associate	5,385	10 Mar 2026	Hacking/IT Incident	Network Server	Yes
UnitedHealth Group Single Affiliated Covered Entity (SACE)	Health Plan	5,330	4 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Nura PLLCOpen	Healthcare Provider	5,207	21 Nov 2025	Hacking/IT Incident	Email	No
County of Murray dba Murray County Medical CenterOpen	Healthcare Provider	5,073	6 Mar 2026	Hacking/IT Incident	Email	No
UCare Minnesota	Health Plan	4,806	18 Sep 2020	Hacking/IT Incident	Email	No
StayWell Health Management, LLC	Business Associate	4,786	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Associated Dentists-Roseville Office	Healthcare Provider	4,725	18 May 2015	Theft	Laptop	No
Alluma, Inc	Healthcare Provider	4,642	15 Aug 2021	Unauthorized Access/Disclosure	Paper/Films	No
Minnesota Eye Consultants	Healthcare Provider	4,556	16 Apr 2019	Improper Disposal	Paper/Films	No
Medica Central Insurance Company	Health Plan	4,492	11 Dec 2020	Unauthorized Access/Disclosure	Paper/Films	No
StayWell Health Management, LLC	Business Associate	4,487	31 Jul 2014	Hacking/IT Incident	Network Server	Yes
Bassford Remele P.A.	Business Associate	4,435	25 Feb 2025	Hacking/IT Incident	Email	Yes
Minnesota Department of Human Services	Healthcare Provider	4,329	30 Aug 2024	Hacking/IT Incident	Email	No
Minnesota Department of Human Services	Health Plan	4,307	11 Jan 2023	Unauthorized Access/Disclosure	Email	No
Southeastern Minnesota Center for Independent Living, Inc.	Healthcare Provider	4,122	19 Feb 2021	Hacking/IT Incident	Email	No
Family Health Services Minnesota PA	Healthcare Provider	4,000	14 May 2012	Theft	Laptop	No
Thrifty Drug Stores, Inc.	Healthcare Provider	3,958	28 Apr 2021	Hacking/IT Incident	Network Server	Yes
Allina Health	Healthcare Provider	3,807	4 Nov 2013	Unauthorized Access/Disclosure	Electronic Medical Record	No
Minnesota Health Insurance NetworkOpen	Business Associate	3,656	19 Jul 2026	Hacking/IT Incident	Network Server	Yes
Blue Cross Blue Shield of Minnesota	Health Plan	3,640	21 Jul 2026	Hacking/IT Incident	Network Server	Yes
Twin Cities Pain ClinicOpen	Healthcare Provider	3,572	4 Sep 2025	Hacking/IT Incident	Email	No
Miracle-Ear Flagship, LLC	Healthcare Provider	3,560	7 Jul 2023	Hacking/IT Incident	Email	No
Carlton County Public Health and Human ServicesOpen	Healthcare Provider	3,502	25 Apr 2025	Hacking/IT Incident	Email	No
UnitedHealth Group Health Plan Single Affiliated Covered Entity	Health Plan	3,335	4 Feb 2020	Hacking/IT Incident	Network Server	Yes
Winona Agency, Inc.	Business Associate	3,306	6 Apr 2021	Hacking/IT Incident	Email	Yes
CCRM Minneapolis, P.C.	Healthcare Provider	3,280	1 Dec 2017	Hacking/IT Incident	Network Server	No
Mankato Clinic	Healthcare Provider	3,159	28 Dec 2010	Theft	Laptop	No
Fraser	Healthcare Provider	2,890	30 Aug 2019	Hacking/IT Incident	Email	No
Thomas Allen, Inc.	Healthcare Provider	2,803	23 Mar 2022	Hacking/IT Incident	Email	No
Medtronic, Inc.	Healthcare Provider	2,764	10 Jul 2013	Theft	Paper/Films	No
InStep Foot Clinic, P.A.	Healthcare Provider	2,600	11 Oct 2011	Theft	Electronic Medical Record, Laptop	No
Virtual Radiologic Professionals, LLC	Healthcare Provider	2,568	19 Dec 2018	Unauthorized Access/Disclosure	Other	Yes
Patterson Dental, Inc.	Business Associate	2,533	13 Jul 2012	Loss, Unauthorized Access/Disclosure, Unknown	Other Portable Electronic Device	Yes
Elim Care	Healthcare Provider	2,500	7 Jun 2019	Hacking/IT Incident	Network Server	Yes
PrimeWest Health	Health Plan	2,441	29 Dec 2016	Hacking/IT Incident	Network Server	Yes
ViaTech Publishing Solutions, Inc.	Health Plan	2,431	10 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	No
Prime Therapeutics LLCOpen	Business Associate	2,266	25 Aug 2025	Unauthorized Access/Disclosure	Laptop	Yes
United Hospital District, Inc.	Healthcare Provider	2,143	4 Feb 2019	Hacking/IT Incident	Email	No
Optum Financial Services	Business Associate	2,124	13 Nov 2025	Unauthorized Access/Disclosure	Paper/Films	Yes
CentraCare Health System	Healthcare Provider	2,085	12 Jul 2019	Hacking/IT Incident	Network Server	Yes
OptumHealth New Mexico	Health Plan	2,006	18 Nov 2016	Loss	Other Portable Electronic Device	No
Family Health Services MN d/b/a Entira Family Clinics	Healthcare Provider	1,975	2 Mar 2021	Hacking/IT Incident	Network Server	No
Blaine Chiropractic Center	Healthcare Provider	1,945	14 Jul 2016	Hacking/IT Incident	Network Server	No
Bayview Dental	Healthcare Provider	1,938	13 Aug 2019	Hacking/IT Incident	Network Server	No
Mayo Clinic	Healthcare Provider	1,902	22 Mar 2019	Unauthorized Access/Disclosure	Other	No
Minnesota Women's Care, P.A.	Healthcare Provider	1,900	24 Nov 2021	Unauthorized Access/Disclosure	Paper/Films	No
The Facial Pain Center	Healthcare Provider	1,894	9 Aug 2024	Hacking/IT Incident	Email	No
Mayo Clinic	Healthcare Provider	1,869	28 Mar 2025	Unauthorized Access/Disclosure	Email	No
Prime Therapeutics, LLC	Business Associate	1,863	28 Jan 2021	Unauthorized Access/Disclosure	Paper/Films	Yes
Northfield Hospital & Clinics	Healthcare Provider	1,778	25 Nov 2014	Improper Disposal	Paper/Films	No
Gillette Children's Specialty Healthcare	Healthcare Provider	1,766	14 Sep 2020	Hacking/IT Incident	Network Server	Yes
UnitedHealth Group	Health Plan	1,755	15 Mar 2018	Unauthorized Access/Disclosure	Paper/Films	No
StayWell Health Management, LLC	Business Associate	1,746	18 Mar 2014	Unauthorized Access/Disclosure	Network Server	Yes
Mayo Clinic	Healthcare Provider	1,740	8 Sep 2010	Theft	Electronic Medical Record	No
SKR Group, Inc.Open	Business Associate	1,718	26 Jun 2026	Hacking/IT Incident	Network Server	Yes
Medica Health Plans	Health Plan	1,710	15 Apr 2020	Unauthorized Access/Disclosure	Paper/Films	Yes
HealthPartners Administrators, Inc.	Business Associate	1,699	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Mayo Clinic	Healthcare Provider	1,614	5 Oct 2020	Unauthorized Access/Disclosure	Electronic Medical Record	No
Supervalu Pharmacies, Inc.	Healthcare Provider	1,593	24 Jul 2020	Theft	Other, Paper/Films	No
Optum, Inc.	Business Associate	1,584	6 May 2022	Unauthorized Access/Disclosure	Paper/Films	Yes
Liv-On Family Care Center, PA	Healthcare Provider	1,580	1 Dec 2020	Theft	Desktop Computer, Laptop, Other Portable Electronic Device	No
Ecolab Health and Welfare Benefits Plan	Health Plan	1,550	26 Feb 2016	Hacking/IT Incident	Network Server	Yes
StayWell Health Management, LLC	Business Associate	1,511	25 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Beltrami County Health and Human ServicesOpen	Healthcare Provider	1,491	20 Jul 2026	Hacking/IT Incident	Email	No
Minneapolis Clinic of Neurology, Ltd.	Healthcare Provider	1,450	31 Aug 2015	Theft	Laptop	No
Lakewood Health System	Healthcare Provider	1,415	16 Mar 2020	Hacking/IT Incident	Email	No
Itasca County Health & Human Services	Healthcare Provider	1,413	27 Jun 2023	Hacking/IT Incident	Email	No
United Health Group Single Affiliated Covered Entity	Health Plan	1,408	22 Nov 2016	Hacking/IT Incident	Network Server	No
WACOSA	Healthcare Provider	1,380	3 Nov 2023	Hacking/IT Incident	Network Server	No
Essentia Health - Duluth	Healthcare Provider	1,377	10 Jul 2019	Hacking/IT Incident	Email	Yes
University of Minnesota Board of Regents	Healthcare Provider	1,331	7 Oct 2024	Hacking/IT Incident	Email	No
Open Cities Health Center	Healthcare Provider	1,304	5 Jun 2014	Unauthorized Access/Disclosure	Email	No
Fairview Health Services	Healthcare Provider	1,215	14 Apr 2011	Loss	Paper/Films	No
Human Development Center	Healthcare Provider	1,200	22 Mar 2019	Hacking/IT Incident	Email	No
Northwestern Health Sciences University	Healthcare Provider	1,198	21 May 2019	Hacking/IT Incident	Email	No
Mayo Clinic	Healthcare Provider	1,152	3 Nov 2023	Unauthorized Access/Disclosure	Network Server	No
Albany Family Dentistry	Healthcare Provider	1,117	14 Jan 2022	Hacking/IT Incident	Email	No
Minneapolis VA Medical CenterOpen	Healthcare Provider	1,099	24 Jun 2025	Unauthorized Access/Disclosure	Paper/Films	No
UnitedHealthcare Insurance Company	Business Associate	1,097	17 Jul 2010	Other	Paper/Films	Yes
Ridgeview Medical Center	Healthcare Provider	1,074	8 Sep 2017	Unauthorized Access/Disclosure	Email	No
Uponor North America	Health Plan	1,048	8 Jun 2023	Hacking/IT Incident	Network Server	No
Allina Health	Healthcare Provider	1,042	28 Apr 2023	Unauthorized Access/Disclosure	Network Server	No
Dean Health Service Company, LLC (referenced herein as "WellFirst Health")	Business Associate	1,027	28 Jul 2023	Hacking/IT Incident	Network Server	Yes
Dakota County	Healthcare Provider	1,026	12 Apr 2019	Hacking/IT Incident	Email	No
Nystrom & Associates	Healthcare Provider	985	13 Jul 2021	Hacking/IT Incident	Email	No
Riverland Community Health	Healthcare Provider	940	23 Dec 2025	Unauthorized Access/Disclosure	Network Server	Yes
MN Urology	Healthcare Provider	939	18 Sep 2017	Unauthorized Access/Disclosure	Email	No
UnitedHealth Group Health Plan Single Affiliated Covered Entity	Health Plan	934	22 Jan 2020	Unauthorized Access/Disclosure	Paper/Films	Yes
Smile Designs by Sandwick	Healthcare Provider	900	13 Dec 2018	Hacking/IT Incident	Other	No
UnitedHealth Group	Health Plan	896	10 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	No
CHI - Lakewood Health	Healthcare Provider	885	31 Jan 2019	Unauthorized Access/Disclosure	Email	No
VIRTUAL RADIOLOGIC PROFESSIONALS, LLC	Healthcare Provider	846	19 Dec 2018	Hacking/IT Incident	Other	Yes
CentraCare Health System	Healthcare Provider	842	2 Jul 2021	Hacking/IT Incident	Network Server	Yes
Allina Health	Healthcare Provider	838	6 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
Hennepin Healthcare System, Inc. dba Hennepin Healthcare	Healthcare Provider	820	25 Jul 2019	Hacking/IT Incident	Email	Yes
Medica Insurance Company	Health Plan	802	15 Apr 2020	Unauthorized Access/Disclosure	Paper/Films	Yes
HealthPartners Administrators, Inc.	Business Associate	796	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Allina Health System	Healthcare Provider	776	23 Feb 2017	Improper Disposal	Paper/Films	No
UnitedHealth Group Single Affiliated Covered Entity	Health Plan	774	30 Jul 2021	Unauthorized Access/Disclosure	Network Server	No
UnitedHealth Group health plan single affiliated covered entity	Health Plan	735	27 Apr 2010	Theft	Other, Paper/Films	No
Target Corporation Health Plan	Business Associate	719	5 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Allina Health System	Healthcare Provider	715	6 May 2024	Unauthorized Access/Disclosure	Electronic Medical Record	No
HealthPartners Administrators, Inc.	Business Associate	715	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Region 4 South Mental Health Consortium	Healthcare Provider	677	5 Oct 2023	Hacking/IT Incident	Network Server	No
United Health Group Health Plan SACE	Health Plan	666	10 May 2021	Unauthorized Access/Disclosure	Network Server	No
Lakeview Clinic	Healthcare Provider	624	21 Sep 2023	Unauthorized Access/Disclosure	Email	No
Healthland Inc.	Business Associate	614	10 Jun 2018	Unauthorized Access/Disclosure	Other	Yes
Mayo Clinic Health System- Red Wing	Healthcare Provider	601	13 Jul 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Miracle-Ear, Inc. and Amplifon (USA), Inc.	Business Associate	554	28 Dec 2017	Hacking/IT Incident	Email	Yes
Gillette Children's Specialty Healthcare	Healthcare Provider	542	29 Sep 2023	Hacking/IT Incident	Network Server	Yes
Lake of the Woods County Social Services	Healthcare Provider	537	4 Mar 2024	Hacking/IT Incident	Network Server	No
Mankato Clinic	Healthcare Provider	535	16 Sep 2021	Unauthorized Access/Disclosure	Email	No
StayWell Health Management, LLC	Business Associate	520	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Indian Health Board of Minneapolis	Healthcare Provider	503	15 Dec 2025	Unauthorized Access/Disclosure	Network Server	Yes
Cedar Valley ServicesOpen	Healthcare Provider	501	13 Feb 2026	Hacking/IT Incident	Network Server	No
Mower County Health and Human ServicesOpen	Healthcare Provider	501	15 Aug 2025	Hacking/IT Incident	Network Server	No
Minnesota Orthodontics and Dentofacial Orthopedics, P.A.Open	Healthcare Provider	501	5 May 2025	Hacking/IT Incident	Network Server	No
CARE ClinicOpen	Healthcare Provider	500	10 Apr 2026	Hacking/IT Incident	Email	No
Securian Financial	Health Plan	500	25 Mar 2026	Hacking/IT Incident	Network Server	Yes
Madison Healthcare ServicesOpen	Healthcare Provider	500	2 Dec 2025	Hacking/IT Incident	Network Server	No
Minneapolis VA Health Care System	Health Plan	500	17 Jul 2014	Unauthorized Access/Disclosure	Paper/Films	No

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.