Geography
Nevada: 55 healthcare breach filings.
Nevada entities have reported 55 breaches of 500 or more individuals to HHS since 2010, the 37th most of the 52 states and territories on the register, covering 12,507,230 individuals (23rd by people affected). 7 are still under investigation. Hacking/IT Incident is the breach type on 56% of them, and network server the most common location (55%).
Filings
55
37th of 52 states and territories
Individuals affected
12,507,230
Median filing 3,898
Largest filing
9,302,588
Perry Johnson & Associates, Inc. dba PJ&A, 2023
Hacking / IT share
56%
14 filings involve a business associate
Direct answer / Nevada on the HHS portal
The largest Nevada filing is Perry Johnson & Associates, Inc. dba PJ&A (9,302,588 individuals, submitted 3 November 2023). The busiest year was 2021 with 9 filings. Healthcare Providers account for 84% of the state's filings. 20 filings of 10,000 or more individuals have their own page; the remaining 35 are listed in the table at the foot of this page.
Section NV.1 / Largest filings
Ten largest Nevada breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Perry Johnson & Associates, Inc. dba PJ&A | Business Associate | 9,302,588 | 3 Nov 2023 | |||
| 2 | University Medical Center of Southern Nevada | Healthcare Provider | 1,300,000 | 13 Aug 2021 | |||
| 3 | Absolute Dental Group, LLCOpen | Business Associate | 1,223,635 | 2 May 2025 | |||
| 4 | Laboratory Medicine Consultants, Ltd. | Healthcare Provider | 140,590 | 25 Jul 2019 | |||
| 5 | Renown Health | Healthcare Provider | 65,181 | 22 Jun 2021 | |||
| 6 | OB-GYN Associates, Ltd. dba OBGYN AssociatesOpen | Healthcare Provider | 62,238 | 6 Oct 2025 | |||
| 7 | Nevada Orthopedic & Spine Center | Healthcare Provider | 50,000 | 1 Feb 2021 | |||
| 8 | Prominence Health Plan | Health Plan | 45,380 | 18 Jun 2021 | |||
| 9 | Air Methods, LLC | Healthcare Provider | 34,063 | 12 Jan 2024 | |||
| 10 | M2ComSys Inc. | Business Associate | 32,151 | 8 Aug 2013 |
Section NV.2 / By year
Nevada filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2010 | 2 | 8,033 | 0% | 0 |
| 2012 | 3 | 7,265 | 33% | 0 |
| 2013 | 2 | 33,634 | 0% | 1 |
| 2014 | 1 | 12,000 | 0% | 1 |
| 2015 | 3 | 22,944 | 0% | 1 |
| 2016 | 1 | 3,000 | 0% | 0 |
| 2017 | 3 | 16,394 | 67% | 1 |
| 2018 | 6 | 14,015 | 33% | 0 |
| 2019 | 5 | 175,924 | 40% | 2 |
| 2020 | 2 | 17,324 | 50% | 1 |
| 2021 | 9 | 1,475,246 | 89% | 4 |
| 2022 | 4 | 31,283 | 75% | 2 |
| 2023 | 2 | 9,307,210 | 100% | 1 |
| 2024 | 6 | 54,932 | 83% | 2 |
| 2025 | 5 | 1,326,805 | 100% | 4 |
| 2026 | 1 | 1,221 | 0% | 0 |
Section NV.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section NV.4 / Notification law
What Nevada law required alongside HIPAA
State notification statute
Nevada: Nev. Rev. Stat. 603A.010 et seq.
- Notice to individuals
- In the most expedient time possible and without unreasonable delay
- Attorney general threshold
- No AG notification requirement
- Private right of action
- No: No PROA for notification failures; NRS 603A.900 allows damages for reasonable-security failures
- Penalty
- Enforced through the Deceptive Trade Practices Act; injunctive relief, civil penalties, restitution
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section NV.5 / Filing pages
20 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section NV.6 / All other filings
35 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| Children's Heart Center | Healthcare Provider | 8,791 | 3 Apr 2015 | |||
| Nevada Health Centers, Inc. | Healthcare Provider | 7,937 | 5 Feb 2021 | |||
| University Health System | Healthcare Provider | 7,526 | 22 Jun 2010 | |||
| Ecco Health, LLC | Business Associate | 5,713 | 14 Sep 2012 | |||
| Platinum Hospitalists LLP | Healthcare Provider | 5,535 | 27 May 2022 | |||
| Roseman University of Health Sciences | Healthcare Provider | 4,622 | 6 Sep 2023 | |||
| Western Pathology | Healthcare Provider | 4,079 | 25 Jul 2019 | |||
| BEE Reno Dental, LLC | Healthcare Provider | 3,898 | 20 Dec 2017 | |||
| Cambridge Dental Consulting Group | Business Associate | 3,758 | 9 May 2018 | |||
| J.A. Stokes Ltd. | Healthcare Provider | 3,200 | 5 Sep 2018 | |||
| Effortless Office Enterprises, LLCOpen | Business Associate | 3,112 | 20 Dec 2024 | |||
| The Finley Center | Healthcare Provider | 3,000 | 20 Oct 2016 | |||
| Battle Mountain General Hospital | Healthcare Provider | 2,767 | 21 Mar 2024 | |||
| Dignity Health Nevada St. Rose Dominican Hospital | Healthcare Provider | 2,652 | 8 Jan 2024 | |||
| Gastroenterology Consultants Ltd | Healthcare Provider | 2,500 | 6 Jan 2021 | |||
| Comprehensive Cancer Centers of Nevada | Healthcare Provider | 2,251 | 16 Jul 2019 | |||
| Dignity Health St. Rose Dominican Hospitals-DeLIma | Healthcare Provider | 2,174 | 10 May 2018 | |||
| Raymond Mark Turner, M.D. | Healthcare Provider | 2,153 | 26 Feb 2015 | |||
| Dignity Health St. Rose Dominican Hospitals - Siena | Healthcare Provider | 2,098 | 10 May 2018 | |||
| Huntridge Family Clinic | Healthcare Provider | 2,000 | 18 Jun 2019 | |||
| University Medical Center of Southern Nevada | Healthcare Provider | 1,861 | 17 Nov 2022 | |||
| University Medical Center of Southern Nevada | Healthcare Provider | 1,833 | 31 Mar 2021 | |||
| Dignity Health St. Rose Dominican Hospitals - San Martin | Healthcare Provider | 1,764 | 10 May 2018 | |||
| University of Nevada School of Medicine | Healthcare Provider | 1,483 | 8 Jan 2013 | |||
| Nutan K. Parikh, M.D., Ltd., A Professional Corporation dba Las Vegas Cancer Center | Healthcare Provider | 1,300 | 26 Oct 2021 | |||
| University Medical Center of Southern NevadaOpen | Healthcare Provider | 1,221 | 28 Mar 2026 | |||
| Compassion Care Hospice Las Vegas, LLC | Healthcare Provider | 1,128 | 14 Dec 2017 | |||
| Washoe Barton Medical Clinic d/b/a Carson Valley Medical Center | Healthcare Provider | 1,115 | 24 May 2021 | |||
| The Pediatric Endocrinology and Diabetes Specialists | Healthcare Provider | 1,021 | 18 Jan 2018 | |||
| Washoe County School District | Health Plan | 1,017 | 30 Aug 2024 | |||
| Sierra Plastic Surgery | Healthcare Provider | 800 | 5 Sep 2012 | |||
| North Lake Tahoe Fire Protection District, Privacy Manager Breach | Healthcare Provider | 752 | 13 Dec 2012 | |||
| VA Sierra Nevada Health Care System | Healthcare Provider | 702 | 25 Mar 2020 | |||
| LabCorp Patient Service Center | Healthcare Provider | 507 | 10 Sep 2010 | |||
| La Perouse, LLCOpen | Business Associate | 501 | 2 Sep 2025 |
Index / Other states
Every state on the register
98
32
164
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
38
174
57
511
207
19
276
80
120
339
32
41
86
15
196
633
68
15
157
185
47
126
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.