State File PA / HHS OCR Breach Register339 filings, 2009 to 2026Retrieved 28 August 2026
Geography
Pennsylvania: 339 healthcare breach filings.
Pennsylvania entities have reported 339 breaches of 500 or more individuals to HHS since 2009, the 6th most of the 52 states and territories on the register, covering 17,081,385 individuals (19th by people affected). 31 are still under investigation. Hacking/IT Incident is the breach type on 67% of them, and network server the most common location (51%).
Filings
339
6th of 52 states and territories
Individuals affected
17,081,385
Median filing 3,905
Largest filing
2,846,039
Connexin Software, Inc., 2022
Hacking / IT share
67%
115 filings involve a business associate
Direct answer / Pennsylvania on the HHS portal
The largest Pennsylvania filing is Connexin Software, Inc. (2,846,039 individuals, submitted 11 November 2022). The busiest year was 2020 with 40 filings. Healthcare Providers account for 70% of the state's filings. 120 filings of 10,000 or more individuals have their own page; the remaining 219 are listed in the table at the foot of this page.
Section PA.1 / Largest filings
Ten largest Pennsylvania breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Connexin Software, Inc. | Business Associate | 2,846,039 | 11 Nov 2022 | |||
| 2 | Geisinger | Healthcare Provider | 1,276,026 | 21 Jun 2024 | |||
| 3 | Iron Mountain Data Products, Inc. (now known as | Business Associate | 800,000 | 19 Jul 2010 | |||
| 4 | Allegheny County | Healthcare Provider | 689,686 | 28 Jul 2023 | |||
| 5 | Risas Dental & Braces | Healthcare Provider | 618,189 | 28 Mar 2024 | |||
| 6 | Maternal and Family Health Services | Healthcare Provider | 461,070 | 8 Aug 2022 | |||
| 7 | Philips Respironics | Business Associate | 457,152 | 4 Mar 2024 | |||
| 8 | Temple University Health System,Inc. | Healthcare Provider | 431,563 | 15 Sep 2023 | |||
| 9 | Philadelphia Corporation for Aging (PCA)Open | Business Associate | 410,491 | 23 Sep 2025 | |||
| 10 | Quantum Imaging and Therapeutics Associates, Inc. | Healthcare Provider | 394,506 | 24 Nov 2021 |
Section PA.2 / By year
Pennsylvania filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2009 | 1 | 943 | 0% | 0 |
| 2010 | 11 | 989,068 | 0% | 4 |
| 2011 | 7 | 64,024 | 0% | 1 |
| 2012 | 5 | 72,402 | 0% | 1 |
| 2013 | 10 | 45,214 | 10% | 1 |
| 2014 | 15 | 60,605 | 7% | 3 |
| 2015 | 6 | 91,240 | 0% | 1 |
| 2016 | 11 | 64,958 | 36% | 3 |
| 2017 | 11 | 411,997 | 45% | 2 |
| 2018 | 11 | 87,397 | 64% | 3 |
| 2019 | 17 | 359,547 | 71% | 4 |
| 2020 | 40 | 1,713,549 | 63% | 19 |
| 2021 | 35 | 1,076,660 | 89% | 19 |
| 2022 | 38 | 4,218,854 | 89% | 14 |
| 2023 | 40 | 3,080,114 | 93% | 19 |
| 2024 | 30 | 3,214,139 | 90% | 10 |
| 2025 | 37 | 1,292,990 | 89% | 11 |
| 2026 | 14 | 237,684 | 79% | 5 |
Section PA.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Hacking/IT Incident228 (67%)
Unauthorized Access/Disclosure56 (17%)
Theft42 (12%)
Loss10 (3%)
Other5 (1%)
Improper Disposal3 (1%)
Location of breached information
Network Server172 (51%)
Email80 (24%)
Paper/Films41 (12%)
Other20 (6%)
Laptop13 (4%)
Electronic Medical Record11 (3%)
Desktop Computer11 (3%)
Other Portable Electronic Device10 (3%)
Covered entity type
Healthcare Provider236 (70%)
Business Associate65 (19%)
Health Plan35 (10%)
Healthcare Clearing House2 (1%)
not given1 (0%)
Section PA.4 / Notification law
What Pennsylvania law required alongside HIPAA
State notification statute
Pennsylvania: 73 Pa. Stat. 2301 et seq.
Breach of Personal Information Notification Act (amended by Act 33 of 2024)
- Notice to individuals
- Without unreasonable delay
- Attorney general threshold
- More than 500 Pennsylvania residents (Without unreasonable delay (online portal))
- Private right of action
- Yes: Treated as an unfair or deceptive practice; consumers may pursue civil suits
- Penalty
- AG enforcement via civil actions, injunctive relief, civil penalties, and restitution
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section PA.5 / Filing pages
120 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section PA.6 / All other filings
219 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| Highmark Inc | Business Associate | 36,600 | 10 Feb 2023 | |||
| University of Pittsburgh Medical Center Health Plan | Health Plan | 18,900 | 5 Feb 2021 | |||
| TheraCom, L.L.C.Open | Healthcare Provider | 9,271 | 8 Oct 2024 | |||
| Altoona Area School District | Health Plan | 9,196 | 11 Apr 2022 | |||
| Harrisburg Endoscopy and Surgery Center | Healthcare Provider | 9,092 | 28 Apr 2017 | |||
| Northeast Philadelphia Vascular Surgeons, P.C. | Healthcare Provider | 8,193 | 27 Mar 2019 | |||
| Dr. Douglas C. Shoenberger, PC | Business Associate | 8,179 | 30 Nov 2022 | |||
| Selected Benefits | Business Associate | 8,100 | 14 Aug 2020 | |||
| Allegheny Heath Network | Healthcare Provider | 8,071 | 26 Jul 2022 | |||
| University of Pittsburgh Student Health Center | Healthcare Provider | 8,000 | 2 Apr 2010 | |||
| Pendurthi Surgical Associates | Business Associate | 7,925 | 30 Nov 2022 | |||
| Lutheran Social Services of South Central Pennsylvania | Healthcare Provider | 7,803 | 20 May 2013 | |||
| Pennsylvania Adult & Teen Challenge | Healthcare Provider | 7,771 | 9 Feb 2021 | |||
| St. Christopher's Hospital for Children | Healthcare Provider | 7,557 | 31 Jul 2020 | |||
| Philips Respironics | Business Associate | 7,539 | 16 Apr 2024 | |||
| Charles Cole Memorial Hospital, d/b/a UPMC Cole | Healthcare Provider | 7,376 | 7 May 2021 | |||
| Tandigm Health | Business Associate | 7,376 | 21 Nov 2018 | |||
| Professional Dental Alliance of Indiana, PLLC | Healthcare Provider | 7,359 | 1 Oct 2021 | |||
| Imagine360, LLC | Business Associate | 6,926 | 17 Jul 2024 | |||
| Peter J. Isaac, D.O. | Business Associate | 6,390 | 30 Nov 2022 | |||
| Professional Dental Alliance of Connecticut, PLLC | Healthcare Provider | 6,237 | 1 Oct 2021 | |||
| Highmark | Health Plan | 6,205 | 29 Mar 2024 | |||
| Altoona Logan Township Mobile Medical Emergency Department Authority | Healthcare Provider | 6,169 | 21 Jun 2024 | |||
| City of Philadelphia | Health Plan | 6,107 | 20 Oct 2023 | |||
| Brodhead Dental Center | Healthcare Provider | 5,872 | 19 Dec 2016 | |||
| Liberty of Oklahoma Corporation | Business Associate | 5,746 | 17 Feb 2022 | |||
| Philips Respironics | Business Associate | 5,576 | 16 Apr 2024 | |||
| Dermatology & Skin Cancer Center | Business Associate | 5,423 | 30 Nov 2022 | |||
| The Children's Hospital of Philadelphia | Healthcare Provider | 5,368 | 23 Oct 2018 | |||
| Nottingham VillageOpen | Healthcare Provider | 5,240 | 22 May 2026 | |||
| Thomas Jefferson University Hospital, Inc. | Healthcare Provider | 5,239 | 20 Jan 2022 | |||
| Senior Choice dba The Atrium; Beacon Ridge; and The Patriot | Healthcare Provider | 5,057 | 23 Jun 2023 | |||
| Saint Mary's Home of Erie | Healthcare Provider | 5,013 | 24 Oct 2025 | |||
| Upper Dublin Family DentistryOpen | Healthcare Provider | 5,000 | 30 May 2025 | |||
| VINCERA IMAGING LLC | Healthcare Provider | 5,000 | 20 Jun 2023 | |||
| VINCERA REHAB LLC | Healthcare Provider | 5,000 | 20 Jun 2023 | |||
| VINCERA SURGERY CENTER | Healthcare Provider | 5,000 | 20 Jun 2023 | |||
| Partners In Nephrology & Endocrinology, P.C. | Healthcare Provider | 5,000 | 14 Mar 2014 | |||
| HCF of Hempfield Inc. ("Hempfield Manor") | Healthcare Provider | 4,744 | 9 Jan 2025 | |||
| David A. Nover, M.D., P.C.Open | Healthcare Provider | 4,703 | 31 Jul 2025 | |||
| Patriot Growth Insurance Services, LLC | Business Associate | 4,614 | 21 Jul 2022 | |||
| VPS Medical PLLCOpen | Healthcare Provider | 4,600 | 13 Feb 2026 | |||
| Lehigh Valley Women's Medical Specialties, P.C. | Business Associate | 4,535 | 30 Nov 2022 | |||
| Ellen M. Field, M.D. | Business Associate | 4,438 | 30 Nov 2022 | |||
| Drexel Medicine | Healthcare Provider | 4,340 | 7 Aug 2019 | |||
| Professional Dental Alliance of Texas, PLLC | Healthcare Provider | 4,235 | 1 Oct 2021 | |||
| Mercy Surgical Dressing Group, Inc.Open | Business Associate | 4,159 | 16 May 2025 | |||
| Union County Children and Youth Services | Healthcare Provider | 4,157 | 13 May 2025 | |||
| Washington Health System Greene | Healthcare Provider | 4,145 | 1 Dec 2017 | |||
| Lycoming-Clinton Joinder Board Programs | Business Associate | 3,905 | 8 Sep 2020 | |||
| Cancer Treatment Centers of America (CTCA) at Eastern Regional Medical Center | Healthcare Provider | 3,904 | 12 Jul 2019 | |||
| TMG Health | Business Associate | 3,794 | 5 Apr 2013 | |||
| Temple University Physicians | Healthcare Provider | 3,780 | 5 Sep 2014 | |||
| Familylinks Inc. | Healthcare Provider | 3,775 | 12 Nov 2024 | |||
| Partners For Quality, Inc. | Healthcare Provider | 3,673 | 19 Apr 2019 | |||
| The Williamsport Home | Healthcare Provider | 3,660 | 23 Jun 2023 | |||
| Bible Fellowship Church Homes, Inc. dba Fellowship Community | Healthcare Provider | 3,500 | 18 Feb 2022 | |||
| Abington Memorial Hospital dba Jefferson Abington Hospital | Healthcare Provider | 3,475 | 20 Jan 2022 | |||
| Allegheny County, PA | Health Plan | 3,394 | 13 Mar 2020 | |||
| Simpson Senior Services, Inc. | Healthcare Provider | 3,259 | 31 Dec 2020 | |||
| Equilibria Mental Health ServicesOpen | Healthcare Provider | 3,232 | 20 Jul 2025 | |||
| Liberty Resources, Inc. | Healthcare Provider | 3,183 | 17 Aug 2012 | |||
| Thomas Jefferson University Hospitals, Inc. | Healthcare Provider | 3,150 | 14 Oct 2011 | |||
| Erie Indemnity Company Group Dental Assistance Plan | Health Plan | 3,122 | 12 Feb 2024 | |||
| AmerisourceBergen Specialty Group, LLC | Healthcare Provider | 3,102 | 31 May 2024 | |||
| Geisinger Bloomsburg Hospital | Healthcare Provider | 3,101 | 23 Jan 2014 | |||
| Cosmetic Surgery Specialists, P.C. | Healthcare Provider | 3,000 | 23 Jul 2019 | |||
| Einstein Healthcare Network | Healthcare Provider | 2,939 | 1 Apr 2016 | |||
| HCF of Fairview Inc. ("Fairview Manor") | Healthcare Provider | 2,935 | 9 Jan 2025 | |||
| Geisinger Wyoming Valley Medical Center | Healthcare Provider | 2,928 | 28 Dec 2010 | |||
| Robert D. Chatlos DMD & Assoc | Business Associate | 2,900 | 18 Oct 2015 | |||
| Rite Aid Corporation | Healthcare Provider | 2,900 | 7 Dec 2011 | |||
| Geisinger Health Plan | Health Plan | 2,872 | 28 Feb 2021 | |||
| HCF of Edinboro Inc. ("Edinboro Manor") | Healthcare Provider | 2,844 | 9 Jan 2025 | |||
| Geisinger Health Plan | Health Plan | 2,814 | 7 Sep 2016 | |||
| Schuylkill Health System LVHN | Healthcare Provider | 2,810 | 4 Oct 2013 | |||
| A-Family Dental Care Center PC | Healthcare Provider | 2,800 | 16 Aug 2023 | |||
| Henry Rossi & Company, LLPOpen | Business Associate | 2,720 | 2 Jun 2026 | |||
| HCF of Warren Inc. ("Warren Manor") | Healthcare Provider | 2,709 | 9 Jan 2025 | |||
| Intercommunity Action Inc. | Healthcare Provider | 2,680 | 26 Sep 2025 | |||
| HCF of Corry Inc. ("Corry Manor") | Healthcare Provider | 2,620 | 9 Jan 2025 | |||
| Highmark Inc. | Business Associate | 2,589 | 8 Jul 2014 | |||
| MaryAnne Freeman Brndjar, DO, PC | Business Associate | 2,491 | 30 Nov 2022 | |||
| Indian Creek Foundation | Healthcare Provider | 2,405 | 13 Sep 2021 | |||
| Temple University Health System | Healthcare Provider | 2,399 | 25 Jul 2019 | |||
| Independence Blue Cross | Business Associate | 2,393 | 2 Jul 2020 | |||
| Reconstructive Orthopaedic Associates II, P.C. d/b/a Rothman Institute | Healthcare Provider | 2,350 | 3 Oct 2013 | |||
| Rite Aid Corporation | Healthcare Provider | 2,345 | 3 Jun 2015 | |||
| Reimbursement Technologies, Inc. | Healthcare Clearing House | 2,300 | 31 Oct 2013 | |||
| UPMC | Healthcare Provider | 2,259 | 15 May 2015 | |||
| Somerset County Children and Youth Services | Healthcare Provider | 2,251 | 5 Sep 2025 | |||
| Acts Retirement Services, Inc. and Affiliates | Healthcare Provider | 2,236 | 15 Jul 2022 | |||
| Recovery Centers of America | Healthcare Provider | 2,220 | 30 Jun 2023 | |||
| PA Dept. of Human Services | Healthcare Provider | 2,130 | 16 Jul 2018 | |||
| Lyons Companies | Business Associate | 1,982 | 23 Aug 2019 | |||
| Keystone First | Health Plan | 1,965 | 2 Jan 2024 | |||
| Moses Taylor Hospital | Healthcare Provider | 1,905 | 27 Apr 2020 | |||
| Jefferson Health Plans | Health Plan | 1,855 | 18 May 2026 | |||
| Reading Health System | Healthcare Provider | 1,845 | 29 Apr 2014 | |||
| Penn State Milton S. Hershey Medical Center | Healthcare Provider | 1,801 | 6 Jun 2014 | |||
| HM Health Solutions | Business Associate | 1,798 | 17 Sep 2020 | |||
| Lancaster Orthopedic Group | Healthcare Provider | 1,784 | 26 May 2023 | |||
| HCF of Sweden Valley Inc. ("Sweden Valley Manor") | Healthcare Provider | 1,768 | 9 Jan 2025 | |||
| Vantage Holding Company, LLC | Healthcare Provider | 1,762 | 14 Jan 2022 | |||
| Devereux Advanced Behavioral Health | Healthcare Provider | 1,758 | 14 Sep 2020 | |||
| Worldwide Insurance Services, LLC | Business Associate | 1,692 | 30 Apr 2018 | |||
| Achievement Center of LECOM Health | Healthcare Provider | 1,671 | 30 Apr 2021 | |||
| VARO Healthcare | Business Associate | 1,667 | 7 Oct 2014 | |||
| The Sargent's Group | Business Associate | 1,650 | 9 Sep 2022 | |||
| Byham's Insurance Services Inc. | Healthcare Clearing House | 1,600 | 27 Jun 2019 | |||
| HCF of Bradford Inc. ("Bradford Manor") | Healthcare Provider | 1,565 | 9 Jan 2025 | |||
| Human Services, Inc. | Healthcare Provider | 1,559 | 18 Nov 2019 | |||
| Duke LifePoint Conemaugh Memorial Medical Center | Healthcare Provider | 1,551 | 15 May 2015 | |||
| Macoby Street Operations LLC d/b/a Pennsburg Manor | Healthcare Provider | 1,547 | 10 Jan 2023 | |||
| University of Pittsburgh Medical Center | Healthcare Provider | 1,533 | 26 Jun 2023 | |||
| Allegheny County, Pennsylvania | Business Associate | 1,505 | 22 Sep 2023 | |||
| Familylinks | Healthcare Provider | 1,494 | 4 Mar 2022 | |||
| City of Philadelphia | Health Plan | 1,458 | 19 Jul 2019 | |||
| KidsPeace | Healthcare Provider | 1,456 | 19 Sep 2016 | |||
| Service Access & Management, Inc. | Healthcare Provider | 1,450 | 2 Sep 2024 | |||
| Clinical Practices of the University of PennsylvaniaOpen | Healthcare Provider | 1,432 | 30 Jun 2025 | |||
| Herron Business Law | Business Associate | 1,419 | 20 Nov 2020 | |||
| Limbach Facility Services LLC Group Benefit Plan | Health Plan | 1,392 | 22 Jun 2023 | |||
| Indiana Regional Medical Center | Healthcare Provider | 1,388 | 9 May 2011 | |||
| Thomas Jefferson University Hospital | Business Associate | 1,346 | 22 Jul 2021 | |||
| Philips Respironics | Business Associate | 1,338 | 16 Apr 2024 | |||
| Pennsylvania Health & Wellness | Health Plan | 1,325 | 7 Jun 2021 | |||
| Progressions Behavioral Health Services, Inc. | Healthcare Provider | 1,303 | 25 Jun 2018 | |||
| CardioNet, Inc | Healthcare Provider | 1,300 | 10 Jan 2012 | |||
| Holy Redeemer Ambulatory Surgical Center | Healthcare Provider | 1,295 | 11 Dec 2020 | |||
| UPMC | Healthcare Provider | 1,279 | 27 Nov 2013 | |||
| Mars Area School District | Health Plan | 1,270 | 24 Apr 2023 | |||
| Cranberry Township Emergency Medical Service | Healthcare Provider | 1,247 | 7 Aug 2023 | |||
| UPMC Susquehanna | Healthcare Provider | 1,208 | 15 Nov 2017 | |||
| WAYNE MEMORIAL HOSPITAL | Healthcare Provider | 1,184 | 18 Jan 2013 | |||
| Genesis Rehabilitation Services | Healthcare Provider | 1,167 | 1 Nov 2013 | |||
| Herr Foods, Inc. | Healthcare Provider | 1,164 | 19 Sep 2025 | |||
| NADG Hopewell, Inc. | Healthcare Provider | 1,143 | 1 Oct 2021 | |||
| Philips Respironics | Business Associate | 1,125 | 15 Mar 2024 | |||
| Tobii Dynavox | Healthcare Provider | 1,098 | 14 May 2024 | |||
| Gair Medical Transcription Services, Inc. | Business Associate | 1,085 | 15 Dec 2010 | |||
| WAREHOUSE EMPLOYEES LOCAL 169 CONTRIBUTING EMPLOYERS HEALTH & WELFARE FUND | Health Plan | 1,061 | 11 Jun 2024 | |||
| Penn Medicine | Healthcare Provider | 1,050 | 2 Jan 2018 | |||
| THE CARING HEALTHCARE NETWORK, LLC | Healthcare Provider | 1,019 | 9 May 2025 | |||
| CashFlow Solutions, LLC | Healthcare Provider | 1,007 | 28 Jan 2026 | |||
| Lebanon VA Medical Center | Healthcare Provider | 1,002 | 16 Jan 2019 | |||
| Center for Minimmally Invasive Bariatric and General Surgery | Healthcare Provider | 992 | 5 Aug 2016 | |||
| North Penn Comprehensive Health Services d.b.a Laurel Health CentersOpen | Healthcare Provider | 991 | 12 Sep 2025 | |||
| Lake Psychological Services | Healthcare Provider | 987 | 14 Mar 2025 | |||
| The StayWell Company, LLC | Business Associate | 971 | 26 Jun 2020 | |||
| Perseus House, Inc.Open | Healthcare Provider | 969 | 20 Feb 2026 | |||
| Specialty Dental Partners of Philadelphia, PLLC.- DBA Rich Orthodontics | Healthcare Provider | 960 | 23 Mar 2017 | |||
| Refresh Mental Health d/b/a Springfield Psychological | Healthcare Provider | 948 | 18 Jun 2021 | |||
| The Children's Hospital of Philadelphia | Healthcare Provider | 943 | 24 Nov 2009 | |||
| Aramark Healthcare Support Services, LLC | Business Associate | 937 | 24 Jun 2010 | |||
| Phoenixville Hospital | Healthcare Provider | 934 | 7 Jul 2022 | |||
| 225 Evergreen Road Operations LLC | Healthcare Provider | 931 | 10 Jan 2023 | |||
| Penn Medicine | Healthcare Provider | 917 | 21 May 2019 | |||
| SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund | Health Plan | 911 | 21 Dec 2018 | |||
| Crossroads Technologies, Inc. | Business Associate | 897 | 27 Mar 2020 | |||
| Easton Cardiovascular Associates | Business Associate | 883 | 30 Nov 2022 | |||
| Premier Medical Associates | Healthcare Provider | 876 | 15 Sep 2017 | |||
| The Rothman Orthopaedic Institute | Healthcare Provider | 874 | 2 Jun 2022 | |||
| Kirkbride Center | Healthcare Provider | 860 | 19 Nov 2014 | |||
| RXN, Inc. d/b/a Lancaster Pharmacy | Healthcare Provider | 856 | 10 Dec 2020 | |||
| York County | Healthcare Provider | 841 | 20 Nov 2024 | |||
| Keystone/AmeriHealth Mercy Health Plans | Health Plan | 808 | 30 Dec 2010 | |||
| Geisinger Wyoming Valley Medical Center | Healthcare Provider | 805 | 18 May 2020 | |||
| Keystone Rural Health Consortia, Inc. | Healthcare Provider | 800 | 24 May 2016 | |||
| Grane Supply, Inc. | Healthcare Provider | 798 | 1 Aug 2023 | |||
| CHC Solutions, Inc. | Healthcare Provider | 794 | 13 Mar 2025 | |||
| Charles Cole Memorial Hospital | Healthcare Provider | 790 | 13 Jul 2018 | |||
| Penn Foundation | Healthcare Provider | 768 | 29 Jun 2021 | |||
| Shore Gardens Rehabilitation and Nursing Center, LLCOpen | Healthcare Provider | 755 | 6 Apr 2026 | |||
| Jefferson PA Heart and Vascular | Healthcare Provider | 755 | 18 Sep 2024 | |||
| Gateway Health Plan LP | Health Plan | 753 | 14 Nov 2019 | |||
| WellSpan Health | Health Plan | 732 | 23 Mar 2017 | |||
| CardioNet, Inc. | Healthcare Provider | 728 | 27 Feb 2012 | |||
| Adams County Children and Youth Services | Healthcare Provider | 722 | 24 Mar 2023 | |||
| UPMC Health Plan | Health Plan | 722 | 2 Jul 2015 | |||
| Geisinger Health | Healthcare Provider | 717 | 23 Sep 2020 | |||
| 1020 South Main Street Operations LLC | Healthcare Provider | 702 | 10 Jan 2023 | |||
| Temple Physicians Inc. | Healthcare Provider | 694 | 13 Jan 2014 | |||
| Cedarbrook Senior Care and Rehabilitation / County of Lehigh | Healthcare Provider | 688 | 24 Jan 2020 | |||
| UPMCOpen | Healthcare Provider | 687 | 14 Mar 2026 | |||
| Allies for Health + Wellbeing | Healthcare Provider | 680 | 30 Jan 2024 | |||
| Bonney Forge Corporation | Health Plan | 672 | 18 Mar 2024 | |||
| University of Pennsylvania Health System | Healthcare Provider | 661 | 16 Jul 2014 | |||
| Susquehanna Health | Healthcare Provider | 657 | 27 Mar 2014 | |||
| Behavioral Health Alliance of Rural Pennsylvania | Health Plan | 642 | 16 Aug 2024 | |||
| Diamond Pharmacy | Healthcare Provider | 616 | 10 Dec 2020 | |||
| Pennsylvania Hospitalist Group, LLC | Healthcare Provider | 615 | 16 Sep 2025 | |||
| UnitedHealthcare Community Plan of Pennsylvania | Business Associate | 614 | 27 Dec 2017 | |||
| Albert Einstein Healthcare Network | Healthcare Provider | 613 | 30 Nov 2010 | |||
| Krapf Group | Health Plan | 610 | 19 Jan 2021 | |||
| Professional Dental Alliance of Massachusetts | Healthcare Provider | 607 | 1 Oct 2021 | |||
| Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle Center | Healthcare Provider | 602 | 3 Mar 2025 | |||
| Supportive Concepts for Families, Inc. | Healthcare Provider | 593 | 13 Feb 2014 | |||
| Independence Blue Cross | Health Plan | 591 | 21 Jan 2022 | |||
| Thomas Jefferson University Hospitals | Healthcare Provider | 590 | 30 Apr 2012 | |||
| FIRST PRIORITY LIFE INSURANCE COMPANY | Business Associate | 579 | 28 Sep 2011 | |||
| Penn Treaty Network America Insurance Company | Health Plan | 560 | 3 Aug 2010 | |||
| NU House Calls, PC | Business Associate | 552 | 30 Nov 2022 | |||
| 26th & Lehigh Pharmacy | Healthcare Provider | 549 | 10 Dec 2020 | |||
| Wellness Pharmacy | Healthcare Provider | 545 | 10 Dec 2020 | |||
| Washington Health System | Healthcare Provider | 544 | 2 Dec 2016 | |||
| Center for Urologic Care of Berks COOpen | Healthcare Provider | 543 | 26 Nov 2025 | |||
| Lebanon Cardiology Associates, PC | Healthcare Provider | 537 | 14 Nov 2016 | |||
| Ledet Family Chiropractic Cener | Healthcare Provider | 530 | 9 Jul 2017 | |||
| Lancaster General Medical Group | Healthcare Provider | 527 | 4 Mar 2013 | |||
| Yardley Dermatology Associates, PC | Healthcare Provider | 523 | 21 Mar 2023 | |||
| Wilkes-Barre General Hospital | Healthcare Provider | 518 | 27 Apr 2020 | |||
| Department of Human Services, Commonwealth of Pennsylvania | Health Plan | 517 | 7 Sep 2017 | |||
| Highmark, Inc. | Health Plan | 511 | 30 Jun 2022 | |||
| Bevel Health Medical GroupOpen | Healthcare Provider | 510 | 18 Aug 2025 | |||
| AllOne Health Management Solutions, Inc. | Business Associate | 507 | 23 Sep 2011 | |||
| Devereux FoundationOpen | Healthcare Provider | 501 | 8 Jan 2026 | |||
| Mary B. Toporcer, MD, P.C.Open | Healthcare Provider | 501 | 28 May 2025 | |||
| Lankenau Medical Center | Healthcare Provider | 500 | 17 Oct 2011 |
Index / Other states
Every state on the register
AlabamaAL
98
AlaskaAK
32
ArizonaAZ
164
ArkansasAR
92
CaliforniaCA
776
ColoradoCO
139
ConnecticutCT
144
DelawareDE
31
District of ColumbiaDC
33
FloridaFL
463
GeorgiaGA
226
HawaiiHI
22
IdahoID
29
IllinoisIL
358
IndianaIN
200
IowaIA
98
KansasKS
80
KentuckyKY
124
LouisianaLA
66
MaineME
37
MarylandMD
170
MassachusettsMA
241
MichiganMI
238
MinnesotaMN
189
MississippiMS
55
MissouriMO
164
MontanaMT
36
NebraskaNE
60
NevadaNV
55
New HampshireNH
38
New JerseyNJ
174
New MexicoNM
57
New YorkNY
511
North CarolinaNC
207
North DakotaND
19
OhioOH
276
OklahomaOK
80
OregonOR
120
Puerto RicoPR
32
Rhode IslandRI
41
South CarolinaSC
86
South DakotaSD
15
TennesseeTN
196
TexasTX
633
UtahUT
68
VermontVT
15
VirginiaVA
157
WashingtonWA
185
West VirginiaWV
47
WisconsinWI
126
WyomingWY
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.