Geography
Puerto Rico: 32 healthcare breach filings.
Puerto Rico entities have reported 32 breaches of 500 or more individuals to HHS since 2010, the 45th most of the 52 states and territories on the register, covering 1,712,827 individuals (42nd by people affected). 0 are still under investigation. Theft is the breach type on 78% of them, and laptop the most common location (25%).
Filings
32
45th of 52 states and territories
Individuals affected
1,712,827
Median filing 7,911
Largest filing
475,000
Puerto Rico Department of Health - Triple S Management Corp., 2010
Hacking / IT share
0%
18 filings involve a business associate
Direct answer / Puerto Rico on the HHS portal
The largest Puerto Rico filing is Puerto Rico Department of Health - Triple S Management Corp. (475,000 individuals, submitted 4 November 2010). The busiest year was 2014 with 9 filings. Business Associates account for 50% of the state's filings. 12 filings of 10,000 or more individuals have their own page; the remaining 20 are listed in the table at the foot of this page.
Section PR.1 / Largest filings
Ten largest Puerto Rico breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Puerto Rico Department of Health - Triple S Management Corp. | Health Plan | 475,000 | 4 Nov 2010 | |||
| 2 | Triple-S Salud, Inc. - Breach Case#2 | Health Plan | 398,000 | 24 Jan 2014 | |||
| 3 | Triple-S Salud, Inc. | Health Plan | 398,000 | 18 Nov 2010 | |||
| 4 | Medical Card System/MCS-HMO/MCS Advantage/MCS Life | Business Associate | 115,000 | 9 Nov 2010 | |||
| 5 | Triple-S Salud | Health Plan | 56,853 | 29 May 2014 | |||
| 6 | Administracion de Seguros de Salud - Triple S Salud Inc (BA) | Business Associate | 46,473 | 15 Apr 2014 | |||
| 7 | MMM Healthcare, Inc. | Healthcare Provider | 32,390 | 9 May 2011 | |||
| 8 | T&P Consulting, INC. d/b/a Quantum Health Consulting | Business Associate | 27,098 | 12 Mar 2012 | |||
| 9 | PMC Medicare Choice | Health Plan | 24,361 | 9 May 2011 | |||
| 10 | American Health Inc. | Health Plan | 17,776 | 3 Apr 2014 |
Section PR.2 / By year
Puerto Rico filings by submission year
Each year links to the national year page.
Section PR.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section PR.4 / Notification law
What Puerto Rico law required alongside HIPAA
State notification statute
Puerto Rico is outside the site's 50-state statute table. The HIPAA Breach Notification Rule applied regardless: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
HIPAA breach penalties and the 60-day ruleSection PR.5 / Filing pages
12 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| Puerto Rico Department of Health - Triple S Management Corp. | Health Plan | 475,000 | 4 Nov 2010 | |||
| Triple-S Salud, Inc. - Breach Case#2 | Health Plan | 398,000 | 24 Jan 2014 | |||
| Triple-S Salud, Inc. | Health Plan | 398,000 | 18 Nov 2010 | |||
| Medical Card System/MCS-HMO/MCS Advantage/MCS Life | Business Associate | 115,000 | 9 Nov 2010 | |||
| Triple-S Salud | Health Plan | 56,853 | 29 May 2014 | |||
| Administracion de Seguros de Salud - Triple S Salud Inc (BA) | Business Associate | 46,473 | 15 Apr 2014 | |||
| MMM Healthcare, Inc. | Healthcare Provider | 32,390 | 9 May 2011 | |||
| T&P Consulting, INC. d/b/a Quantum Health Consulting | Business Associate | 27,098 | 12 Mar 2012 | |||
| PMC Medicare Choice | Health Plan | 24,361 | 9 May 2011 | |||
| American Health Inc. | Health Plan | 17,776 | 3 Apr 2014 | |||
| Triple S Salud Inc. | Business Associate | 13,336 | 8 Nov 2013 | |||
| American Health Inc. | Health Plan | 11,531 | 18 May 2014 |
Section PR.6 / All other filings
20 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| T & P Consulting, Inc. d/b/a Quantum Health Consulting | Business Associate | 10,000 | 12 Mar 2012 | |||
| Triple-C, Inc. | Business Associate | 8,000 | 24 Jan 2014 | |||
| Quantum Health Consulting | Business Associate | 7,923 | 13 Mar 2012 | |||
| Administracion de Seguros de Salud - Triple S Salud Inc (BA) | Health Plan | 7,911 | 18 Jul 2014 | |||
| Triple S Salud Inc. | Business Associate | 7,911 | 15 Apr 2014 | |||
| T&P CONSULTING, INC. D/B/A QUANTUM | Business Associate | 7,706 | 28 Feb 2012 | |||
| T&P Consulting, INC DBA Quantum HC | Business Associate | 7,606 | 15 Mar 2012 | |||
| VA Caribbean Healthcare System | Healthcare Provider | 6,006 | 26 May 2011 | |||
| Accuprint | Business Associate | 5,848 | 15 Aug 2011 | |||
| Triple-S Salud | Health Plan | 5,795 | 2 Apr 2014 | |||
| PHMHS | Business Associate | 5,000 | 11 Sep 2013 | |||
| Quantum Health Consulting | Business Associate | 4,645 | 12 Mar 2012 | |||
| Dr Axel Velez | Healthcare Provider | 2,800 | 13 Jul 2011 | |||
| MAPFRE Life | Health Plan | 2,209 | 29 Sep 2011 | |||
| Centro de Ortodoncia Inc. | Healthcare Provider | 2,000 | 13 Sep 2011 | |||
| MSO of Puerto Rico, Inc. | Business Associate | 1,907 | 17 Feb 2010 | |||
| Triple S Advantage, Inc | Health Plan | 1,458 | 31 Mar 2015 | |||
| Hospital Auxilio Mutuo | Healthcare Provider | 1,000 | 13 Dec 2010 | |||
| Alberto Gerardo Vazquez Rivera | Business Associate | 679 | 28 Jun 2013 | |||
| MSO of Puerto Rico | Business Associate | 605 | 17 Feb 2010 |
Index / Other states
Every state on the register
98
32
164
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
55
38
174
57
511
207
19
276
80
120
339
41
86
15
196
633
68
15
157
185
47
126
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.