Geography
South Carolina: 86 healthcare breach filings.
South Carolina entities have reported 86 breaches of 500 or more individuals to HHS since 2010, the 29th most of the 52 states and territories on the register, covering 2,630,987 individuals (36th by people affected). 12 are still under investigation. Hacking/IT Incident is the breach type on 63% of them, and network server the most common location (48%).
Filings
86
29th of 52 states and territories
Individuals affected
2,630,987
Median filing 4,125
Largest filing
400,000
Spartanburg Regional Healthcare System, 2011
Hacking / IT share
63%
29 filings involve a business associate
Direct answer / South Carolina on the HHS portal
The largest South Carolina filing is Spartanburg Regional Healthcare System (400,000 individuals, submitted 27 May 2011). The busiest year was 2019 with 9 filings. Healthcare Providers account for 77% of the state's filings. 30 filings of 10,000 or more individuals have their own page; the remaining 56 are listed in the table at the foot of this page.
Section SC.1 / Largest filings
Ten largest South Carolina breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Spartanburg Regional Healthcare System | Healthcare Provider | 400,000 | 27 May 2011 | |||
| 2 | Stokes Regional Eye Centers | Healthcare Provider | 266,170 | 17 Jun 2022 | |||
| 3 | South Carolina Department of Health and Human Services | Health Plan | 228,435 | 24 Apr 2012 | |||
| 4 | Roper St. Francis Healthcare | Healthcare Provider | 189,761 | 8 Jan 2021 | |||
| 5 | Sandhills Medical FoundationOpen | Healthcare Provider | 169,017 | 14 Sep 2025 | |||
| 6 | Innovative Scientific Solutions, LLCOpen | Healthcare Provider | 143,842 | 17 Apr 2026 | |||
| 7 | Vikor Scientific, LLC. | Healthcare Provider | 139,964 | 6 Feb 2026 | |||
| 8 | Roper st. Francis Healthcare | Healthcare Provider | 92,963 | 8 Sep 2020 | |||
| 9 | CareSouth Carolina, Inc. | Healthcare Provider | 76,035 | 14 May 2021 | |||
| 10 | Carolina Eyecare Physicians, LLC | Healthcare Provider | 68,739 | 16 Jun 2022 |
Section SC.2 / By year
South Carolina filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2010 | 3 | 4,773 | 0% | 0 |
| 2011 | 4 | 409,593 | 0% | 1 |
| 2012 | 1 | 228,435 | 0% | 1 |
| 2013 | 4 | 18,541 | 0% | 0 |
| 2014 | 2 | 42,543 | 0% | 1 |
| 2015 | 4 | 56,449 | 50% | 1 |
| 2016 | 4 | 4,747 | 0% | 0 |
| 2017 | 1 | 576 | 0% | 0 |
| 2019 | 9 | 175,265 | 67% | 5 |
| 2020 | 9 | 270,745 | 78% | 5 |
| 2021 | 7 | 317,266 | 86% | 3 |
| 2022 | 9 | 418,220 | 78% | 5 |
| 2023 | 6 | 76,471 | 67% | 1 |
| 2024 | 5 | 18,466 | 80% | 0 |
| 2025 | 9 | 269,434 | 100% | 4 |
| 2026 | 9 | 319,463 | 100% | 3 |
Section SC.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section SC.4 / Notification law
What South Carolina law required alongside HIPAA
State notification statute
South Carolina: S.C. Code 39-1-90
- Notice to individuals
- In the most expedient time possible and without unreasonable delay
- Attorney general threshold
- No direct AG requirement (Dept. of Consumer Affairs at 1,000+ residents)
- Private right of action
- Yes: Residents may sue; actual damages for negligent violations, broader recovery for knowing and willful
- Penalty
- Administrative fines of $1,000 per affected resident for knowing and willful violations
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section SC.5 / Filing pages
30 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section SC.6 / All other filings
56 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| Orangeburg Eye Center | Healthcare Provider | 9,000 | 8 Jun 2022 | |||
| AccessOne Medcard, Inc. | Business Associate | 8,049 | 15 Dec 2023 | |||
| Wm. Jennings Bryan Dorn VAMC | Healthcare Provider | 7,405 | 10 Apr 2013 | |||
| Florence County Commission on Alcohol & Drug Abuse - dba Circle Park Behavioral Health Services ("Circle Park")Open | Healthcare Provider | 7,020 | 14 Jan 2026 | |||
| Medico of South Carolina, Inc. | Business Associate | 6,489 | 17 Sep 2019 | |||
| Drs. Kelley & McDowell PA | Healthcare Provider | 6,204 | 6 Oct 2021 | |||
| Roper St. Francis Healthcare | Healthcare Provider | 6,000 | 3 Sep 2020 | |||
| HopeHealth, Inc. | Healthcare Provider | 5,823 | 15 May 2025 | |||
| Greenwood Regional Rehabilitation Hospital | Healthcare Provider | 5,823 | 29 Mar 2024 | |||
| State of South Carolina Budget and Control Board Employee Insurance Program (EIP) | Health Plan | 5,596 | 14 Jan 2011 | |||
| Spartanburg Rehabilitation Institute | Healthcare Provider | 4,506 | 29 Mar 2024 | |||
| NHC HealthCare, Mauldin | Healthcare Clearing House | 4,204 | 13 Sep 2013 | |||
| Roper St. Francis Healthcare | Healthcare Provider | 4,125 | 26 Aug 2024 | |||
| Carlyle Senior Care Management Company, Inc.Open | Business Associate | 4,060 | 27 May 2026 | |||
| Midlands Orthopaedics, P.A. | Healthcare Provider | 3,902 | 13 Nov 2015 | |||
| Eau Claire Cooperative Health, Inc. DBA Cooperative Health | Healthcare Provider | 3,755 | 29 Jul 2021 | |||
| Wm. Jennings Bryan Dorn VA Medical Center | Healthcare Provider | 3,637 | 10 Sep 2014 | |||
| Comprehensive Psychological Services LLC | Healthcare Provider | 3,500 | 1 Nov 2013 | |||
| DeLoach & Williamson | Business Associate | 3,432 | 18 Dec 2013 | |||
| CLARENDON HEALTH AND WELLNESS CENTER | Healthcare Provider | 3,297 | 8 Jun 2022 | |||
| Broad River Physicians Group, LLC | Healthcare Provider | 3,295 | 16 Sep 2025 | |||
| OrthoSC, LLC | Healthcare Provider | 3,027 | 25 Aug 2020 | |||
| Coastal Carolina Centers of Urology and Surgery, LLCOpen | Healthcare Provider | 2,886 | 21 May 2026 | |||
| Excalibur Youth Services, LLC | Healthcare Provider | 2,851 | 28 Sep 2020 | |||
| South Carolina Department of Health and Environmental Control | Health Plan | 2,850 | 22 Apr 2010 | |||
| Prisma - Midlands | Healthcare Provider | 2,770 | 6 Sep 2019 | |||
| Aiken Community Based Outpatient Clinic | Healthcare Provider | 2,717 | 12 Apr 2011 | |||
| Conway Medical Center | Healthcare Provider | 2,550 | 5 Dec 2019 | |||
| Bishop Eye Center | Healthcare Provider | 2,292 | 7 Apr 2022 | |||
| Urology Associates of CharlestonOpen | Healthcare Provider | 2,060 | 3 Jul 2025 | |||
| Midlands Regional Rehabilitation Hospital | Healthcare Provider | 2,018 | 29 Mar 2024 | |||
| Bon Secours Saint Francis | Healthcare Provider | 1,997 | 26 Oct 2015 | |||
| Lexington Health, Inc. | Healthcare Provider | 1,994 | 12 Feb 2024 | |||
| MUSC Health Lancaster Medical Center | Healthcare Provider | 1,802 | 2 Jun 2023 | |||
| Medical University of South Carolina | Healthcare Provider | 1,758 | 13 Nov 2023 | |||
| Roper St. Francis Healthcare | Healthcare Provider | 1,634 | 17 Jan 2020 | |||
| PruittHealth Home Health -- Low Country | Healthcare Provider | 1,500 | 29 Apr 2016 | |||
| PruittHealth Hospice Beaufort | Healthcare Provider | 1,437 | 9 Jun 2016 | |||
| Absolute Total Care | Health Plan | 1,286 | 4 Jun 2021 | |||
| FOOTHILLS NEPHROLOGY, PC | Healthcare Provider | 1,280 | 9 Jun 2011 | |||
| CareCore National | Business Associate | 1,270 | 20 Sep 2010 | |||
| The Charles Lea Center | Healthcare Provider | 1,250 | 22 Nov 2023 | |||
| Amicus Solutions, Inc. (additional related entities may be impacted, the names of which are available upon request)Open | Business Associate | 1,137 | 3 Jun 2026 | |||
| Practolytics LLC | Business Associate | 1,125 | 18 Jan 2022 | |||
| BlueCross BlueShield of South Carolina | Business Associate | 998 | 12 Feb 2016 | |||
| iTrust Wellness Group | Healthcare Provider | 981 | 10 Aug 2023 | |||
| Benefitfocus.com, Inc. | Business Associate | 827 | 10 Jul 2019 | |||
| Heritage Medical Partners, LLC | Healthcare Provider | 812 | 15 Sep 2016 | |||
| Oconee Physician Practices | Healthcare Provider | 653 | 20 May 2010 | |||
| Continental American Insurance Company | Health Plan | 623 | 8 Nov 2021 | |||
| Roper St. Francis Healthcare | Healthcare Provider | 576 | 24 Jan 2017 | |||
| Schaeffler Group USA | Health Plan | 550 | 2 Apr 2015 | |||
| Issaqueena Pediatric Dentistry PAOpen | Healthcare Provider | 501 | 4 Feb 2026 | |||
| Hampton Regional Medical Center | Healthcare Provider | 501 | 12 Sep 2025 | |||
| Alpine Agency of the Midlands, LLCOpen | Business Associate | 500 | 13 Jul 2026 | |||
| Columbia Eye ClinicOpen | Healthcare Provider | 500 | 14 Mar 2025 |
Index / Other states
Every state on the register
98
32
164
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
55
38
174
57
511
207
19
276
80
120
339
32
41
15
196
633
68
15
157
185
47
126
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.