State File WA / HHS OCR Breach Register185 filings, 2010 to 2026Retrieved 28 August 2026

Geography

Washington: 185 healthcare breach filings.

Washington entities have reported 185 breaches of 500 or more individuals to HHS since 2010, the 15th most of the 52 states and territories on the register, covering 23,286,354 individuals (14th by people affected). 21 are still under investigation. Hacking/IT Incident is the breach type on 63% of them, and network server the most common location (48%).

Filings

185

15th of 52 states and territories

Individuals affected

23,286,354

Median filing 3,950

Largest filing

11,000,000

Premera Blue Cross, 2015

Hacking / IT share

63%

38 filings involve a business associate

Direct answer / Washington on the HHS portal

The largest Washington filing is Premera Blue Cross (11,000,000 individuals, submitted 17 March 2015). The busiest year was 2022 with 24 filings. Healthcare Providers account for 79% of the state's filings. 64 filings of 10,000 or more individuals have their own page; the remaining 121 are listed in the table at the foot of this page.

Section WA.1 / Largest filings

Ten largest Washington breaches

#	Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
1	Premera Blue Cross	Health Plan	11,000,000	17 Mar 2015	Hacking/IT Incident	Network Server	No
2	Navia Benefit Solutions, Inc.Open	Business Associate	2,151,330	18 Mar 2026	Hacking/IT Incident	Network Server, Other	Yes
3	Fred Hutchinson Cancer Center	Healthcare Provider	1,840,927	22 Dec 2023	Hacking/IT Incident	Network Server	No
4	UW Medicine	Healthcare Provider	973,024	20 Feb 2019	Hacking/IT Incident	Network Server	No
5	MCG Health, LLC	Business Associate	793,283	10 Jun 2022	Hacking/IT Incident	Network Server	Yes
6	Sea Mar Community Health Centers	Healthcare Provider	688,000	30 Oct 2021	Hacking/IT Incident	Network Server	No
7	Sound Generations	Business Associate	456,243	29 Nov 2021	Hacking/IT Incident	Network Server	Yes
8	Proliance Surgeons	Healthcare Provider	437,392	20 Nov 2023	Hacking/IT Incident	Network Server	No
9	Rebound Orthopedics & Neurosurgery	Healthcare Provider	426,536	10 Apr 2024	Hacking/IT Incident	Network Server	No
10	Columbia Surgical Specialist of Spokane	Healthcare Provider	400,000	18 Feb 2019	Hacking/IT Incident	Network Server	No

Section WA.2 / By year

Washington filings by submission year

Each year links to the national year page.

Year	Filings	Individuals affected	Hacking / IT share	Filings with a page
2010	3	17,271	33%	0
2011	9	38,755	0%	1
2012	5	8,495	0%	0
2013	6	81,046	17%	1
2014	6	21,505	0%	0
2015	5	11,006,133	20%	1
2016	12	528,837	33%	5
2017	9	37,176	44%	1
2018	7	44,333	57%	1
2019	15	1,522,106	73%	4
2020	9	569,484	78%	4
2021	17	1,796,569	76%	8
2022	24	1,365,438	88%	9
2023	12	2,493,052	92%	7
2024	16	855,660	81%	7
2025	17	633,687	94%	9
2026	13	2,266,807	77%	6

Section WA.3 / Composition

Breach type, location and who filed

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident117 (63%)

Theft30 (16%)

Unauthorized Access/Disclosure29 (16%)

Loss4 (2%)

Other3 (2%)

Improper Disposal2 (1%)

Unknown1 (1%)

Location of breached information

Network Server89 (48%)

Email40 (22%)

Paper/Films19 (10%)

Laptop18 (10%)

Desktop Computer15 (8%)

Other8 (4%)

Electronic Medical Record7 (4%)

Other Portable Electronic Device7 (4%)

Covered entity type

Healthcare Provider146 (79%)

Health Plan19 (10%)

Business Associate19 (10%)

Healthcare Clearing House1 (1%)

Section WA.4 / Notification law

What Washington law required alongside HIPAA

State notification statute

Washington: RCW 19.255.010

Notice to individuals: No later than 30 days after discovery
Attorney general threshold: More than 500 Washington residents (Within the same 30-day window)
Private right of action: Yes: Civil lawsuits under the Consumer Protection Act; actual damages plus up to $1,000 punitive for willful violations
Penalty: Consumers may recover damages, costs, and attorney fees; AG may seek penalties and injunctive relief

The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.

Washington notification law in full HIPAA breach penalties

Section WA.5 / Filing pages

64 filings of 10,000 or more individuals

Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Premera Blue Cross	Health Plan	11,000,000	17 Mar 2015	Hacking/IT Incident	Network Server	No
Navia Benefit Solutions, Inc.Open	Business Associate	2,151,330	18 Mar 2026	Hacking/IT Incident	Network Server, Other	Yes
Fred Hutchinson Cancer Center	Healthcare Provider	1,840,927	22 Dec 2023	Hacking/IT Incident	Network Server	No
UW Medicine	Healthcare Provider	973,024	20 Feb 2019	Hacking/IT Incident	Network Server	No
MCG Health, LLC	Business Associate	793,283	10 Jun 2022	Hacking/IT Incident	Network Server	Yes
Sea Mar Community Health Centers	Healthcare Provider	688,000	30 Oct 2021	Hacking/IT Incident	Network Server	No
Sound Generations	Business Associate	456,243	29 Nov 2021	Hacking/IT Incident	Network Server	Yes
Proliance Surgeons	Healthcare Provider	437,392	20 Nov 2023	Hacking/IT Incident	Network Server	No
Rebound Orthopedics & Neurosurgery	Healthcare Provider	426,536	10 Apr 2024	Hacking/IT Incident	Network Server	No
Columbia Surgical Specialist of Spokane	Healthcare Provider	400,000	18 Feb 2019	Hacking/IT Incident	Network Server	No
Community Health Plan of Washington	Health Plan	381,504	21 Dec 2016	Hacking/IT Incident	Network Server, Other	No
Northwest Radiologists, Inc./Mount Baker ImagingOpen	Healthcare Provider	362,713	28 Oct 2025	Hacking/IT Incident	Network Server	No
Virginia Mason Medical Center	Healthcare Provider	244,761	8 Sep 2020	Hacking/IT Incident	Network Server	Yes
Yakima Valley Radiology, PC	Healthcare Provider	235,249	1 Mar 2024	Hacking/IT Incident	Network Server	No
Woodcreek Provider Services LLC	Business Associate	233,199	5 Mar 2021	Hacking/IT Incident	Network Server	Yes
Welfare & Pension Administration Service, Inc.	Health Plan	194,674	17 Sep 2021	Hacking/IT Incident	Network Server	No
Chelan Douglas Health District	Healthcare Provider	188,236	15 Mar 2022	Hacking/IT Incident	Network Server	No
MultiCare Health System	Healthcare Provider	179,189	22 Aug 2020	Hacking/IT Incident	Network Server	Yes
SEIU 775 Benefits Group	Business Associate	140,000	27 May 2021	Hacking/IT Incident	Network Server	Yes
Prestige Care, Inc.	Healthcare Provider	116,956	6 Nov 2023	Hacking/IT Incident	Network Server	No
Overlake Medical Center & Clinics	Healthcare Provider	109,234	7 Feb 2020	Hacking/IT Incident	Email	No
Washington State Health Care Authority (HCA)	Health Plan	91,187	9 Feb 2016	Unauthorized Access/Disclosure	Email	No
Fred Hutchinson Cancer Center	Healthcare Provider	89,111	25 May 2022	Hacking/IT Incident	Email	No
Grays Harbor Community Hospital	Healthcare Provider	88,399	12 Aug 2019	Hacking/IT Incident	Electronic Medical Record, Network Server, Other	No
Sight Partners Physicians, P.C.	Healthcare Provider	86,101	14 Jun 2022	Hacking/IT Incident	Electronic Medical Record	Yes
UW Medicine, Privacy Manager - Breach	Healthcare Provider	76,183	27 Nov 2013	Hacking/IT Incident	Desktop Computer	No
Kitsap Mental Health ServicesOpen	Healthcare Provider	70,757	16 Dec 2024	Hacking/IT Incident	Network Server	No
Kaiser Foundation Health Plan of Washington	Healthcare Provider	69,589	3 Jun 2022	Hacking/IT Incident	Email	No
Whitman County Public Hospital District No. 3	Healthcare Provider	63,453	11 Apr 2025	Hacking/IT Incident	Network Server	No
Behavioral Health ResourcesOpen	Healthcare Provider	49,213	17 Jan 2025	Hacking/IT Incident	Network Server	No
Confluence Health	Healthcare Provider	33,821	27 Jul 2018	Hacking/IT Incident	Email	No
Premera Blue Cross	Health Plan	33,212	8 Aug 2023	Hacking/IT Incident	Network Server	Yes
Mt. Spokane PediatricsOpen	Healthcare Provider	32,021	30 Apr 2026	Hacking/IT Incident	Network Server	No
Zenith American Solutions	Business Associate	30,560	20 Jul 2022	Unauthorized Access/Disclosure	Paper/Films	Yes
Therapeutic Health Services	Healthcare Provider	27,170	25 Apr 2024	Hacking/IT Incident	Network Server	No
Peoples Injury Network Northwest	Healthcare Provider	27,000	12 Sep 2019	Hacking/IT Incident	Network Server	No
Okanogan Behavioral HealthCare	Healthcare Provider	26,429	23 Aug 2024	Hacking/IT Incident	Network Server	No
Klickitat Valley Health	Healthcare Provider	26,339	14 Mar 2025	Hacking/IT Incident	Network Server	No
Dr. Michael Bilikas and Associates d.b.a. 32 PearlsOpen	Healthcare Provider	23,517	21 Jul 2025	Hacking/IT Incident	Network Server	No
Youth Eastside Services	Healthcare Provider	23,492	20 Dec 2024	Hacking/IT Incident	Network Server	No
Providence	Healthcare Provider	22,701	16 Jan 2026	Hacking/IT Incident	Network Server	Yes
King County Public Hospital District No. 2 d/b/a EvergreenHealth	Healthcare Provider	22,579	13 Jul 2021	Hacking/IT Incident	Network Server	Yes
Country Doctor Community Health Clinic	Healthcare Provider	22,120	16 Sep 2022	Hacking/IT Incident	Network Server	No
Lake Washington VascularOpen	Healthcare Provider	21,534	25 Feb 2025	Hacking/IT Incident	Network Server	No
Evergreen Treatment Services	Healthcare Provider	21,325	10 Feb 2023	Hacking/IT Incident	Network Server	No
Bridle Trails Family DentistryOpen	Healthcare Provider	20,976	14 May 2026	Hacking/IT Incident	Email	No
Samaritan Center of Puget Sound	Healthcare Provider	20,866	15 Sep 2021	Theft	Desktop Computer, Network Server	No
Northwest Eye Surgeons, P.C. and Sight Partners LLC	Healthcare Provider	20,838	26 Oct 2020	Hacking/IT Incident	Network Server	No
King County Public Hospital District No. 2 d/b/a EvergreenHealth	Healthcare Provider	20,533	22 Apr 2022	Hacking/IT Incident	Network Server	Yes
Fred Hutchinson Cancer Center	Healthcare Provider	20,192	26 Dec 2023	Loss	Laptop	No
Northwest Denture Center, Inc.Open	Healthcare Provider	19,419	25 Jul 2025	Hacking/IT Incident	Network Server	No
UNITED BACKCARE PS dba Pacific Rehabilitation CentersOpen	Healthcare Provider	18,900	11 Feb 2025	Hacking/IT Incident	Network Server	No
Franciscan Health, Highline Medical Center	Healthcare Provider	18,399	1 Sep 2016	Unauthorized Access/Disclosure	Network Server	Yes
UW Medicine	Healthcare Provider	18,389	4 Jun 2021	Hacking/IT Incident	Network Server	Yes
Columbia River Mental Health Services	Healthcare Provider	17,842	8 Aug 2022	Hacking/IT Incident	Email	No
TRUEbenefits LLC	Business Associate	17,309	14 Aug 2017	Hacking/IT Incident	Email	Yes
Meridian Valley Laboratories, Inc.	Healthcare Provider	16,341	29 Aug 2025	Hacking/IT Incident	Network Server	No
East Adams Rural Healthcare	Healthcare Provider	13,206	21 Oct 2024	Hacking/IT Incident	Network Server	No
Hi-School Pharmacy	Healthcare Provider	12,779	5 Dec 2023	Hacking/IT Incident	Network Server	No
CHI Franciscan Health Hospice-Tacoma	Healthcare Provider	12,413	28 Nov 2016	Theft	Laptop	No
Grays Harbor Pediatrics, PLLC	Healthcare Provider	12,009	21 Jan 2011	Theft	Other, Other Portable Electronic Device	No
Couve Healthcare Consulting, LLC DBA Evergreen Healthcare GroupOpen	Business Associate	11,795	24 Feb 2026	Hacking/IT Incident	Electronic Medical Record	Yes
Planned Parenthood of Greater Washington and North Idaho	Healthcare Provider	10,700	26 Aug 2016	Unauthorized Access/Disclosure	Email	Yes
Bayside DentalOpen	Healthcare Provider	10,216	17 Apr 2026	Hacking/IT Incident	Network Server	No

Section WA.6 / All other filings

121 filings below 10,000 individuals

Listed in full from the HHS export, largest first. These filings do not have their own page.

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Pacific Cataract and Laser Institute, Inc., P.C.	Healthcare Provider	9,967	12 Jan 2024	Hacking/IT Incident	Network Server	No
SW Seattle Orthopaedic and Sports Medicine	Healthcare Provider	9,493	15 Oct 2010	Hacking/IT Incident	Network Server	No
D. Andrew Loomis MD, Paula Schulze MD,Tammara Stefanelli MD, Christen Vu DO, Anja Crider MD	Healthcare Provider	9,000	24 May 2017	Hacking/IT Incident	Network Server	No
Washington Department of Social and Health ServicesOpen	Healthcare Provider	8,600	30 Jun 2026	Unauthorized Access/Disclosure	Laptop	No
Franciscan Medical Group	Healthcare Provider	8,300	28 Mar 2014	Other	Email	No
Green Diamond Resource Company	Health Plan	8,172	19 Apr 2024	Hacking/IT Incident	Network Server	No
Smile Solutions	Healthcare Provider	8,000	1 Jun 2022	Hacking/IT Incident	Network Server	No
MK Periodontics and Implants	Healthcare Provider	8,000	29 Oct 2020	Hacking/IT Incident	Network Server	No
Trusteed Plan Services Corporation	Business Associate	7,977	17 Sep 2025	Hacking/IT Incident	Network Server	Yes
CareNexa, LLC, doing business as Molecular Testing LabsOpen	Healthcare Provider	7,711	15 May 2025	Hacking/IT Incident	Network Server	Yes
Soundpath Health, Inc	Health Plan	7,581	23 Dec 2011	Theft	Laptop	No
Area Agency on Aging and Disabilities of Southwest Washington	Health Plan	7,000	22 Apr 2019	Unauthorized Access/Disclosure	Email	No
Community Psychiatric Clinic	Healthcare Provider	6,641	15 Aug 2019	Hacking/IT Incident	Email	No
Delta Dental of Washington	Health Plan	6,361	30 Sep 2022	Hacking/IT Incident	Network Server	Yes
Seattle Children's Hospital	Healthcare Provider	6,320	21 Sep 2022	Hacking/IT Incident	Network Server	Yes
Nintendo of America Inc.	Health Plan	6,248	26 Feb 2016	Hacking/IT Incident	Network Server	No
Haley Chiropractic Clinic	Healthcare Provider	6,000	8 Jul 2014	Theft	Desktop Computer, Laptop	No
Community Psychiatric Clinic	Healthcare Provider	5,866	15 Aug 2019	Hacking/IT Incident	Email	No
MedicareCompareUSAOpen	Business Associate	5,782	21 Mar 2025	Hacking/IT Incident	Email	Yes
Healthcare Resource Group, Inc.	Business Associate	5,387	7 Apr 2020	Hacking/IT Incident	Email	Yes
Ankle and Foot Physicians and Surgeons PLLC	Healthcare Provider	5,244	28 Jun 2021	Hacking/IT Incident	Network Server	No
Laboratory Corporation of America/Dynacare Northwest, Inc.	Healthcare Provider	5,080	18 Mar 2010	Theft	Laptop	No
PROVAIL	Healthcare Provider	4,908	8 Aug 2025	Hacking/IT Incident	Network Server	No
Paul C. Brown, MD, PS	Healthcare Provider	4,693	15 Dec 2011	Theft	Other	No
Osborn Cancer Care	Healthcare Provider	4,614	8 Jul 2021	Hacking/IT Incident	Network Server	Yes
Family Dynamics Counseling Services, Inc.	Healthcare Provider	4,373	11 Jul 2024	Hacking/IT Incident	Network Server	No
Health First Urgent Care PLLC	Healthcare Provider	4,169	22 Apr 2024	Unauthorized Access/Disclosure	Network Server	No
Kittitas Valley Healthcare	Healthcare Provider	3,987	25 Feb 2022	Hacking/IT Incident	Network Server	Yes
Washington State Department of Social and Health Services	Health Plan	3,950	9 Aug 2011	Unauthorized Access/Disclosure	Paper/Films	No
Northwest Medical Specialties PLLC	Healthcare Provider	3,864	28 Aug 2025	Hacking/IT Incident	Network Server	No
UW Medicine	Healthcare Provider	3,804	21 Sep 2022	Hacking/IT Incident	Network Server	Yes
Quality Behavioral Health	Healthcare Provider	3,498	26 Dec 2022	Hacking/IT Incident	Network Server	No
Totem Lake Family DentistryOpen	Healthcare Provider	3,464	30 Apr 2026	Hacking/IT Incident	Email	No
Spokane VA Medical Center	Healthcare Provider	3,275	20 Sep 2017	Loss	Laptop	No
WA State Department of Social & Health Services	Health Plan	3,104	11 Feb 2014	Other, Unauthorized Access/Disclosure	Paper/Films	No
Flex Physical Therapy	Healthcare Provider	3,100	27 Jan 2012	Theft	Desktop Computer	No
Cancer Care Northwest P.S.	Healthcare Provider	3,100	9 Feb 2011	Theft	Paper/Films	No
Community Psychiatric Clinic	Healthcare Provider	3,030	15 Aug 2019	Hacking/IT Incident	Email	No
Rose H Bailey DDS	Healthcare Provider	3,000	26 Oct 2021	Hacking/IT Incident	Network Server	No
Morton Medical Center, PLLC	Healthcare Provider	3,000	24 Mar 2016	Hacking/IT Incident	Desktop Computer, Network Server	No
Kaye-Smith Enterprises, Inc.	Business Associate	2,857	26 Sep 2022	Hacking/IT Incident	Network Server	Yes
CHI Franciscan Health, St. Clare Hospital and St. Joseph Medical Center	Healthcare Provider	2,818	16 Sep 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Virginia Mason Medical Center	Healthcare Provider	2,733	14 Mar 2022	Hacking/IT Incident	Email	No
Navos	Health Plan	2,700	8 Jun 2011	Unknown	Paper/Films	No
Ward A. Morris, DDS	Healthcare Provider	2,698	11 Aug 2010	Theft	Desktop Computer	No
Yakima Neighborhood Health Services	Healthcare Provider	2,689	14 Nov 2022	Unauthorized Access/Disclosure	Email	No
Vimly Benefit Solutions, Inc.	Business Associate	2,675	13 Dec 2019	Hacking/IT Incident	Email	Yes
Link Audiology LLC	Healthcare Provider	2,608	28 Apr 2023	Hacking/IT Incident	Email	No
Jefferson Healthcare	Healthcare Provider	2,543	11 Jan 2021	Hacking/IT Incident	Email	No
Coulee Medical Center	Healthcare Provider	2,500	3 Jan 2014	Theft	Email, Laptop, Network Server	No
Integrative Dentistry	Healthcare Provider	2,454	14 Feb 2023	Hacking/IT Incident	Network Server	No
Southwest Washington Regional Surgery Center, LLC	Healthcare Provider	2,393	6 Nov 2018	Hacking/IT Incident	Email	No
Bonney Lake Medical Center and Mythili R. Ramachandran, MD	Healthcare Provider	2,367	21 Sep 2011	Theft	Desktop Computer, Laptop	No
West Sound Treatment Center	Healthcare Provider	2,300	11 Oct 2018	Theft	Laptop	No
West Sound Treatment Center	Healthcare Provider	2,300	11 Oct 2018	Unauthorized Access/Disclosure	Desktop Computer	No
Limeade, Inc.	Business Associate	2,287	15 Oct 2021	Unauthorized Access/Disclosure	Desktop Computer, Other Portable Electronic Device	Yes
The CSC Generation Holdings, Inc. Health and Welfare Plan	Health Plan	2,219	24 May 2023	Hacking/IT Incident	Network Server	No
Spokane Digestive Disease Center, P.S.Open	Healthcare Provider	2,157	20 Apr 2026	Hacking/IT Incident	Email	No
Bates Technical College	Healthcare Provider	2,112	13 Sep 2019	Hacking/IT Incident	Network Server	No
Alta Forest Products Health and Welfare Plan	Health Plan	2,100	31 Oct 2022	Hacking/IT Incident	Network Server	No
Roy E. Gondo, M.D.	Healthcare Provider	2,100	13 Apr 2012	Theft	Desktop Computer, Electronic Medical Record	No
Northwest Surgical Specialists, P.C.	Healthcare Provider	2,050	5 Oct 2018	Hacking/IT Incident	Email	No
David E. Hansen DDS PS	Healthcare Provider	2,000	29 Jan 2015	Theft	Other Portable Electronic Device, Paper/Films	No
CellNetix Pathology & Laboratories	Healthcare Provider	1,969	28 Dec 2022	Hacking/IT Incident	Email	No
PeaceHealth	Healthcare Provider	1,969	19 Sep 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Mann-Grandstaff VA Medical Center	Healthcare Provider	1,915	19 Oct 2017	Theft	Other Portable Electronic Device	No
International Rehabilitative Sciences Inc., dba RS Medical	Healthcare Provider	1,911	1 Apr 2019	Hacking/IT Incident	Email	No
Zenith American Solutions	Business Associate	1,907	24 Sep 2021	Unauthorized Access/Disclosure	Paper/Films	Yes
Bloodworks Northwest	Healthcare Provider	1,893	8 May 2019	Loss	Paper/Films	No
Physicians Insurance A Mutual Company	Business Associate	1,852	19 Jul 2023	Hacking/IT Incident	Email	Yes
Dental Health Services, Inc	Health Plan	1,778	16 Apr 2024	Unauthorized Access/Disclosure	Email	No
Webber Chiropractic Sports Clinic, Inc.	Healthcare Provider	1,695	23 Jan 2024	Hacking/IT Incident	Network Server	No
Stephen Haggard, DPM Podiatry	Healthcare Provider	1,597	4 May 2012	Theft	Network Server	No
Virginia Mason Medical Center	Healthcare Provider	1,523	31 May 2022	Hacking/IT Incident	Network Server	No
Walla Walla VA Medical Center	Healthcare Provider	1,519	18 Dec 2013	Unauthorized Access/Disclosure	Email	No
Cancer Care Northwest	Healthcare Provider	1,426	17 Aug 2015	Loss	Paper/Films	No
PeaceHealth	Healthcare Provider	1,407	30 Nov 2015	Unauthorized Access/Disclosure	Other	No
Community Health Plan of Washington	Health Plan	1,375	3 Jan 2017	Hacking/IT Incident	Network Server	No
HealthPoint	Healthcare Provider	1,300	13 Nov 2015	Theft	Laptop	No
Wonderland Child & Family Services	Healthcare Provider	1,283	13 Mar 2026	Unauthorized Access/Disclosure	Laptop	No
Franciscan Medical Group	Healthcare Clearing House	1,250	13 Jan 2011	Theft	Desktop Computer	No
MultiCare Health System	Healthcare Provider	1,249	26 Jan 2017	Hacking/IT Incident	Email	No
JASON R EGBERT OD PC	Healthcare Provider	1,225	2 Jun 2026	Hacking/IT Incident	Network Server	Yes
Moses Lake Community Health Center	Healthcare Provider	1,190	2 Jun 2021	Hacking/IT Incident	Network Server	Yes
Providence Pediatrics Manito	Healthcare Provider	1,166	1 Aug 2024	Unauthorized Access/Disclosure	Paper/Films	Yes
Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care	Healthcare Provider	1,166	4 Jun 2021	Theft	Other Portable Electronic Device	No
Spinal and Sports Care Clinic PS	Healthcare Provider	1,136	8 Aug 2023	Hacking/IT Incident	Network Server	No
Gene S. J. Liaw, MD. PS	Healthcare Provider	1,105	17 Jun 2011	Theft	Other, Other Portable Electronic Device	No
Tri-Cities Chaplaincy	Healthcare Provider	1,086	18 Jan 2019	Hacking/IT Incident	Email	No
Talyst	Business Associate	1,079	24 Mar 2014	Theft	Laptop	Yes
Group Health Cooperative	Healthcare Provider	1,015	3 Oct 2013	Other	Paper/Films	No
Northwest Asthma and Allergy Center	Healthcare Provider	1,000	12 Dec 2024	Hacking/IT Incident	Email	No
Ronald Schubert MD PLLC	Healthcare Provider	950	26 Nov 2013	Theft	Laptop	No
Seattle Cancer Care Alliance	Healthcare Provider	944	16 Oct 2019	Unauthorized Access/Disclosure	Email	No
Charlotte Clark-Neitzel, MD	Healthcare Provider	942	7 Sep 2012	Theft	Laptop	No
Robert S Miller, LICSW, ACSW, PLLC	Healthcare Provider	902	13 Dec 2022	Hacking/IT Incident	Laptop	No
Swedish Edmonds Hospital	Healthcare Provider	886	19 May 2025	Hacking/IT Incident	Network Server	No
Health and Wellness Clinic, PLLC	Healthcare Provider	883	13 Oct 2020	Theft	Paper/Films	No
Western Washington Medical Group Inc.	Healthcare Provider	842	12 Jan 2018	Improper Disposal	Paper/Films	No
The Seattle Indian Health Board	Healthcare Provider	793	6 Oct 2016	Hacking/IT Incident	Email	No
UW Medicine	Healthcare Provider	763	15 Jun 2022	Theft	Laptop	No
Lutheran Community Services Northwest	Healthcare Provider	756	29 May 2012	Theft	Desktop Computer, Other Portable Electronic Device	No
Seattle - King County Department of Public Health	Healthcare Provider	750	7 May 2013	Improper Disposal	Paper/Films	No
Limeade, Inc.	Business Associate	668	20 Jan 2021	Hacking/IT Incident	Network Server	Yes
Group Health	Health Plan	668	23 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Washington State Department of Social and Health Services	Health Plan	648	20 Aug 2020	Unauthorized Access/Disclosure	Email	No
Incyte Pathology, P.S.	Healthcare Provider	629	4 Nov 2025	Unauthorized Access/Disclosure	Email	No
Sunil Kakar, Psy.D.	Business Associate	629	29 Mar 2013	Theft	Laptop	Yes
Overlake arthritis and Osteoporosis Center	Healthcare Provider	627	6 Jul 2018	Hacking/IT Incident	Desktop Computer	No
Vancouver Radiologists, PC	Healthcare Provider	603	26 Feb 2016	Unauthorized Access/Disclosure	Paper/Films	No
Kennewick General Hospital dba Trios Health	Healthcare Provider	569	18 May 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Overlake Medical Center & Clinics	Healthcare Provider	557	12 Aug 2022	Hacking/IT Incident	Network Server	No
James F. Collette DDS & David N. Hamilton DDS PLLC	Healthcare Provider	544	14 Feb 2020	Hacking/IT Incident	Email	No
Renovo Chiropractic & WellnessOpen	Healthcare Provider	538	16 Mar 2026	Theft	Other, Paper/Films	No
Chirobody	Healthcare Provider	525	19 Sep 2019	Unauthorized Access/Disclosure	Desktop Computer	No
Rite Aid Store 5256	Healthcare Provider	522	30 Jul 2014	Theft	Paper/Films	No
Washington State Department of Social and Health Services	Healthcare Provider	515	16 Nov 2017	Unauthorized Access/Disclosure	Email	No
Camas Center Clinic, Kalispel Tribe of Indians	Healthcare Provider	504	21 Nov 2016	Unauthorized Access/Disclosure	Desktop Computer, Paper/Films	No
Open Door Health Center of IllinoisOpen	Healthcare Provider	501	18 Jul 2026	Hacking/IT Incident	Network Server	No
Washington GastroenterologyOpen	Healthcare Provider	501	9 May 2025	Hacking/IT Incident	Network Server	No
Laboratory Services CooperativeOpen	Healthcare Provider	501	20 Nov 2024	Hacking/IT Incident	Network Server	No

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.