Geography
Wisconsin: 126 healthcare breach filings.
Wisconsin entities have reported 126 breaches of 500 or more individuals to HHS since 2010, the 23rd most of the 52 states and territories on the register, covering 12,726,197 individuals (22nd by people affected). 11 are still under investigation. Hacking/IT Incident is the breach type on 66% of them, and network server the most common location (40%).
Filings
126
23rd of 52 states and territories
Individuals affected
12,726,197
Median filing 3,657
Largest filing
4,112,892
OneTouchPoint, Inc., 2022
Hacking / IT share
66%
39 filings involve a business associate
Direct answer / Wisconsin on the HHS portal
The largest Wisconsin filing is OneTouchPoint, Inc. (4,112,892 individuals, submitted 27 July 2022). The busiest year was 2021 with 17 filings. Healthcare Providers account for 67% of the state's filings. 41 filings of 10,000 or more individuals have their own page; the remaining 85 are listed in the table at the foot of this page.
Section WI.1 / Largest filings
Ten largest Wisconsin breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | OneTouchPoint, Inc. | Business Associate | 4,112,892 | 27 Jul 2022 | |||
| 2 | Advocate Aurora Health | Healthcare Provider | 3,000,000 | 14 Oct 2022 | |||
| 3 | Forefront Dermatology, S.C. | Healthcare Provider | 2,413,553 | 8 Jul 2021 | |||
| 4 | Group Health Cooperative of South Central Wisconsin | Health Plan | 533,809 | 8 Apr 2024 | |||
| 5 | Adams County | Healthcare Provider | 258,120 | 11 Dec 2018 | |||
| 6 | Medical College of Wisconsin | Healthcare Provider | 240,667 | 14 Nov 2023 | |||
| 7 | Bell Ambulance, Inc.Open | Healthcare Provider | 237,830 | 14 Apr 2025 | |||
| 8 | 90 Degree Benefits, Inc. | Business Associate | 185,459 | 8 Feb 2023 | |||
| 9 | 90 Degree Benefits, Inc. | Business Associate | 172,450 | 9 Jun 2022 | |||
| 10 | BayCare Clinic, LLP | Healthcare Provider | 134,000 | 6 Jan 2023 |
Section WI.2 / By year
Wisconsin filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2010 | 3 | 13,388 | 0% | 0 |
| 2011 | 1 | 3,000 | 100% | 0 |
| 2012 | 1 | 698 | 0% | 0 |
| 2013 | 4 | 55,908 | 25% | 1 |
| 2014 | 1 | 41,437 | 0% | 1 |
| 2015 | 2 | 1,469 | 0% | 0 |
| 2016 | 5 | 14,737 | 20% | 0 |
| 2017 | 9 | 105,257 | 78% | 3 |
| 2018 | 8 | 275,609 | 38% | 1 |
| 2019 | 7 | 107,036 | 86% | 2 |
| 2020 | 11 | 53,475 | 55% | 1 |
| 2021 | 17 | 2,553,278 | 76% | 3 |
| 2022 | 15 | 7,568,402 | 67% | 8 |
| 2023 | 11 | 715,850 | 91% | 7 |
| 2024 | 10 | 813,754 | 100% | 8 |
| 2025 | 17 | 382,708 | 71% | 6 |
| 2026 | 4 | 20,191 | 75% | 0 |
Section WI.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section WI.4 / Notification law
What Wisconsin law required alongside HIPAA
State notification statute
Wisconsin: Wis. Stat. 134.98
- Notice to individuals
- Within 45 days after learning of the unauthorized acquisition
- Attorney general threshold
- No AG notification requirement
- Private right of action
- No: No PROA under the statute; failure to notify may support separate negligence claims
- Penalty
- Civil forfeitures up to $10,000 per violation, enforced by the AG and DATCP
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section WI.5 / Filing pages
41 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section WI.6 / All other filings
85 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| The Medical College of Wisconsin, Inc. | Healthcare Provider | 9,500 | 17 Nov 2017 | |||
| Thrivent Financial for Lutherans | Health Plan | 9,500 | 3 Mar 2010 | |||
| Health Payment Systems, Inc.Open | Business Associate | 9,380 | 10 Jul 2026 | |||
| United Dynacare, LLC dba Dynacare Laboratories | Healthcare Provider | 9,328 | 18 Nov 2013 | |||
| Pediatric Associates of Milwaukee | Healthcare Provider | 8,160 | 22 Apr 2021 | |||
| Wisconsin Department of Health Services | Health Plan | 8,157 | 1 Jul 2026 | |||
| OS, Inc. | Business Associate | 7,880 | 2 May 2019 | |||
| University of Wisconsin Hospitals and Clinics Authority | Healthcare Provider | 6,923 | 30 Sep 2016 | |||
| OPEN ARMS ASSISTED LIVING | Business Associate | 6,000 | 15 Jul 2022 | |||
| Mercy Health System Corporation | Healthcare Provider | 5,946 | 2 Jul 2019 | |||
| The Medical College of Wisconsin, Inc. | Healthcare Provider | 5,655 | 11 Oct 2020 | |||
| Assisted Living Pharmacy Service, LLCOpen | Healthcare Provider | 5,590 | 25 Aug 2025 | |||
| Community Link Inc | Health Plan | 5,524 | 30 Jun 2017 | |||
| EVERSANA | Healthcare Provider | 5,000 | 7 Apr 2020 | |||
| Wisconsin Institute of Urology S.C. | Healthcare Provider | 4,819 | 5 Aug 2021 | |||
| SSM Dean Medical Group | Healthcare Provider | 4,800 | 10 Jan 2017 | |||
| University of Wisconsin Hospitals and Clinics Authority | Healthcare Provider | 4,563 | 18 Jun 2021 | |||
| QuadMed, LLC (Whirlpool) | Healthcare Provider | 4,549 | 29 Jan 2018 | |||
| Grant Regional Health Center | Healthcare Provider | 4,135 | 23 May 2023 | |||
| Urology Associates of Green Bay, SC | Healthcare Provider | 4,000 | 24 Dec 2025 | |||
| RISE Wisconsin, Inc. | Healthcare Provider | 3,731 | 7 Jun 2018 | |||
| Security Health Plan of Wisconsin, Inc. | Health Plan | 3,657 | 19 Jul 2019 | |||
| The Psychology Center | Healthcare Provider | 3,614 | 31 Oct 2022 | |||
| Reichert Prosthetics & Orthotics, LLC | Healthcare Provider | 3,380 | 28 Sep 2018 | |||
| Dean Health Systems, Inc.; St. Mary's Hospital; St. Marys Dean Ventures, Incorporated | Healthcare Provider | 3,288 | 20 Dec 2010 | |||
| City of FranklinOpen | Healthcare Provider | 3,233 | 3 Jul 2025 | |||
| Medical College of Wisconsin | Healthcare Provider | 3,179 | 2 Sep 2016 | |||
| Froedtert & the Medical College of Wisconsin Community Physicians, Inc. | Healthcare Provider | 3,074 | 9 Oct 2020 | |||
| Living Healthy Community Clinic | Business Associate | 3,000 | 13 Sep 2011 | |||
| Advocate Aurora Health | Healthcare Provider | 2,979 | 4 Sep 2020 | |||
| Independent Vision Group, LTD | Healthcare Provider | 2,931 | 13 Dec 2023 | |||
| Scenic Bluffs Health Center Inc | Healthcare Provider | 2,889 | 24 Apr 2018 | |||
| Wisconsin Department of Health Services | Health Plan | 2,868 | 4 Jun 2021 | |||
| Oneida Tribe of Indians of Wisconsin | Healthcare Provider | 2,734 | 15 Apr 2016 | |||
| Kenosha Community Health Center | Healthcare Provider | 2,688 | 3 May 2022 | |||
| Exact Sciences Laboratories LLC | Healthcare Provider | 2,658 | 29 Dec 2025 | |||
| Pynenberg & Scheske DDS,SC | Healthcare Provider | 2,612 | 20 Oct 2022 | |||
| zizzl llc | Business Associate | 2,416 | 22 Aug 2025 | |||
| Western Wisconsin Medical Association, S.C. - River Falls Medical Clinics | Healthcare Provider | 2,400 | 25 Jan 2013 | |||
| UW Health | Healthcare Provider | 2,036 | 25 May 2017 | |||
| Rainbow Hospice Care, Inc. | Healthcare Provider | 2,029 | 21 Feb 2020 | |||
| Lakeshore Dental | Business Associate | 2,000 | 1 Sep 2021 | |||
| Advocate Aurora Health | Healthcare Provider | 1,907 | 14 Aug 2020 | |||
| Lifetime Middleton LLC | Healthcare Provider | 1,900 | 23 Sep 2020 | |||
| Wisconsin Department of Corrections | Healthcare Provider | 1,853 | 15 Jul 2020 | |||
| MJ Care | Business Associate | 1,832 | 29 Dec 2022 | |||
| Advocate Aurora Health | Healthcare Provider | 1,729 | 28 Dec 2021 | |||
| Wisconsin Department of Corrections | Healthcare Provider | 1,723 | 12 Nov 2025 | |||
| Wisconsin Department of Health Services | Health Plan | 1,698 | 8 Jul 2022 | |||
| Delta Medical SystemsOpen | Business Associate | 1,574 | 10 Mar 2026 | |||
| US HealthCenter, Inc. | Business Associate | 1,441 | 16 Jul 2020 | |||
| Dean Health Plan | Health Plan | 1,311 | 15 Jun 2018 | |||
| Lakeland Care, Inc. | Healthcare Provider | 1,300 | 4 Feb 2019 | |||
| Wisconsin Department of Health Services | Health Plan | 1,281 | 15 Jan 2021 | |||
| 90 Degree Benefits, Inc. - St. Paul | Business Associate | 1,268 | 18 Apr 2025 | |||
| Walworth County, Wisconsin | Healthcare Provider | 1,212 | 18 Jan 2022 | |||
| Oakwood Lutheran Senior Ministries, Inc.Open | Healthcare Provider | 1,080 | 22 May 2026 | |||
| Wisconsin Department of Corrections | Healthcare Provider | 1,041 | 8 Aug 2019 | |||
| Pope & Conner Consulting, Inc. | Business Associate | 1,035 | 15 May 2024 | |||
| Quarles & Brady, LLP | Business Associate | 1,032 | 19 Apr 2016 | |||
| Dean Health Servicing Company | Business Associate | 1,025 | 26 May 2021 | |||
| First Choice Dental | Healthcare Provider | 1,000 | 21 Dec 2023 | |||
| University of Wisconsin - Madison | Healthcare Provider | 1,000 | 7 Sep 2017 | |||
| NPS Corporation | Health Plan | 999 | 28 Apr 2021 | |||
| Dean Health Plan | Health Plan | 960 | 11 Nov 2015 | |||
| Samaritan Counseling Center of the Fox ValleyOpen | Healthcare Provider | 956 | 10 Jan 2025 | |||
| Werner Electric Supply | Health Plan | 907 | 28 Apr 2021 | |||
| Walworth County Department of Health and Human Services | Healthcare Provider | 907 | 12 Mar 2021 | |||
| Merrill Iron & Steel Health Benefit Plan | Health Plan | 899 | 21 Jan 2021 | |||
| Aurora Health Care, Inc. | Healthcare Provider | 869 | 1 Apr 2016 | |||
| DentaQuest | Health Plan | 868 | 6 Jan 2025 | |||
| WEA Insurance Corporation | Health Plan | 850 | 27 Dec 2018 | |||
| Chippewa County | Healthcare Provider | 842 | 4 Apr 2023 | |||
| Fort HealthCare Inc. | Healthcare Provider | 784 | 1 Apr 2021 | |||
| Wisconsin Department of Health Services | Health Plan | 779 | 3 Apr 2018 | |||
| Froedtert Health | Healthcare Provider | 760 | 15 Jan 2021 | |||
| Orthodontic Specialists of Green Bay | Healthcare Provider | 742 | 24 Apr 2017 | |||
| Jack L Marcus | Business Associate | 705 | 14 Jul 2025 | |||
| Lakeview Medical Center | Healthcare Provider | 698 | 14 Feb 2012 | |||
| Village of Elm Grove | Healthcare Provider | 668 | 2 Dec 2024 | |||
| SSM Health Care of Wisconsin DBA: St. Mary���s Janesville Hospital | Healthcare Provider | 631 | 25 Oct 2013 | |||
| Tomah Memorial Hospital | Healthcare Provider | 600 | 16 Apr 2010 | |||
| ST Psychotherapy, LLC | Healthcare Provider | 509 | 23 Dec 2015 | |||
| ARC Community Services, Inc.Open | Healthcare Provider | 501 | 2 Feb 2025 | |||
| One Touch Point | Business Associate | 500 | 23 Nov 2020 |
Index / Other states
Every state on the register
98
32
164
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
55
38
174
57
511
207
19
276
80
120
339
32
41
86
15
196
633
68
15
157
185
47
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.