Year File 2010 / HHS OCR Breach Register199 filingsRetrieved 28 August 2026

Time

2010: 199 breach filings.

199 breaches of 500 or more individuals were submitted to HHS in 2010, affecting 5,932,276 individuals (+1006% on 2009's 18). 4% were hacking or IT incidents; 46 involved a business associate; New York filed the most (20). 0 remain under investigation.

Filings

199

2009: 18

Individuals affected

5,932,276

Median filing 2,027

Largest filing

1,220,000

AvMed, Inc., FL

Hacking / IT share

8 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2010.1 / Largest filings

Fifteen largest breaches submitted in 2010

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	AvMed, Inc.	FL	Health Plan	1,220,000	3 Jun 2010	Theft	Laptop	No
2	BlueCross BlueShield of Tennessee, Inc.	TN	Health Plan	1,023,209	1 Nov 2010	Theft	Other	No
3	Iron Mountain Data Products, Inc. (now known as	PA	Business Associate	800,000	19 Jul 2010	Loss	Electronic Medical Record, Other, Other Portable Electronic Device	Yes
4	Puerto Rico Department of Health - Triple S Management Corp.	PR	Health Plan	475,000	4 Nov 2010	Unauthorized Access/Disclosure	Network Server	Yes
5	Triple-S Salud, Inc.	PR	Health Plan	398,000	18 Nov 2010	Theft	Network Server	No
6	Affinity Health Plan, Inc.	NY	Health Plan	344,579	14 Apr 2010	Theft	Other	No
7	Millennium Medical Management Resources, Inc.	IL	Business Associate	180,111	29 Apr 2010	Theft	Other, Other Portable Electronic Device	Yes
8	Siemens Medical Solutions, USA, Inc	PA	Business Associate	130,495	4 Jun 2010	Theft	Other	Yes
9	Medical Card System/MCS-HMO/MCS Advantage/MCS Life	PR	Business Associate	115,000	9 Nov 2010	Unauthorized Access/Disclosure	Other, Other Portable Electronic Device	Yes
10	Governor's Office of Information Technology	CO	Business Associate	105,470	9 Jul 2010	Theft	Desktop Computer	Yes
11	Providence Hospital	MI	Healthcare Provider	83,945	5 Apr 2010	Other	Other	No
12	Cincinnati Childrens Hospital Medical Center	OH	Healthcare Provider	60,998	1 Jun 2010	Theft	Laptop	No
13	Praxair Healthcare Services, Inc. (Home Care Supply in NY)	CT	Healthcare Provider	54,165	19 Apr 2010	Theft	Laptop	No
14	Silicon Valley Eyecare Optometry and Contact Lenses	CA	Healthcare Provider	40,000	13 May 2010	Theft	Network Server	No
15	County of Los Angeles	CA	Healthcare Provider	33,000	17 Sep 2010	Theft	Paper/Films	No

Section 2010.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Theft135 (68%)

Other23 (12%)

Loss20 (10%)

Unauthorized Access/Disclosure10 (5%)

Improper Disposal10 (5%)

Hacking/IT Incident8 (4%)

not given1 (1%)

Location of breached information

Laptop55 (28%)

Paper/Films51 (26%)

Other45 (23%)

Other Portable Electronic Device31 (16%)

Desktop Computer29 (15%)

Network Server21 (11%)

Email6 (3%)

Electronic Medical Record3 (2%)

Covered entity type

Healthcare Provider134 (67%)

Business Associate44 (22%)

Health Plan21 (11%)

States with the most filings

New York20 (10%)

Texas18 (9%)

California17 (9%)

Pennsylvania11 (6%)

Illinois9 (5%)

Florida8 (4%)

Tennessee6 (3%)

Puerto Rico6 (3%)

Michigan6 (3%)

Ohio6 (3%)

Section 2010.3 / Filing pages

41 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
AvMed, Inc.	FL	Health Plan	1,220,000	3 Jun 2010	Theft	Laptop	No
BlueCross BlueShield of Tennessee, Inc.	TN	Health Plan	1,023,209	1 Nov 2010	Theft	Other	No
Iron Mountain Data Products, Inc. (now known as	PA	Business Associate	800,000	19 Jul 2010	Loss	Electronic Medical Record, Other, Other Portable Electronic Device	Yes
Puerto Rico Department of Health - Triple S Management Corp.	PR	Health Plan	475,000	4 Nov 2010	Unauthorized Access/Disclosure	Network Server	Yes
Triple-S Salud, Inc.	PR	Health Plan	398,000	18 Nov 2010	Theft	Network Server	No
Affinity Health Plan, Inc.	NY	Health Plan	344,579	14 Apr 2010	Theft	Other	No
Millennium Medical Management Resources, Inc.	IL	Business Associate	180,111	29 Apr 2010	Theft	Other, Other Portable Electronic Device	Yes
Siemens Medical Solutions, USA, Inc	PA	Business Associate	130,495	4 Jun 2010	Theft	Other	Yes
Medical Card System/MCS-HMO/MCS Advantage/MCS Life	PR	Business Associate	115,000	9 Nov 2010	Unauthorized Access/Disclosure	Other, Other Portable Electronic Device	Yes
Governor's Office of Information Technology	CO	Business Associate	105,470	9 Jul 2010	Theft	Desktop Computer	Yes
Providence Hospital	MI	Healthcare Provider	83,945	5 Apr 2010	Other	Other	No
Cincinnati Childrens Hospital Medical Center	OH	Healthcare Provider	60,998	1 Jun 2010	Theft	Laptop	No
Praxair Healthcare Services, Inc. (Home Care Supply in NY)	CT	Healthcare Provider	54,165	19 Apr 2010	Theft	Laptop	No
Silicon Valley Eyecare Optometry and Contact Lenses	CA	Healthcare Provider	40,000	13 May 2010	Theft	Network Server	No
County of Los Angeles	CA	Healthcare Provider	33,000	17 Sep 2010	Theft	Paper/Films	No
WellPoint, Inc.	IN	Health Plan	31,700	30 Jul 2010	Hacking/IT Incident	Network Server	No
Care 1st Health Plan	CA	Business Associate	29,000	6 Jul 2010	Loss, Other	Other, Other Portable Electronic Device	Yes
The University of Texas at Arlington	TX	Healthcare Provider	27,000	23 Jul 2010	Hacking/IT Incident	Network Server	No
Fort Worth Allergy and Asthma Associates	TX	Healthcare Provider	25,000	5 Aug 2010	Theft	Network Server	No
Pioneer Valley Pathology	MA	Business Associate	24,750	25 Aug 2010	Theft	Paper/Films	Yes
Our Lady of Peace Hospital	KY	Healthcare Provider	24,600	29 Dec 2010	Loss, Theft	Other, Other Portable Electronic Device	No
Montefiore Medical Center	NY	Healthcare Provider	23,753	23 Jul 2010	Theft	Desktop Computer	No
Aon Consulting	PA	Business Associate	22,642	7 Sep 2010	Other	Network Server	Yes
St. Joseph Heritage Healthcare	CA	Healthcare Provider	22,012	23 Apr 2010	Theft	Desktop Computer	No
Thomas Jefferson University Hospitals, Inc.	PA	Healthcare Provider	21,000	9 Aug 2010	Theft	Laptop	No
Ernest T. Bice, Jr. DDS, P.A.	TX	Healthcare Provider	21,000	10 Mar 2010	Theft	Other, Other Portable Electronic Device	No
Pediatric and Adult Allergy, PC	IA	Healthcare Provider	19,222	11 Sep 2010	Loss	Other Portable Electronic Device	No
University of Oklahoma - Tulsa, Neurology Clinic	OK	Healthcare Provider	19,200	27 Sep 2010	Hacking/IT Incident	Desktop Computer	No
UnitedHealth Group health plan single affiliated covered entity	MN	Health Plan	16,291	4 Jun 2010	Other	Paper/Films	No
Kaiser Permanente Medical Care Program	CA	Healthcare Provider	15,500	12 Jan 2010	Theft	Other, Other Portable Electronic Device	No
Merkle Direct Marketing	MD	Business Associate	15,000	11 Jan 2010	Theft	Paper/Films	Yes
Augusta Data Storage, Inc	GA	Business Associate	14,000	21 Jun 2010	Loss	Other	Yes
Aultman Hospital	OH	Healthcare Provider	13,867	5 Aug 2010	Theft	Laptop	No
Shands at UF	FL	Healthcare Provider	12,580	1 Mar 2010	Theft	Laptop	No
VNA of Southeastern Ct.	CT	Healthcare Provider	12,000	11 Nov 2010	Theft	Laptop	No
Blue Cross & Blue Shield of Rhode Island	RI	Health Plan	12,000	21 Apr 2010	Theft	Paper/Films	No
McKesson Pharmacy Systems LLC	GA	Business Associate	11,440	5 Aug 2010	Other	Other, Other Portable Electronic Device	Yes
Joseph A. Gagnon d/b/a Goldthwait Associates	MA	Business Associate	11,000	1 Oct 2010	Improper Disposal	Paper/Films	Yes
DentaQuest	MA	Business Associate	10,515	9 Jun 2010	Theft	Laptop	Yes
Loma Linda University School of Dentistry	CA	Healthcare Provider	10,100	11 Aug 2010	Theft	Desktop Computer	No
Goodwill Industries of Greater Grand Rapids, Inc.	MI	Healthcare Provider	10,000	15 Jan 2010	Theft	Other	No

Section 2010.4 / All other filings

158 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Montefiore Medical Center	NY	Healthcare Provider	16,820	23 Jul 2010	Theft	Desktop Computer	No
Thrivent Financial for Lutherans	WI	Health Plan	9,500	3 Mar 2010	Theft	Laptop	No
SW Seattle Orthopaedic and Sports Medicine	WA	Healthcare Provider	9,493	15 Oct 2010	Hacking/IT Incident	Network Server	No
H.E.L.P. Financial Corporation	MI	Business Associate	9,475	3 Dec 2010	Unauthorized Access/Disclosure	Paper/Films	Yes
Ashley and Gray DDS	MO	Healthcare Provider	9,309	19 Jan 2010	Theft	Desktop Computer	No
Wyoming Department of Health	WY	Health Plan	9,023	2 Mar 2010	Unauthorized Access/Disclosure	Network Server	No
Counseling and Psychotherapy of Throggs Neck	NY	Healthcare Provider	9,000	21 Sep 2010	Theft	Desktop Computer	No
University of Tennessee Medical Center	TN	Healthcare Provider	8,200	30 Nov 2010	Improper Disposal	Paper/Films	No
University of Pittsburgh Student Health Center	PA	Healthcare Provider	8,000	2 Apr 2010	Loss, Theft	Paper/Films	No
Cardiology Consultants/Baptist Health Care Corporation	FL	Healthcare Provider	8,000	18 Feb 2010	Theft	Desktop Computer	No
University Health System	NV	Healthcare Provider	7,526	22 Jun 2010	Theft	Network Server	No
University of California, San Francisco	CA	Healthcare Provider	7,300	27 Jan 2010	Theft	Laptop	No
Cook County Health & Hospitals System	IL	Healthcare Provider	7,081	20 Aug 2010	Theft	Laptop	No
Charles Mitchell MD	TX	Healthcare Provider	6,873	28 Jul 2010	Theft	Desktop Computer	No
NewYork-Presbyterian Hospital and Columbia University Medical Center	NY	Healthcare Provider	6,800	24 Sep 2010	Theft	Network Server	No
VHS Genesis Lab Inc.	IL	Healthcare Provider	6,800	5 Apr 2010	Loss	Paper/Films	No
Aetna	CT	Health Plan	6,372	27 Jul 2010	Unauthorized Access/Disclosure	Paper/Films	No
Mary M. Desch,MD/PathHealer, LTD	AZ	Healthcare Provider	5,893	28 Jun 2010	Theft	Laptop	No
Health Behavior Innovations (HBI)	UT	Business Associate	5,700	5 Feb 2010	Theft	Other	Yes
Mercer Health & Benefits	ID	Business Associate	5,500	10 Aug 2010	Loss	Other	Yes
John Muir Physician Network	CA	Healthcare Provider	5,450	24 Apr 2010	Theft	Laptop	No
City of Charlotte, NC (Health Plan)	NC	Health Plan	5,220	24 May 2010	Loss	Other	Yes
Medical Center At Bowling Green	KY	Healthcare Provider	5,148	26 Apr 2010	Theft	Other, Other Portable Electronic Device	No
Laboratory Corporation of America/Dynacare Northwest, Inc.	WA	Healthcare Provider	5,080	18 Mar 2010	Theft	Laptop	No
Debra C. Duffy, DDS	TX	Healthcare Provider	4,700	5 Oct 2010	Theft	Laptop, Network Server	No
Eastmoreland Surgical Clinic, William Graham, DO	OR	Healthcare Provider	4,328	20 Aug 2010	Theft	Desktop Computer, Laptop, Other, Other Portable Electronic Device	No
Heriberto Rodriguez-Ayala, M.D.	TX	Healthcare Provider	4,200	11 May 2010	Theft	Laptop	No
VA North Texas Health Care System	TX	Healthcare Provider	4,083	25 May 2010	Improper Disposal	Paper/Films	No
State of TN, Bureau of TennCare	TN	Health Plan	3,900	19 Feb 2010	Theft	Paper/Films	No
SunBridge Healthcare Corporation	NM	Healthcare Provider	3,830	8 Jul 2010	Theft	Laptop	No
Lee Memorial Health System	FL	Healthcare Provider	3,800	17 Mar 2010	Other	Paper/Films	No
Children's Medical Center of Dallas	TX	Healthcare Provider	3,800	18 Jan 2010	Loss	Other, Other Portable Electronic Device	No
Henry Ford Hospital	MI	Healthcare Provider	3,700	15 Nov 2010	Theft	Laptop	No
KPMG LLP	NY	Business Associate	3,630	26 Aug 2010	Theft	Other Portable Electronic Device	Yes
Massachusetts Eye and Ear Infirmary	MA	Healthcare Provider	3,594	20 Apr 2010	Theft	Laptop	No
Advanced NeuroSpinal Care	CA	Healthcare Provider	3,500	23 Feb 2010	Theft	Network Server	No
Service Benefits Plan Administrative Services Corp	DC	Business Associate	3,400	8 Jan 2010	Theft	Paper/Films	Yes
Dean Health Systems, Inc.; St. Mary's Hospital; St. Marys Dean Ventures, Incorporated	WI	Healthcare Provider	3,288	20 Dec 2010	Theft	Laptop	No
Mankato Clinic	MN	Healthcare Provider	3,159	28 Dec 2010	Theft	Laptop	No
Geisinger Wyoming Valley Medical Center	PA	Healthcare Provider	2,928	28 Dec 2010	Theft	Email	No
South Carolina Department of Health and Environmental Control	SC	Health Plan	2,850	22 Apr 2010	Improper Disposal	Paper/Films	No
Laboratory Corporation of America / US LABS / Dianon Systems, Inc	AZ	Healthcare Provider	2,773	1 Apr 2010	Theft	Other Portable Electronic Device	No
Curtis R. Bryan, M.D.	VA	Healthcare Provider	2,739	8 Sep 2010	Theft	Laptop	No
Ward A. Morris, DDS	WA	Healthcare Provider	2,698	11 Aug 2010	Theft	Desktop Computer	No
Matrix Imaging	NY	Business Associate	2,631	30 Jul 2010	Theft	Paper/Films	Yes
University of Rochester Medical Center and Affiliates	NY	Healthcare Provider	2,628	20 May 2010	Other	Paper/Films	No
Mount Sinai Medical Center	FL	Healthcare Provider	2,600	23 Mar 2010	Theft	Laptop	No
NYU Hospitals Center	NY	Healthcare Provider	2,563	7 Jul 2010	Theft	Other Portable Electronic Device	No
United Micro Data	ID	Business Associate	2,562	14 Jan 2010	Theft	Other	Yes
Aspen Dental Care P.C.	CO	Healthcare Provider	2,500	26 Oct 2010	Theft	Other	No
Hypertension, Nephrology, Dialysis and Transplantation, PC	AL	Healthcare Provider	2,465	27 Mar 2010	Theft	Laptop	No
Georgetown University Hospital	DC	Healthcare Provider	2,416	13 May 2010	Other, Theft	Email, Other Portable Electronic Device	No
Aetna, Inc.	CT	Health Plan	2,345	7 Nov 2010	Unauthorized Access/Disclosure	Network Server	No
UNCG Speech and Hearing Center	NC	Healthcare Provider	2,300	9 Aug 2010	Hacking/IT Incident	Desktop Computer	No
Nihal Saran, MD	MI	Healthcare Provider	2,300	4 Jun 2010	Theft	Laptop	No
Cumberland Gastroenterology, P.S.C.	KY	Healthcare Provider	2,200	5 Oct 2010	Theft	Paper/Films	No
Jewish Hospital	KY	Healthcare Provider	2,089	5 Aug 2010	Theft	Laptop	No
University of Florida	FL	Healthcare Provider	2,047	8 Jul 2010	Other	Paper/Films	No
University of Kentucky	KY	Healthcare Provider	2,027	18 Jun 2010	Theft	Laptop	No
Southern Perioperative Services, P.C.	AL	Healthcare Provider	2,000	30 Dec 2010	Theft	Other, Other Portable Electronic Device	No
Alaskan AIDS Assistance Association	AK	Business Associate	2,000	22 Sep 2010	Theft	Other, Other Portable Electronic Device	Yes
Ault Chiropractic Center	IN	Healthcare Provider	2,000	15 Sep 2010	Theft	Desktop Computer, Laptop	No
Oklahoma City VA Medical Center	OK	Healthcare Provider	1,950	29 Nov 2010	Improper Disposal, Loss, Theft	Paper/Films	No
St. John's Mercy Medical Group	MO	Healthcare Provider	1,907	9 Aug 2010	Improper Disposal	Paper/Films	No
MSO of Puerto Rico, Inc.	PR	Business Associate	1,907	17 Feb 2010	Theft	Paper/Films	Yes
University of New Mexico Health Sciences Center	NM	Healthcare Provider	1,900	23 Feb 2010	Other	Desktop Computer	No
TOWERS WATSON	VA	Business Associate	1,874	27 Apr 2010	Theft	Other	Yes
Daniel J. Sigman MD PC	MA	Business Associate	1,860	7 Jan 2010	Theft	Electronic Medical Record, Other, Other Portable Electronic Device	Yes
St. Jude Children's Research Hospital	TN	Healthcare Provider	1,745	8 Jun 2010	Loss	Laptop	No
Professional Transcription Company, Inc.	NY	Business Associate	1,744	24 Nov 2010	Theft	Network Server	Yes
Mayo Clinic	MN	Healthcare Provider	1,740	8 Sep 2010	Theft	Electronic Medical Record	No
Chattanooga Family Practice Associates, P.C.	TN	Healthcare Provider	1,711	16 Aug 2010	Loss	Other, Other Portable Electronic Device	No
Baylor College of Medicine	TX	Healthcare Provider	1,646	30 Jul 2010	Theft	Laptop	No
Carolina Center for Development and Rehabilitation	NC	Healthcare Provider	1,590	30 Jul 2010	Theft	Paper/Films	No
Prime Home Care, LLC	NE	Healthcare Provider	1,550	12 Nov 2010	Theft	Desktop Computer	No
Centerstone	TN	Healthcare Provider	1,537	2 Jul 2010	Theft	Desktop Computer, Paper/Films	No
Holy Cross Hospital	FL	Healthcare Provider	1,500	16 Nov 2010	Theft	Paper/Films	No
Eden Medical Center	CA	Business Associate	1,474	23 Sep 2010	Theft	Other, Other Portable Electronic Device	Yes
Oroville Hospital	CA	Business Associate	1,474	23 Sep 2010	Theft	Other, Other Portable Electronic Device	Yes
South Texas Veterans Health Care System	TX	Healthcare Provider	1,430	28 Apr 2010	Improper Disposal, Loss	Paper/Films	No
Robert Wheatley, DDS, PC	MO	Healthcare Provider	1,400	15 Nov 2010	Theft	Laptop	No
The Kent Center	RI	Healthcare Provider	1,361	10 Sep 2010	Theft	Paper/Films	No
Wright State Physicians	OH	Healthcare Provider	1,309	3 Aug 2010	Other	Laptop	No
Carle Clinic Association	IL	Healthcare Provider	1,300	28 Jan 2010	Theft	Other, Paper/Films	No
Utah Department of Workforce Services	UT	Business Associate	1,298	13 Oct 2010	Other	Desktop Computer, Paper/Films	Yes
CareCore National	SC	Business Associate	1,270	20 Sep 2010	Other	Paper/Films	Yes
California Therapy Solutions	CA	Healthcare Provider	1,250	22 Dec 2010	Theft	Other, Other Portable Electronic Device	No
Matthew H. Conrad, M.D., P.A.	KS	Healthcare Provider	1,200	19 Sep 2010	Theft	Laptop, Paper/Films	No
NYU School of Medicine--Aging and Dementia Clinical Research Center	NY	Healthcare Provider	1,200	27 Aug 2010	Loss	Other, Other Portable Electronic Device	No
Medina OB/GYN Associates, Inc	OH	Business Associate	1,200	23 Jul 2010	Improper Disposal	Paper/Films	Yes
St. Vincent Hospital and Health Care Center, Inc.	IN	Healthcare Provider	1,199	23 Sep 2010	Theft	Laptop	No
Occupational Health Partners	KS	Healthcare Provider	1,105	1 Jun 2010	Theft	Laptop	No
Sta-home Health & Hospice	MS	Healthcare Provider	1,104	8 Nov 2010	Theft	Desktop Computer	No
Center for Neurosciences	AZ	Healthcare Provider	1,100	10 Feb 2010	Theft	Laptop	No
UnitedHealthcare Insurance Company	MN	Business Associate	1,097	17 Jul 2010	Other	Paper/Films	Yes
Gair Medical Transcription Services, Inc.	PA	Business Associate	1,085	15 Dec 2010	Unauthorized Access/Disclosure	Network Server	Yes
Massachusetts Eye and Ear Infirmary	MA	Healthcare Provider	1,076	8 Jan 2010	Theft	Other	No
Mercer	MI	Business Associate	1,073	30 Jul 2010	Loss	Other	Yes
Comprehensive Care Management Corporation	NY	Health Plan	1,020	14 Jun 2010	Theft	Desktop Computer, Email, Laptop, Network Server	No
The Children's Medical Center of Dayton	OH	Healthcare Provider	1,001	14 Jun 2010	Other	Email	No
Riverside Mercy Hospital and Ohio/Mercy Diagnostics	OH	Healthcare Provider	1,000	21 Dec 2010	Improper Disposal	Paper/Films	No
Gary C. Spinks, DMD, PC	MD	Healthcare Provider	1,000	13 Dec 2010	Hacking/IT Incident	Desktop Computer, Network Server	No
Hospital Auxilio Mutuo	PR	Healthcare Provider	1,000	13 Dec 2010	Theft	Desktop Computer, Laptop	No
University of Arkansas for Medical Sciences	AR	Healthcare Provider	1,000	18 Oct 2010	Theft	Other, Other Portable Electronic Device	No
SunBridge Healthcare Corporation	NM	Healthcare Provider	1,000	25 Aug 2010	Theft	Other, Other Portable Electronic Device	No
Yale University	CT	Healthcare Provider	1,000	18 Aug 2010	Theft	Laptop	No
Children's Hospital & Research Center at Oakland	CA	Healthcare Provider	1,000	29 Jun 2010	Other	Paper/Films	No
Rainbow Hospice and Palliative Care	IL	Healthcare Provider	1,000	26 May 2010	Theft	Laptop	No
St. James Hospital and Health Centers	IL	Healthcare Provider	967	24 Sep 2010	Improper Disposal	Paper/Films	No
Griffin Hospital	CT	Healthcare Provider	957	26 Mar 2010	Hacking/IT Incident	Network Server	No
KPMG LLP	NY	Business Associate	956	26 Aug 2010	Theft	Other, Other Portable Electronic Device	Yes
Pediatric Sports and Spine Associates	TX	Healthcare Provider	955	9 Apr 2010	Theft	Laptop	No
Aramark Healthcare Support Services, LLC	PA	Business Associate	937	24 Jun 2010	Other	Email	Yes
LORENZO BROWN, MD INC.	CA	Healthcare Provider	928	29 Sep 2010	Theft	Desktop Computer	No
Concentra	TX	Healthcare Provider	900	19 Jan 2010	Theft	Laptop	No
University of Rochester Medical Center and Affiliates	NY	Healthcare Provider	857	7 Sep 2010	Loss	Other Portable Electronic Device	No
Manor Care Indy (South), LLC.	IN	Healthcare Provider	845	12 Nov 2010	Unauthorized Access/Disclosure	Paper/Films	No
Advocate Health Care	IL	Healthcare Provider	812	22 Jan 2010	Theft	Laptop	No
Keystone/AmeriHealth Mercy Health Plans	PA	Health Plan	808	30 Dec 2010	Loss	Other, Other Portable Electronic Device	No
Zenith Administrators, Inc.	MD	Business Associate	800	29 Dec 2010	Theft	Paper/Films	Yes
zarzamora family dental care	TX	Healthcare Provider	800	7 Dec 2010	Theft	Desktop Computer	No
Long Island Consultation Center	NY	Healthcare Provider	800	7 Jul 2010	Theft	Other, Other Portable Electronic Device	No
Omaha Construction Industry, Privacy Manager Breach	NE	Business Associate	800	21 May 2010	Theft	Laptop	Yes
Memorial Hospital of Gardena	CA	Healthcare Provider	771	25 Nov 2010	Unauthorized Access/Disclosure	Paper/Films	No
Computer Program and Systems, Inc. (CPSI)	AL	Business Associate	768	30 Mar 2010	not given	Email	Yes
The Southwestern Indiana Regional Council on Aging	IN	Business Associate	757	27 Dec 2010	Theft	Laptop	Yes
UnitedHealth Group health plan single affiliated covered entity	MN	Health Plan	735	27 Apr 2010	Theft	Other, Paper/Films	No
Northridge Hospital Medical Center	CA	Healthcare Provider	716	2 Nov 2010	Loss	Paper/Films	No
University of Louisville Research Foundation, Inc., DBA The Kidney Disease Program	KY	Healthcare Provider	708	1 Jun 2010	Hacking/IT Incident	Network Server	No
Texas Children's Hospital	TX	Healthcare Provider	694	30 Jul 2010	Theft	Laptop	No
Johns Hopkins University Applied Physics Laboratory (JHU/APL) Medical and Dental Insurance Plan	MD	Health Plan	692	6 Oct 2010	Other	Other	No
The Methodist Hospital	TX	Healthcare Provider	689	25 Jan 2010	Theft	Other	No
Prince William County Community Services (CS)	VA	Healthcare Provider	669	15 Jul 2010	Theft	Other Portable Electronic Device	No
McKesson Information Solutions, LLC	GA	Business Associate	660	9 Apr 2010	Other	Paper/Films	Yes
Beauty Dental, Inc.	IL	Healthcare Provider	657	5 Aug 2010	Loss, Theft	Paper/Films	No
Heritage Health Solutions	TX	Business Associate	656	14 May 2010	Theft	Laptop	Yes
Oconee Physician Practices	SC	Healthcare Provider	653	20 May 2010	Theft	Laptop	No
VA Eastern Colorado Health Care System	CO	Healthcare Provider	649	5 May 2010	Theft	Paper/Films	No
Montefiore Medical Center	NY	Healthcare Provider	625	9 Mar 2010	Theft	Laptop	No
Albert Einstein Healthcare Network	PA	Healthcare Provider	613	30 Nov 2010	Theft	Desktop Computer	No
MSO of Puerto Rico	PR	Business Associate	605	17 Feb 2010	Theft	Paper/Films	Yes
alma aguado md pa	TX	Healthcare Provider	600	21 Jun 2010	Theft	Network Server	No
Tomah Memorial Hospital	WI	Healthcare Provider	600	16 Apr 2010	Other	Other	No
Hils Transcription	IN	Business Associate	585	27 Dec 2010	Unauthorized Access/Disclosure	Other	Yes
LoneStar Audiology Group	TX	Healthcare Provider	585	8 Oct 2010	Theft	Laptop	No
WESTMED Medical Group	NY	Healthcare Provider	578	5 Oct 2010	Theft	Laptop	No
Miami VA Healthcare System	FL	Healthcare Provider	568	5 May 2010	Theft	Paper/Films	No
Penn Treaty Network America Insurance Company	PA	Health Plan	560	3 Aug 2010	Other	Other	No
Cook County Health & Hospitals System	IL	Healthcare Provider	556	17 Dec 2010	Theft	Desktop Computer	No
North Carolina Baptist Hospital	NC	Healthcare Provider	554	3 Mar 2010	Theft	Paper/Films	No
Kings County Hospital Center	NY	Healthcare Provider	542	30 Nov 2010	Theft	Desktop Computer	No
DC Chartered Health Plan, Inc	DC	Health Plan	540	23 Jul 2010	Theft	Laptop	No
Visiting Nurse Service Association of Schenectady County	NY	Healthcare Provider	535	12 Nov 2010	Theft	Laptop	No
Lucille Packard Children's Hospital	CA	Healthcare Provider	532	21 Feb 2010	Other	Desktop Computer	No
Blue Cross Blue Shield of RI	RI	Business Associate	528	16 Feb 2010	Other	Paper/Films	Yes
LabCorp Patient Service Center	NV	Healthcare Provider	507	10 Sep 2010	Theft	Paper/Films	No
Rockbridge Area Community Services	VA	Healthcare Provider	500	29 Apr 2010	Theft	Desktop Computer, Laptop	No
Central Brooklyn Medical Group, PC	NY	Healthcare Provider	500	25 Feb 2010	Theft	Paper/Films	No

← 2009: 18 filings 2011: 200 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.