Year File 2014 / HHS OCR Breach Register314 filingsRetrieved 28 August 2026

Time

2014: 314 breach filings.

314 breaches of 500 or more individuals were submitted to HHS in 2014, affecting 19,073,551 individuals (+13% on 2013's 277). 12% were hacking or IT incidents; 79 involved a business associate; California filed the most (36). 0 remain under investigation.

Filings

314

2013: 277

Individuals affected

19,073,551

Median filing 2,691

Largest filing

6,121,158

Community Health Systems Professional Services Corporations, TN

Hacking / IT share

12%

39 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2014.1 / Largest filings

Fifteen largest breaches submitted in 2014

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	Community Health Systems Professional Services Corporations	TN	Healthcare Provider	6,121,158	21 Aug 2014	Hacking/IT Incident	Network Server	No
2	Community Health Systems Professional Services Corporation	TN	Business Associate	4,500,000	20 Aug 2014	Theft	Network Server	Yes
3	Xerox State Healthcare, LLC	TX	Business Associate	2,000,000	10 Sep 2014	Unauthorized Access/Disclosure	Desktop Computer, Email, Laptop, Network Server, Other, Other Portable Electronic Device	Yes
4	Montana Department of Public Health & Human Services	MT	Health Plan	1,062,509	7 Jul 2014	Hacking/IT Incident	Network Server	No
5	Horizon Healthcare Services, Inc., doing business as Horizon Blue Cross Blue Shield of New Jersey, and its affiliates	NJ	Business Associate	839,711	3 Jan 2014	Theft	Laptop	Yes
6	St Joseph Health System	TX	Healthcare Provider	405,000	5 Feb 2014	Hacking/IT Incident	Network Server	No
7	Triple-S Salud, Inc. - Breach Case#2	PR	Health Plan	398,000	24 Jan 2014	Theft	Network Server	Yes
8	Sutherland Healthcare Solutions, Inc.	NJ	Business Associate	342,197	22 May 2014	Theft	Email, Laptop	Yes
9	Touchstone Medical Imaging, LLC	TN	Healthcare Provider	307,528	3 Oct 2014	Unauthorized Access/Disclosure	Network Server	No
10	Indian Health Service	MD	Health Plan	214,000	1 Apr 2014	Unauthorized Access/Disclosure	Laptop	No
11	Walgreen Co.	IL	Healthcare Provider	160,000	15 Dec 2014	Other	Paper/Films	No
12	NRAD Medical Associates, P.C.	NY	Healthcare Provider	97,000	20 Jun 2014	Hacking/IT Incident, Unauthorized Access/Disclosure	Desktop Computer, Other Portable Electronic Device	No
13	Aventura Hospital and Medical Center	FL	Healthcare Provider	82,601	11 Sep 2014	Theft, Unauthorized Access/Disclosure	Network Server	No
14	Valesco Ventures	FL	Business Associate	82,601	9 Sep 2014	Theft, Unauthorized Access/Disclosure	Electronic Medical Record	Yes
15	Central Dermatology Center, P.A.	NC	Healthcare Provider	76,258	7 Nov 2014	Theft	Network Server	No

Section 2014.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Theft129 (41%)

Unauthorized Access/Disclosure107 (34%)

Hacking/IT Incident39 (12%)

Loss31 (10%)

Other27 (9%)

Improper Disposal12 (4%)

Unknown1 (0%)

Location of breached information

Paper/Films75 (24%)

Network Server63 (20%)

Laptop56 (18%)

Email40 (13%)

Other40 (13%)

Other Portable Electronic Device40 (13%)

Desktop Computer29 (9%)

Electronic Medical Record16 (5%)

Covered entity type

Healthcare Provider197 (63%)

Business Associate74 (24%)

Health Plan40 (13%)

not given3 (1%)

States with the most filings

California36 (11%)

Texas27 (9%)

Illinois17 (5%)

Florida17 (5%)

New York16 (5%)

Pennsylvania15 (5%)

Georgia15 (5%)

Minnesota13 (4%)

Ohio11 (4%)

Tennessee10 (3%)

Section 2014.3 / Filing pages

78 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Community Health Systems Professional Services Corporations	TN	Healthcare Provider	6,121,158	21 Aug 2014	Hacking/IT Incident	Network Server	No
Community Health Systems Professional Services Corporation	TN	Business Associate	4,500,000	20 Aug 2014	Theft	Network Server	Yes
Xerox State Healthcare, LLC	TX	Business Associate	2,000,000	10 Sep 2014	Unauthorized Access/Disclosure	Desktop Computer, Email, Laptop, Network Server, Other, Other Portable Electronic Device	Yes
Montana Department of Public Health & Human Services	MT	Health Plan	1,062,509	7 Jul 2014	Hacking/IT Incident	Network Server	No
Horizon Healthcare Services, Inc., doing business as Horizon Blue Cross Blue Shield of New Jersey, and its affiliates	NJ	Business Associate	839,711	3 Jan 2014	Theft	Laptop	Yes
St Joseph Health System	TX	Healthcare Provider	405,000	5 Feb 2014	Hacking/IT Incident	Network Server	No
Triple-S Salud, Inc. - Breach Case#2	PR	Health Plan	398,000	24 Jan 2014	Theft	Network Server	Yes
Sutherland Healthcare Solutions, Inc.	NJ	Business Associate	342,197	22 May 2014	Theft	Email, Laptop	Yes
Touchstone Medical Imaging, LLC	TN	Healthcare Provider	307,528	3 Oct 2014	Unauthorized Access/Disclosure	Network Server	No
Indian Health Service	MD	Health Plan	214,000	1 Apr 2014	Unauthorized Access/Disclosure	Laptop	No
Walgreen Co.	IL	Healthcare Provider	160,000	15 Dec 2014	Other	Paper/Films	No
NRAD Medical Associates, P.C.	NY	Healthcare Provider	97,000	20 Jun 2014	Hacking/IT Incident, Unauthorized Access/Disclosure	Desktop Computer, Other Portable Electronic Device	No
Aventura Hospital and Medical Center	FL	Healthcare Provider	82,601	11 Sep 2014	Theft, Unauthorized Access/Disclosure	Network Server	No
Valesco Ventures	FL	Business Associate	82,601	9 Sep 2014	Theft, Unauthorized Access/Disclosure	Electronic Medical Record	Yes
Central Dermatology Center, P.A.	NC	Healthcare Provider	76,258	7 Nov 2014	Theft	Network Server	No
Amerigroup Texas, Inc.	VA	Business Associate	75,026	10 Apr 2014	Theft	Paper/Films	Yes
Visionworks Inc.	TX	Health Plan	74,944	10 Nov 2014	Loss	Network Server	No
St. Vincent Hospital and Health Care Center, Inc.	IN	Business Associate	63,325	9 Jul 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
State of Tennessee State Insurance Plan	TN	Health Plan	60,582	15 Aug 2014	Hacking/IT Incident	Network Server	No
Onsite Health Diagnostics (OHD)	TX	Business Associate	60,582	8 Aug 2014	Hacking/IT Incident	Network Server	Yes
Triple-S Salud	PR	Health Plan	56,853	29 May 2014	Unauthorized Access/Disclosure	Paper/Films	No
Sutherland Healthcare Solutions	CA	Business Associate	55,900	21 Mar 2014	Theft	Desktop Computer	Yes
Banner Health	AZ	Healthcare Provider	55,207	5 Mar 2014	Other	Other	No
InSync Computer Solutions, Inc.	AL	Business Associate	50,918	11 Jul 2014	Other	Network Server	Yes
Iron Mountain	CA	Business Associate	49,714	15 Aug 2014	Improper Disposal, Loss, Theft	Paper/Films	Yes
North Carolina Department of Health and Human Services	NC	Healthcare Provider	48,752	7 Jan 2014	Unauthorized Access/Disclosure	Other	No
North Carolina Department of Health and Human Services	NC	Health Plan	48,752	6 Jan 2014	Unauthorized Access/Disclosure	Other	No
Visionworks Inc.	TX	Health Plan	47,683	21 Nov 2014	Theft	Network Server	No
Administracion de Seguros de Salud - Triple S Salud Inc (BA)	PR	Business Associate	46,473	15 Apr 2014	Theft	Other Portable Electronic Device	Yes
The Union Labor Life Insurance Company	MD	Healthcare Provider	42,713	27 Jun 2014	Theft	Laptop	No
University of Wisconsin-Madison School of Pharmacy	WI	Business Associate	41,437	30 Jan 2014	Loss	Other Portable Electronic Device	Yes
The Corvallis Clinic, P.C.	OR	Healthcare Provider	41,000	19 Dec 2014	Theft	Laptop	No
Self Regional Healthcare	SC	Healthcare Provider	38,906	25 Jul 2014	Theft	Laptop	No
Jersey City Medical Center	NJ	Healthcare Provider	36,400	7 Aug 2014	Loss	Other Portable Electronic Device	No
MD Manage (Vcarve LLC)	NJ	Business Associate	35,357	22 Oct 2014	Unauthorized Access/Disclosure	Network Server	Yes
Santa Rosa Memorial Hospital, Privacy Manager Breach	CA	Healthcare Provider	33,702	13 Jun 2014	Theft	Other Portable Electronic Device	No
Cedars-Sinai Health System	CA	Healthcare Provider	33,136	10 Sep 2014	Theft	Laptop	No
MetroPlus Health Plan, Inc.	NY	Health Plan	31,980	20 Nov 2014	Other	Email	No
Central Utah Clinic	UT	Healthcare Provider	31,677	7 Aug 2014	Hacking/IT Incident	Network Server	No
Sony Pictures Entertainment Health and Welfare Benefits Plan (the Plan)	CA	Health Plan	30,000	12 Dec 2014	Hacking/IT Incident	Desktop Computer, Laptop, Network Server	No
REEVE-WOODS EYE CENTER	CA	Healthcare Provider	30,000	15 Nov 2014	Theft	Network Server	No
CareAll Management, LLC	TN	Healthcare Provider	28,300	12 Aug 2014	Improper Disposal	Other	No
HealthPartners Inc	MN	Health Plan	27,839	21 Mar 2014	Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	No
Jamaica Hospital Medical Center	NY	Healthcare Provider	26,162	23 May 2014	Unauthorized Access/Disclosure	Desktop Computer	No
Highlands Cashier Hospital	NC	Healthcare Provider	26,115	11 Dec 2014	Unauthorized Access/Disclosure	Network Server	No
Computer Programs and Systems, Inc.	AL	Business Associate	25,764	26 Nov 2014	Theft	Network Server	Yes
Virginia Premier Health Plan (VPHP)	VA	Business Associate	25,513	10 Jan 2014	Theft	Paper/Films	Yes
Cook County Health & Hospitals System	IL	Healthcare Provider	22,511	11 Jan 2014	Other	Email	No
Quraishi, Nisar A	NY	Healthcare Provider	20,000	22 Oct 2014	Theft	Paper/Films	No
Central City Concern	OR	Healthcare Provider	17,914	19 May 2014	Unauthorized Access/Disclosure	Other	No
American Health Inc.	PR	Health Plan	17,776	3 Apr 2014	Theft	Other	No
Kmart Corporation	IL	Healthcare Provider	16,446	10 Feb 2014	Theft	Electronic Medical Record, Other	No
Colorado Department of Health Care Policy & Financing	CO	Health Plan	15,380	10 Oct 2014	Unauthorized Access/Disclosure	Other	Yes
Boston Medical Center	MA	not given	15,265	29 Apr 2014	Unauthorized Access/Disclosure	Network Server	Yes
Rady Children's Hospital - San Diego	CA	Healthcare Provider	14,121	24 Jun 2014	Unauthorized Access/Disclosure	Email	No
Coordinated Health	PA	Healthcare Provider	13,907	31 Oct 2014	Theft	Laptop	No
PRN Medical Services, LLC dba Symbius Medical, LLC	AZ	Healthcare Provider	13,877	29 Jul 2014	Other, Theft, Unauthorized Access/Disclosure	Email, Network Server	No
Dennis Flynn MD	IL	Healthcare Provider	13,646	19 Aug 2014	Theft	Laptop	No
Loi Luu	CA	Healthcare Provider	13,177	14 Nov 2014	Theft	Network Server	No
University of Miami	FL	Healthcare Provider	13,074	12 Feb 2014	Loss	Paper/Films	No
Phoebe Putney Memorial Hospital	GA	Healthcare Provider	12,937	7 Jan 2014	Theft	Electronic Medical Record, Paper/Films	No
Clay County Hospital	IL	Healthcare Provider	12,621	12 Dec 2014	Unauthorized Access/Disclosure	Other	No
Independence Blue Cross and AmeriHealth New Jersey	PA	Health Plan	12,450	26 Dec 2014	Improper Disposal	Paper/Films	No
Centura Health	CO	Healthcare Provider	12,286	22 Apr 2014	Hacking/IT Incident	Email	No
Western Regional Center for Brain and Spine Surgery	NV	Healthcare Provider	12,000	12 Jul 2014	Theft	Network Server	No
Kaiser Foundation Health Plan of Colorado	CO	Health Plan	11,551	12 Aug 2014	Other, Unauthorized Access/Disclosure	Other	No
American Health Inc.	PR	Health Plan	11,531	18 May 2014	Unauthorized Access/Disclosure	Paper/Films	No
David DiGiallorenzo, D.M.D.	PA	Healthcare Provider	11,000	19 Jun 2014	Hacking/IT Incident, Unauthorized Access/Disclosure	Other	No
Duke University Health System	NC	Healthcare Provider	10,993	29 Aug 2014	Theft	Other Portable Electronic Device	No
Mount Sinai Beth Israel	NY	Healthcare Provider	10,793	3 Oct 2014	Theft	Laptop	No
Service Coordination, Inc.	MD	Business Associate	10,766	17 Apr 2014	Hacking/IT Incident, Unauthorized Access/Disclosure	Network Server	Yes
Memorial Hermann Health System	TX	Healthcare Provider	10,604	29 Aug 2014	Unauthorized Access/Disclosure	Desktop Computer	No
24 ON Physicians PC	GA	Business Associate	10,104	15 Aug 2014	Hacking/IT Incident	Network Server	No
PST Services Inc, a McKesson Co.	GA	Business Associate	10,104	8 Aug 2014	Hacking/IT Incident	Network Server	Yes
New York City Health & Hospitals Corporation	NY	Healthcare Provider	10,058	10 Oct 2014	Unauthorized Access/Disclosure	Paper/Films	No
StayWell Health Management, LLC	MN	Business Associate	10,024	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Bulloch Pediatric Group, LLC	GA	Healthcare Provider	10,000	4 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
Iron Mountain Incorporated	MA	Business Associate	10,000	15 Aug 2014	Loss, Theft	Paper/Films	Yes

Section 2014.4 / All other filings

236 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
University of California San Francisco, Privacy Manager Breach	CA	Healthcare Provider	9,861	12 Mar 2014	Theft	Desktop Computer	No
Sorenson Communications/CaptionCall Group Health Plan	UT	Health Plan	9,800	24 Apr 2014	Hacking/IT Incident	Network Server	Yes
Salina Health Education dba Salina Healthcare Center	KS	Healthcare Provider	9,640	5 Jun 2014	Unauthorized Access/Disclosure	Email	No
Network Pharmacy Knoxville	TN	Healthcare Provider	9,602	15 Jan 2014	Theft	Laptop	No
Doctors First Choice Billings, Inc	FL	Business Associate	9,255	11 Jun 2014	Theft	Other	Yes
HealthSource of Ohio Inc.	OH	not given	8,845	26 Feb 2014	Unauthorized Access/Disclosure	Other	Yes
Tufts Associated Health Maintenance Organization, Inc. and Tufts Insurance Company	MA	Health Plan	8,830	24 Apr 2014	Theft	Other	No
Franciscan Medical Group	WA	Healthcare Provider	8,300	28 Mar 2014	Other	Email	No
Triple-C, Inc.	PR	Business Associate	8,000	24 Jan 2014	Theft, Unauthorized Access/Disclosure	Network Server	Yes
Administracion de Seguros de Salud - Triple S Salud Inc (BA)	PR	Health Plan	7,911	18 Jul 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
Triple S Salud Inc.	PR	Business Associate	7,911	15 Apr 2014	Theft	Other Portable Electronic Device	Yes
Jessie Trice Community Health Center, Inc.	FL	Healthcare Provider	7,888	3 Nov 2014	Theft	Desktop Computer, Network Server	No
Mission City Community Network	CA	Healthcare Provider	7,800	12 Mar 2014	Theft	Email	No
Joseph Michael Benson M.D	TX	Healthcare Provider	7,500	27 Feb 2014	Theft	Desktop Computer	No
Diamond Computing Company	GA	Business Associate	7,016	7 Aug 2014	Unauthorized Access/Disclosure	Network Server	Yes
Phoebe Putney Memorial Hospital	GA	Healthcare Provider	6,989	3 Jan 2014	Loss	Desktop Computer	No
Larsen Dental Care LLC	ID	Healthcare Provider	6,900	18 Apr 2014	Theft	Other Portable Electronic Device	No
Lewis J. Sims, DPM, PC dba Sims and Associates Podiatry	NY	Healthcare Provider	6,475	12 Feb 2014	Other, Theft	Laptop	No
Rady Children's Hospital - San Diego	CA	Healthcare Provider	6,307	25 Jun 2014	Unauthorized Access/Disclosure	Email, Other	No
U.S. Health Holdings, Ltd. o/b/o Macomb County, Michigan	MI	Health Plan	6,302	1 Oct 2014	Unauthorized Access/Disclosure	Other	No
Steven A. Goldman, MD Inc.	OH	Healthcare Provider	6,141	22 Aug 2014	Theft	Network Server	No
University Health	LA	Healthcare Provider	6,073	15 Aug 2014	Hacking/IT Incident	Network Server	No
Oklahoma City Indian Clinic	OK	Healthcare Provider	6,000	22 Aug 2014	Unauthorized Access/Disclosure	Email	No
Haley Chiropractic Clinic	WA	Healthcare Provider	6,000	8 Jul 2014	Theft	Desktop Computer, Laptop	No
Mark A. Gillispie	CA	Healthcare Provider	5,845	6 Jun 2014	Theft	Desktop Computer	No
Triple-S Salud	PR	Health Plan	5,795	2 Apr 2014	Theft	Other	No
OptumRx	IL	Business Associate	5,696	30 Apr 2014	Theft	Paper/Films	Yes
NOVA Chiropractic & Rehab Center	VA	Healthcare Provider	5,534	27 Mar 2014	Loss, Other	Other Portable Electronic Device	No
Palomar Health, Privacy Manager Breach	CA	Healthcare Provider	5,499	28 Mar 2014	Theft	Other Portable Electronic Device	No
Abrham Tekola, M.D.,INC	CA	Healthcare Provider	5,471	20 Jun 2014	Theft	Desktop Computer	No
Valley View Hospital Association	CO	Healthcare Provider	5,415	14 Mar 2014	Hacking/IT Incident	Desktop Computer, Laptop	No
Health Dimensions	MI	Healthcare Provider	5,370	16 Jan 2014	Theft	Network Server	No
KP Northern CA Department of Research	CA	Healthcare Provider	5,178	2 Apr 2014	Hacking/IT Incident	Network Server	No
Pediatric Gastroenterology Consultants	CO	Healthcare Provider	5,000	19 Dec 2014	Theft	Laptop	No
IHS	MD	Health Plan	5,000	15 Apr 2014	Unauthorized Access/Disclosure	Other	No
Partners In Nephrology & Endocrinology, P.C.	PA	Healthcare Provider	5,000	14 Mar 2014	Other	Other	No
Todd M. Burton, M.D.	TX	Healthcare Provider	5,000	13 Mar 2014	Theft	Other	No
Willis North America Inc. Medical Expense Benefit Plan	NY	Health Plan	4,830	24 Apr 2014	Unauthorized Access/Disclosure	Email	No
StayWell Health Management, LLC	MN	Business Associate	4,786	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Molina Healthcare of New Mexico, Inc.	NM	Business Associate	4,744	10 May 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Min Yi, M.D.	CA	Healthcare Provider	4,676	5 Feb 2014	Theft	Other Portable Electronic Device	No
ReachOut Home Care [Case #16687]	KY	Healthcare Provider	4,500	9 Dec 2014	Theft	Laptop	No
M&M Computer Services	TX	Business Associate	4,500	10 Oct 2014	Hacking/IT Incident	Network Server	Yes
StayWell Health Management, LLC	MN	Business Associate	4,487	31 Jul 2014	Hacking/IT Incident	Network Server	Yes
AdminisTEP	TX	Business Associate	4,469	25 Nov 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
RGH Enterprises, Inc.	OH	Health Plan	4,230	13 Jan 2014	Theft	Network Server	No
Owensboro Medical Practice, PLLC	KY	Healthcare Provider	4,077	25 Sep 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
Research Integrity, LLC	KY	Business Associate	4,077	22 Sep 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	Yes
Children's Mercy Hospital	MO	Business Associate	4,067	15 Aug 2014	Hacking/IT Incident	Network Server	Yes
South Texas Veterans Health Care System	TX	Healthcare Provider	4,000	9 Oct 2014	Unauthorized Access/Disclosure	Paper/Films	No
Dr. Veronica Joann Barber	CA	Business Associate	4,000	28 Jul 2014	Unauthorized Access/Disclosure	Network Server	Yes
Weill Cornell Medical College	NY	Healthcare Provider	3,936	7 Nov 2014	Theft	Electronic Medical Record, Laptop	No
Sentara Healthcare	VA	Healthcare Provider	3,861	16 Jan 2014	Theft, Unauthorized Access/Disclosure	Electronic Medical Record	No
NFP Maschino, Hudelson & Associates	OK	Business Associate	3,814	30 May 2014	Theft	Laptop	Yes
Temple University Physicians	PA	Healthcare Provider	3,780	5 Sep 2014	Theft	Desktop Computer	No
Greenwood Leflore Hospital	MS	Healthcare Provider	3,750	16 Apr 2014	Theft	Other	No
Wm. Jennings Bryan Dorn VA Medical Center	SC	Healthcare Provider	3,637	10 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
The University of Texas MD Anderson Cancer Center	TX	Healthcare Provider	3,598	31 Jan 2014	Loss	Other Portable Electronic Device	No
Eureka Internal Medicine	CA	Healthcare Provider	3,534	4 Mar 2014	Improper Disposal	Paper/Films	No
Urological Associates of Southern Arizona, P.C.	AZ	Healthcare Provider	3,529	25 Jul 2014	Improper Disposal	Other	No
Multilingual Psychotherapy Centers, Inc	FL	Healthcare Provider	3,500	28 Oct 2014	Theft	Network Server	No
Care Advantage, Inc.	VA	Healthcare Provider	3,458	26 Feb 2014	Theft	Laptop	No
Region Six of the Georgia Department of Behavioral Health and Developmental Disabilities	GA	Healthcare Provider	3,397	9 Oct 2014	Theft	Laptop	No
BioReference Laboratories Inc	NJ	not given	3,334	23 Jul 2014	Unauthorized Access/Disclosure	Network Server	Yes
St. Joseph Health System	TX	Business Associate	3,300	5 Mar 2014	Hacking/IT Incident	Network Server	Yes
AltaMed Health Services Corporation	CA	Healthcare Provider	3,206	29 Aug 2014	Theft	Desktop Computer, Network Server, Paper/Films	No
WA State Department of Social & Health Services	WA	Health Plan	3,104	11 Feb 2014	Other, Unauthorized Access/Disclosure	Paper/Films	No
Geisinger Bloomsburg Hospital	PA	Healthcare Provider	3,101	23 Jan 2014	Loss	Paper/Films	No
Easter Seal Society of Superior California, Privacy Manager Breach	CA	Healthcare Provider	3,026	7 Feb 2014	Theft	Laptop	No
RevSpring, Inc.	MI	Business Associate	3,000	6 Jan 2014	Other	Paper/Films	Yes
Jewish Hospital	KY	Healthcare Provider	2,992	28 Mar 2014	Other	Email	No
Humana Inc [case #15381]	KY	Health Plan	2,962	23 May 2014	Theft	Other Portable Electronic Device	No
Baylor Medical Center at Carrollton	TX	Healthcare Provider	2,874	13 Jun 2014	Unauthorized Access/Disclosure	Electronic Medical Record	No
Murali Menon, Privacy Manager Breach	CA	Healthcare Provider	2,855	30 Dec 2014	Theft	Laptop, Other Portable Electronic Device, Paper/Films	No
Options Counseling Center	NJ	Healthcare Provider	2,828	9 May 2014	Theft, Unauthorized Access/Disclosure	Paper/Films	No
Northwestern Memorial HealthCare	IL	Healthcare Provider	2,813	23 Dec 2014	Theft	Laptop	No
Bay Area Pain Medical Associates	CA	Healthcare Provider	2,780	16 Jul 2014	Theft	Desktop Computer	No
HealthTexas Provider Network	TX	Healthcare Provider	2,742	25 Apr 2014	Hacking/IT Incident	Email	No
Iron Mountain	CA	Business Associate	2,691	14 Nov 2014	Theft	Paper/Films	Yes
New Mexico VA Health Care System	NM	Healthcare Provider	2,657	18 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
Michigan Department of Community Health	MI	Healthcare Provider	2,595	3 Apr 2014	Theft	Other Portable Electronic Device	No
Highmark Inc.	PA	Business Associate	2,589	8 Jul 2014	Theft	Paper/Films	Yes
American Family Care, Inc.	AL	Healthcare Provider	2,588	30 Sep 2014	Theft	Laptop	No
BLUE CROSS AND BLUE SHIELD OF KANSAS CITY	MO	Health Plan	2,546	11 Apr 2014	Unauthorized Access/Disclosure	Other	No
Courier Express/Atlanta, Courier Express/Charlotte & Courier Express US, Inc.	GA	Business Associate	2,523	17 Apr 2014	Theft, Unauthorized Access/Disclosure	Paper/Films	Yes
101 Family Medical Group, Privacy Manager Breach	CA	Business Associate	2,500	8 Jan 2014	Theft	Laptop	Yes
Coulee Medical Center	WA	Healthcare Provider	2,500	3 Jan 2014	Theft	Email, Laptop, Network Server	No
Florida Department of Health	FL	Healthcare Provider	2,477	8 Dec 2014	Other	Email	No
UMass Memorial Medical Center	MA	Healthcare Provider	2,387	5 May 2014	Unauthorized Access/Disclosure	Electronic Medical Record, Paper/Films	No
Ladies First Choice, Inc.	FL	Healthcare Provider	2,365	23 Apr 2014	Theft, Unauthorized Access/Disclosure	Laptop	No
Specialty Clinics Of Georgia - Orthopaedics	GA	Healthcare Provider	2,350	25 Aug 2014	Theft	Paper/Films	No
Cancer Specialists of Tidewater	VA	Healthcare Provider	2,318	31 Jul 2014	Theft	Electronic Medical Record, Other	No
Baylor Medical Center at Irving	TX	Healthcare Provider	2,308	25 Apr 2014	Hacking/IT Incident	Email	No
Group Health Plan of Hurley Medical Center	MI	Health Plan	2,289	16 Jun 2014	Unauthorized Access/Disclosure	Email	No
UC Davis Medical Center, Privacy Manager Breach	CA	Healthcare Provider	2,269	14 Feb 2014	Hacking/IT Incident	Email	No
TMA Practice Management Group	TX	Business Associate	2,260	17 Mar 2014	Improper Disposal, Loss	Other Portable Electronic Device	Yes
Inclusion Research Institute	DC	Business Associate	2,200	24 Apr 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
The Brooklyn Hospital Center	NY	Healthcare Provider	2,172	22 Jan 2014	Theft	Other Portable Electronic Device	No
Iowa Dept. of Human Services	IA	Health Plan	2,042	10 Mar 2014	Other	Email, Laptop, Other Portable Electronic Device	No
Sloane Stecker Physical Therapy, PC	NY	Healthcare Provider	2,000	24 Jun 2014	Theft	Electronic Medical Record	No
Baylor Regional Medical Center at Plano	TX	Healthcare Provider	1,981	25 Apr 2014	Hacking/IT Incident	Email	No
Colorado Community Health Alliance (CCHA)/Physicians Health Partners	CO	Business Associate	1,918	2 Jan 2014	Unauthorized Access/Disclosure	Email	Yes
Beebe Medical Center	DE	Healthcare Provider	1,883	31 Jan 2014	Other	Laptop	No
Cone Health Medical Group	NC	Healthcare Provider	1,872	15 Oct 2014	Unauthorized Access/Disclosure	Paper/Films	No
Cone Health Medical Group	NC	Healthcare Provider	1,872	9 Oct 2014	Unauthorized Access/Disclosure	Paper/Films	No
Kmart Corporation	IL	Healthcare Provider	1,866	10 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
Graybill Medical Group	CA	Healthcare Provider	1,863	15 Oct 2014	Theft	Other	No
Reading Health System	PA	Healthcare Provider	1,845	29 Apr 2014	Loss	Paper/Films	No
Doctors First Choice Billings, Inc.	FL	Business Associate	1,831	12 Jun 2014	Hacking/IT Incident	Other	Yes
Penn State Milton S. Hershey Medical Center	PA	Healthcare Provider	1,801	6 Jun 2014	Unauthorized Access/Disclosure	Email, Other Portable Electronic Device	No
Memorial Healthcare System	FL	Healthcare Provider	1,782	31 Oct 2014	Unauthorized Access/Disclosure	Email	No
Memorial Healthcare System	FL	Healthcare Provider	1,782	30 Oct 2014	Unauthorized Access/Disclosure	Email	No
Northfield Hospital & Clinics	MN	Healthcare Provider	1,778	25 Nov 2014	Improper Disposal	Paper/Films	No
StayWell Health Management, LLC	MN	Business Associate	1,746	18 Mar 2014	Unauthorized Access/Disclosure	Network Server	Yes
Portland VA Medical Center	OR	Healthcare Provider	1,740	29 Oct 2014	Theft	Paper/Films	No
Metropolitan Government of Nashville and Davidson County (Metro) Public Health Department	TN	Health Plan	1,717	29 Aug 2014	Other	Other	No
Hospitalists of Arizona	AZ	Healthcare Provider	1,706	16 Mar 2014	Theft	Laptop	No
COMPLETE MEDICAL HOMECARE	KS	Healthcare Provider	1,700	21 Jan 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
HealthPartners Administrators, Inc.	MN	Business Associate	1,699	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Iron Mountain Records Management	CA	Business Associate	1,674	13 Aug 2014	Improper Disposal, Loss, Theft	Other	Yes
VARO Healthcare	PA	Business Associate	1,667	7 Oct 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Indian Health Service, Aberdeen Area Office	SD	Health Plan	1,632	13 Nov 2014	Unauthorized Access/Disclosure	Email	No
North Big Horn Hospital	WY	Healthcare Provider	1,607	1 Dec 2014	Loss	Paper/Films	No
StayWell Health Management, LLC	MN	Business Associate	1,511	25 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Tri Lakes Medical Center	MS	Healthcare Provider	1,489	15 Jan 2014	Hacking/IT Incident	Network Server	No
Tri Lakes Medical Center	MS	Healthcare Provider	1,489	10 Jan 2014	Hacking/IT Incident	Network Server	No
St. Mary Mercy Hospital	MI	Healthcare Provider	1,488	12 Dec 2014	Unauthorized Access/Disclosure	Email	No
The WellPoint Affiliated Covered Entities	IN	Health Plan	1,464	8 Sep 2014	Unauthorized Access/Disclosure	Paper/Films	No
Baptist Primary Care, Inc.	FL	Healthcare Provider	1,449	20 Nov 2014	Unauthorized Access/Disclosure	Electronic Medical Record	No
Medical Mutual of Ohio	OH	Business Associate	1,420	27 Jan 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Inspira Health Network Inc.	NJ	Healthcare Provider	1,411	21 Feb 2014	Theft	Desktop Computer	No
VGM Homelink	IA	Business Associate	1,400	18 Apr 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Midwest Womens Healthcare Specialist	MO	Healthcare Provider	1,376	26 Aug 2014	Improper Disposal	Paper/Films	No
Ferguson Advertising, Inc.	IN	Business Associate	1,361	25 Apr 2014	Hacking/IT Incident	Network Server	Yes
Houston Methodist Hospital	TX	Healthcare Provider	1,341	2 Jan 2014	Theft	Paper/Films	No
UC Davis Medical Center, Privacy Manager Breach	CA	Healthcare Provider	1,326	8 Oct 2014	Hacking/IT Incident	Email	No
Albertina Kerr Centers	OR	Healthcare Provider	1,320	6 Oct 2014	Theft	Laptop	No
Open Cities Health Center	MN	Healthcare Provider	1,304	5 Jun 2014	Unauthorized Access/Disclosure	Email	No
Colorado River Indian Tribes	AZ	Healthcare Provider	1,296	14 Nov 2014	Other	Email	No
Midwest Orthopaedics at Rush, LLC	IL	Healthcare Provider	1,256	31 Mar 2014	Hacking/IT Incident	Email	No
Baylor Medical Center at McKinney	TX	Healthcare Provider	1,253	25 Apr 2014	Hacking/IT Incident	Email	No
Apple Valley Care Center	CA	Healthcare Provider	1,251	12 Aug 2014	Hacking/IT Incident	Network Server	No
Elliot Health System	NH	Healthcare Provider	1,208	21 May 2014	Theft	Desktop Computer	No
Alabama Department of Public Health	AL	Healthcare Provider	1,200	26 Jun 2014	Theft	Electronic Medical Record	No
PracMan, Inc.	AL	Business Associate	1,179	10 Mar 2014	Hacking/IT Incident	Network Server	Yes
St. Francis Hospital	GA	Healthcare Provider	1,175	9 Jun 2014	Unauthorized Access/Disclosure	Email	No
PracMan, Inc.	AL	Business Associate	1,145	7 Mar 2014	Hacking/IT Incident	Network Server	Yes
University Urology, P.C.	TN	Healthcare Provider	1,144	14 Apr 2014	Unauthorized Access/Disclosure	Paper/Films	No
St. Vincent Hospital and Healthcare Inc	IN	Healthcare Provider	1,142	18 Feb 2014	Theft	Laptop	No
Health Care Solutions at Home Inc.	OH	Health Plan	1,139	14 Feb 2014	Theft	Other	No
D&J Optical Inc.	AL	Health Plan	1,100	7 Jul 2014	Hacking/IT Incident	Desktop Computer	No
Palo Verde Hospital, Privacy Manager Breach	CA	Healthcare Provider	1,100	25 Feb 2014	Unauthorized Access/Disclosure	Other, Other Portable Electronic Device	No
Detroit Medical Center - Harper University Hospital	MI	Healthcare Provider	1,087	13 Mar 2014	Theft, Unauthorized Access/Disclosure	Paper/Films	No
Birmingham Printing and Publishing, Inc dba Paper Airplane	AL	Business Associate	1,085	24 Jan 2014	Other	Other	Yes
Talyst	WA	Business Associate	1,079	24 Mar 2014	Theft	Laptop	Yes
KEYSTONE INSURERS GROUP	IN	Business Associate	1,008	6 May 2014	Other	Email	Yes
City of Dallas Fire-Rescue Department	TX	Healthcare Provider	1,000	15 Oct 2014	Theft	Laptop	No
Howard L. Weinstein D.P.M.	TX	Healthcare Provider	1,000	10 May 2014	Theft	Laptop	No
Medical Center of Plano	TX	Business Associate	1,000	31 Mar 2014	Unauthorized Access/Disclosure	Other	Yes
Stoetzel's Planet Chiropractic	IL	Healthcare Provider	1,000	25 Mar 2014	Theft	Laptop, Other Portable Electronic Device	No
Berea College	KY	Healthcare Provider	1,000	20 Mar 2014	Other	Electronic Medical Record	No
Brigham and Women's Hospital	MA	Healthcare Provider	999	17 Nov 2014	Theft	Laptop, Other Portable Electronic Device	No
Midwest Urological Group	IL	Healthcare Provider	982	30 Jul 2014	Theft	Laptop	No
Clinical Reference Laboratory, Inc.	KS	Healthcare Provider	979	9 Apr 2014	Loss	Paper/Films	No
Southwest General Health Center	OH	Healthcare Provider	953	13 Jan 2014	Unknown	Other	No
Aventura Hospital and Medical Center	FL	Healthcare Provider	948	26 Aug 2014	Theft	Desktop Computer	No
Hospital for Special Surgery	NY	Healthcare Provider	937	21 Jan 2014	Theft	Desktop Computer, Paper/Films	No
Riverside Medical Group	VA	Healthcare Provider	919	13 Jan 2014	Unauthorized Access/Disclosure	Electronic Medical Record	No
Thomas Cristello, Chiropractor PC	NY	Healthcare Provider	914	9 Sep 2014	Loss	Other Portable Electronic Device	No
NYU Hospitals Center	NY	Healthcare Provider	872	20 Jun 2014	Theft	Laptop	No
Iowa Medicaid Enterprise	IA	Health Plan	862	25 Apr 2014	Unauthorized Access/Disclosure	Paper/Films	No
Kirkbride Center	PA	Healthcare Provider	860	19 Nov 2014	Theft	Paper/Films	No
Saint Francis Hospital and Medical Center	CT	Healthcare Provider	858	16 Jan 2014	Theft	Paper/Films	No
Santa Fe Medical Group	NM	Healthcare Provider	843	12 Sep 2014	Theft	Other Portable Electronic Device	No
PruittHealth Pharmacy Services	GA	Healthcare Provider	841	7 Feb 2014	Theft	Laptop	No
Presence St. Joseph's Medical Center	IL	Healthcare Provider	836	4 Apr 2014	Other	Paper/Films	No
Presence Health	IL	Healthcare Provider	836	31 Jan 2014	Loss	Paper/Films	No
NYU Urology Associates	NY	Healthcare Provider	835	10 Oct 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
vonica chau DDS PA	TX	Healthcare Provider	810	8 Oct 2014	Theft	Desktop Computer	No
Group Health Incorporated	NY	Health Plan	802	27 Aug 2014	Unauthorized Access/Disclosure	Paper/Films	No
Emdeon	TN	Business Associate	800	12 Sep 2014	Theft	Paper/Films	Yes
HealthPartners Administrators, Inc.	MN	Business Associate	796	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Healthy Connections, Inc	CA	Healthcare Provider	793	14 Apr 2014	Loss	Other Portable Electronic Device	No
ENT Partners of Texas (legally known as Irving-Coppell Ear, Nose and Throat)	TX	Healthcare Provider	789	9 Sep 2014	Loss, Theft	Laptop, Other Portable Electronic Device	No
South Suburban HIV/AIDS Regional Clinics	IL	Business Associate	767	17 Sep 2014	Other	Email	Yes
Cook County Health and Hospitals System	IL	Healthcare Provider	767	15 Sep 2014	Hacking/IT Incident	Email	Yes
Colorado Neurodiagnostics, PLLC	CO	Healthcare Provider	750	23 Jun 2014	Theft	Laptop	No
Seven Counties Services, Inc.	KY	Healthcare Provider	727	22 Oct 2014	Improper Disposal, Unauthorized Access/Disclosure	Paper/Films	No
The Longstreet Clinic, P. C.	GA	Healthcare Provider	720	28 Aug 2014	Improper Disposal	Other	No
HealthPartners Administrators, Inc.	MN	Business Associate	715	21 Mar 2014	Loss, Unauthorized Access/Disclosure	Desktop Computer, Laptop, Other Portable Electronic Device	Yes
Compassionate Care Hospice of Central Louisiana, LLC	LA	Healthcare Provider	707	26 Sep 2014	Theft	Laptop, Other	No
Bon Secours Kentucky	KY	Healthcare Provider	697	9 Sep 2014	Unauthorized Access/Disclosure	Other	No
Temple Physicians Inc.	PA	Healthcare Provider	694	13 Jan 2014	Loss, Theft	Paper/Films	No
Midwest Orthopaedic Center SC	IL	Business Associate	680	23 Jul 2014	Unauthorized Access/Disclosure	Network Server	Yes
Tampa General Hospital	FL	Healthcare Provider	675	12 Sep 2014	Unauthorized Access/Disclosure	Electronic Medical Record	No
Heard County EMA	GA	Business Associate	672	22 Oct 2014	Theft	Desktop Computer	No
University of Pennsylvania Health System	PA	Healthcare Provider	661	16 Jul 2014	Theft	Paper/Films	No
Susquehanna Health	PA	Healthcare Provider	657	27 Mar 2014	Unauthorized Access/Disclosure	Email	No
Myriad Genetic Laboratories, Inc.	UT	Healthcare Provider	643	29 Mar 2014	Unauthorized Access/Disclosure	Email	No
Flowers Hospital	AL	Healthcare Provider	629	25 Apr 2014	Theft	Paper/Films	No
The Hearing Zone	UT	Healthcare Provider	623	5 Dec 2014	Theft	Laptop	No
Indian Health Service -Rosebud	MD	Healthcare Provider	620	15 Jul 2014	Loss	Paper/Films	No
IHS	MD	Health Plan	620	19 Jun 2014	Unauthorized Access/Disclosure	Other	No
Shaker Clinic	OH	Healthcare Provider	617	18 Apr 2014	Loss	Paper/Films	No
Mercy Medical Center Redding - Oncology Clinic, Privacy Manager Breach	CA	Healthcare Provider	616	22 Dec 2014	Hacking/IT Incident	Other	No
District Medical Group, Privacy Manager Breach	AZ	Healthcare Provider	616	12 Dec 2014	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
Robert B. Neves, M.D.	CA	Business Associate	611	24 Jan 2014	Theft	Laptop	Yes
MobilexUSA	OH	Healthcare Provider	605	6 Aug 2014	Loss	Paper/Films	No
Data Media	GA	Business Associate	600	28 Feb 2014	Other	Other	Yes
St. Elizabeth's Medical Center	MA	Healthcare Provider	595	26 Aug 2014	Theft	Laptop, Other Portable Electronic Device	No
Bay Park Hospital	OH	Healthcare Provider	594	28 May 2014	Unauthorized Access/Disclosure	Electronic Medical Record, Network Server	No
Supportive Concepts for Families, Inc.	PA	Healthcare Provider	593	13 Feb 2014	Unauthorized Access/Disclosure	Network Server	No
VA Long Beach Healthcare System	CA	Healthcare Provider	592	4 Jul 2014	Unauthorized Access/Disclosure	Paper/Films	No
Orlando Health, Inc.	FL	Healthcare Provider	586	24 Mar 2014	Loss	Other Portable Electronic Device	No
Vcarve LLC d/b/a MD Manage	NJ	Business Associate	585	6 Oct 2014	Unauthorized Access/Disclosure	Network Server	Yes
Florida Healthy Kids Corporation	FL	Health Plan	580	9 Apr 2014	Unauthorized Access/Disclosure	Paper/Films	No
Policy Studies, Inc. / Postal Center International, Inc.	FL	Business Associate	580	31 Mar 2014	Unauthorized Access/Disclosure	Paper/Films	Yes
Southwest Virginia Physicians for Women	VA	Healthcare Provider	568	10 Oct 2014	Theft, Unauthorized Access/Disclosure	Paper/Films	No
Emdeon	TN	Business Associate	566	4 Sep 2014	Theft	Paper/Films	Yes
Riverside County Regional Medical Center	CA	Healthcare Provider	563	24 Jun 2014	Theft	Laptop	No
Cornerstone Health Care, PA	NC	Healthcare Provider	548	26 Feb 2014	Loss, Theft	Laptop	No
Yellowstone Boys and Girls Ranch	MT	Healthcare Provider	543	24 Mar 2014	Loss	Paper/Films	No
True Vision Eyecare	OH	Healthcare Provider	542	21 Nov 2014	Theft	Laptop	No
Walgreen Co.	IL	Healthcare Provider	540	6 Jun 2014	Theft	Desktop Computer, Paper/Films	No
Cigna	CT	Business Associate	527	9 Apr 2014	Loss	Paper/Films	Yes
Madison Street Provider Network	CO	Healthcare Provider	523	26 Sep 2014	Theft	Laptop	No
Rite Aid Store 5256	WA	Healthcare Provider	522	30 Jul 2014	Theft	Paper/Films	No
24 ON Physicians, PC/In Compass Health,Inc.	GA	Business Associate	520	14 Aug 2014	Hacking/IT Incident, Other	Network Server	Yes
StayWell Health Management, LLC	MN	Business Associate	520	21 Feb 2014	Unauthorized Access/Disclosure	Network Server	Yes
Alamo Consumer Direct, LLC	TX	Healthcare Provider	520	16 Jan 2014	Unauthorized Access/Disclosure	Network Server	No
Burlington Northern Santa Fe Group Benefits Plan	TX	Health Plan	507	28 Oct 2014	Loss	Other Portable Electronic Device	No
The Kroger Co., for itself and its affiliates and subsidiaries	OH	Healthcare Provider	504	26 Feb 2014	Other	Electronic Medical Record	No
Blue Cross Blue Shield of Michigan Blue Care Network	MI	Business Associate	502	19 May 2014	Unauthorized Access/Disclosure	Email	Yes
Tri-City Medical Center	CA	Healthcare Provider	500	18 Aug 2014	Theft	Paper/Films	No
Minneapolis VA Health Care System	MN	Health Plan	500	17 Jul 2014	Unauthorized Access/Disclosure	Paper/Films	No
Porter, MD, Steven	UT	Healthcare Provider	500	6 May 2014	Improper Disposal	Network Server	No

← 2013: 277 filings 2015: 270 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.