Year File 2015 / HHS OCR Breach Register270 filingsRetrieved 28 August 2026

Time

2015: 270 breach filings.

270 breaches of 500 or more individuals were submitted to HHS in 2015, affecting 112,466,720 individuals (-14% on 2014's 314). 21% were hacking or IT incidents; 45 involved a business associate; California filed the most (36). 0 remain under investigation.

Filings

270

2014: 314

Individuals affected

112,466,720

Median filing 2,060

Largest filing

78,800,000

Anthem Inc., IN

Hacking / IT share

21%

56 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2015.1 / Largest filings

Fifteen largest breaches submitted in 2015

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	Anthem Inc.	IN	Health Plan	78,800,000	13 Feb 2015	Hacking/IT Incident	Network Server	No
2	Premera Blue Cross	WA	Health Plan	11,000,000	17 Mar 2015	Hacking/IT Incident	Network Server	No
3	Excellus Health Plan, Inc.	NY	Health Plan	9,358,891	9 Sep 2015	Hacking/IT Incident	Network Server	No
4	University of California, Los Angeles Health	CA	Healthcare Provider	4,500,000	17 Jul 2015	Hacking/IT Incident	Network Server	No
5	Medical Informatics Engineering	IN	Business Associate	3,500,000	23 Jul 2015	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
6	CareFirst Blue Cross Blue Shield	MD	Health Plan	1,300,000	20 May 2015	Hacking/IT Incident	Network Server	No
7	Virginia Department of Medical Assistance Services (VA-DMAS)	VA	Health Plan	697,586	12 Mar 2015	Hacking/IT Incident	Network Server	Yes
8	Georgia Department of Community Health	GA	Health Plan	557,779	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
9	Georgia Department of Community Health	GA	Health Plan	355,127	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
10	Beacon Health System	IN	Healthcare Provider	306,789	22 May 2015	Hacking/IT Incident	Email	No
11	Empi Inc and DJO, LLC	MN	Healthcare Provider	160,000	20 Aug 2015	Theft	Laptop	No
12	Advantage Consolidated LLC	OR	Healthcare Provider	151,626	18 Mar 2015	Hacking/IT Incident	Other	No
13	Jacobi Medical Center	NY	Healthcare Provider	90,060	28 Apr 2015	Unauthorized Access/Disclosure	Email	No
14	OH Muhlenberg, LLC	KY	Healthcare Provider	84,681	13 Nov 2015	Hacking/IT Incident	Desktop Computer, Email, Laptop, Network Server, Other Portable Electronic Device	No
15	City of Philadelphia Fire Department Emergency Medical Services Unit	PA	Healthcare Provider	81,463	2 Apr 2015	Unauthorized Access/Disclosure	Desktop Computer, Paper/Films	Yes

Section 2015.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Unauthorized Access/Disclosure103 (38%)

Theft81 (30%)

Hacking/IT Incident56 (21%)

Loss24 (9%)

Improper Disposal6 (2%)

Location of breached information

Paper/Films81 (30%)

Network Server52 (19%)

Laptop48 (18%)

Email40 (15%)

Desktop Computer27 (10%)

Other Portable Electronic Device27 (10%)

Electronic Medical Record25 (9%)

Other25 (9%)

Covered entity type

Healthcare Provider195 (72%)

Health Plan61 (23%)

Business Associate14 (5%)

States with the most filings

California36 (13%)

Texas24 (9%)

New York23 (9%)

Florida19 (7%)

Illinois16 (6%)

Ohio11 (4%)

Indiana10 (4%)

Maryland8 (3%)

Georgia7 (3%)

Minnesota7 (3%)

Section 2015.3 / Filing pages

50 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Anthem Inc.	IN	Health Plan	78,800,000	13 Feb 2015	Hacking/IT Incident	Network Server	No
Premera Blue Cross	WA	Health Plan	11,000,000	17 Mar 2015	Hacking/IT Incident	Network Server	No
Excellus Health Plan, Inc.	NY	Health Plan	9,358,891	9 Sep 2015	Hacking/IT Incident	Network Server	No
University of California, Los Angeles Health	CA	Healthcare Provider	4,500,000	17 Jul 2015	Hacking/IT Incident	Network Server	No
Medical Informatics Engineering	IN	Business Associate	3,500,000	23 Jul 2015	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
CareFirst Blue Cross Blue Shield	MD	Health Plan	1,300,000	20 May 2015	Hacking/IT Incident	Network Server	No
Virginia Department of Medical Assistance Services (VA-DMAS)	VA	Health Plan	697,586	12 Mar 2015	Hacking/IT Incident	Network Server	Yes
Georgia Department of Community Health	GA	Health Plan	557,779	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
Beacon Health System	IN	Healthcare Provider	306,789	22 May 2015	Hacking/IT Incident	Email	No
Empi Inc and DJO, LLC	MN	Healthcare Provider	160,000	20 Aug 2015	Theft	Laptop	No
Advantage Consolidated LLC	OR	Healthcare Provider	151,626	18 Mar 2015	Hacking/IT Incident	Other	No
Jacobi Medical Center	NY	Healthcare Provider	90,060	28 Apr 2015	Unauthorized Access/Disclosure	Email	No
OH Muhlenberg, LLC	KY	Healthcare Provider	84,681	13 Nov 2015	Hacking/IT Incident	Desktop Computer, Email, Laptop, Network Server, Other Portable Electronic Device	No
City of Philadelphia Fire Department Emergency Medical Services Unit	PA	Healthcare Provider	81,463	2 Apr 2015	Unauthorized Access/Disclosure	Desktop Computer, Paper/Films	Yes
Tennessee Rural Health Improvement Association	TN	Health Plan	79,000	13 Jan 2015	Unauthorized Access/Disclosure	Other	No
North East Medical Services (NEMS)	CA	Healthcare Provider	69,246	31 Jul 2015	Theft	Laptop	No
St.Vincent Hospital and Health Care Center, Inc.	IN	Healthcare Provider	63,325	27 Feb 2015	Unauthorized Access/Disclosure	Paper/Films	No
Boston Baskin Cancer Foundation	TN	Healthcare Provider	56,694	2 Feb 2015	Theft	Other Portable Electronic Device	No
Molina Healthcare	CA	Health Plan	54,203	18 Sep 2015	Theft	Desktop Computer	Yes
Lancaster County EMS	SC	Healthcare Provider	50,000	4 Jun 2015	Improper Disposal	Other Portable Electronic Device	No
AT&T Group Health Plan	TX	Health Plan	50,000	23 Mar 2015	Hacking/IT Incident	Network Server	No
Aspire Indiana, Inc.	IN	Healthcare Provider	43,890	7 Jan 2015	Theft	Laptop	No
Freelancers Insurance Company	NY	Health Plan	43,068	24 Mar 2015	Hacking/IT Incident	Network Server	No
Seton Family of Hospitals	TX	Healthcare Provider	39,000	24 Apr 2015	Hacking/IT Incident	Email	No
Indiana State Medical Association	IN	Health Plan	38,351	6 Mar 2015	Theft	Other Portable Electronic Device	No
Keenan & Associates	CA	Business Associate	35,404	1 Dec 2015	Unauthorized Access/Disclosure	Network Server	Yes
St. Luke's Cornwall Hospital	NY	Healthcare Provider	29,156	30 Dec 2015	Theft	Other Portable Electronic Device	No
Saint Agnes Health Care, Inc.	MD	Healthcare Provider	24,967	24 Apr 2015	Hacking/IT Incident	Email	No
Medical Management, LLC (MML)	NC	Business Associate	20,512	15 May 2015	Theft	Other	Yes
South Sunflower County Hospital	MS	Healthcare Provider	19,000	4 Feb 2015	Improper Disposal	Paper/Films	No
Global Care Delivery, Inc.	TX	Business Associate	18,213	12 Jun 2015	Theft	Laptop	Yes
Children's National Medical Center	DC	Healthcare Provider	18,000	24 Feb 2015	Hacking/IT Incident	Email	No
Oakland Family Services	MI	Healthcare Provider	16,107	9 Sep 2015	Hacking/IT Incident	Email	No
Children's Medical Clinics of East Texas	TX	Healthcare Provider	16,000	28 Oct 2015	Unauthorized Access/Disclosure	Desktop Computer	No
Mary Ruth Buchness, MD, Dermatologist, P.C.	NY	Healthcare Provider	14,910	11 Dec 2015	Unauthorized Access/Disclosure	Email	Yes
Louisiana State University Health Sciences Center-New Orleans	LA	Healthcare Provider	14,500	15 Sep 2015	Theft	Laptop	No
Sacred Heart Health System, Inc.	FL	Healthcare Provider	14,177	16 Mar 2015	Hacking/IT Incident	Email	Yes
UMass Memorial Medical Group, Inc.	MA	Healthcare Provider	14,100	30 Jan 2015	Unauthorized Access/Disclosure	Paper/Films	No
Oregon's Health CO-OP	OR	Health Plan	14,000	1 Jun 2015	Theft	Laptop	No
Pediatric Gastroenterology, Hepatology & Nutrition of Florida, P.A.	FL	Healthcare Provider	13,000	24 Aug 2015	Theft	Paper/Films	No
Siouxland Anesthesiology, Ltd.	SD	Healthcare Provider	13,000	31 Jul 2015	Hacking/IT Incident	Network Server	No
CVS Health	RI	Healthcare Provider	12,914	26 Jun 2015	Theft	Desktop Computer	No
The McLean Hospital Corporation	MA	Healthcare Provider	12,673	28 Jul 2015	Loss	Other Portable Electronic Device	No
Montefiore Medical Center	NY	Healthcare Provider	12,517	22 Jul 2015	Theft	Electronic Medical Record	No
Concordia Plan Services on behalf of the Concordia Health Plan	MO	Health Plan	12,500	16 Apr 2015	Hacking/IT Incident	Network Server	No
Implants, Dentures & Dental	NV	Healthcare Provider	12,000	10 Jun 2015	Theft	Electronic Medical Record, Laptop, Network Server, Other, Other Portable Electronic Device	No
Emergence Health Network	TX	Healthcare Provider	11,100	16 Oct 2015	Hacking/IT Incident	Network Server	No
Cottage Health	CA	Healthcare Provider	11,000	1 Dec 2015	Unauthorized Access/Disclosure	Network Server	No
SUPERVALU Group Health Plan	MN	Health Plan	10,946	3 Apr 2015	Hacking/IT Incident	Network Server	Yes
Pediatric Group LLC	IL	Healthcare Provider	10,000	21 Aug 2015	Hacking/IT Incident	Network Server	No

Section 2015.4 / All other filings

219 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Georgia Department of Community Health	GA	Health Plan	355,127	2 Mar 2015	Hacking/IT Incident	Network Server	Yes
National Seating & Mobility, Inc.	TN	Healthcare Provider	9,627	12 Jun 2015	Theft	Email, Laptop, Paper/Films	No
University of Oklahoma Department of Urology	OK	Healthcare Provider	9,300	10 Oct 2015	Theft	Laptop	No
Orlantino Dyoco, M.D.	CA	Healthcare Provider	9,000	3 Aug 2015	Theft	Desktop Computer, Laptop	No
Pittman Family Dental	OH	Healthcare Provider	8,830	31 Dec 2015	Hacking/IT Incident	Network Server	No
Children's Heart Center	NV	Healthcare Provider	8,791	3 Apr 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Florida Hospital	FL	Healthcare Provider	8,700	20 Mar 2015	Unauthorized Access/Disclosure	Other	No
Marketing Clique	TX	Health Plan	8,700	20 Feb 2015	Unauthorized Access/Disclosure	Other	Yes
Walgreen Co.	IL	Healthcare Provider	8,345	7 Aug 2015	Unauthorized Access/Disclosure	Paper/Films	No
Thomas H. Boyd Memorial Hospital	IL	Healthcare Provider	8,300	21 May 2015	Unauthorized Access/Disclosure	Paper/Films	No
Centene Management Corporation	MO	Health Plan	8,208	15 Oct 2015	Theft	Other Portable Electronic Device	No
Riverside County Regional Medical Center	CA	Healthcare Provider	7,925	29 Jan 2015	Theft	Laptop	No
Project Vida Health Center	TX	Healthcare Provider	7,700	27 Mar 2015	Theft	Network Server	No
University of Oklahoma, Department of Obstetrics and Gynecology	OK	Healthcare Provider	7,693	3 Jul 2015	Theft	Laptop	No
FireKeepers Casino Hotel	MI	Health Plan	7,666	3 Jul 2015	Hacking/IT Incident	Network Server	No
Children's Hospital Medical Center of Akron	OH	Healthcare Provider	7,664	26 Aug 2015	Loss	Other Portable Electronic Device	No
Integral Health Plan, Inc.	FL	Health Plan	7,549	10 Jul 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
Dr. Anthony T. R. Green DDS	NY	Healthcare Provider	7,448	11 Mar 2015	Unauthorized Access/Disclosure	Other, Paper/Films	No
Western Montana Clinic	MT	Healthcare Provider	7,038	2 Apr 2015	Hacking/IT Incident	Network Server	No
VA Corporate Data Center Operations/Austin Information Technology Center	TX	Healthcare Provider	7,029	7 Jan 2015	Hacking/IT Incident	Network Server	No
Amedisys	LA	Healthcare Provider	6,909	1 Mar 2015	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Laptop	No
Fred Finch Youth Center	CA	Healthcare Provider	6,871	5 Jun 2015	Theft	Network Server, Other	No
The Department of Aging and Disability Services	TX	Health Plan	6,600	11 Jun 2015	Unauthorized Access/Disclosure	Network Server	No
Baptist Health and Arkansas Health Group	AR	Healthcare Provider	6,500	1 Oct 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Urology Associates, Professional Corporation	MT	Healthcare Provider	6,500	24 Jul 2015	Unauthorized Access/Disclosure	Paper/Films	No
Allina Health	MN	Healthcare Provider	6,195	23 Dec 2015	Improper Disposal	Paper/Films	No
Aflac	GA	Health Plan	6,166	15 May 2015	Unauthorized Access/Disclosure	Paper/Films	No
International Union of Operating Engineers Local Unions 181, 320 & TVA Health and Welfare Trust Fund	KY	Health Plan	5,440	9 Apr 2015	Hacking/IT Incident	Network Server	Yes
Healthfirst Affiliates that include Healthfirst PHSP, Inc., Managed Health, Inc., HF Management Services, LLC, and Senior Health Partners	NY	Health Plan	5,338	24 Jul 2015	Hacking/IT Incident	Electronic Medical Record	No
Northwest Primary Care Group	OR	Healthcare Provider	5,327	11 Dec 2015	Theft	Desktop Computer, Paper/Films	No
St. Peter's Health Partners	NY	Healthcare Provider	5,117	23 Jan 2015	Theft	Other Portable Electronic Device	No
Planned Parenthood Southwest Ohio	OH	Healthcare Provider	5,000	5 Feb 2015	Improper Disposal	Paper/Films	No
Rainier Surgical, Incorporated	TX	Healthcare Provider	4,920	16 Jan 2015	Theft	Paper/Films	No
Consolidated Tribal Health Project, Inc.	CA	Healthcare Provider	4,885	28 Apr 2015	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Email, Laptop, Network Server, Other Portable Electronic Device	No
University of California Irvine Medical Center	CA	Healthcare Provider	4,859	17 Jun 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Associated Dentists-Roseville Office	MN	Healthcare Provider	4,725	18 May 2015	Theft	Laptop	No
Clinical Reference Laboratory, Inc.	KS	Healthcare Provider	4,668	3 Mar 2015	Loss	Paper/Films	No
Indian Territory Home Health and Hospice	OK	Healthcare Provider	4,500	22 Oct 2015	Hacking/IT Incident	Email	No
Huntington Medical Research Institutes	CA	Healthcare Provider	4,300	20 Oct 2015	Unauthorized Access/Disclosure	Laptop, Other Portable Electronic Device	No
Aspire Home Care and Hospice	OK	Healthcare Provider	4,278	9 Oct 2015	Hacking/IT Incident	Email	No
Central Brooklyn Medical Group, PC	NY	Healthcare Provider	4,223	19 Jun 2015	Unauthorized Access/Disclosure	Other	No
EyeCare of Bartlesville	OK	Healthcare Provider	4,000	13 Mar 2015	Hacking/IT Incident	Desktop Computer, Network Server	No
Saint Louis County Department of Health	MO	Healthcare Provider	4,000	7 Jan 2015	Unauthorized Access/Disclosure	Email, Network Server	No
New York City Health and Hospitals Corporation - Metropolitan Hospital Center	NY	Healthcare Provider	3,957	1 Jun 2015	Unauthorized Access/Disclosure	Email	No
St. Mary's Health	IN	Healthcare Provider	3,952	5 Mar 2015	Hacking/IT Incident	Email	No
Blue Cross Blue Shield of Michigan	MI	Health Plan	3,903	17 Mar 2015	Theft	Paper/Films	No
Midlands Orthopaedics, P.A.	SC	Healthcare Provider	3,902	13 Nov 2015	Hacking/IT Incident	Network Server	Yes
Heartland Health Clinic	VA	Healthcare Provider	3,650	21 Sep 2015	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
Orlando Health	FL	Healthcare Provider	3,421	2 Jul 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
University of Rochester Medical Center and Affiliates	NY	Healthcare Provider	3,403	22 May 2015	Unauthorized Access/Disclosure	Paper/Films	No
Bellevue Hospital Center	NY	Healthcare Provider	3,334	28 Apr 2015	Unauthorized Access/Disclosure	Email	No
Partners HealthCare System, Inc.	MA	Healthcare Provider	3,321	1 May 2015	Hacking/IT Incident	Network Server	No
Skin and Cancer Center of Arizona	AZ	Healthcare Provider	3,311	21 Sep 2015	Unauthorized Access/Disclosure	Paper/Films	No
Cathrine Steinborn, DDS	CA	Healthcare Provider	3,224	27 Feb 2015	Theft	Network Server	No
ADT LLC Group Health & Welfare Plan	FL	Health Plan	3,074	7 Apr 2015	Hacking/IT Incident	Network Server	No
St. Martin Parish School Based Health Centers	LA	Healthcare Provider	3,000	15 Jun 2015	Theft	Desktop Computer, Electronic Medical Record, Laptop	No
University of Illinois at Chicago	IL	Healthcare Provider	3,000	28 Apr 2015	Theft	Laptop	No
Hunt Regional Medical Partners	TX	Healthcare Provider	3,000	18 Feb 2015	Unauthorized Access/Disclosure	Other	No
Suburban Lung Associates	IL	Healthcare Provider	2,984	13 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
Georgia Department of Human Services	GA	Health Plan	2,983	8 Jul 2015	Unauthorized Access/Disclosure	Email	No
Centegra Health System	IL	Healthcare Provider	2,929	1 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
Insurance Data Services	MI	Business Associate	2,918	8 Oct 2015	Theft	Paper/Films	Yes
Robert D. Chatlos DMD & Assoc	PA	Business Associate	2,900	18 Oct 2015	Theft	Other Portable Electronic Device	Yes
CarePlus Health Plans [case 18772]	KY	Health Plan	2,873	6 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	No
Heartland Dental, LLC	IL	Business Associate	2,860	24 Jun 2015	Hacking/IT Incident	Network Server	Yes
Humana Inc [Case 18652]	KY	Health Plan	2,815	30 Sep 2015	Theft	Laptop, Paper/Films	No
Courier Corporation of Hawaii	HI	Business Associate	2,809	11 Feb 2015	Loss	Paper/Films	Yes
Senior Health Partners, a Healthfirst company	NY	Health Plan	2,772	6 Feb 2015	Theft	Laptop, Other Portable Electronic Device	No
Career Education Corporation	IL	Health Plan	2,743	19 Mar 2015	Hacking/IT Incident	Network Server	Yes
United Seating and Mobility, LLC d/b/a Numotion	CT	Healthcare Provider	2,722	10 Jun 2015	Theft	Laptop	No
CompuNet Clinical Laboratories	OH	Healthcare Provider	2,584	23 Apr 2015	Loss	Paper/Films	No
San Franciso General Hospital and Trauma Center	CA	Healthcare Provider	2,500	6 Mar 2015	Theft	Other	No
Life Care Center of Attleboro	MA	Healthcare Provider	2,473	20 Mar 2015	Loss	Paper/Films	Yes
Rite Aid Corporation	PA	Healthcare Provider	2,345	3 Jun 2015	Theft	Other, Paper/Films	No
Henry Ford Health System	MI	Healthcare Provider	2,336	9 Jan 2015	Loss	Other, Other Portable Electronic Device	No
Sutter Medical Foundation	CA	Healthcare Provider	2,302	11 Sep 2015	Unauthorized Access/Disclosure	Email	Yes
Good Care Pediatric, LLP	NY	Healthcare Provider	2,300	12 Nov 2015	Hacking/IT Incident	Desktop Computer	No
UPMC	PA	Healthcare Provider	2,259	15 May 2015	Theft	Other	Yes
Anne Arundel Health System	MD	Healthcare Provider	2,208	8 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	No
Mosaic Medical	OR	Healthcare Provider	2,207	5 Mar 2015	Unauthorized Access/Disclosure	Paper/Films	No
Raymond Mark Turner, M.D.	NV	Healthcare Provider	2,153	26 Feb 2015	Theft	Laptop	No
Sunquest Information Systems	AZ	Business Associate	2,100	24 Sep 2015	Theft	Laptop	Yes
Daniel A. Sheldon, M.D., P.A.	FL	Healthcare Provider	2,075	16 Sep 2015	Hacking/IT Incident	Network Server	No
Lawrence General Hospital	MA	Healthcare Provider	2,071	5 Aug 2015	Loss	Other Portable Electronic Device	No
T.J. Samson Community Hospital	KY	Healthcare Provider	2,060	7 Aug 2015	Unauthorized Access/Disclosure	Email	No
ROBERT SOPER, M.D.	CA	Healthcare Provider	2,000	26 Aug 2015	Theft	Desktop Computer	No
Max M Bayard MD, PC	VT	Healthcare Provider	2,000	7 Aug 2015	Theft	Laptop, Other Portable Electronic Device	No
Community Mercy Health Partners	OH	Healthcare Provider	2,000	27 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
David E. Hansen DDS PS	WA	Healthcare Provider	2,000	29 Jan 2015	Theft	Other Portable Electronic Device, Paper/Films	No
Bon Secours Saint Francis	SC	Healthcare Provider	1,997	26 Oct 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Blue Cross and Blue Shield of Nebraska	NE	Health Plan	1,872	3 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
mdINR LLC	FL	Healthcare Provider	1,859	5 Jan 2015	Unauthorized Access/Disclosure	Email	No
American Sleep Medicine	CA	Healthcare Provider	1,787	16 Apr 2015	Theft	Other	No
Wellmont Health System	TN	Healthcare Provider	1,726	24 Apr 2015	Improper Disposal	Other, Paper/Films	No
Physicians Health Plan of Northern Indiana, Inc.	IN	Health Plan	1,708	18 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
7-Eleven, Inc. Comprehensive Welfare Benefits Plan No. 525	TX	Health Plan	1,688	25 Mar 2015	Hacking/IT Incident	Network Server	Yes
LTC Dental, P.C.	AL	Healthcare Provider	1,680	28 Oct 2015	Theft	Laptop	No
Prima CARE, PC	MA	Healthcare Provider	1,651	29 Jul 2015	Unauthorized Access/Disclosure	Paper/Films	No
Colorado Department of Health Care Policy and Financing	CO	Health Plan	1,622	18 Aug 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
North Carolina Department of Health and Human Services	NC	Health Plan	1,615	19 Oct 2015	Hacking/IT Incident	Email	No
Ronald D. Garrett-Roe, MD	TX	Healthcare Provider	1,600	23 Jan 2015	Hacking/IT Incident	Desktop Computer	No
Woodhull Medical and Mental Health Center	NY	Healthcare Provider	1,581	19 Oct 2015	Theft	Laptop	No
Duke LifePoint Conemaugh Memorial Medical Center	PA	Healthcare Provider	1,551	15 May 2015	Theft	Desktop Computer	No
Blue Cross Blue Shield of North Carolina	NC	Health Plan	1,530	11 Sep 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
Rush University Medical Center	IL	Healthcare Provider	1,529	6 Nov 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
Lee Memorial Health System	FL	Healthcare Provider	1,508	7 Sep 2015	Unauthorized Access/Disclosure	Paper/Films	No
Carolyn B Lyde, MD, PA	TX	Healthcare Provider	1,500	30 Nov 2015	Theft	Laptop	No
PT Northwest, LLC	OR	Healthcare Provider	1,500	21 Aug 2015	Unauthorized Access/Disclosure	Email	No
East Bay Perinatal Medical Associates	CA	Business Associate	1,494	29 Jul 2015	Unauthorized Access/Disclosure	Laptop	Yes
Special Agents Mutual Benefit Association	MD	Health Plan	1,475	20 Jul 2015	Hacking/IT Incident	Network Server	Yes
Triple S Advantage, Inc	PR	Health Plan	1,458	31 Mar 2015	Unauthorized Access/Disclosure	Other	No
Minneapolis Clinic of Neurology, Ltd.	MN	Healthcare Provider	1,450	31 Aug 2015	Theft	Laptop	No
Jersey City Medical Center	NJ	Healthcare Provider	1,447	17 Apr 2015	Unauthorized Access/Disclosure	Email	No
Howard University	DC	Healthcare Provider	1,445	10 Jul 2015	Unauthorized Access/Disclosure	Paper/Films	No
Cancer Care Northwest	WA	Healthcare Provider	1,426	17 Aug 2015	Loss	Paper/Films	No
PeaceHealth	WA	Healthcare Provider	1,407	30 Nov 2015	Unauthorized Access/Disclosure	Other	No
Mount Sinai Medical Center	FL	Healthcare Provider	1,406	20 Mar 2015	Unauthorized Access/Disclosure	Paper/Films	No
Endocrinology Associates, Inc.	OH	Healthcare Provider	1,400	14 Aug 2015	Unauthorized Access/Disclosure	Other	No
HealthSouth Rehabilitation Hospital of Round Rock	TX	Healthcare Provider	1,359	24 Dec 2015	Theft	Laptop	No
Sharon J. Jones, M.D.	CA	Business Associate	1,342	19 May 2015	Theft	Desktop Computer, Laptop, Paper/Films	Yes
Sharon J. Jones M.D.	CA	Healthcare Provider	1,342	5 Mar 2015	Theft	Paper/Films	Yes
Ventura County Health Care Agency	CA	Healthcare Provider	1,339	6 May 2015	Loss	Paper/Films	No
Michael Benjamin, M.D., Inc.	CA	Healthcare Provider	1,300	28 Dec 2015	Theft	Paper/Films	No
HealthPoint	WA	Healthcare Provider	1,300	13 Nov 2015	Theft	Laptop	No
Diana S. Guth DBA Home Respiratory Care	CA	Healthcare Provider	1,285	28 Jan 2015	Unauthorized Access/Disclosure	Email	No
New Dimension Group, LLC	NC	Healthcare Provider	1,275	25 Nov 2015	Loss	Other Portable Electronic Device	No
Nephropathology Associates, PLC	AR	Healthcare Provider	1,260	16 Oct 2015	Unauthorized Access/Disclosure	Email	No
University of California, Los Angeles Health	CA	Healthcare Provider	1,242	1 Sep 2015	Theft	Laptop	No
Valley COmmunity Healthcare	CA	Healthcare Provider	1,233	6 Mar 2015	Loss	Laptop	No
Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinic	CA	Healthcare Provider	1,200	24 Aug 2015	Theft	Desktop Computer, Laptop, Network Server, Other Portable Electronic Device	No
Horizon Healthcare Services, Inc., doing business as Horizon Blue Cross Blue Shield of New Jersey, and its affiliates	NJ	Health Plan	1,173	24 Sep 2015	Unauthorized Access/Disclosure	Electronic Medical Record, Other	No
Stanislaus Surgical Hospital	CA	Healthcare Provider	1,170	4 Jun 2015	Theft	Desktop Computer, Other Portable Electronic Device, Paper/Films	No
VA Black Hills Health Care System	SD	Healthcare Provider	1,168	4 Aug 2015	Unauthorized Access/Disclosure	Paper/Films	No
Walgreen Co.	IL	Healthcare Provider	1,138	1 May 2015	Loss	Paper/Films	No
OsteoMed LP	TX	Health Plan	1,134	20 Oct 2015	Theft	Other	No
Kindred Nursing Centers West, L.L.C.	CA	Healthcare Provider	1,125	25 Sep 2015	Theft	Desktop Computer	No
Sioux Falls VA Health Care System	SD	Healthcare Provider	1,111	30 Jul 2015	Loss	Paper/Films	No
UC Health, LLC	OH	Healthcare Provider	1,064	14 Nov 2015	Unauthorized Access/Disclosure	Email	No
Sentara Healthcare	VA	Healthcare Provider	1,040	2 Oct 2015	Theft	Other Portable Electronic Device	No
Children's Eyewear Sight	CA	Healthcare Provider	1,030	12 Jan 2015	Theft	Desktop Computer	No
Meritus Medical Center, Inc.	MD	Healthcare Provider	1,029	26 Jun 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Barrington Orthopedic Specialists, Ltd	IL	Healthcare Provider	1,009	24 Sep 2015	Theft	Laptop, Other	No
OhioHealth	OH	Healthcare Provider	1,006	24 Jul 2015	Loss	Other Portable Electronic Device	No
Baylor College of Medicine	TX	Healthcare Provider	1,004	7 Aug 2015	Theft	Other Portable Electronic Device, Paper/Films	No
Unity Recovery Group, Inc.,Starting Point Detox LLC, Lakeside Treatment Center LLC, Changing Tides Transitional Living LLC, Unity Recovery Center, Inc	FL	Healthcare Provider	1,000	11 May 2015	Unauthorized Access/Disclosure	Email, Network Server, Other Portable Electronic Device	No
Gallant Risk & Insurance Services, Inc.	CA	Business Associate	995	3 Jun 2015	Theft	Laptop	Yes
Pathways Professional Counseling	AL	Healthcare Provider	986	24 Nov 2015	Theft	Laptop	No
The MetroHealth System	OH	Healthcare Provider	981	15 May 2015	Hacking/IT Incident	Desktop Computer	No
WhiteGlove Health	TX	Healthcare Provider	975	23 Dec 2015	Unauthorized Access/Disclosure	Email	No
Dean Health Plan	WI	Health Plan	960	11 Nov 2015	Loss	Paper/Films	No
CDC/NIOSH World Trade Center Health Program (WTCHP)	GA	Health Plan	958	2 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
Haywood County NC	NC	Healthcare Provider	955	9 Feb 2015	Loss	Paper/Films	No
Middlesex Hospital	CT	Healthcare Provider	946	4 Dec 2015	Hacking/IT Incident	Email	No
County of Los Angeles	CA	Healthcare Provider	880	29 Apr 2015	Theft	Paper/Films	No
CEMEX, Inc.	TX	Health Plan	880	27 Apr 2015	Hacking/IT Incident	Network Server	Yes
McDermott Will & Emery LLP is the plan sponsor for the McDermott medical plan	IL	Health Plan	880	24 Mar 2015	Hacking/IT Incident	Network Server	Yes
Denton County Health Department	TX	Healthcare Provider	874	9 Apr 2015	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
Elizabeth Kerner, M.D.	TX	Healthcare Provider	873	3 Apr 2015	Unauthorized Access/Disclosure	Email	No
Clinical Reference Laboratory, Inc.	KS	Healthcare Provider	864	28 Apr 2015	Loss	Paper/Films	No
Cigna-HealthSpring	TN	Health Plan	862	2 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
Silverberg Surgical and Medical Group	CA	Healthcare Provider	857	25 Sep 2015	Unauthorized Access/Disclosure	Network Server	No
Advanced Radiology Consultants, LLC	CT	Healthcare Provider	855	24 Jul 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Belgrade Regional Health Center	ME	Healthcare Provider	854	18 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
University Hospitals	OH	Healthcare Provider	848	15 Jan 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Merit Health Northwest Mississippi	MS	Healthcare Provider	846	26 Aug 2015	Theft	Electronic Medical Record	No
Tulare County Health & Human Services Agency	CA	Healthcare Provider	845	2 Apr 2015	Unauthorized Access/Disclosure	Email	No
California Pacific Medical Center	CA	Healthcare Provider	845	23 Jan 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
California Physicians' Service d/b/a Blue Shield of California	CA	Health Plan	843	9 Jun 2015	Unauthorized Access/Disclosure	Network Server	No
Allina Health	MN	Healthcare Provider	838	6 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
BeHealthy Florida, Inc.	FL	Health Plan	835	19 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
University of Colorado Health	CO	Healthcare Provider	827	2 Dec 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
PIH Health Hospital - Whittier	CA	Healthcare Provider	826	2 Apr 2015	Theft	Paper/Films	No
Camelback Women's Health	AZ	Healthcare Provider	810	3 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
Blue Cross Blue Shield of North Carolina	NC	Health Plan	807	11 Sep 2015	Unauthorized Access/Disclosure	Paper/Films	No
Metropolitan Atlanta Rapid Transit Authority	GA	Health Plan	800	27 Aug 2015	Unauthorized Access/Disclosure	Paper/Films	No
Health Plan sponsored by Covenant Ministries of Benevolance	IL	Health Plan	782	3 Apr 2015	Hacking/IT Incident	Network Server	Yes
St.Vincent Medical Group, Inc.	IN	Healthcare Provider	756	10 Apr 2015	Hacking/IT Incident	Email	No
Fidelis Care	NY	Health Plan	738	15 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
UPMC Health Plan	PA	Health Plan	722	2 Jul 2015	Unauthorized Access/Disclosure	Email	No
Affinity Health Plan, Inc.	NY	Health Plan	721	14 Sep 2015	Unauthorized Access/Disclosure	Paper/Films	No
Fidelis Care	NY	Health Plan	687	15 Dec 2015	Unauthorized Access/Disclosure	Paper/Films	No
Aventura Hospital and Medical Center	FL	Healthcare Provider	686	27 Feb 2015	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record	No
Tomas, Arturo	IL	Business Associate	680	9 Feb 2015	Loss	Paper/Films	Yes
North Dallas Urogynecology, PLLC.	TX	Healthcare Provider	678	29 Jan 2015	Theft	Laptop	No
Oceans Acquisition, Inc.	TX	Healthcare Provider	659	22 Dec 2015	Theft	Laptop	No
Community Health Network	IN	Healthcare Provider	650	20 Mar 2015	Loss	Paper/Films	No
Massachusetts General Hospital	MA	Healthcare Provider	648	8 Jul 2015	Unauthorized Access/Disclosure	Email	No
SSM Health Cancer Care	MO	Healthcare Provider	643	9 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	No
Maricopa Special Health Care District - Maricopa Integrated Health System	AZ	Healthcare Provider	633	14 Jul 2015	Loss	Other Portable Electronic Device	No
Alexian Brothers Medical Center	IL	Healthcare Provider	632	19 May 2015	Unauthorized Access/Disclosure	Desktop Computer	No
Kaiser Foundation Health Plan of the Mid-Atlantic States, Inc.	MD	Health Plan	630	29 Jan 2015	Unauthorized Access/Disclosure	Paper/Films	No
Pediatric Associates	FL	Healthcare Provider	627	24 Mar 2015	Loss	Paper/Films	No
Amsterdam Nursing Home Corporation (1992)	NY	Healthcare Provider	621	10 Jul 2015	Loss	Paper/Films	Yes
Mayo Clinic Health System- Red Wing	MN	Healthcare Provider	601	13 Jul 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
Kane Hall Barry Neurology	TX	Healthcare Provider	600	19 Mar 2015	Theft	Laptop	No
Pathway to Hope	FL	Healthcare Provider	600	12 Feb 2015	Unauthorized Access/Disclosure	Email	No
Cigna Home Delivery Pharmacy	CT	Healthcare Provider	592	23 Nov 2015	Unauthorized Access/Disclosure	Paper/Films	No
The Johns Hopkins Hospital	MD	Healthcare Provider	571	9 Oct 2015	Theft	Laptop	No
Advance Rehabilitation & Consulting LTD	GA	Healthcare Provider	570	2 Mar 2015	Hacking/IT Incident	Network Server	No
BUFFALO HEART GROUP	NY	Healthcare Provider	567	28 May 2015	Unauthorized Access/Disclosure	Electronic Medical Record	No
New York State Office of Mental Health	NY	Healthcare Provider	563	10 Apr 2015	Loss	Laptop	No
New Mexico Department of Health	NM	Healthcare Provider	561	15 Dec 2015	Theft	Laptop	No
Arkansas Blue Cross and Blue Shield	AR	Health Plan	560	14 Jul 2015	Theft	Desktop Computer	Yes
Alaska Orthopedic Specialists, Inc.	AK	Healthcare Provider	553	19 Nov 2015	Theft	Email	No
Schaeffler Group USA	SC	Health Plan	550	2 Apr 2015	Hacking/IT Incident	Network Server	No
EnvisionRx	OH	Business Associate	540	23 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	Yes
North Carolina Department of Health and Human Services	NC	Health Plan	524	13 Nov 2015	Unauthorized Access/Disclosure	Email	No
ST Psychotherapy, LLC	WI	Healthcare Provider	509	23 Dec 2015	Theft	Laptop	No
Episcopal Health Services Inc. d/b/a St. John's Episcopal Hospital	NY	Healthcare Provider	509	25 Jun 2015	Theft	Electronic Medical Record	Yes
VA Eastern Colorado Health Care System(ECHCS)	CO	Healthcare Provider	508	2 Apr 2015	Unauthorized Access/Disclosure	Paper/Films	No
Success 4 Kids & Families, Inc.	FL	Healthcare Provider	506	20 May 2015	Theft	Laptop	No
Truman Medical Center, Incorporated	MO	Healthcare Provider	503	9 Jun 2015	Unauthorized Access/Disclosure	Other	No
Hillsides	CA	Healthcare Provider	502	30 Dec 2015	Unauthorized Access/Disclosure	Email	No
Health Care Service Corporation	IL	Health Plan	501	17 Sep 2015	Theft	Paper/Films	No
Maine General Health	ME	Healthcare Provider	500	8 Dec 2015	Hacking/IT Incident	Network Server	No
Florida Department of Health, Children's Medical Services	FL	Healthcare Provider	500	23 Oct 2015	Unauthorized Access/Disclosure	Paper/Films	No
Keystone Pharmacy, Inc.	MD	Healthcare Provider	500	9 Jun 2015	Unauthorized Access/Disclosure	Other, Paper/Films	No
New	FL	Health Plan	500	27 Mar 2015	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Email, Network Server	No
National Pain Institute	FL	Healthcare Provider	500	15 Jan 2015	Improper Disposal	Desktop Computer, Laptop	No

State not given in the HHS export (1)

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Puerto Rico Department of Heatlh - Medicaid Program	Health Plan	500	22 Apr 2015	Theft	Other	No

← 2014: 314 filings 2016: 328 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.