Year File 2016 / HHS OCR Breach Register328 filingsRetrieved 28 August 2026

Time

2016: 328 breach filings.

328 breaches of 500 or more individuals were submitted to HHS in 2016, affecting 16,711,004 individuals (+21% on 2015's 270). 35% were hacking or IT incidents; 68 involved a business associate; California filed the most (41). 0 remain under investigation.

Filings

328

2015: 270

Individuals affected

16,711,004

Median filing 2,387

Largest filing

3,620,000

Banner Health, AZ

Hacking / IT share

35%

114 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2016.1 / Largest filings

Fifteen largest breaches submitted in 2016

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	Banner Health	AZ	Healthcare Provider	3,620,000	3 Aug 2016	Hacking/IT Incident	Network Server, Other	No
2	Newkirk Products, Inc.	NY	Business Associate	3,466,120	9 Aug 2016	Hacking/IT Incident	Network Server	Yes
3	21st Century Oncology	FL	Healthcare Provider	2,213,597	4 Mar 2016	Hacking/IT Incident	Network Server	No
4	Valley Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain Consultants	AZ	Healthcare Provider	882,590	12 Aug 2016	Hacking/IT Incident	Network Server	No
5	County of Los Angeles Departments of Health and Mental Health	CA	Healthcare Provider	749,017	16 Dec 2016	Hacking/IT Incident	Email	No
6	Bon Secours Health System Incorporated	MD	Healthcare Provider	651,971	12 Aug 2016	Unauthorized Access/Disclosure	Network Server	Yes
7	Peachtree Orthopaedic Clinic	GA	Healthcare Provider	531,000	18 Nov 2016	Hacking/IT Incident	Network Server	No
8	Radiology Regional Center, PA	FL	Healthcare Provider	483,063	12 Feb 2016	Loss	Paper/Films	Yes
9	California Correctional Health Care Services	CA	Healthcare Provider	400,000	15 May 2016	Theft	Laptop	No
10	Community Health Plan of Washington	WA	Health Plan	381,504	21 Dec 2016	Hacking/IT Incident	Network Server, Other	No
11	Central Ohio Urology Group, Inc.	OH	Healthcare Provider	300,000	23 Sep 2016	Hacking/IT Incident	Network Server	No
12	Premier Healthcare, LLC	IN	Healthcare Provider	205,748	4 Mar 2016	Theft	Laptop	No
13	Athens Orthopedic Clinic, P.A.	GA	Healthcare Provider	201,000	29 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
14	Community Mercy Health Partners	OH	Healthcare Provider	113,528	25 Jan 2016	Improper Disposal	Paper/Films	No
15	Washington State Health Care Authority (HCA)	WA	Health Plan	91,187	9 Feb 2016	Unauthorized Access/Disclosure	Email	No

Section 2016.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Unauthorized Access/Disclosure130 (40%)

Hacking/IT Incident114 (35%)

Theft61 (19%)

Loss16 (5%)

Improper Disposal7 (2%)

Location of breached information

Network Server100 (30%)

Paper/Films79 (24%)

Email51 (16%)

Electronic Medical Record35 (11%)

Other32 (10%)

Laptop29 (9%)

Desktop Computer26 (8%)

Other Portable Electronic Device21 (6%)

Covered entity type

Healthcare Provider256 (78%)

Health Plan50 (15%)

Business Associate22 (7%)

States with the most filings

California41 (13%)

Florida27 (8%)

Texas23 (7%)

New York16 (5%)

Ohio13 (4%)

Illinois13 (4%)

Washington12 (4%)

Indiana12 (4%)

Pennsylvania11 (3%)

Michigan10 (3%)

Section 2016.3 / Filing pages

83 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Banner Health	AZ	Healthcare Provider	3,620,000	3 Aug 2016	Hacking/IT Incident	Network Server, Other	No
Newkirk Products, Inc.	NY	Business Associate	3,466,120	9 Aug 2016	Hacking/IT Incident	Network Server	Yes
21st Century Oncology	FL	Healthcare Provider	2,213,597	4 Mar 2016	Hacking/IT Incident	Network Server	No
Valley Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain Consultants	AZ	Healthcare Provider	882,590	12 Aug 2016	Hacking/IT Incident	Network Server	No
County of Los Angeles Departments of Health and Mental Health	CA	Healthcare Provider	749,017	16 Dec 2016	Hacking/IT Incident	Email	No
Bon Secours Health System Incorporated	MD	Healthcare Provider	651,971	12 Aug 2016	Unauthorized Access/Disclosure	Network Server	Yes
Peachtree Orthopaedic Clinic	GA	Healthcare Provider	531,000	18 Nov 2016	Hacking/IT Incident	Network Server	No
Radiology Regional Center, PA	FL	Healthcare Provider	483,063	12 Feb 2016	Loss	Paper/Films	Yes
California Correctional Health Care Services	CA	Healthcare Provider	400,000	15 May 2016	Theft	Laptop	No
Community Health Plan of Washington	WA	Health Plan	381,504	21 Dec 2016	Hacking/IT Incident	Network Server, Other	No
Central Ohio Urology Group, Inc.	OH	Healthcare Provider	300,000	23 Sep 2016	Hacking/IT Incident	Network Server	No
Premier Healthcare, LLC	IN	Healthcare Provider	205,748	4 Mar 2016	Theft	Laptop	No
Athens Orthopedic Clinic, P.A.	GA	Healthcare Provider	201,000	29 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Community Mercy Health Partners	OH	Healthcare Provider	113,528	25 Jan 2016	Improper Disposal	Paper/Films	No
Washington State Health Care Authority (HCA)	WA	Health Plan	91,187	9 Feb 2016	Unauthorized Access/Disclosure	Email	No
Southeast Eye Institute, P.A. dba eye Associates of Pinellas	FL	Healthcare Provider	87,314	5 May 2016	Hacking/IT Incident	Network Server	Yes
SCAN Health Plan	CA	Health Plan	87,069	22 Aug 2016	Unauthorized Access/Disclosure	Other	No
Emblem Health - GHI	NY	Health Plan	81,122	22 Nov 2016	Unauthorized Access/Disclosure	Network Server, Other, Paper/Films	No
Medical Colleagues of Texas, LLP	TX	Healthcare Provider	68,631	11 May 2016	Hacking/IT Incident	Network Server	No
East Valley Community Health Center, Inc.	CA	Healthcare Provider	65,000	15 Dec 2016	Hacking/IT Incident	Network Server	No
Urgent Care Clinic of Oxford	MS	Healthcare Provider	64,000	30 Sep 2016	Hacking/IT Incident	Network Server	No
Ohio Department of Mental Health and Addiction Services	OH	Healthcare Provider	59,000	22 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	No
Horizon Healthcare Services Inc. doing business as Horizon Blue Cross Blue Shield of New Jersey and its affiliates	NJ	Health Plan	55,700	30 Dec 2016	Unauthorized Access/Disclosure	Paper/Films	No
Valley Hope Association	KS	Healthcare Provider	52,076	26 Feb 2016	Theft	Laptop	No
Metropolitan Jewish Health System, Inc. d/b/a MJHS	NY	Business Associate	50,000	22 Mar 2016	Hacking/IT Incident	Email	Yes
Eye Institute of Corpus Christi	TX	Healthcare Provider	43,961	26 Feb 2016	Theft	Electronic Medical Record	No
Alliance Health Networks, LLC	UT	Healthcare Provider	42,372	15 Feb 2016	Hacking/IT Incident	Network Server	No
Stamford Podiatry Group .P.C	CT	Healthcare Provider	40,491	25 May 2016	Hacking/IT Incident	Network Server	No
Vascular Surgical Associates	GA	Healthcare Provider	36,496	10 Nov 2016	Hacking/IT Incident	Network Server	No
Quest Diagnostics	NJ	Healthcare Provider	34,055	12 Dec 2016	Hacking/IT Incident	Network Server	No
Rainbow Children's Clinic	TX	Healthcare Provider	33,698	3 Oct 2016	Hacking/IT Incident	Network Server	No
Laser & Dermatologic Surgery Center	MO	Healthcare Provider	31,000	14 Jun 2016	Hacking/IT Incident	Network Server	No
SEIM JOHNSON, LLP	NE	Business Associate	30,972	8 Feb 2016	Theft	Laptop	Yes
Seguin Dermatology, Office of Robert J. Magnon, MD	TX	Healthcare Provider	29,969	30 Nov 2016	Hacking/IT Incident	Network Server	No
Integrity Transitional Hospital	TX	Healthcare Provider	29,514	14 Oct 2016	Hacking/IT Incident	Network Server	No
Midwest Orthopedic Pain and Spine	MO	Healthcare Provider	29,153	26 Jul 2016	Hacking/IT Incident	Network Server	No
New West Health Services d/b/a New West Medicare	MT	Health Plan	28,209	15 Jan 2016	Loss	Laptop	No
New Jersey Spine Center	NJ	Healthcare Provider	28,000	22 Sep 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Wal-Mart Stores, Inc.	AR	Healthcare Provider	27,393	8 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Brandywine Pediatrics, P.A.	DE	Healthcare Provider	26,873	23 Dec 2016	Hacking/IT Incident	Network Server	No
Illinois Valley Podiatry Group	IL	Healthcare Provider	26,588	8 Mar 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Santa Cruz County Health Services Agency	CA	Healthcare Provider	25,000	2 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Public Health Trust of Miami-Dade County, Florida	FL	Healthcare Provider	24,188	19 Feb 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Mayfield Clinic Inc	OH	Healthcare Provider	23,341	23 Apr 2016	Hacking/IT Incident	Email	No
Prosthetic & Orthotic Care, Inc.	MO	Healthcare Provider	23,015	7 Aug 2016	Hacking/IT Incident	Network Server	No
National Counseling Group	VA	Healthcare Provider	23,000	21 Mar 2016	Hacking/IT Incident	Email	No
Singh and Arora Oncology Hematology, P.C.	MI	Healthcare Provider	22,000	21 Oct 2016	Hacking/IT Incident	Network Server	Yes
North Ottawa Medical Group	MI	Healthcare Provider	22,000	9 Jun 2016	Unauthorized Access/Disclosure	Network Server	Yes
New York State Office of Mental Health	NY	Healthcare Provider	21,880	15 Aug 2016	Hacking/IT Incident	Network Server	No
Blue Shield of California	CA	Health Plan	20,764	14 Jan 2016	Unauthorized Access/Disclosure	Network Server	No
Northstar Healthcare Acquisitions LLC	TX	Healthcare Provider	19,898	28 Apr 2016	Theft	Laptop	Yes
Integrated Health Solutions PC	PA	Healthcare Provider	19,776	25 May 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
Pain Treatment Centers of America	AR	Healthcare Provider	19,397	11 Apr 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	Yes
Advanced Fertility Center of Chicago	IL	Healthcare Provider	19,000	1 Dec 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Aetna Inc.	CT	Business Associate	18,854	28 Nov 2016	Loss	Other	Yes
Franciscan Health, Highline Medical Center	WA	Healthcare Provider	18,399	1 Sep 2016	Unauthorized Access/Disclosure	Network Server	Yes
Dr. Q Pain and Spine d/b/a Arkansas Spine and Pain	AR	Healthcare Provider	17,100	11 Jul 2016	Hacking/IT Incident	Network Server	Yes
King of Prussia Dental Associates	PA	Healthcare Provider	16,228	13 Sep 2016	Hacking/IT Incident	Network Server	No
ENT and Allergy Center	AR	Healthcare Provider	16,200	31 May 2016	Hacking/IT Incident	Network Server	No
USC Keck and Norris Hospitals	CA	Healthcare Provider	16,000	21 Sep 2016	Hacking/IT Incident	Network Server	No
HeartCare Consultants	FL	Healthcare Provider	16,000	11 May 2016	Hacking/IT Incident	Electronic Medical Record	No
Mercy Iowa City	IA	Healthcare Provider	15,625	25 Mar 2016	Hacking/IT Incident	Desktop Computer, Email, Network Server	No
University Gastroenterology, Inc.	RI	Healthcare Provider	15,478	8 Sep 2016	Hacking/IT Incident	Network Server	No
State of New Hampshire, Department of Health and Human Services	NH	Healthcare Provider	14,947	30 Dec 2016	Hacking/IT Incident	Desktop Computer	No
Southcentral Foundation	AK	Healthcare Provider	14,719	16 Dec 2016	Hacking/IT Incident	Email	No
Francisco Jaume, D.O.	AZ	Healthcare Provider	14,236	4 Oct 2016	Hacking/IT Incident	Network Server	No
Uncommon Care, P.A.	NC	Healthcare Provider	13,674	21 Jun 2016	Hacking/IT Incident	Network Server	Yes
Professional Dermatology Care, P.C.	VA	Healthcare Provider	13,237	9 Aug 2016	Hacking/IT Incident	Network Server	No
Bryan Myers, MD PC, Ashley DeWitt, DO PC, Michael Nobles, MD PC	TN	Healthcare Provider	13,150	30 Dec 2016	Hacking/IT Incident	Network Server	No
Baystate Health, Inc.	MA	Healthcare Provider	13,112	21 Oct 2016	Hacking/IT Incident	Email	No
Louisiana Healthcare Connections	LA	Health Plan	13,086	2 Feb 2016	Theft	Other	No
The Ambulatory Surgery Center at St. Mary (ACASM)	PA	Healthcare Provider	13,000	7 Jul 2016	Hacking/IT Incident	Network Server	No
Fairbanks Hospital	IN	Healthcare Provider	12,994	16 Dec 2016	Unauthorized Access/Disclosure	Network Server	No
San Juan County New Mexico	NM	Healthcare Provider	12,500	17 May 2016	Hacking/IT Incident	Desktop Computer	No
CHI Franciscan Health Hospice-Tacoma	WA	Healthcare Provider	12,413	28 Nov 2016	Theft	Laptop	No
Memorial Hermann Health System, reporting on behalf of Memorial Hermann Health System Employee Group Health Plan	TX	Health Plan	12,061	20 Jul 2016	Unauthorized Access/Disclosure	Paper/Films	No
Susan M Hughes Center	NJ	Healthcare Provider	11,400	27 Dec 2016	Hacking/IT Incident	Network Server	No
Appalachian Gastroenterology, P.A.	NC	Healthcare Provider	11,000	10 Dec 2016	Hacking/IT Incident	Network Server	No
Thomasville Eye Center	GA	Healthcare Provider	10,891	28 Sep 2016	Unauthorized Access/Disclosure	Desktop Computer	No
Planned Parenthood of Greater Washington and North Idaho	WA	Healthcare Provider	10,700	26 Aug 2016	Unauthorized Access/Disclosure	Email	Yes
Jefferson Medical Associates, P.A.	MS	Healthcare Provider	10,401	29 Jul 2016	Hacking/IT Incident	Network Server	No
Hawai'i Medical Service Association	HI	Health Plan	10,179	15 Jan 2016	Unauthorized Access/Disclosure	Paper/Films	No
Maryland Medical Center/Dr. Morrill	MD	Healthcare Provider	10,000	28 Dec 2016	Hacking/IT Incident	Desktop Computer	No

Section 2016.4 / All other filings

245 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Fred's Stores of Tennessee, Incorporated	TN	Healthcare Provider	9,624	29 Sep 2016	Theft	Laptop	No
Surgical Care Affiliates	AL	Business Associate	9,009	16 May 2016	Theft	Laptop	Yes
Silver Creek Fitness & Physical Therapy, Silver Creek Physical Therapy Gilroy, Silver Creek Physical Therapy Sunnyvale, Silver Creek Physical Therapy	CA	Healthcare Provider	8,009	24 Oct 2016	Unauthorized Access/Disclosure	Network Server	Yes
Louisiana Health Cooperative, Inc. in Rehabilitation	LA	Health Plan	8,000	30 Nov 2016	Hacking/IT Incident	Other	Yes
Sunbury Plaza Dental	OH	Business Associate	7,784	21 Jul 2016	Theft	Paper/Films	Yes
Burrell Behavioral Health	MO	Healthcare Provider	7,748	2 Sep 2016	Unauthorized Access/Disclosure	Email	No
Vision Care Florida, LLC	FL	Healthcare Provider	7,500	16 Nov 2016	Unauthorized Access/Disclosure	Desktop Computer	No
Lafayette Pain Care PC	IN	Healthcare Provider	7,500	9 May 2016	Hacking/IT Incident	Network Server	Yes
Indian Health Service Northern Navajo Medical Center	NM	Health Plan	7,421	7 Apr 2016	Theft	Paper/Films	No
Gibson Insurance Agency, Inc.	IN	Business Associate	7,242	14 Oct 2016	Theft	Laptop	Yes
American Family Care, Inc.	AL	Healthcare Provider	7,200	25 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record, Other	No
University of Wisconsin Hospitals and Clinics Authority	WI	Healthcare Provider	6,923	30 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Centers Plan for Healthy Living	NY	Health Plan	6,893	3 Mar 2016	Theft	Laptop	No
Orleans Medical Clinic	IN	Healthcare Provider	6,890	19 Aug 2016	Hacking/IT Incident	Network Server	No
Grace Primary Care, PC	TN	Healthcare Provider	6,853	7 Jun 2016	Hacking/IT Incident	Network Server	Yes
Allergy, Asthma & Immunology of the Rockies, PC	CO	Healthcare Provider	6,851	17 Jun 2016	Hacking/IT Incident	Network Server	No
Preventice Services, LLC	TX	Healthcare Provider	6,800	7 Dec 2016	Unauthorized Access/Disclosure	Other	Yes
Florida Hospital Medical Group	FL	Healthcare Provider	6,786	21 Oct 2016	Loss	Paper/Films	No
EDWARD G. MYERS D.O. INC	OH	Healthcare Provider	6,441	10 Jun 2016	Hacking/IT Incident	Network Server	No
Nintendo of America Inc.	WA	Health Plan	6,248	26 Feb 2016	Hacking/IT Incident	Network Server	No
OptumRx, Inc.	CA	Healthcare Provider	6,229	12 Apr 2016	Theft	Laptop	No
Hal Meadows, M.D.	CA	Healthcare Provider	6,000	23 Sep 2016	Hacking/IT Incident	Desktop Computer	No
Providence Medical Group- Gateway Clinics	OR	Healthcare Provider	5,978	15 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Complete Family Foot Care	NE	Healthcare Provider	5,883	7 Mar 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Brodhead Dental Center	PA	Healthcare Provider	5,872	19 Dec 2016	Hacking/IT Incident	Desktop Computer	No
Charles Stamitoles	FL	Healthcare Provider	5,600	11 Dec 2016	Improper Disposal	Paper/Films	No
Managed Health Services	IN	Health Plan	5,500	29 Nov 2016	Unauthorized Access/Disclosure	Email, Laptop	No
UnitedHealth Group Single Affiliated Covered Entity (SACE)	MN	Health Plan	5,330	4 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Locust Fork Pharmacy	AL	Healthcare Provider	5,000	26 Feb 2016	Unauthorized Access/Disclosure	Other	No
Neurology Physicians LLC	MD	Healthcare Provider	4,831	20 Jul 2016	Hacking/IT Incident	Other	No
Walmart Stores, Inc.	AR	Healthcare Provider	4,800	1 Mar 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Kaiser Permanente Health Plan, Inc of Northern California	CA	Health Plan	4,432	7 Nov 2016	Unauthorized Access/Disclosure	Network Server	No
California Health & Longevity Institute	CA	Healthcare Provider	4,386	25 May 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Massachusetts General Hospital	MA	Healthcare Provider	4,293	29 Jun 2016	Hacking/IT Incident	Network Server	Yes
Dr. Melissa D. Selke	NJ	Healthcare Provider	4,277	5 Dec 2016	Hacking/IT Incident	Desktop Computer, Electronic Medical Record	No
Napa Valley Dentistry	CA	Healthcare Provider	4,262	5 Oct 2016	Theft	Other	No
North Texas Heart Center, P.A.	TX	Healthcare Provider	4,210	21 Nov 2016	Theft	Other Portable Electronic Device	No
New Mexico Heart Institute	NM	Healthcare Provider	4,185	23 Nov 2016	Unauthorized Access/Disclosure	Other Portable Electronic Device	Yes
Children's National Medical Center	DC	Healthcare Provider	4,107	25 Apr 2016	Unauthorized Access/Disclosure	Network Server	Yes
Complete Chiropractic & Bodywork Therapies	MI	Healthcare Provider	4,082	17 May 2016	Hacking/IT Incident	Desktop Computer, Network Server	No
RMA Medical Centers of Florida	FL	Healthcare Provider	3,906	7 Apr 2016	Theft	Laptop	No
Codman Square Health Center	MA	Healthcare Provider	3,840	12 Sep 2016	Unauthorized Access/Disclosure	Desktop Computer	No
Humana Inc. [case #HU16004F3]	KY	Health Plan	3,674	19 Dec 2016	Unauthorized Access/Disclosure	Paper/Films	No
BioReference Laboratories, Inc	NJ	Healthcare Provider	3,563	8 Apr 2016	Unauthorized Access/Disclosure	Other	No
Anthem, Inc.	IN	Health Plan	3,525	26 Oct 2016	Unauthorized Access/Disclosure	Email	No
Dr. Dennis T. Myers, D.D.S., P.A.	MO	Healthcare Provider	3,364	24 Oct 2016	Hacking/IT Incident	Network Server	No
Wyoming Medical Center	WY	Healthcare Provider	3,184	20 Apr 2016	Hacking/IT Incident	Email	No
Medical College of Wisconsin	WI	Healthcare Provider	3,179	2 Sep 2016	Hacking/IT Incident	Email	No
MGA Home Healthcare Colorado, Inc.	AZ	Healthcare Provider	3,119	19 Oct 2016	Loss	Laptop	No
Vail Clinic, Inc. dba Vail Valley Medical Center, and dba Howard Head Sports Medicine	CO	Healthcare Provider	3,118	15 Apr 2016	Unauthorized Access/Disclosure	Network Server	No
Kaiser Foundation Healthplan, Inc. of Southern California	CA	Health Plan	3,044	6 Nov 2016	Unauthorized Access/Disclosure	Network Server	No
The Finley Center	NV	Healthcare Provider	3,000	20 Oct 2016	Theft	Desktop Computer	No
You and Your Health Family Care, Inc.	FL	Healthcare Provider	3,000	20 Oct 2016	Hacking/IT Incident	Network Server	No
The Vein Doctor	MO	Healthcare Provider	3,000	3 Jun 2016	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Morton Medical Center, PLLC	WA	Healthcare Provider	3,000	24 Mar 2016	Hacking/IT Incident	Desktop Computer, Network Server	No
Group Life Hospital and Medical Program	CT	Health Plan	3,000	29 Feb 2016	Hacking/IT Incident	Network Server	No
Roark's Pharmacy	TN	Healthcare Provider	3,000	19 Feb 2016	Theft	Network Server	No
G&S Medical Associates, LLC	NJ	Healthcare Provider	3,000	14 Jan 2016	Hacking/IT Incident	Desktop Computer	No
Einstein Healthcare Network	PA	Healthcare Provider	2,939	1 Apr 2016	Unauthorized Access/Disclosure	Other	No
Warren Clinic	OK	Healthcare Provider	2,938	7 Oct 2016	Hacking/IT Incident	Network Server	No
Prima Medical Foundation	CA	Healthcare Provider	2,933	26 Sep 2016	Hacking/IT Incident	Network Server	Yes
StarCare Speciality Health System	TX	Healthcare Provider	2,844	25 Jul 2016	Theft	Laptop, Paper/Films	No
The University of New Mexico	NM	Healthcare Provider	2,827	3 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	No
CHI Franciscan Health, St. Clare Hospital and St. Joseph Medical Center	WA	Healthcare Provider	2,818	16 Sep 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Geisinger Health Plan	PA	Health Plan	2,814	7 Sep 2016	Unauthorized Access/Disclosure	Other	No
Karmanos Cancer Center	MI	Healthcare Provider	2,808	10 Mar 2016	Loss	Other Portable Electronic Device	Yes
Pinellas County Board of County Commissioners	FL	Health Plan	2,800	18 Nov 2016	Unauthorized Access/Disclosure	Email	No
Oneida Tribe of Indians of Wisconsin	WI	Healthcare Provider	2,734	15 Apr 2016	Theft	Desktop Computer, Other Portable Electronic Device	No
American Fidelity Assurance Company	OK	Health Plan	2,664	13 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	No
Pulaski County Special School District-Employee Benefits Division	AR	Health Plan	2,602	12 May 2016	Unauthorized Access/Disclosure	Email	Yes
Planned Parenthood of the Heartland	IA	Healthcare Provider	2,506	1 Jul 2016	Unauthorized Access/Disclosure	Paper/Films	No
Access Health Care Physicians, LLC	FL	Healthcare Provider	2,500	19 Jul 2016	Theft	Paper/Films	No
My Pediatrician, PA	FL	Business Associate	2,500	1 Jun 2016	Hacking/IT Incident	Network Server	Yes
Northgate Medical PC	MA	Business Associate	2,500	24 Mar 2016	Unauthorized Access/Disclosure	Email	Yes
Lee Rice D.O., Medical Corp DBA Lifewellness Institute	CA	Healthcare Provider	2,473	15 Jul 2016	Hacking/IT Incident	Electronic Medical Record	Yes
Kaiser Foundation Health Plan, Inc.	CA	Business Associate	2,451	22 Apr 2016	Theft	Paper/Films	Yes
PrimeWest Health	MN	Health Plan	2,441	29 Dec 2016	Hacking/IT Incident	Network Server	Yes
Pacific Gas and Electric Company	CA	Business Associate	2,426	5 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Asante	OR	Healthcare Provider	2,400	9 Sep 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
BJC HealthCare ACO, LLC	MO	Healthcare Provider	2,393	26 Feb 2016	Unauthorized Access/Disclosure	Email	No
ADVANTAGE Health Solutions	IN	Health Plan	2,387	22 Dec 2016	Hacking/IT Incident	Network Server	No
Laborers Funds Administrative Office of Northern California, Inc.	CA	Health Plan	2,373	15 Mar 2016	Unauthorized Access/Disclosure	Paper/Films	No
Grx Holdings, LLC dba Medicap Pharmacy	IA	Healthcare Provider	2,300	2 Feb 2016	Loss	Other	No
Marin Healthcare District	CA	Healthcare Provider	2,292	27 Sep 2016	Hacking/IT Incident	Network Server	Yes
Vincent Vein Center	CO	Healthcare Provider	2,250	7 Jun 2016	Hacking/IT Incident	Electronic Medical Record	Yes
Genesis Physical Therapy, Inc.	CA	Healthcare Provider	2,245	7 Oct 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
W. Christopher Bryant DDS PC	MI	Healthcare Provider	2,200	17 Mar 2016	Loss	Other Portable Electronic Device	No
Comanche County Hospital Authority	OK	Healthcare Provider	2,199	25 Apr 2016	Hacking/IT Incident	Email	No
Mind Springs Health	CO	Healthcare Provider	2,147	27 Feb 2016	Unauthorized Access/Disclosure	Network Server	Yes
VA Eastern Colorado Health Care System	CO	Healthcare Provider	2,130	8 Nov 2016	Unauthorized Access/Disclosure	Email	No
Baxter Regional Medical Center - Home Health Facility	AR	Healthcare Provider	2,124	5 Oct 2016	Unauthorized Access/Disclosure	Other	No
Pratap S. Kurra, M.D.	CA	Healthcare Provider	2,029	12 Sep 2016	Loss	Paper/Films	No
Stephen J. Helvie, M.D.	CA	Healthcare Provider	2,013	22 Dec 2016	Theft	Paper/Films	No
OptumHealth New Mexico	MN	Health Plan	2,006	18 Nov 2016	Loss	Other Portable Electronic Device	No
Briar Hill Management	MS	Business Associate	2,000	9 Nov 2016	Loss	Laptop	Yes
Brian Halevie-Goldman	CA	Healthcare Provider	2,000	20 Jul 2016	Theft	Laptop	No
Linda J White, DDS, PC	VA	Healthcare Provider	2,000	27 Jun 2016	Improper Disposal	Other Portable Electronic Device	No
Pointe Medical Services, Inc.	FL	Healthcare Provider	2,000	1 Apr 2016	Theft	Desktop Computer, Other Portable Electronic Device	No
Val Verde Regional Medical Center	TX	Healthcare Provider	2,000	18 Mar 2016	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Email, Laptop, Network Server	No
Apria Healthcare	CA	Healthcare Provider	1,987	4 Oct 2016	Unauthorized Access/Disclosure	Email	No
Howard R. Jarvis, D.M.D., L.L.C. dba Southwest Portland Dental	OR	Healthcare Provider	1,980	30 Aug 2016	Hacking/IT Incident	Network Server	No
Livongo Health, Inc.	IL	Healthcare Provider	1,950	25 Jan 2016	Unauthorized Access/Disclosure	Paper/Films	No
Blaine Chiropractic Center	MN	Healthcare Provider	1,945	14 Jul 2016	Hacking/IT Incident	Network Server	No
Florida Hospital Medical Group	FL	Healthcare Provider	1,906	18 Apr 2016	Unauthorized Access/Disclosure	Email	Yes
Stony Brook Internists, University Faculty Practice Corporation (UFPC)	NY	Healthcare Provider	1,878	22 Nov 2016	Theft	Email, Other Portable Electronic Device	Yes
Crown Point Health Center	IN	Healthcare Provider	1,854	29 Jan 2016	Improper Disposal	Paper/Films	No
Lasair Aesthetic Health, P.C.	CO	Healthcare Provider	1,835	11 Jul 2016	Unauthorized Access/Disclosure	Email	No
Berkshire Medical Center	MA	Healthcare Provider	1,745	23 Nov 2016	Unauthorized Access/Disclosure	Email, Other Portable Electronic Device	Yes
Saints Mary and Elizabeth Hospital	KY	Healthcare Provider	1,682	10 Jun 2016	Unauthorized Access/Disclosure	Email	No
Ambucor Health Solutions, an unincorporated division of The ScottCare Corporation	DE	Business Associate	1,679	22 Jul 2016	Unauthorized Access/Disclosure	Email, Other Portable Electronic Device	Yes
Cardiology Associates of Jonesboro, Inc.	AR	Healthcare Provider	1,669	4 Mar 2016	Unauthorized Access/Disclosure	Paper/Films	No
Virtua Medical Group	NJ	Healthcare Provider	1,654	11 Mar 2016	Unauthorized Access/Disclosure	Network Server, Other	No
Northwest Oncology & Hematology, S.C.	IL	Healthcare Provider	1,625	11 May 2016	Unauthorized Access/Disclosure	Email	No
UnityPoint Health Affiliated Covered Entity	IA	Healthcare Provider	1,620	11 May 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Ecolab Health and Welfare Benefits Plan	MN	Health Plan	1,550	26 Feb 2016	Hacking/IT Incident	Network Server	Yes
Atique Orthodontics	OR	Healthcare Provider	1,506	15 Apr 2016	Hacking/IT Incident	Desktop Computer	No
Jennie Stuart Medical Center	KY	Healthcare Provider	1,500	23 Sep 2016	Hacking/IT Incident	Network Server	No
Yuba Sutter Medical Clinic	CA	Business Associate	1,500	12 Sep 2016	Hacking/IT Incident	Network Server	Yes
PruittHealth Home Health -- Low Country	SC	Healthcare Provider	1,500	29 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	No
Felicia Lewis, MD Lakewood Hills Internal Medicine	TX	Healthcare Provider	1,500	14 Jan 2016	Hacking/IT Incident	Electronic Medical Record	No
SUNSHINE STATE HEALTH PLAN, INC.	FL	Health Plan	1,479	14 Jul 2016	Unauthorized Access/Disclosure	Email	No
Midland County Hospital District d/b/a Midland Memorial Hospital	TX	Healthcare Provider	1,468	7 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	No
Peabody Retirement Community	IN	Healthcare Provider	1,466	14 Oct 2016	Hacking/IT Incident	Email, Network Server	No
Washington National Insurance Company	IN	Health Plan	1,458	18 Nov 2016	Theft	Paper/Films	Yes
Elite Imaging	FL	Healthcare Provider	1,457	4 Jan 2016	Theft	Paper/Films	No
KidsPeace	PA	Healthcare Provider	1,456	19 Sep 2016	Loss	Paper/Films	No
PathGroup	TN	Health Plan	1,443	29 Dec 2016	Unauthorized Access/Disclosure	Other	No
PruittHealth Hospice Beaufort	SC	Healthcare Provider	1,437	9 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	No
United Health Group Single Affiliated Covered Entity	MN	Health Plan	1,408	22 Nov 2016	Hacking/IT Incident	Network Server	No
U.S. HealthWorks	CA	Healthcare Provider	1,400	9 Sep 2016	Theft	Laptop	No
Berkeley Endocrine Clinic	CA	Business Associate	1,370	24 May 2016	Unauthorized Access/Disclosure	Email	Yes
Heart Center of Southern Maryland, L.L.P.	MD	Healthcare Provider	1,350	7 Jul 2016	Hacking/IT Incident	Electronic Medical Record	No
Lister Healthcare	AL	Healthcare Provider	1,349	9 Nov 2016	Theft	Laptop	No
Public Education Employees' Health Insurance Plan	AL	Health Plan	1,349	9 Sep 2016	Unauthorized Access/Disclosure	Network Server	No
Freeport Memorial Hospital	IL	Healthcare Provider	1,349	26 Feb 2016	Theft	Other	No
Luque Chiropractic, Inc.	CA	Healthcare Provider	1,341	17 Nov 2016	Unauthorized Access/Disclosure	Network Server	Yes
Premier Family Care I, Inc.	TX	Healthcare Provider	1,326	20 Jul 2016	Unauthorized Access/Disclosure	Paper/Films	No
HP Enterprise Services, LLC	TX	Business Associate	1,235	7 Nov 2016	Theft	Other	Yes
Kern County Mental Health	CA	Health Plan	1,212	14 Jun 2016	Improper Disposal	Paper/Films	No
ELLIOT J MARTIN CHIROPRACTIC PC	NY	Healthcare Provider	1,200	24 Feb 2016	Hacking/IT Incident	Desktop Computer	No
AHRC Nassau	NY	Healthcare Provider	1,200	6 Jan 2016	Unauthorized Access/Disclosure	Paper/Films	No
The Carle Foundation	IL	Healthcare Provider	1,185	4 Aug 2016	Unauthorized Access/Disclosure	Network Server	No
JASACare	NY	Healthcare Provider	1,154	14 Mar 2016	Hacking/IT Incident	Email	No
Kaiser Permanente Northern California	CA	Health Plan	1,136	12 Jul 2016	Theft	Other Portable Electronic Device	No
Bozeman Health Deaconess Hospital	MT	Healthcare Provider	1,124	21 Mar 2016	Unauthorized Access/Disclosure	Paper/Films	No
Best Health Physical Therapy, LLC	CT	Healthcare Provider	1,100	10 Nov 2016	Unauthorized Access/Disclosure	Other	No
Health Incent, LLC	TN	Healthcare Provider	1,100	11 Jul 2016	Hacking/IT Incident	Other	No
Florida Department of Health	FL	Healthcare Provider	1,076	13 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	No
Emergency Room Associates doing business as Emergency Medicine Associates	AZ	Healthcare Provider	1,067	19 May 2016	Theft	Paper/Films	No
Washington DC VA Medical Center	DC	Healthcare Provider	1,062	31 May 2016	Theft	Paper/Films	No
Oak Cliff Orthopaedic Associates	TX	Healthcare Provider	1,057	14 Dec 2016	Theft	Paper/Films	No
The Biomechanics LLC	AZ	Healthcare Provider	1,049	16 Nov 2016	Hacking/IT Incident	Other	Yes
Alliant Health Plans, Inc.	GA	Health Plan	1,042	20 Dec 2016	Hacking/IT Incident	Network Server	No
Quarles & Brady, LLP	WI	Business Associate	1,032	19 Apr 2016	Theft	Laptop	Yes
John E. Gonzalez DDS	CA	Healthcare Provider	1,025	14 Aug 2016	Theft	Other Portable Electronic Device	No
City of Hope	CA	Healthcare Provider	1,024	4 Mar 2016	Hacking/IT Incident	Email	No
Brigham and Women's Hospital	MA	Healthcare Provider	1,009	11 Jan 2016	Hacking/IT Incident	Email	No
Black Hawk College	IL	Health Plan	1,000	8 Dec 2016	Hacking/IT Incident	Network Server	No
McLaren Greater Lansing Cardiovascular Group	MI	Healthcare Provider	1,000	21 Sep 2016	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Other	No
Martin Army Community Hospital	GA	Healthcare Provider	1,000	9 Sep 2016	Theft	Paper/Films	No
CalOptima	CA	Health Plan	1,000	22 Aug 2016	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
The Outer Banks Hospital	NC	Healthcare Provider	1,000	19 Aug 2016	Loss	Other Portable Electronic Device	No
Florida Medical Clinic, PA	FL	Healthcare Provider	1,000	4 May 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
United Community & Family Services	CT	Healthcare Provider	1,000	12 Apr 2016	Unauthorized Access/Disclosure	Email	No
BlueCross BlueShield of South Carolina	SC	Business Associate	998	12 Feb 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Baxter Healthcare	IL	Healthcare Provider	992	10 Oct 2016	Unauthorized Access/Disclosure	Email	No
Center for Minimmally Invasive Bariatric and General Surgery	PA	Healthcare Provider	992	5 Aug 2016	Unauthorized Access/Disclosure	Email	No
Family & Children's Services of Mid Michigan, Inc.	MI	Healthcare Provider	981	27 Apr 2016	Hacking/IT Incident	Network Server	No
Rite Aid Store 01617	NY	Healthcare Provider	976	3 Feb 2016	Unauthorized Access/Disclosure	Desktop Computer, Other	No
Edwin Shaw Rehabilitation	OH	Healthcare Provider	975	22 Apr 2016	Loss	Other	No
Associates In EyeCare, P.S.C.	KY	Healthcare Provider	971	16 May 2016	Theft	Laptop, Other Portable Electronic Device	No
Rotech Healthcare Inc.	FL	Healthcare Provider	957	11 Aug 2016	Unauthorized Access/Disclosure	Paper/Films	No
Aflac	GA	Health Plan	930	20 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Young Adult Institute, Inc.	NY	Healthcare Provider	913	28 Nov 2016	Theft	Other Portable Electronic Device	No
Cardiology Associates	MD	Healthcare Provider	907	10 Aug 2016	Unauthorized Access/Disclosure	Email	No
Vidant Health	NC	Healthcare Provider	897	10 Mar 2016	Unauthorized Access/Disclosure	Other	No
Austin Pulmonary Consultants	TX	Healthcare Provider	889	7 Nov 2016	Improper Disposal	Paper/Films	No
Walgreen Co.	IL	Healthcare Provider	880	4 Mar 2016	Theft	Paper/Films	No
Aurora Health Care, Inc.	WI	Healthcare Provider	869	1 Apr 2016	Unauthorized Access/Disclosure	Network Server	Yes
LCS Westminster Partnership IV, LLP d/b/a Sagewood	AZ	Healthcare Provider	863	22 Nov 2016	Hacking/IT Incident	Email, Laptop, Network Server	No
Man Alive, Inc. and Lane Treatment Center, LLC	MD	Healthcare Provider	860	8 Sep 2016	Hacking/IT Incident	Desktop Computer, Electronic Medical Record	No
Athletes' Performance Los Angeles, LLC	AZ	Healthcare Provider	854	28 Jul 2016	Theft	Laptop	No
Cefalu Eye-Tech of Green, Inc.	OH	Healthcare Provider	850	14 Jul 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Watsonville Chiropractic, Inc.	CA	Healthcare Provider	829	17 Nov 2016	Unauthorized Access/Disclosure	Network Server	Yes
Center for Neurosurgical & Spine Disorders, LLC	LA	Healthcare Provider	824	31 Aug 2016	Hacking/IT Incident	Desktop Computer	No
Meigs County EMS	OH	Healthcare Provider	817	5 Dec 2016	Hacking/IT Incident	Desktop Computer, Email, Network Server	No
Heritage Medical Partners, LLC	SC	Healthcare Provider	812	15 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Consultants in Neurological Surgery, LLP	FL	Healthcare Provider	800	8 Nov 2016	Unauthorized Access/Disclosure	Paper/Films	No
Harrisonburg OB GYN Associates, P.C.	VA	Healthcare Provider	800	20 Oct 2016	Theft	Electronic Medical Record	No
Keystone Rural Health Consortia, Inc.	PA	Healthcare Provider	800	24 May 2016	Theft	Electronic Medical Record, Paper/Films	No
The University of Texas System Administration	TX	Health Plan	794	21 Jan 2016	Unauthorized Access/Disclosure	Email	No
The Seattle Indian Health Board	WA	Healthcare Provider	793	6 Oct 2016	Hacking/IT Incident	Email	No
Ventura County Health Care Agency	CA	Healthcare Provider	777	20 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Lindsay House Surgery Center, LLC	NY	Healthcare Provider	773	18 Mar 2016	Theft	Paper/Films	No
Wal-Mart Stores, Inc.	AR	Healthcare Provider	771	4 Nov 2016	Unauthorized Access/Disclosure	Paper/Films	No
Orchid MPS Holdings, LLC Welfare Benefit Plan	MI	Health Plan	771	26 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
County of Los Angeles	CA	Healthcare Provider	743	30 Aug 2016	Theft	Paper/Films	No
Akron General Medical Center	OH	Healthcare Provider	730	23 Nov 2016	Unauthorized Access/Disclosure	Other Portable Electronic Device	Yes
Vibrant Body Wellness	CA	Healthcare Provider	726	11 Mar 2016	Theft	Laptop, Other Portable Electronic Device	No
Target Corporation Health Plan	MN	Business Associate	719	5 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Midland Women's Clinic	TX	Healthcare Provider	717	17 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	No
Decatur Health Systems	KS	Healthcare Provider	707	7 Sep 2016	Theft	Paper/Films	No
Waiting Room Solutions Limited Liability Limited Partnership	NY	Business Associate	700	23 Dec 2016	Unauthorized Access/Disclosure	Email	Yes
Borgess Medical Center d/b/a Borgess Rheumatology	MI	Healthcare Provider	700	5 Feb 2016	Unauthorized Access/Disclosure	Paper/Films	No
Caring for Women, PA	TX	Healthcare Provider	697	22 Jul 2016	Unauthorized Access/Disclosure	Email	Yes
Village of Oak Park, Illinois	IL	Health Plan	688	18 Aug 2016	Unauthorized Access/Disclosure	Email	No
UHHS Geauga Medical Center	OH	Healthcare Provider	677	10 Mar 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Summit Medical Group, Inc. dba St. Elizabeth Physicians	KY	Healthcare Provider	674	23 Aug 2016	Unauthorized Access/Disclosure	Email	No
Group Health	WA	Health Plan	668	23 Sep 2016	Unauthorized Access/Disclosure	Paper/Films	No
Kinetorehab Physical Therapy, PLLC	NY	Healthcare Provider	665	4 Nov 2016	Theft	Laptop	No
Ceaton C Falgiano	NY	Healthcare Provider	650	27 Jun 2016	Unauthorized Access/Disclosure	Email	No
Mark Anthony Quintero, M.D., L.L.C.	FL	Healthcare Provider	650	12 Apr 2016	Hacking/IT Incident	Network Server	No
Imperial Valley Family Care Medical Group, APC	CA	Healthcare Provider	649	13 May 2016	Theft	Laptop	No
Lake Pulmonary Critical Care PA	FL	Healthcare Provider	648	20 Apr 2016	Theft	Paper/Films	No
Lake Pulmonary Critical PA	FL	Healthcare Provider	648	20 Apr 2016	Theft	Paper/Films	No
Four Star Drug of Bethany, Inc.	NE	Healthcare Provider	647	18 Oct 2016	Improper Disposal	Paper/Films	No
Hospital for Special Surgery	NY	Healthcare Provider	647	17 Mar 2016	Unauthorized Access/Disclosure	Email	No
CVS Health	RI	Healthcare Provider	626	5 Dec 2016	Theft	Paper/Films	No
Willow Bend Dental	TX	Healthcare Provider	625	31 Aug 2016	Theft	Other	No
Managed Health Services	IN	Health Plan	610	1 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Vancouver Radiologists, PC	WA	Healthcare Provider	603	26 Feb 2016	Unauthorized Access/Disclosure	Paper/Films	No
Texas Health and Human Services Commission	TX	Health Plan	600	14 Jun 2016	Loss	Paper/Films	Yes
CDC/NIOSH/ World Trade Center Health Program (WTCHP)	GA	Health Plan	597	15 Jan 2016	Unauthorized Access/Disclosure	Paper/Films	No
Coordinated Health Mutual, Inc.	OH	Health Plan	591	20 May 2016	Unauthorized Access/Disclosure	Paper/Films	No
Riverside Health System	VA	Healthcare Provider	578	10 Jun 2016	Unauthorized Access/Disclosure	Paper/Films	No
Henry County Health Department	OH	Healthcare Provider	574	21 Dec 2016	Theft	Electronic Medical Record, Email, Laptop, Paper/Films	No
DataStat, Inc.	MI	Business Associate	552	12 Feb 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Mercy Hospital and Medical Center	IL	Healthcare Provider	547	13 Oct 2016	Loss	Paper/Films	Yes
Washington Health System	PA	Healthcare Provider	544	2 Dec 2016	Theft	Electronic Medical Record	No
Kaiser Foundation Health Plan of the Northwest	OR	Health Plan	544	6 Nov 2016	Unauthorized Access/Disclosure	Network Server	No
Northwest Community Healthcare	IL	Healthcare Provider	540	7 Oct 2016	Unauthorized Access/Disclosure	Other Portable Electronic Device	Yes
Sisters of Charity of Leavenworth Health System Health Benefits Plan	CO	Business Associate	540	5 Apr 2016	Unauthorized Access/Disclosure	Paper/Films	Yes
Lebanon Cardiology Associates, PC	PA	Healthcare Provider	537	14 Nov 2016	Unauthorized Access/Disclosure	Other Portable Electronic Device	Yes
Autism Home Support Services	IL	Healthcare Provider	533	10 Aug 2016	Unauthorized Access/Disclosure	Email	No
Sacred Heart Health System, Inc	FL	Healthcare Provider	532	12 Apr 2016	Unauthorized Access/Disclosure	Other	Yes
Glendale Adventist Medical Center	CA	Healthcare Provider	528	28 Nov 2016	Unauthorized Access/Disclosure	Electronic Medical Record	No
Excel Plus Home Health, Incorporated	TX	Healthcare Provider	524	23 Mar 2016	Theft	Desktop Computer	No
Mercy Medical Center Redding	CA	Healthcare Provider	520	29 Jun 2016	Unauthorized Access/Disclosure	Other	Yes
Tallahassee Memorial HealthCare, Inc.	FL	Healthcare Provider	505	20 May 2016	Hacking/IT Incident	Other	No
Camas Center Clinic, Kalispel Tribe of Indians	WA	Healthcare Provider	504	21 Nov 2016	Unauthorized Access/Disclosure	Desktop Computer, Paper/Films	No
Desert Care Family and Sports Medicine	AZ	Healthcare Provider	500	20 Dec 2016	Hacking/IT Incident	Network Server	No
San Juan Oncology Associates	NM	Healthcare Provider	500	29 Sep 2016	Hacking/IT Incident	Network Server	No
Phoenix Dental Care	TN	Healthcare Provider	500	15 Aug 2016	Theft	Paper/Films	No
Family Medicine of Weston	FL	Healthcare Provider	500	11 May 2016	Hacking/IT Incident	Network Server	No
Cromwell Fire District	CT	Healthcare Provider	500	10 Mar 2016	Unauthorized Access/Disclosure	Paper/Films	No

← 2015: 270 filings 2017: 358 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.