Year File 2017 / HHS OCR Breach Register358 filingsRetrieved 28 August 2026

Time

2017: 358 breach filings.

358 breaches of 500 or more individuals were submitted to HHS in 2017, affecting 5,314,987 individuals (+9% on 2016's 328). 42% were hacking or IT incidents; 46 involved a business associate; California filed the most (34). 0 remain under investigation.

Filings

358

2016: 328

Individuals affected

5,314,987

Median filing 2,081

Largest filing

697,800

Commonwealth Health Corporation, KY

Hacking / IT share

42%

149 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2017.1 / Largest filings

Fifteen largest breaches submitted in 2017

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	Commonwealth Health Corporation	KY	Healthcare Provider	697,800	1 Mar 2017	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
2	Airway Oxygen, Inc.	MI	Healthcare Provider	500,000	16 Jun 2017	Hacking/IT Incident	Network Server	No
3	Women's Health Care Group of PA, LLC	PA	Healthcare Provider	300,000	15 Jul 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
4	Urology Austin, PLLC	TX	Healthcare Provider	279,663	22 Mar 2017	Hacking/IT Incident	Network Server	No
5	Pacific Alliance Medical Center	CA	Healthcare Provider	266,123	10 Aug 2017	Hacking/IT Incident	Network Server	No
6	Peachtree Neurological Clinic, P.C.	GA	Healthcare Provider	183,505	7 Jul 2017	Hacking/IT Incident	Network Server	No
7	Arkansas Oral & Facial Surgery Center	AR	Healthcare Provider	128,000	24 Sep 2017	Hacking/IT Incident	Network Server	No
8	Dallas County Mental Health Mental Retardation Center dba Metrocare Services	TX	Healthcare Provider	120,259	17 Nov 2017	Hacking/IT Incident	Email	No
9	McLaren Medical Group, Mid-Michigan Physicians Imaging Center	MI	Healthcare Provider	106,008	24 Aug 2017	Hacking/IT Incident	Network Server	No
10	Harrisburg Gastroenterology Ltd	PA	Healthcare Provider	93,323	28 Apr 2017	Hacking/IT Incident	Network Server	No
11	VisionQuest Eyecare	IN	Healthcare Provider	85,995	2 Mar 2017	Hacking/IT Incident	Network Server	No
12	Washington University School of Medicine	MO	Healthcare Provider	80,270	25 Mar 2017	Hacking/IT Incident	Email	No
13	Emory Healthcare	GA	Healthcare Provider	79,930	21 Feb 2017	Hacking/IT Incident	Network Server	No
14	Salina Family Healthcare Center	KS	Healthcare Provider	77,337	16 Aug 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
15	Stephenville Medical & Surgical Clinic	TX	Healthcare Provider	75,000	23 Jan 2017	Unauthorized Access/Disclosure	Desktop Computer	No

Section 2017.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident149 (42%)

Unauthorized Access/Disclosure127 (35%)

Theft55 (15%)

Loss16 (4%)

Improper Disposal11 (3%)

Location of breached information

Network Server110 (31%)

Email91 (25%)

Paper/Films72 (20%)

Electronic Medical Record39 (11%)

Laptop31 (9%)

Desktop Computer29 (8%)

Other Portable Electronic Device25 (7%)

Other25 (7%)

Covered entity type

Healthcare Provider285 (80%)

Health Plan52 (15%)

Business Associate21 (6%)

States with the most filings

California34 (9%)

Texas33 (9%)

Florida23 (6%)

New York17 (5%)

Michigan14 (4%)

Missouri12 (3%)

Colorado12 (3%)

Pennsylvania11 (3%)

Georgia11 (3%)

Tennessee11 (3%)

Section 2017.3 / Filing pages

84 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Commonwealth Health Corporation	KY	Healthcare Provider	697,800	1 Mar 2017	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
Airway Oxygen, Inc.	MI	Healthcare Provider	500,000	16 Jun 2017	Hacking/IT Incident	Network Server	No
Women's Health Care Group of PA, LLC	PA	Healthcare Provider	300,000	15 Jul 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
Urology Austin, PLLC	TX	Healthcare Provider	279,663	22 Mar 2017	Hacking/IT Incident	Network Server	No
Pacific Alliance Medical Center	CA	Healthcare Provider	266,123	10 Aug 2017	Hacking/IT Incident	Network Server	No
Peachtree Neurological Clinic, P.C.	GA	Healthcare Provider	183,505	7 Jul 2017	Hacking/IT Incident	Network Server	No
Arkansas Oral & Facial Surgery Center	AR	Healthcare Provider	128,000	24 Sep 2017	Hacking/IT Incident	Network Server	No
Dallas County Mental Health Mental Retardation Center dba Metrocare Services	TX	Healthcare Provider	120,259	17 Nov 2017	Hacking/IT Incident	Email	No
McLaren Medical Group, Mid-Michigan Physicians Imaging Center	MI	Healthcare Provider	106,008	24 Aug 2017	Hacking/IT Incident	Network Server	No
Harrisburg Gastroenterology Ltd	PA	Healthcare Provider	93,323	28 Apr 2017	Hacking/IT Incident	Network Server	No
VisionQuest Eyecare	IN	Healthcare Provider	85,995	2 Mar 2017	Hacking/IT Incident	Network Server	No
Washington University School of Medicine	MO	Healthcare Provider	80,270	25 Mar 2017	Hacking/IT Incident	Email	No
Emory Healthcare	GA	Healthcare Provider	79,930	21 Feb 2017	Hacking/IT Incident	Network Server	No
Salina Family Healthcare Center	KS	Healthcare Provider	77,337	16 Aug 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
Stephenville Medical & Surgical Clinic	TX	Healthcare Provider	75,000	23 Jan 2017	Unauthorized Access/Disclosure	Desktop Computer	No
Morehead Memorial Hospital	NC	Healthcare Provider	66,000	15 Sep 2017	Hacking/IT Incident	Email	No
Elderplan, Inc.	NY	Health Plan	65,235	5 Aug 2017	Hacking/IT Incident	Email	No
Primary Care Specialists, Inc.	TN	Healthcare Provider	65,000	9 Mar 2017	Hacking/IT Incident	Network Server	No
Enterprise Services LLC	IN	Business Associate	56,075	27 Jun 2017	Unauthorized Access/Disclosure	Network Server, Other	Yes
ABCD Pediatrics, P.A.	TX	Healthcare Provider	55,447	26 Mar 2017	Hacking/IT Incident	Network Server	No
Network Health	WI	Health Plan	51,232	8 Sep 2017	Hacking/IT Incident	Email	No
Oklahoma Department of Human Services	OK	Health Plan	47,000	5 Dec 2017	Hacking/IT Incident	Network Server	Yes
Torrance Memorial Medical Center	CA	Healthcare Provider	46,632	19 Jun 2017	Hacking/IT Incident	Email	No
Henry Ford Health System	MI	Healthcare Provider	43,563	1 Dec 2017	Hacking/IT Incident	Email	No
Coplin Health Systems	WV	Healthcare Provider	43,000	29 Dec 2017	Theft	Laptop	No
St. Mark's Surgical Center, LLC	FL	Healthcare Provider	33,877	9 Aug 2017	Hacking/IT Incident	Network Server	No
Pulmonary Specialists of Louisville, PSC	KY	Healthcare Provider	32,000	27 Nov 2017	Hacking/IT Incident	Electronic Medical Record	No
Sport and Spine Rehab	MD	Healthcare Provider	31,120	1 Aug 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
SSM Health	MO	Healthcare Provider	29,579	28 Dec 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
ABB, Inc.	NC	Healthcare Provider	28,012	11 Sep 2017	Hacking/IT Incident	Email	No
UNC Health Care System	NC	Healthcare Provider	27,113	8 Dec 2017	Theft	Desktop Computer	No
Arkansas Department of Human Services	AR	Health Plan	26,000	15 Sep 2017	Unauthorized Access/Disclosure	Email	No
Tampa Bay Surgery Center	FL	Healthcare Provider	25,848	20 Jun 2017	Hacking/IT Incident	Other	No
WellCare Health Plans, Inc.	FL	Health Plan	24,809	27 Jan 2017	Hacking/IT Incident	Network Server	No
Emory Healthcare	GA	Healthcare Provider	24,000	15 Dec 2017	Unauthorized Access/Disclosure	Email	No
Franciscan Physician Network of Illinois and Specialty Physicians of Illinois, LLC (formerly known as WellGroup Health Partners, LLC)	IL	Healthcare Provider	23,000	9 Dec 2017	Loss	Paper/Films	No
Cleveland Medical Associates, PLLC	TN	Healthcare Provider	22,000	20 Jun 2017	Hacking/IT Incident	Network Server	No
CBS Consolidated dba Cornerstone Business and Management Solutions	NE	Business Associate	21,856	5 Sep 2017	Hacking/IT Incident	Network Server	Yes
Denton Heart Group - Affiliate of HealthTexas Provider Network	TX	Healthcare Provider	21,665	10 Mar 2017	Theft	Other Portable Electronic Device	No
Lifespan Corporation	RI	Healthcare Provider	20,431	21 Apr 2017	Theft	Laptop	No
Ashland Women's Health	KY	Healthcare Provider	19,727	4 Apr 2017	Hacking/IT Incident	Network Server	No
Leo Edwards, Jr., M.D.	TX	Healthcare Provider	19,564	28 Feb 2017	Hacking/IT Incident	Network Server	No
Medical Oncology Hematology Consultants,PA	DE	Healthcare Provider	19,203	29 Aug 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
Oncology Consultants, P.A.	TX	Healthcare Provider	19,114	22 Aug 2017	Hacking/IT Incident	Desktop Computer, Email, Laptop, Network Server	No
Durango Family Medicine, P.C.	CO	Healthcare Provider	18,790	6 Jun 2017	Theft	Other Portable Electronic Device	No
Pacific Ocean Pediatrics	CA	Healthcare Provider	18,637	15 May 2017	Theft	Other Portable Electronic Device	No
Anthem, Inc.	IN	Health Plan	18,580	24 Jul 2017	Unauthorized Access/Disclosure	Email	Yes
FastHealth Corporation	AL	Business Associate	18,192	29 Jun 2017	Hacking/IT Incident	Network Server	Yes
Metropolitan Urology Group	WI	Business Associate	17,634	10 Mar 2017	Hacking/IT Incident	Network Server	Yes
TRUEbenefits LLC	WA	Business Associate	17,309	14 Aug 2017	Hacking/IT Incident	Email	Yes
Neeley-Nemeth, LLP d/b/a Barton Oaks Dental Group	TX	Healthcare Provider	17,090	18 May 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
Family Service Rochester	MN	Healthcare Provider	17,037	17 Feb 2017	Hacking/IT Incident	Network Server	No
Chase Brexton Health Care	MD	Healthcare Provider	16,562	3 Oct 2017	Hacking/IT Incident	Email	No
Hackensack Sleep and Pulmonary Center	NJ	Healthcare Provider	16,474	28 Nov 2017	Hacking/IT Incident	Network Server	No
Longs Peak Family Practice, P.C.	CO	Healthcare Provider	16,238	27 Dec 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
Institute for Women's Health	TX	Healthcare Provider	15,761	18 Aug 2017	Hacking/IT Incident	Network Server	No
2020 On-Site Optometry	MA	Business Associate	15,400	13 Feb 2017	Hacking/IT Incident	Network Server	Yes
Western Health Screening	MT	Business Associate	15,326	14 Apr 2017	Theft	Other Portable Electronic Device	Yes
MetroPlus Health Plan, Inc.	NY	Health Plan	15,212	1 Sep 2017	Unauthorized Access/Disclosure	Email	No
Advanced ENT Head & Neck Surgery	CA	Healthcare Provider	15,000	31 May 2017	Theft	Desktop Computer, Electronic Medical Record, Email, Laptop, Other, Other Portable Electronic Device, Paper/Films	No
University of California Davis Health	CA	Healthcare Provider	14,900	6 Jul 2017	Hacking/IT Incident	Email	No
Diamond Institute for Fertility and Menopause, LLC	NJ	Healthcare Provider	14,633	28 Apr 2017	Hacking/IT Incident	Network Server	No
Universal Care, Inc. DBA Brand New Day	CA	Health Plan	14,005	10 Feb 2017	Unauthorized Access/Disclosure	Other	No
American Home Patient	TN	Healthcare Provider	13,709	6 Mar 2017	Theft	Other Portable Electronic Device	No
Family Tree Health Clinic	TX	Healthcare Provider	13,402	19 Jun 2017	Hacking/IT Incident	Network Server	No
Surgical Dermatology Group	AL	Healthcare Provider	13,308	5 Aug 2017	Hacking/IT Incident	Network Server	Yes
Mercy Health Love County Hospital and Clinic	OK	Healthcare Provider	13,004	20 Sep 2017	Theft	Laptop, Paper/Films	No
The Neurology Foundation, Inc.	RI	Healthcare Provider	12,861	1 Sep 2017	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Network Server, Other Portable Electronic Device, Paper/Films	No
Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists	CA	Healthcare Provider	12,806	1 Sep 2017	Hacking/IT Incident	Network Server	No
Briggs & Stratton Corporation	WI	Health Plan	12,789	29 Sep 2017	Hacking/IT Incident	Network Server	No
North Carolina Department of Health and Human Services	NC	Health Plan	12,731	23 Feb 2017	Unauthorized Access/Disclosure	Email	No
Shop-Rite Supermarkets, Inc.	NY	Healthcare Provider	12,172	3 Nov 2017	Improper Disposal	Other Portable Electronic Device	No
Aetna Inc.	CT	Health Plan	11,887	29 Aug 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
Adult Internal Medicine of North Scottsdale	AZ	Healthcare Provider	11,798	1 Sep 2017	Hacking/IT Incident	Network Server	No
Medical Information Management Systems, LLC	FL	Business Associate	11,707	9 Feb 2017	Hacking/IT Incident	Network Server	Yes
Carson Valley Medical Center	NV	Healthcare Provider	11,368	4 Apr 2017	Unauthorized Access/Disclosure	Email	No
Sinai Health System	IL	Healthcare Provider	11,347	1 Dec 2017	Hacking/IT Incident	Email	No
Bluetail Medical Group	MO	Healthcare Provider	11,000	2 Aug 2017	Hacking/IT Incident	Desktop Computer	No
Riaz Baber, M.D., S.C.	IL	Healthcare Provider	10,500	28 Sep 2017	Unauthorized Access/Disclosure	Paper/Films	No
Plastic Surgery Associates of South Dakota	SD	Healthcare Provider	10,229	27 Jul 2017	Hacking/IT Incident	Network Server	No
Northeast OB/GYN Associates	TX	Healthcare Provider	10,198	18 Aug 2017	Hacking/IT Incident	Desktop Computer, Laptop, Network Server	No
Verity Medical Foundation	CA	Healthcare Provider	10,164	11 Jan 2017	Hacking/IT Incident	Network Server	No
PVHS-ICM Employee Health and Wellness, LLC as covered entity and business associate	CO	Healthcare Provider	10,143	3 Jul 2017	Hacking/IT Incident	Network Server	No
White Coats Wellness	FL	Business Associate	10,000	10 Jul 2017	Hacking/IT Incident	Email	Yes

Section 2017.4 / All other filings

274 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Cardiology Center of Acadiana	LA	Healthcare Provider	9,681	7 Apr 2017	Hacking/IT Incident	Network Server	No
The Medical College of Wisconsin, Inc.	WI	Healthcare Provider	9,500	17 Nov 2017	Hacking/IT Incident	Email	No
Golden Rule Insurance Company	IN	Health Plan	9,305	4 Dec 2017	Unauthorized Access/Disclosure	Network Server	Yes
Madison Street Provider Network	CO	Business Associate	9,129	12 Apr 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
Harrisburg Endoscopy and Surgery Center	PA	Healthcare Provider	9,092	28 Apr 2017	Hacking/IT Incident	Network Server	No
D. Andrew Loomis MD, Paula Schulze MD,Tammara Stefanelli MD, Christen Vu DO, Anja Crider MD	WA	Healthcare Provider	9,000	24 May 2017	Hacking/IT Incident	Network Server	No
Silver Cross Hospital	IL	Healthcare Provider	8,862	11 Aug 2017	Unauthorized Access/Disclosure	Network Server	Yes
Sports Medicine & Rehabilitation Therapy, Inc.	MA	Healthcare Provider	8,800	14 Nov 2017	Hacking/IT Incident	Network Server	No
East Central Kansas Area Agency on Aging	KS	Business Associate	8,750	31 Oct 2017	Hacking/IT Incident	Network Server	Yes
Valley Family Medicine	VA	Healthcare Provider	8,450	3 Nov 2017	Unauthorized Access/Disclosure	Paper/Films	No
Hill Country Memorial Hospital	TX	Healthcare Provider	8,449	21 Apr 2017	Hacking/IT Incident	Email	No
Elizabeth L. Brown, MD, PLLC	WV	Healthcare Provider	8,436	12 May 2017	Hacking/IT Incident	Network Server	No
MJHS Home Care	NY	Healthcare Provider	8,413	11 Aug 2017	Hacking/IT Incident	Email	No
Advanced Spine & Pain Center	TX	Healthcare Provider	8,352	27 Sep 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Bronson Healthcare Group	MI	Healthcare Provider	8,256	5 Dec 2017	Hacking/IT Incident	Email	No
Brevard Physician Associates	FL	Healthcare Provider	7,976	24 Oct 2017	Theft	Desktop Computer	No
Sheldon M. Golden O.D., Optometric Corporation	CA	Healthcare Provider	7,583	19 Dec 2017	Hacking/IT Incident	Network Server	No
University of Mississippi Medical Center	MS	Healthcare Provider	7,492	7 Jul 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Northwest Rheumatology	AZ	Healthcare Provider	7,468	31 Jul 2017	Hacking/IT Incident	Network Server	No
West Virginia University Hospitals-East, Inc. DBA University Healthcare	WV	Healthcare Provider	7,445	24 Feb 2017	Theft	Electronic Medical Record	No
Med-Cert, Inc.	FL	Business Associate	7,253	2 Sep 2017	Hacking/IT Incident	Network Server, Other	Yes
Columbus Surgery Center, LLC	NE	Healthcare Provider	7,221	7 Dec 2017	Hacking/IT Incident	Network Server	No
Pediatric Healthcare Solutions, P.C.	NY	Healthcare Provider	6,932	28 Jun 2017	Hacking/IT Incident	Network Server	No
Family Medicine East, Chartered	KS	Healthcare Provider	6,800	3 Feb 2017	Theft	Desktop Computer	No
Feinstein and Roe Mds Inc.	CA	Healthcare Provider	6,642	21 Aug 2017	Hacking/IT Incident	Network Server	No
Saliba's Extended Care Pharmacy	AZ	Healthcare Provider	6,599	3 Mar 2017	Unauthorized Access/Disclosure	Email	No
Amida Care	NY	Health Plan	6,231	29 Sep 2017	Unauthorized Access/Disclosure	Paper/Films	No
Covenant Medical Center, Inc.	MI	Healthcare Provider	6,197	20 Jan 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Medical Mutual of Ohio	OH	Health Plan	6,119	15 Sep 2017	Unauthorized Access/Disclosure	Email	No
AU Medical Center, Inc.	GA	Healthcare Provider	6,109	15 Sep 2017	Hacking/IT Incident	Email	No
Southwest Community Health Center	CT	Healthcare Provider	6,000	7 Jun 2017	Theft	Desktop Computer, Laptop	No
Martinsville Henry County Coalition for Health and Wellness	VA	Healthcare Provider	5,806	13 Oct 2017	Theft	Laptop	No
Humana Inc	KY	Health Plan	5,764	21 Nov 2017	Unauthorized Access/Disclosure	Network Server	Yes
Mo. Dept. of Mental Health	MO	Healthcare Provider	5,685	7 Feb 2017	Hacking/IT Incident	Email	Yes
AU Medical Center, Inc.	GA	Healthcare Provider	5,600	26 May 2017	Hacking/IT Incident	Email	No
Community Link Inc	WI	Health Plan	5,524	30 Jun 2017	Hacking/IT Incident	Email	No
Children's Mercy Hospital	MO	Healthcare Provider	5,511	19 May 2017	Unauthorized Access/Disclosure	Other	No
Sentara Healthcare	VA	Healthcare Provider	5,454	16 Jan 2017	Hacking/IT Incident	Network Server	Yes
Estill County Chiropractic, PLLC	KY	Healthcare Provider	5,335	16 Mar 2017	Hacking/IT Incident	Network Server	No
University of Iowa Hospitals & Clinics	IA	Healthcare Provider	5,292	22 Jun 2017	Unauthorized Access/Disclosure	Other	No
Mississippi Division of Medicaid	MS	Health Plan	5,220	26 May 2017	Unauthorized Access/Disclosure	Email	No
Valley Women's Health, S.C.	IL	Healthcare Provider	5,155	19 Apr 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Aetna Inc.	CT	Health Plan	5,002	20 Jun 2017	Unauthorized Access/Disclosure	Network Server	No
SAGE DENTAL MANAGEMENT, LLC	FL	Business Associate	5,000	19 Jul 2017	Theft	Other	Yes
Walnut Place	TX	Healthcare Provider	5,000	5 Jul 2017	Hacking/IT Incident	Network Server	No
Walnut Place	TX	Healthcare Provider	5,000	12 May 2017	Hacking/IT Incident	Network Server	No
SSM Dean Medical Group	WI	Healthcare Provider	4,800	10 Jan 2017	Unauthorized Access/Disclosure	Email	No
Daniel Drake Center for Post-Acute Care	OH	Healthcare Provider	4,721	1 Aug 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Princeton Pain Management	NJ	Healthcare Provider	4,668	27 Jan 2017	Hacking/IT Incident	Network Server	No
Catholic Charities of the Diocese of Albany	NY	Healthcare Provider	4,624	27 Oct 2017	Hacking/IT Incident	Network Server	No
Chilton Medical Center	NJ	Healthcare Provider	4,600	15 Dec 2017	Theft	Other Portable Electronic Device	No
Walgreen Co.	IL	Healthcare Provider	4,500	3 Feb 2017	Unauthorized Access/Disclosure	Paper/Films	No
LC&Z General and Cosmetic Dentistry	FL	Healthcare Provider	4,391	11 Jul 2017	Unauthorized Access/Disclosure	Email	No
Kaiser Foundation Health Plan, Inc.	CA	Health Plan	4,389	14 Dec 2017	Hacking/IT Incident	Email	No
Cove Family and Sports Medicine, LLC	AL	Healthcare Provider	4,300	12 Jun 2017	Hacking/IT Incident	Network Server	No
Behavioral Health Center	ME	Healthcare Provider	4,229	21 Apr 2017	Hacking/IT Incident	Network Server	No
Metropolitan Life Insurance Company	NY	Health Plan	4,220	19 Jul 2017	Unauthorized Access/Disclosure	Other	No
Washington Health System Greene	PA	Healthcare Provider	4,145	1 Dec 2017	Theft	Other Portable Electronic Device	No
Capital Nephrology	MD	Healthcare Provider	4,000	2 May 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Tarleton Medical	CA	Healthcare Provider	3,929	6 Mar 2017	Hacking/IT Incident	Network Server	No
BEE Reno Dental, LLC	NV	Healthcare Provider	3,898	20 Dec 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
Humana Inc [case # HU17001CC]	KY	Health Plan	3,831	18 Apr 2017	Hacking/IT Incident	Network Server	No
Childrens Hospital of Los Angeles	CA	Healthcare Provider	3,594	13 Jan 2017	Theft	Laptop	No
New York City Health and Hospitals Corporation - Coney Island Hospital	NY	Healthcare Provider	3,494	9 May 2017	Unauthorized Access/Disclosure	Other, Paper/Films	No
Michigan Facial Aesthetic Surgeons d/b/a University Physician Group	MI	Healthcare Provider	3,467	28 Apr 2017	Theft	Laptop	No
City of Hope	CA	Healthcare Provider	3,400	3 Aug 2017	Hacking/IT Incident	Email	No
LKM ENTERPRISES, INC.	OK	Healthcare Provider	3,400	1 Jun 2017	Theft	Desktop Computer, Laptop	No
Children's Hospital Colorado	CO	Healthcare Provider	3,370	8 Sep 2017	Hacking/IT Incident	Email	No
Skin Cancer Specialists, P.C.	GA	Healthcare Provider	3,365	31 Mar 2017	Hacking/IT Incident	Network Server	No
Wonderful Center For Health Innovation	CA	Healthcare Provider	3,358	20 Jan 2017	Theft	Laptop	No
CCRM Minneapolis, P.C.	MN	Healthcare Provider	3,280	1 Dec 2017	Hacking/IT Incident	Network Server	No
Spokane VA Medical Center	WA	Healthcare Provider	3,275	20 Sep 2017	Loss	Laptop	No
Vanderbilt University Medical Center	TN	Healthcare Provider	3,247	24 Feb 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
The Dermatology Center of Raleigh PA	NC	Healthcare Provider	3,000	5 Jul 2017	Unauthorized Access/Disclosure	Email	No
Iowa Veterans Home	IA	Healthcare Provider	2,969	21 Apr 2017	Unauthorized Access/Disclosure	Email	No
Catalina Post-Acute Care and Rehabilitation	AZ	Healthcare Provider	2,953	2 Feb 2017	Improper Disposal	Paper/Films	No
MGA Home Healthcare Colorado, Inc.	AZ	Healthcare Provider	2,898	25 Oct 2017	Hacking/IT Incident	Email	No
Saint Thomas Rutherford Hospital	TN	Healthcare Provider	2,837	22 Jun 2017	Improper Disposal	Paper/Films	No
Kaleida Health	NY	Healthcare Provider	2,789	21 Jul 2017	Hacking/IT Incident	Email	No
Pharma Medica Research Inc.	MO	Healthcare Provider	2,718	23 Jun 2017	Unauthorized Access/Disclosure	Network Server	No
Virginia Commonwealth University Health System	VA	Healthcare Provider	2,716	10 Mar 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Eye Physicians, P.C.	NE	Healthcare Provider	2,620	7 Dec 2017	Hacking/IT Incident	Network Server	No
Professional Counseling & Medical Associates	TN	Healthcare Provider	2,500	13 Jul 2017	Hacking/IT Incident	Electronic Medical Record	Yes
Arizona Department of Health Services	AZ	Healthcare Provider	2,500	26 May 2017	Loss	Paper/Films	No
Orthopedics NY, LLP	NY	Healthcare Provider	2,493	12 Oct 2017	Unauthorized Access/Disclosure	Other	No
St. Charles Health System	OR	Healthcare Provider	2,459	16 Mar 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
North Dakota Department of Human Services	ND	Health Plan	2,452	1 Jun 2017	Improper Disposal	Paper/Films	No
The University of Vermont Medical Center	VT	Healthcare Provider	2,300	21 Jul 2017	Hacking/IT Incident	Email	No
California Pacific Orthopaedics and Sports Medicine	CA	Healthcare Provider	2,271	30 Jun 2017	Theft	Laptop, Paper/Films	No
LSU Healthcare Network	LA	Healthcare Provider	2,200	4 May 2017	Theft	Other Portable Electronic Device	Yes
Dignity Health Medical Foundation	CA	Healthcare Provider	2,189	19 Dec 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
NYU School of Medicine - Pediatric Surgery Associates	NY	Healthcare Provider	2,158	15 Dec 2017	Improper Disposal	Paper/Films	No
Alere Toxicology	MA	Healthcare Provider	2,146	28 Nov 2017	Unauthorized Access/Disclosure	Paper/Films	No
BlueCross BlueShield of TN, Inc.	TN	Health Plan	2,117	21 Jul 2017	Unauthorized Access/Disclosure	Paper/Films	No
Atlantic Digestive Specialists	NH	Healthcare Provider	2,081	21 Apr 2017	Hacking/IT Incident	Network Server	No
Centura Health, Mercy Family Medicine	CO	Healthcare Provider	2,069	16 Aug 2017	Loss	Other Portable Electronic Device	No
UW Health	WI	Healthcare Provider	2,036	25 May 2017	Hacking/IT Incident	Email	No
Florida Healthy Kids Corporation	FL	Health Plan	2,000	7 Sep 2017	Hacking/IT Incident	Network Server	No
Paul C. Gering, Jr., M.D.	OR	Healthcare Provider	2,000	29 Jun 2017	Theft	Desktop Computer	No
Atchafalaya Internal Medicine Associates	LA	Healthcare Provider	2,000	22 Jun 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Email, Laptop, Other Portable Electronic Device	No
Toth Enterprises II d/b/a Victory Medical	TX	Healthcare Provider	2,000	5 Jun 2017	Unauthorized Access/Disclosure	Email, Paper/Films	No
N. Fred Eaglstein, D.O. d/b/a Dermatology and Laser Center	FL	Healthcare Provider	2,000	30 May 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Mecklenburg County, North Carolina	NC	Healthcare Provider	2,000	4 May 2017	Unauthorized Access/Disclosure	Other Portable Electronic Device	No
PeaceHealth	WA	Healthcare Provider	1,969	19 Sep 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
GI Care for Kids Endoscopy Center	GA	Healthcare Provider	1,923	27 Jun 2017	Hacking/IT Incident	Network Server	No
Mann-Grandstaff VA Medical Center	WA	Healthcare Provider	1,915	19 Oct 2017	Theft	Other Portable Electronic Device	No
Lane Community College Health Clinic	OR	Healthcare Provider	1,911	25 Mar 2017	Hacking/IT Incident	Laptop	No
MidMichigan Medical Center-Alpena	MI	Healthcare Provider	1,900	19 Dec 2017	Loss	Paper/Films	No
Kennebunk Center for Dentistry	ME	Healthcare Provider	1,900	3 Jul 2017	Unauthorized Access/Disclosure	Electronic Medical Record, Paper/Films	No
Family & Cosmetic Dentistry of the Rockies	CO	Healthcare Provider	1,850	13 Nov 2017	Improper Disposal	Paper/Films	Yes
Blue Cross Blue Shield of Massachusetts	MA	Health Plan	1,843	26 Dec 2017	Unauthorized Access/Disclosure	Email	No
Texas Health and Human Services	TX	Health Plan	1,842	15 Jun 2017	Improper Disposal	Paper/Films	No
Women's Care of Somerset	KY	Healthcare Provider	1,806	31 Mar 2017	Unauthorized Access/Disclosure	Email	No
Urological Associates of Central Jersey P.A.	NJ	Healthcare Provider	1,800	18 Sep 2017	Hacking/IT Incident	Desktop Computer, Network Server	No
BioReference Laboratories, Inc.	NJ	Healthcare Provider	1,772	14 Apr 2017	Improper Disposal	Paper/Films	No
Austin Manual Therapy Associates	TX	Healthcare Provider	1,750	6 Dec 2017	Hacking/IT Incident	Laptop, Network Server	No
Area Agency of Aging 1-B	MI	Healthcare Provider	1,741	13 Apr 2017	Unauthorized Access/Disclosure	Email	No
Area Agency of Aging 1-B	MI	Healthcare Provider	1,741	13 Apr 2017	Unauthorized Access/Disclosure	Email	No
Arch City Dental	OH	Healthcare Provider	1,716	26 Oct 2017	Unauthorized Access/Disclosure	Email	No
John Hancock Life Insurance Company (U.S.A.)	MA	Health Plan	1,715	6 Oct 2017	Hacking/IT Incident	Network Server	No
Deering Therapy Services, Ltd.	NJ	Business Associate	1,710	26 Apr 2017	Unauthorized Access/Disclosure	Electronic Medical Record, Laptop	Yes
Multnomah County	OR	Healthcare Provider	1,700	20 Jan 2017	Unauthorized Access/Disclosure	Email	No
Indiana Health Centers, Inc.	IN	Healthcare Provider	1,697	12 Sep 2017	Theft	Desktop Computer, Laptop	No
University of Oklahoma, OU Physicians	OK	Healthcare Provider	1,637	4 Apr 2017	Unauthorized Access/Disclosure	Email	No
Bridget P Early MD LLC d/b/a Namaste Health Care	MO	Healthcare Provider	1,617	12 Oct 2017	Hacking/IT Incident	Network Server	No
Aetna Inc.	CT	Health Plan	1,600	8 Nov 2017	Unauthorized Access/Disclosure	Paper/Films	No
W. W. Grainger, Inc.	IL	Health Plan	1,594	18 Sep 2017	Theft	Laptop	No
Jeffrey D. Rice, O.D., L.L.C.	OH	Healthcare Provider	1,586	2 Feb 2017	Theft	Paper/Films	No
Otolaryngology Associates of Central New Jersey, P.C.	NJ	Healthcare Provider	1,551	10 Nov 2017	Theft	Paper/Films	No
Carolina Oncology Specialists	NC	Healthcare Provider	1,551	16 Oct 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Detroit Medical Center	MI	Healthcare Provider	1,529	13 Jul 2017	Theft	Desktop Computer, Paper/Films	No
Aetna, Inc.	CT	Health Plan	1,506	23 Oct 2017	Unauthorized Access/Disclosure	Network Server	Yes
Christine D. Collins, APC & Ann Hofstadter, MD Inc.	CA	Healthcare Provider	1,500	27 Jul 2017	Hacking/IT Incident	Email	No
Insulet Corporation	MA	Healthcare Provider	1,469	17 Oct 2017	Unauthorized Access/Disclosure	Network Server	Yes
Consultants Choice, P.A.	FL	Healthcare Provider	1,458	1 Sep 2017	Hacking/IT Incident	Desktop Computer	No
Houston Methodist Hospital	TX	Healthcare Provider	1,417	17 Mar 2017	Unauthorized Access/Disclosure	Email	No
Indiana University Health	IN	Healthcare Provider	1,399	3 Nov 2017	Improper Disposal	Paper/Films	No
MDeverywhere, Inc.	TX	Business Associate	1,396	10 Aug 2017	Unauthorized Access/Disclosure	Network Server	Yes
Molina Healthcare	FL	Health Plan	1,380	21 Dec 2017	Unauthorized Access/Disclosure	Other	No
Community Health Plan of Washington	WA	Health Plan	1,375	3 Jan 2017	Hacking/IT Incident	Network Server	No
Houston Methodist Hospital	TX	Healthcare Provider	1,359	25 Sep 2017	Unauthorized Access/Disclosure	Email	No
Rocky Mountain Health Maintenance Organization, Inc.	CO	Health Plan	1,320	17 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
University of Maryland Orthopaedic Associates, P.A.	MD	Healthcare Provider	1,320	13 Jan 2017	Hacking/IT Incident	Email	No
Sutter Valley Medical Foundation d/b/a Sutter Medical Foundation	CA	Healthcare Provider	1,303	22 Nov 2017	Theft	Laptop, Paper/Films	No
RiverMend Health, LLC	GA	Healthcare Provider	1,300	9 Oct 2017	Hacking/IT Incident	Email	No
UNC Health Care	NC	Healthcare Provider	1,298	20 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
Local 693 Plumbers & Pipefitters Health & Welfare Fund	VT	Health Plan	1,291	13 Mar 2017	Theft	Other Portable Electronic Device	No
University of South Florida, USF Health Care	FL	Healthcare Provider	1,279	11 Dec 2017	Unauthorized Access/Disclosure	Paper/Films	No
Sound Community Services, Inc.	CT	Healthcare Provider	1,278	26 May 2017	Hacking/IT Incident	Email	No
SAY San Diego	CA	Healthcare Provider	1,272	22 Dec 2017	Loss	Paper/Films	No
South Bend Orthopaedic Associates Inc	IN	Healthcare Provider	1,272	18 Aug 2017	Theft	Laptop	No
MultiCare Health System	WA	Healthcare Provider	1,249	26 Jan 2017	Hacking/IT Incident	Email	No
Clinton County Board of Developmental Disabilities	OH	Healthcare Provider	1,243	5 May 2017	Hacking/IT Incident	Network Server	No
Beacon Health System	IN	Healthcare Provider	1,239	26 May 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
WellCare Health Plans, Inc.	FL	Health Plan	1,214	11 Aug 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
UPMC Susquehanna	PA	Healthcare Provider	1,208	15 Nov 2017	Hacking/IT Incident	Email	No
Pharmacy Innovations	NY	Healthcare Provider	1,205	12 Dec 2017	Hacking/IT Incident	Network Server	No
LSU Health Care Services Division	LA	Healthcare Provider	1,200	2 Oct 2017	Unauthorized Access/Disclosure	Other	No
Braun Dermatology & Skin Cancer Center	DC	Healthcare Provider	1,200	28 Jul 2017	Unauthorized Access/Disclosure	Email	No
Andrea Yaley, DDS	CA	Healthcare Provider	1,200	10 Jul 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Email, Network Server	No
National DCP Health Plan	GA	Health Plan	1,190	8 Aug 2017	Hacking/IT Incident	Email	No
Massachusetts Department of Public Health - Tewksbury Hospital	MA	Healthcare Provider	1,176	21 Jul 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Midland County Hospital District d/b/a Midland Memorial Hospital	TX	Healthcare Provider	1,160	12 Dec 2017	Hacking/IT Incident	Email	No
Associated Catholic Charities Incorporated	MD	Healthcare Provider	1,145	20 Jan 2017	Unauthorized Access/Disclosure	Email	No
Our Lady of the Angels Hospital	LA	Healthcare Provider	1,140	22 Sep 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Stephen P. Courtney, M.D.	TX	Healthcare Provider	1,140	1 Mar 2017	Unauthorized Access/Disclosure	Electronic Medical Record, Paper/Films	No
Capital Prosthetic and Orthotic Center, Inc.	OH	Business Associate	1,134	10 Feb 2017	Theft	Paper/Films	Yes
Apex EDI, Inc.	UT	Business Associate	1,132	31 Mar 2017	Hacking/IT Incident	Network Server	Yes
Compassion Care Hospice Las Vegas, LLC	NV	Healthcare Provider	1,128	14 Dec 2017	Hacking/IT Incident	Network Server	No
TriHealth, Inc.	OH	Healthcare Provider	1,126	19 Jan 2017	Unauthorized Access/Disclosure	Network Server, Paper/Films	No
Escambia County Alabama Community Hospitals, Inc. D/B/A Atmore Community Hospital	AL	Healthcare Provider	1,090	12 Jan 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Nova Southeastern University	FL	Healthcare Provider	1,086	2 May 2017	Theft	Other Portable Electronic Device	No
The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Country	MO	Healthcare Provider	1,081	16 Sep 2017	Unauthorized Access/Disclosure	Other	No
Ridgeview Medical Center	MN	Healthcare Provider	1,074	8 Sep 2017	Unauthorized Access/Disclosure	Email	No
Patients Choice	TX	Healthcare Provider	1,069	26 Sep 2017	Hacking/IT Incident	Network Server	No
University of Wisconsin - Madison	WI	Healthcare Provider	1,000	7 Sep 2017	Unauthorized Access/Disclosure	Paper/Films	No
Highland Rivers Community Service Board	GA	Healthcare Provider	967	20 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
Specialty Dental Partners of Philadelphia, PLLC.- DBA Rich Orthodontics	PA	Healthcare Provider	960	23 Mar 2017	Theft	Desktop Computer, Laptop	No
Community Memorial Health System	CA	Healthcare Provider	959	5 Sep 2017	Hacking/IT Incident	Email	No
Vertiv Co. Health & Welfare Plan	OH	Health Plan	955	31 Jan 2017	Unauthorized Access/Disclosure	Paper/Films	No
MVP Health Care, Inc.	NY	Health Plan	951	14 Apr 2017	Unauthorized Access/Disclosure	Paper/Films	No
Florida Blue	FL	Health Plan	939	27 Oct 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
MN Urology	MN	Healthcare Provider	939	18 Sep 2017	Unauthorized Access/Disclosure	Email	No
Texas Children's Health Plan	TX	Health Plan	932	27 Oct 2017	Unauthorized Access/Disclosure	Email	No
Rocky Mountain Health Care Services	CO	Healthcare Provider	909	16 Nov 2017	Theft	Laptop	No
Spectrum Health System	MI	Healthcare Provider	902	3 Aug 2017	Theft	Other Portable Electronic Device	No
Robert E Torti, MD, PA dba Retina Specialists	TX	Healthcare Provider	887	17 Feb 2017	Theft	Paper/Films	No
Baptist Health Louisville	KY	Healthcare Provider	880	21 Nov 2017	Hacking/IT Incident	Email	No
Premier Medical Associates	PA	Healthcare Provider	876	15 Sep 2017	Unauthorized Access/Disclosure	Other	No
Absolute Dental Hygiene, LLC	OR	Healthcare Provider	871	20 Dec 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
AeroCare Holdings	FL	Healthcare Provider	860	4 May 2017	Unauthorized Access/Disclosure	Email	No
Rosalind Franklin University of Medicine	IL	Healthcare Provider	859	9 Jul 2017	Hacking/IT Incident	Email	No
Memorial Hospital Clinic South	TX	Healthcare Provider	842	26 Apr 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Mount Carmel Health System	OH	Healthcare Provider	836	8 Dec 2017	Unauthorized Access/Disclosure	Email	No
CVS Pharmacy	RI	Healthcare Provider	836	13 Oct 2017	Theft	Paper/Films	No
SSM Health (Dr. Syed Khader)	MO	Healthcare Provider	836	9 Jun 2017	Theft	Other	No
Enterprise Services LLC	CO	Business Associate	822	30 Jun 2017	Hacking/IT Incident	Network Server	Yes
American Urgent Care Center, PSC	KY	Healthcare Provider	822	5 Jan 2017	Theft	Other	No
Iowa Department of Human Services	IA	Health Plan	811	20 Oct 2017	Hacking/IT Incident	Email	No
MetroPlus Health Plan	NY	Health Plan	808	3 Jan 2017	Unauthorized Access/Disclosure	Other	No
White Blossom Care Center	CA	Healthcare Provider	800	30 Jun 2017	Unauthorized Access/Disclosure	Other	No
Allina Health System	MN	Healthcare Provider	776	23 Feb 2017	Improper Disposal	Paper/Films	No
The Lowell General Hospital	MA	Healthcare Provider	769	10 Nov 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Community Family Care Medical Group IPA, Inc.	CA	Healthcare Provider	763	13 Sep 2017	Unauthorized Access/Disclosure	Other	No
Sharp Memorial Hospital	CA	Healthcare Provider	754	28 Feb 2017	Theft	Laptop, Other Portable Electronic Device	No
Lake Hospital System, Inc. dba Lake Health	OH	Healthcare Provider	750	15 Aug 2017	Loss	Paper/Films	No
Kaleida Health	NY	Healthcare Provider	744	25 Aug 2017	Hacking/IT Incident	Email	No
Jones Family Practice, P.A.	NC	Healthcare Provider	742	5 May 2017	Unauthorized Access/Disclosure	Network Server	No
Orthodontic Specialists of Green Bay	WI	Healthcare Provider	742	24 Apr 2017	Hacking/IT Incident	Email	No
California Correctional Health Care Services	CA	Healthcare Provider	738	9 Feb 2017	Unauthorized Access/Disclosure	Email	No
WellSpan Health	PA	Health Plan	732	23 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
Cook County Health & Hospitals System	IL	Healthcare Provider	727	27 Oct 2017	Unauthorized Access/Disclosure	Network Server	Yes
Blue Cross and Blue Shield of Kansas City	MO	Health Plan	725	5 May 2017	Unauthorized Access/Disclosure	Other	No
CVS Health	RI	Healthcare Provider	724	8 Mar 2017	Theft	Paper/Films	No
VA St. Louis Health Care System	MO	Healthcare Provider	724	1 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
Kaiser Foundation Health Plan	CA	Health Plan	720	20 Oct 2017	Unauthorized Access/Disclosure	Paper/Films	No
EMERGENCY COVERAGE CORPORATION	TN	Healthcare Provider	719	20 Oct 2017	Loss	Paper/Films	No
Shiel Sexton	IN	Health Plan	710	27 Jan 2017	Unauthorized Access/Disclosure	Other	Yes
Vision Care Specialists, Inc.	CO	Healthcare Provider	703	20 Jul 2017	Theft	Paper/Films	No
Emblem Health - GHI	NY	Health Plan	703	17 Feb 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
Chadron Community Hospital and Health Services	NE	Healthcare Provider	702	19 Feb 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Recovery Institute of the South East P.A.	FL	Healthcare Provider	689	21 Oct 2017	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Email, Laptop, Network Server, Other, Other Portable Electronic Device, Paper/Films	No
Memphis VA Medical Center	TN	Healthcare Provider	687	1 Mar 2017	Unauthorized Access/Disclosure	Paper/Films	No
Memorial Healthcare	MI	Healthcare Provider	685	3 Apr 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
TJ Samson Community Hospital	KY	Healthcare Provider	683	24 Oct 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Braun Internal Medicine, P.C.	GA	Healthcare Provider	680	14 Jul 2017	Unauthorized Access/Disclosure	Email	No
Orange County Global Medical Center	CA	Healthcare Provider	677	2 Mar 2017	Unauthorized Access/Disclosure	Email	No
THE R.O.A.D.S. Foundation Inc. DBA R.O.A.D.S. Community Care Clinic	CA	Healthcare Provider	670	26 Jan 2017	Loss	Paper/Films	No
Rutland Regional Medical Center	VT	Healthcare Provider	665	16 Jun 2017	Unauthorized Access/Disclosure	Email	No
The Union Labor Life Insurance Company	MD	Business Associate	664	19 Oct 2017	Unauthorized Access/Disclosure	Email	Yes
Kraig R. Pepper, D.O., P.A.	TX	Healthcare Provider	653	26 Sep 2017	Unauthorized Access/Disclosure	Other	No
University of Alabama at Birmingham	AL	Healthcare Provider	652	27 Nov 2017	Loss	Other Portable Electronic Device	No
Eclectic Chiropractic Rehab	MI	Healthcare Provider	650	5 Dec 2017	Unauthorized Access/Disclosure	Email	No
Hillsborough County Aging Services Department	FL	Healthcare Provider	650	16 Feb 2017	Loss	Paper/Films	No
Adams Industries, Inc.	NE	Health Plan	647	21 Jun 2017	Hacking/IT Incident	Network Server	No
Unconditional Love, Incorporated	FL	Healthcare Provider	643	7 Jul 2017	Unauthorized Access/Disclosure	Paper/Films	No
St. Louis Children's Hospital	MO	Healthcare Provider	643	9 Mar 2017	Unauthorized Access/Disclosure	Email	No
Colorado Department of Human Services	CO	Healthcare Provider	639	27 Dec 2017	Hacking/IT Incident	Desktop Computer	No
Kaiser Foundation Health Plan, Inc.	CA	Health Plan	638	22 Dec 2017	Unauthorized Access/Disclosure	Paper/Films	No
Mercy Hospital Logan County	OK	Healthcare Provider	629	30 Aug 2017	Loss	Paper/Films	No
St. Joseph's Hospital and Medical Center	AZ	Healthcare Provider	623	13 Feb 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
UnitedHealthcare Community Plan of Pennsylvania	PA	Business Associate	614	27 Dec 2017	Unauthorized Access/Disclosure	Paper/Films	Yes
Southern Illinois Hospital Services	IL	Healthcare Provider	613	23 Jun 2017	Unauthorized Access/Disclosure	Network Server	No
Amedisys West Virginia, LLC	WV	Healthcare Provider	611	11 Apr 2017	Improper Disposal	Paper/Films	Yes
Kaiser Foundation Health Plan	CA	Health Plan	609	8 Sep 2017	Unauthorized Access/Disclosure	Email	No
Spine Specialist	NJ	Healthcare Provider	600	28 Apr 2017	Theft	Laptop	No
St. Luke's Medical Center	ND	Healthcare Provider	600	16 Jan 2017	Hacking/IT Incident	Network Server	No
Complete Wellness	MD	Healthcare Provider	600	6 Jan 2017	Loss	Other Portable Electronic Device	No
Henry Ford Health System	MI	Healthcare Provider	596	26 Jun 2017	Theft	Paper/Films	No
Tennessee Rural Health Improvement Association	TN	Health Plan	588	8 Jun 2017	Loss	Paper/Films	Yes
Roper St. Francis Healthcare	SC	Healthcare Provider	576	24 Jan 2017	Loss	Other Portable Electronic Device	No
Performance Physical Therapy and Wellness	CT	Healthcare Provider	571	21 Jul 2017	Hacking/IT Incident	Email	No
Kennewick General Hospital dba Trios Health	WA	Healthcare Provider	569	18 May 2017	Unauthorized Access/Disclosure	Electronic Medical Record	No
Synergy Specialists Medical Group, Inc / Jay S. Berenter, DPM	CA	Healthcare Provider	569	27 Jan 2017	Hacking/IT Incident	Email	No
Central Iowa Hospital Corporation d/b/a Blank Children's Hospital	IA	Healthcare Provider	557	8 Dec 2017	Unauthorized Access/Disclosure	Paper/Films	No
Miracle-Ear, Inc. and Amplifon (USA), Inc.	MN	Business Associate	554	28 Dec 2017	Hacking/IT Incident	Email	Yes
Lifestyle Therapy & Coaching	AL	Healthcare Provider	550	9 Oct 2017	Unauthorized Access/Disclosure	Network Server	No
The Affiliated Sante Group	MD	Healthcare Provider	550	31 Jan 2017	Unauthorized Access/Disclosure	Electronic Medical Record	Yes
Bay Area Pain and Wellness Center	CA	Healthcare Provider	548	14 Jun 2017	Theft	Laptop	No
Little River Healthcare	TX	Healthcare Provider	542	16 Jun 2017	Theft	Laptop	No
Baptist Medical Center South	FL	Healthcare Provider	531	30 Jun 2017	Loss	Other Portable Electronic Device	No
Ledet Family Chiropractic Cener	PA	Healthcare Provider	530	9 Jul 2017	Hacking/IT Incident	Network Server	No
Memorial Hospital Clinic West	TX	Healthcare Provider	521	26 Apr 2017	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Department of Human Services, Commonwealth of Pennsylvania	PA	Health Plan	517	7 Sep 2017	Unauthorized Access/Disclosure	Other	No
Washington State Department of Social and Health Services	WA	Healthcare Provider	515	16 Nov 2017	Unauthorized Access/Disclosure	Email	No
The Center For Health Care Services	TX	Healthcare Provider	501	8 Nov 2017	Theft	Paper/Films	No
State of Alaska Department of Health and Social Services	AK	Healthcare Provider	501	1 Sep 2017	Hacking/IT Incident	Desktop Computer	No
Memphis Pathology Laboratory d/b/a American Esoteric Laboratory	TN	Healthcare Provider	500	14 Dec 2017	Theft	Laptop	No
Clinical Pathology Laboratories Southeast	FL	Healthcare Provider	500	17 Nov 2017	Theft	Laptop	No
Waco Otolaryngology Associates d/b/a Waco Ear, Nose, & Throat	TX	Healthcare Provider	500	28 Aug 2017	Hacking/IT Incident	Network Server	No
Northwest Behavioral Healthcare Services	OR	Healthcare Provider	500	27 Jul 2017	Unauthorized Access/Disclosure	Email	No
Syed Ahmed, MD PA	TX	Healthcare Provider	500	23 Feb 2017	Theft	Paper/Films	No
Bloom Physical Therapy, LLC dba Physicians Physical Therapy Service	AZ	Healthcare Provider	500	9 Feb 2017	Unauthorized Access/Disclosure	Email	No
Office of Dr. David Elbaum	CA	Healthcare Provider	500	9 Jan 2017	Theft	Paper/Films	No

← 2016: 328 filings 2018: 369 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.