Year File 2018 / HHS OCR Breach Register369 filingsRetrieved 28 August 2026

Time

2018: 369 breach filings.

369 breaches of 500 or more individuals were submitted to HHS in 2018, affecting 15,256,235 individuals (+3% on 2017's 358). 45% were hacking or IT incidents; 90 involved a business associate; California filed the most (38). 0 remain under investigation.

Filings

369

2017: 358

Individuals affected

15,256,235

Median filing 2,393

Largest filing

2,652,537

AccuDoc Solutions, Inc., NC

Hacking / IT share

45%

165 filings

Every year on the register

200918 2010199 2011200 2012218 2013277 2014314 2015270 2016328 2017358 2018369 2019511 2020663 2021715 2022718 2023746 2024741 2025798 2026441

Section 2018.1 / Largest filings

Fifteen largest breaches submitted in 2018

#	Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
1	AccuDoc Solutions, Inc.	NC	Business Associate	2,652,537	27 Nov 2018	Hacking/IT Incident	Network Server	Yes
2	Iowa Health System d/b/a UnityPoint Health	IA	Business Associate	1,421,107	30 Jul 2018	Hacking/IT Incident	Email	Yes
3	Employees Retirement System of Texas	TX	Health Plan	1,248,263	15 Oct 2018	Unauthorized Access/Disclosure	Other	No
4	Wolverine Solutions Group	MI	Business Associate	1,024,731	28 Dec 2018	Hacking/IT Incident	Network Server	Yes
5	CA Department of Developmental Services	CA	Health Plan	582,174	6 Apr 2018	Theft	Paper/Films	No
6	MSK Group	TN	Healthcare Provider	566,236	22 May 2018	Hacking/IT Incident	Network Server	No
7	CNO ACE	IN	Health Plan	566,217	25 Oct 2018	Hacking/IT Incident	Network Server	No
8	LifeBridge Health, Inc	MD	Healthcare Provider	538,127	15 May 2018	Hacking/IT Incident	Network Server	No
9	Health Management Concepts, Inc.	FL	Business Associate	502,416	22 Aug 2018	Hacking/IT Incident	Network Server	Yes
10	AU Medical Center, INC	GA	Healthcare Provider	472,413	16 Aug 2018	Hacking/IT Incident	Email	No
11	Georgia Department of Human Services	GA	Business Associate	435,339	30 Nov 2018	Unauthorized Access/Disclosure	Network Server, Other Portable Electronic Device	Yes
12	SSM Health St. Mary's Hospital - Jefferson City	MO	Healthcare Provider	301,000	30 Jul 2018	Improper Disposal	Paper/Films	No
13	Oklahoma State University	OK	Healthcare Provider	279,865	5 Jan 2018	Hacking/IT Incident	Network Server	No
14	Med Associates, Inc.	NY	Business Associate	276,057	14 Jun 2018	Hacking/IT Incident	Desktop Computer	Yes
15	Adams County	WI	Healthcare Provider	258,120	11 Dec 2018	Unauthorized Access/Disclosure	Network Server, Other	No

Section 2018.2 / Composition

Breach type, location, filer type and state

Multi-valued fields count once per value.

Type of breach

Hacking/IT Incident165 (45%)

Unauthorized Access/Disclosure140 (38%)

Theft41 (11%)

Loss13 (4%)

Improper Disposal10 (3%)

Location of breached information

Email123 (33%)

Paper/Films83 (22%)

Network Server78 (21%)

Other31 (8%)

Desktop Computer31 (8%)

Electronic Medical Record26 (7%)

Laptop26 (7%)

Other Portable Electronic Device23 (6%)

Covered entity type

Healthcare Provider273 (74%)

Health Plan53 (14%)

Business Associate42 (11%)

not given1 (0%)

States with the most filings

California38 (10%)

Texas32 (9%)

Florida19 (5%)

Massachusetts18 (5%)

Illinois18 (5%)

New York17 (5%)

Missouri15 (4%)

Michigan11 (3%)

Pennsylvania11 (3%)

Iowa10 (3%)

Section 2018.3 / Filing pages

103 filings of 10,000 or more individuals

Largest first. Each links to a page with the full filing, ranks, OCR's closing summary where archived, peers and the modelled cost.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
AccuDoc Solutions, Inc.	NC	Business Associate	2,652,537	27 Nov 2018	Hacking/IT Incident	Network Server	Yes
Iowa Health System d/b/a UnityPoint Health	IA	Business Associate	1,421,107	30 Jul 2018	Hacking/IT Incident	Email	Yes
Employees Retirement System of Texas	TX	Health Plan	1,248,263	15 Oct 2018	Unauthorized Access/Disclosure	Other	No
Wolverine Solutions Group	MI	Business Associate	1,024,731	28 Dec 2018	Hacking/IT Incident	Network Server	Yes
CA Department of Developmental Services	CA	Health Plan	582,174	6 Apr 2018	Theft	Paper/Films	No
MSK Group	TN	Healthcare Provider	566,236	22 May 2018	Hacking/IT Incident	Network Server	No
CNO ACE	IN	Health Plan	566,217	25 Oct 2018	Hacking/IT Incident	Network Server	No
LifeBridge Health, Inc	MD	Healthcare Provider	538,127	15 May 2018	Hacking/IT Incident	Network Server	No
Health Management Concepts, Inc.	FL	Business Associate	502,416	22 Aug 2018	Hacking/IT Incident	Network Server	Yes
AU Medical Center, INC	GA	Healthcare Provider	472,413	16 Aug 2018	Hacking/IT Incident	Email	No
Georgia Department of Human Services	GA	Business Associate	435,339	30 Nov 2018	Unauthorized Access/Disclosure	Network Server, Other Portable Electronic Device	Yes
SSM Health St. Mary's Hospital - Jefferson City	MO	Healthcare Provider	301,000	30 Jul 2018	Improper Disposal	Paper/Films	No
Oklahoma State University	OK	Healthcare Provider	279,865	5 Jan 2018	Hacking/IT Incident	Network Server	No
Med Associates, Inc.	NY	Business Associate	276,057	14 Jun 2018	Hacking/IT Incident	Desktop Computer	Yes
Adams County	WI	Healthcare Provider	258,120	11 Dec 2018	Unauthorized Access/Disclosure	Network Server, Other	No
Episcopal Health Services	NY	Healthcare Provider	218,055	19 Nov 2018	Hacking/IT Incident	Email	No
MedEvolve	AR	Business Associate	205,434	10 Jul 2018	Unauthorized Access/Disclosure	Network Server	Yes
Warby Parker Inc. (f/k/a JAND Inc. d/b/a Warby Parker)	NY	Healthcare Provider	197,986	20 Dec 2018	Hacking/IT Incident	Network Server	No
HealthEquity, Inc.	UT	Business Associate	165,800	17 Nov 2018	Hacking/IT Incident	Email	Yes
St. Peter's Ambulatory Surgery Center LLC - d/b/a St. Peter's Surgery & Endoscopy Center	NY	Healthcare Provider	134,512	28 Feb 2018	Hacking/IT Incident	Network Server	No
New York Oncology Hematology, P.C.	NY	Healthcare Provider	128,400	16 Nov 2018	Hacking/IT Incident	Email	No
Ramsey County	MN	Healthcare Provider	117,905	11 Dec 2018	Hacking/IT Incident	Email	No
Boys Town National Research Hospital	NE	Healthcare Provider	105,309	20 Jul 2018	Hacking/IT Incident	Email	No
Dental Center of Northwest Ohio	OH	Healthcare Provider	85,874	28 Dec 2018	Hacking/IT Incident	Network Server	Yes
Center for Orthopaedic Specialists - Providence Medical Institute (PMI)	CA	Healthcare Provider	81,550	18 Apr 2018	Hacking/IT Incident	Network Server	No
Tufts Associated Health Maintenance Organization, Inc.	MA	Health Plan	70,320	16 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Children's Mercy Hospital	MO	Healthcare Provider	65,930	31 Jan 2018	Hacking/IT Incident	Email	No
The Oregon Clinic, P.C. ("The Oregon Clinic")	OR	Healthcare Provider	64,487	8 May 2018	Hacking/IT Incident	Email	No
Florida Agency for Persons with Disabilities	FL	Health Plan	63,627	1 Mar 2018	Hacking/IT Incident	Email	No
Middletown Medical P.C.	NY	Healthcare Provider	63,551	29 Mar 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Dignity Health	CA	Healthcare Provider	55,947	31 May 2018	Unauthorized Access/Disclosure	Email	Yes
Onco360 and CareMed Specialty Pharmacy	KY	Healthcare Provider	53,173	12 Jan 2018	Hacking/IT Incident	Email	No
Baylor Scott & White Medical Center - Frisco	TX	Healthcare Provider	47,984	26 Nov 2018	Hacking/IT Incident	Network Server	Yes
ATI Holdings, LLC	IL	Healthcare Provider	45,800	12 Mar 2018	Hacking/IT Incident	Email	No
Blue Springs Family Care, P.C.	MO	Healthcare Provider	44,979	10 Jul 2018	Hacking/IT Incident	Electronic Medical Record, Network Server	No
GOLDEN HEART ADMINISTRATIVE PROFESSIONALS	AK	Business Associate	44,600	9 Jul 2018	Hacking/IT Incident	Network Server	Yes
Aultman Hospital	OH	Healthcare Provider	42,625	25 May 2018	Hacking/IT Incident	Email	No
Holland Eye Surgery and Laser Center	MI	Healthcare Provider	42,200	18 May 2018	Hacking/IT Incident	Desktop Computer	No
Health First, Inc	FL	Healthcare Provider	42,000	5 Oct 2018	Hacking/IT Incident	Email	No
Cancer Treatment Centers of America (CTCA) at Western Regional Medical Center	AZ	Healthcare Provider	41,948	26 Nov 2018	Hacking/IT Incident	Email	No
Greigh I. Hirata M.D. Inc, dba. Fetal Diagnostic Institute of the Pacific	HI	Healthcare Provider	40,800	30 Aug 2018	Hacking/IT Incident	Network Server	No
MedWatch LLC	FL	Business Associate	40,621	27 Apr 2018	Unauthorized Access/Disclosure	Network Server	Yes
Oprex Surgery (Baytown), L.P. d/b/a Altus Baytown Hospital	TX	Healthcare Provider	40,000	2 Nov 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Jones Eye Center, P.C.	IA	Healthcare Provider	39,605	22 Oct 2018	Hacking/IT Incident	Network Server	No
Legacy Health	OR	Healthcare Provider	38,000	20 Aug 2018	Hacking/IT Incident	Email	No
Gold Coast Health Plan	CA	Business Associate	37,005	5 Oct 2018	Hacking/IT Incident	Email	Yes
City of Houston Medical Plan	TX	Health Plan	34,637	22 Mar 2018	Theft	Laptop	No
Confluence Health	WA	Healthcare Provider	33,821	27 Jul 2018	Hacking/IT Incident	Email	No
University of Vermont Health Network - Elizabethtown Community Hospital	NY	Healthcare Provider	32,470	17 Dec 2018	Hacking/IT Incident	Email	No
Acadiana Computer Systems, Inc.	LA	Business Associate	31,151	17 Aug 2018	Hacking/IT Incident	Email	Yes
Mississippi State Department of Health	MS	Healthcare Provider	30,799	26 Mar 2018	Unauthorized Access/Disclosure	Email	No
The May Eye Care Center	PA	Healthcare Provider	30,000	11 Oct 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Agency for Health Care Administration	FL	Health Plan	30,000	5 Jan 2018	Hacking/IT Incident	Email	No
Inogen, Inc.	CA	Healthcare Provider	29,528	17 Apr 2018	Hacking/IT Incident	Email	No
WellCare Health Plans, Inc.	FL	Health Plan	26,942	14 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
The Podiatric Offices of Bobby Yee	CA	Healthcare Provider	24,000	20 Dec 2018	Hacking/IT Incident	Desktop Computer, Laptop, Other Portable Electronic Device	No
Decatur County General Hospital	TN	Healthcare Provider	24,000	26 Jan 2018	Hacking/IT Incident	Network Server	No
CJ Elmwood Partners, L.P.	IA	Healthcare Provider	22,416	22 Oct 2018	Hacking/IT Incident	Network Server	No
Reliable Respiratory	MA	Healthcare Provider	21,311	1 Sep 2018	Hacking/IT Incident	Email	No
Minnesota Department of Human Services	MN	Health Plan	20,800	9 Oct 2018	Hacking/IT Incident	Email	No
HealthFitness	IL	Business Associate	20,790	15 Oct 2018	Unauthorized Access/Disclosure	Other	Yes
Center for Vitreo-Retinal Diseases	IL	Healthcare Provider	20,371	16 Nov 2018	Hacking/IT Incident	Network Server	No
Carpenters Benefit Funds of Philadelphia	PA	Health Plan	20,015	31 Aug 2018	Hacking/IT Incident	Email	No
Catawba Valley Medical Center	NC	Healthcare Provider	20,000	12 Oct 2018	Hacking/IT Incident	Email	No
NorthStar Anesthesia	TX	Healthcare Provider	19,807	20 Jul 2018	Hacking/IT Incident	Email	No
Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan	IN	Health Plan	19,320	28 Sep 2018	Hacking/IT Incident	Email	No
Veterans Health Administration	DC	Healthcare Provider	19,254	6 Nov 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Orlando Orthopaedic Center	FL	Healthcare Provider	19,101	20 Jul 2018	Unauthorized Access/Disclosure	Network Server	Yes
University Medical Center Physicians	TX	Healthcare Provider	18,500	16 Aug 2018	Hacking/IT Incident	Email	No
Barnes-Jewish Hospital	MO	Healthcare Provider	18,436	12 Mar 2018	Unauthorized Access/Disclosure	Network Server	No
FastHealth Corporation	AL	Business Associate	18,192	27 Feb 2018	Hacking/IT Incident	Network Server	Yes
Capital Digestive Care, Inc.	MD	Healthcare Provider	17,639	23 Apr 2018	Unauthorized Access/Disclosure	Network Server	Yes
Independence Blue Cross, LLC	PA	Business Associate	16,762	17 Sep 2018	Unauthorized Access/Disclosure	Other	Yes
Iowa Health System d/b/a UnityPoint Health	IA	Business Associate	16,429	16 Apr 2018	Hacking/IT Incident	Email	Yes
Ransom Memorial Hospital	KS	Healthcare Provider	16,366	25 Sep 2018	Hacking/IT Incident	Email	No
Steward Medical Group	MA	Healthcare Provider	16,276	28 Nov 2018	Hacking/IT Incident	Network Server	Yes
New England Dermatology, P.C.	MA	Healthcare Provider	16,154	13 Jul 2018	Improper Disposal	Paper/Films	No
Mind and Motion, LLC	GA	Healthcare Provider	16,000	30 Nov 2018	Hacking/IT Incident	Network Server	No
HealthEquity, Inc.	UT	Business Associate	16,000	12 Jun 2018	Hacking/IT Incident	Email	Yes
Knoxville Heart Group, Inc.	TN	Healthcare Provider	15,995	27 Apr 2018	Hacking/IT Incident	Email	No
National Ambulatory Hernia Institute	CA	Healthcare Provider	15,974	5 Oct 2018	Hacking/IT Incident	Network Server	No
USACS Management Group, Ltd.	OH	Business Associate	15,552	8 May 2018	Hacking/IT Incident	Email	Yes
David G. Simon, DMD, PA, d/b/a Simon Orthodontics	FL	Healthcare Provider	15,129	31 Aug 2018	Hacking/IT Incident	Network Server	No
Barnes-Jewish St. Peters Hospital	MO	Healthcare Provider	15,046	12 Mar 2018	Unauthorized Access/Disclosure	Network Server	No
Special Agents Mutual Benefit Association	MD	Health Plan	13,942	13 Mar 2018	Unauthorized Access/Disclosure	Paper/Films	No
Black River Medical Center	MO	Healthcare Provider	13,443	13 Jun 2018	Hacking/IT Incident	Email	No
MedSpring of Texas, PA	TX	Healthcare Provider	13,034	20 Jul 2018	Hacking/IT Incident	Email	Yes
Esther V. Rettig, M.D., P.A.	KS	Healthcare Provider	12,974	1 Mar 2018	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
Florida Hospital	FL	Healthcare Provider	12,724	3 May 2018	Hacking/IT Incident	Network Server	No
Inova Health System	VA	Healthcare Provider	12,331	2 Nov 2018	Hacking/IT Incident	Electronic Medical Record, Paper/Films	No
Athens Heart Center, P.C.	GA	Healthcare Provider	12,158	16 Apr 2018	Hacking/IT Incident	Electronic Medical Record	No
Fondren Orthopedic Group L.L.P.	TX	Healthcare Provider	11,552	2 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Guardian Pharmacy of Jacksonville	FL	Healthcare Provider	11,521	30 Mar 2018	Hacking/IT Incident	Email	No
CarePlus Health Plan [case #HU1800066]	KY	Health Plan	11,248	5 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	No
Kansas Department for Aging and Disability Services	KS	Healthcare Provider	11,000	17 Apr 2018	Unauthorized Access/Disclosure	Desktop Computer	No
Carolina Digestive Health Associates, PA	NC	Healthcare Provider	10,988	26 Apr 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Dr. Amy Woodruff	TX	Healthcare Provider	10,862	7 Oct 2018	Hacking/IT Incident	Network Server	No
AFLAC	GA	Health Plan	10,396	29 May 2018	Hacking/IT Incident	Email	Yes
Primary Health Care, Inc.	IA	Healthcare Provider	10,313	16 Mar 2018	Hacking/IT Incident	Email	No
Raley's/Bel Air Mart/Nob Hill General Store, Inc.	CA	Healthcare Provider	10,124	26 Oct 2018	Theft	Laptop	No
Wells Pharmacy Network	FL	Healthcare Provider	10,000	10 Aug 2018	Unauthorized Access/Disclosure	Email, Laptop, Other Portable Electronic Device	No
Longwood Orthopedic Associates, Inc.	MA	Healthcare Provider	10,000	27 Jul 2018	Unauthorized Access/Disclosure	Email	No
Elmcroft Senior Living, Inc.	TX	Healthcare Provider	10,000	21 May 2018	Hacking/IT Incident	Network Server	No

Section 2018.4 / All other filings

265 filings below 10,000 individuals

Listed in full from the HHS export, largest first.

Covered entity	State	Type	Individuals	Submitted	Breach type	Location	BA
Union Lake Supermarket, LLC	NJ	Healthcare Provider	9,956	28 Feb 2018	Improper Disposal	Other Portable Electronic Device	No
Billings Clinic	MT	Healthcare Provider	9,417	13 Jul 2018	Hacking/IT Incident	Email	No
Charles River Medical Associates, pc	MA	Healthcare Provider	9,387	8 Jan 2018	Loss	Other Portable Electronic Device	No
Missouri Department of Mental Health	MO	Healthcare Provider	9,000	24 Oct 2018	Unauthorized Access/Disclosure	Other	Yes
Cerebral Palsy Research Foundation of Kansas, Inc.	KS	Healthcare Provider	8,300	8 May 2018	Unauthorized Access/Disclosure	Network Server	No
FirstCare Health Plans	TX	Health Plan	8,056	12 Oct 2018	Unauthorized Access/Disclosure	Email	No
Illinois Department of Healthcare and Family Services	IL	Health Plan	8,000	26 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	No
New England Baptist Health	MA	Healthcare Provider	7,582	8 Jun 2018	Unauthorized Access/Disclosure	Email	No
Tandigm Health	PA	Business Associate	7,376	21 Nov 2018	Hacking/IT Incident	Network Server	Yes
Georgia Spine & Orthopaedics of Atlanta, LLC	GA	Healthcare Provider	7,012	16 Nov 2018	Hacking/IT Incident	Email	No
James R. Etzkorn, MD	MO	Healthcare Provider	6,845	19 Nov 2018	Unauthorized Access/Disclosure	Paper/Films	No
James R. Etzkorn, MD	MO	Healthcare Provider	6,845	9 Nov 2018	Hacking/IT Incident	Network Server	No
Ron's Pharmacy Services	CA	Healthcare Provider	6,781	2 Feb 2018	Hacking/IT Incident	Email	No
Sunspire Health	NJ	Healthcare Provider	6,737	16 Jul 2018	Hacking/IT Incident	Email	No
Jemison Internal Medicine, PC	AL	Health Plan	6,550	16 Feb 2018	Hacking/IT Incident	Network Server	No
Associates in Psychiatry and Psychology	MN	Healthcare Provider	6,546	18 May 2018	Hacking/IT Incident	Network Server	No
Ohio Living	OH	Healthcare Provider	6,510	7 Sep 2018	Hacking/IT Incident	Email	No
Prairie Fields Family Medicine, PC	NE	Healthcare Provider	6,450	30 Nov 2018	Unauthorized Access/Disclosure	Email	No
Fairbanks North Star Borough	AK	Healthcare Provider	6,346	19 Jul 2018	Hacking/IT Incident	Network Server	Yes
CareFirst Blue Cross Blue Shield	MD	Health Plan	6,200	26 Apr 2018	Hacking/IT Incident	Email	No
Barnes-Jewish Hospital	MO	Healthcare Provider	5,850	18 Dec 2018	Hacking/IT Incident	Network Server	No
Rhode Island Executive Office of Health and Human Services	RI	Health Plan	5,600	27 Feb 2018	Unauthorized Access/Disclosure	Other	No
Muir Medical Group, IPA, Inc.	CA	Business Associate	5,485	22 May 2018	Unauthorized Access/Disclosure	Network Server	Yes
The Children's Hospital of Philadelphia	PA	Healthcare Provider	5,368	23 Oct 2018	Hacking/IT Incident	Email	No
Westminster Ingleside King Farm Presbyterian Retirement Communities, Inc.	MD	Healthcare Provider	5,228	19 Jan 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Serene Sedation, LLC	MD	Healthcare Provider	5,207	14 Mar 2018	Hacking/IT Incident	Network Server	No
Flexible Benefit Service Corporation	IL	Business Associate	5,123	16 Feb 2018	Hacking/IT Incident	Email	Yes
AdventHealth Rollins Brook Hospital	TX	Healthcare Provider	5,019	2 Nov 2018	Loss	Paper/Films	No
San Mateo Medical Center	CA	Healthcare Provider	5,000	13 Nov 2018	Unauthorized Access/Disclosure	Other	No
Smith Dental Care	TX	Healthcare Provider	5,000	17 Oct 2018	Hacking/IT Incident	Desktop Computer, Email	No
Crossroads Behavioral Health	IA	Healthcare Provider	5,000	28 Aug 2018	Improper Disposal	Paper/Films	No
Port City Operating Company doing business as St. Joseph's Medical Center	CA	Healthcare Provider	4,984	31 Aug 2018	Loss	Other Portable Electronic Device	Yes
The Terteling Co., Inc., Group Benefit Plan	ID	Health Plan	4,824	6 Jul 2018	Hacking/IT Incident	Email	No
VCU Health System	VA	Healthcare Provider	4,686	6 Jul 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Gruber Dental	NJ	Healthcare Provider	4,624	20 Apr 2018	Hacking/IT Incident	Email	No
RGH Enterprises, Inc.	OH	Healthcare Provider	4,586	22 Jan 2018	Unauthorized Access/Disclosure	Paper/Films	No
QuadMed, LLC (Whirlpool)	WI	Healthcare Provider	4,549	29 Jan 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Arkansas Children's Hospital	AR	Healthcare Provider	4,521	29 Jun 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Gillette Medical Imaging	WY	Healthcare Provider	4,476	18 Jan 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
FHN Family Counseling Center	IL	Healthcare Provider	4,458	3 Nov 2018	Theft	Laptop	No
Choice Rehabilitation	MO	Business Associate	4,309	29 Dec 2018	Hacking/IT Incident	Email	Yes
Integrated Rehab Consultants	IL	Healthcare Provider	4,292	9 Apr 2018	Unauthorized Access/Disclosure	Network Server	Yes
Central Colorado Dermatology, PC	CO	Healthcare Provider	4,065	3 Aug 2018	Hacking/IT Incident	Network Server	No
BioIQ Inc.	CA	Business Associate	4,059	25 May 2018	Unauthorized Access/Disclosure	Email	Yes
Tillamook Chiropractic, PC	OR	Healthcare Provider	4,058	3 Oct 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Arthritis & Osteoporosis Consultants of the Carolinas	NC	Healthcare Provider	3,930	9 Nov 2018	Improper Disposal	Paper/Films	No
Institute on Aging	CA	Healthcare Provider	3,907	20 Jul 2018	Hacking/IT Incident	Email	No
InfuSystem, Inc.	MI	Healthcare Provider	3,882	22 Jun 2018	Hacking/IT Incident	Email	No
Texas Health Physicians Group	TX	Healthcare Provider	3,808	13 Apr 2018	Hacking/IT Incident	Email	No
Ruben U. Carvajal, MD	NY	Healthcare Provider	3,775	17 Jul 2018	Hacking/IT Incident	Desktop Computer, Electronic Medical Record	No
Cambridge Dental Consulting Group	NV	Business Associate	3,758	9 May 2018	Unauthorized Access/Disclosure	Other	Yes
The Arc of Erie County	NY	Healthcare Provider	3,751	9 Mar 2018	Unauthorized Access/Disclosure	Network Server	No
RISE Wisconsin, Inc.	WI	Healthcare Provider	3,731	7 Jun 2018	Hacking/IT Incident	Network Server	No
Zachary E. Adkins, DDS	NM	Healthcare Provider	3,677	25 Jan 2018	Theft	Other Portable Electronic Device	No
University of Michigan/Michigan Medicine	MI	Healthcare Provider	3,624	28 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Cigna	CT	Health Plan	3,500	10 Oct 2018	Hacking/IT Incident	Network Server	No
Baptist Health	AR	Healthcare Provider	3,453	7 May 2018	Unauthorized Access/Disclosure	Network Server	No
Reichert Prosthetics & Orthotics, LLC	WI	Healthcare Provider	3,380	28 Sep 2018	Theft	Other Portable Electronic Device	Yes
North Texas Medical Center	TX	Healthcare Provider	3,350	15 Mar 2018	Unauthorized Access/Disclosure	Laptop	No
Steven Yang, D.D.S., INC.	CA	Healthcare Provider	3,202	26 Jan 2018	Theft	Laptop	No
J.A. Stokes Ltd.	NV	Healthcare Provider	3,200	5 Sep 2018	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Network Server	No
MAXIMUS, Inc. / Business Ink, Co.	VA	Business Associate	3,029	17 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Medical Center Ophthalmology Associates	TX	Healthcare Provider	3,017	30 Apr 2018	Unauthorized Access/Disclosure	Email	No
Hormone Logics	FL	Healthcare Provider	3,000	10 Oct 2018	Theft	Desktop Computer, Email, Laptop, Network Server, Other Portable Electronic Device, Paper/Films	No
Dr. Robert Carpenter	TX	Healthcare Provider	3,000	7 Oct 2018	Hacking/IT Incident	Network Server	No
Don White, RN, DC, PC dba Canyon Rd Chiropractic and Massage	OR	Healthcare Provider	2,900	3 Aug 2018	Hacking/IT Incident	Network Server	No
Scenic Bluffs Health Center Inc	WI	Healthcare Provider	2,889	24 Apr 2018	Hacking/IT Incident	Email	No
Health Alliance Plan	MI	Health Plan	2,814	5 Jul 2018	Hacking/IT Incident	Desktop Computer, Email	No
UT Physicians	TX	Healthcare Provider	2,793	18 May 2018	Unauthorized Access/Disclosure	Email	No
Midwestern Regional Medical Center, Inc.	IL	Healthcare Provider	2,675	12 Jul 2018	Unauthorized Access/Disclosure	Other	No
ATI Holdings, LLC	IL	Business Associate	2,645	13 Apr 2018	Hacking/IT Incident	Email	Yes
Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group	CA	Healthcare Provider	2,640	30 Mar 2018	Theft	Laptop	No
Virtual Radiologic Professionals, LLC	MN	Healthcare Provider	2,568	19 Dec 2018	Unauthorized Access/Disclosure	Other	Yes
Eye Care Surgery Center, Inc.	LA	Healthcare Provider	2,553	27 Apr 2018	Theft	Laptop	No
Tiger Vision, LLC	LA	Healthcare Provider	2,553	27 Apr 2018	Theft	Laptop	No
J&J MEDICAL SERVICE NETWORK INC	TX	Business Associate	2,500	25 Sep 2018	Hacking/IT Incident	Network Server	Yes
Gwenn S Robinson MD	NM	Healthcare Provider	2,500	14 Jun 2018	Hacking/IT Incident	Desktop Computer	No
Partners HealthCare System, Inc.	MA	Healthcare Provider	2,450	5 Feb 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Rocky Mountain Health Care Services	CO	Healthcare Provider	2,442	13 Jul 2018	Theft	Laptop	No
ViaTech Publishing Solutions, Inc.	MN	Health Plan	2,431	10 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	No
Southwest Washington Regional Surgery Center, LLC	WA	Healthcare Provider	2,393	6 Nov 2018	Hacking/IT Incident	Email	No
West Sound Treatment Center	WA	Healthcare Provider	2,300	11 Oct 2018	Theft	Laptop	No
West Sound Treatment Center	WA	Healthcare Provider	2,300	11 Oct 2018	Unauthorized Access/Disclosure	Desktop Computer	No
OrthoWest, Ltd.	OH	Healthcare Provider	2,300	14 May 2018	Unauthorized Access/Disclosure	Network Server	Yes
Kent County Community Mental Health Authority	MI	Healthcare Provider	2,284	21 Dec 2018	Hacking/IT Incident	Email	No
Ambercare Corporation, Inc.	NM	Healthcare Provider	2,284	27 Jul 2018	Theft	Laptop	No
Cambridge Health Alliance	MA	Healthcare Provider	2,280	28 Mar 2018	Hacking/IT Incident	Other	No
Boys Town National Research Hospital	NE	not given	2,182	9 May 2018	Hacking/IT Incident	Email	Yes
South Alamo Medical Group P.A	TX	Healthcare Provider	2,180	30 Aug 2018	Unauthorized Access/Disclosure	Electronic Medical Record, Email, Laptop, Network Server	No
Dignity Health St. Rose Dominican Hospitals-DeLIma	NV	Healthcare Provider	2,174	10 May 2018	Unauthorized Access/Disclosure	Paper/Films	No
OrthoTexas Physicians and Surgeons, PLLC	TX	Healthcare Provider	2,172	28 Nov 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
PA Dept. of Human Services	PA	Healthcare Provider	2,130	16 Jul 2018	Unauthorized Access/Disclosure	Other	No
Leon A Cohen MM.,PA	FL	Healthcare Provider	2,122	8 Dec 2018	Improper Disposal	Paper/Films	No
Chesapeake Regional Medical Center	VA	Healthcare Provider	2,100	6 Apr 2018	Theft	Other Portable Electronic Device	No
Dignity Health St. Rose Dominican Hospitals - Siena	NV	Healthcare Provider	2,098	10 May 2018	Unauthorized Access/Disclosure	Paper/Films	No
New York City Human Resources Administration/Department of Social Services	NY	Health Plan	2,078	11 May 2018	Unauthorized Access/Disclosure	Paper/Films	No
Family Medical Group Northeast PC	OR	Healthcare Provider	2,077	22 Aug 2018	Unauthorized Access/Disclosure	Desktop Computer	No
Northwest Surgical Specialists, P.C.	WA	Healthcare Provider	2,050	5 Oct 2018	Hacking/IT Incident	Email	No
Chapman & Chapman, Inc.	OH	Business Associate	2,032	17 Aug 2018	Hacking/IT Incident	Email	Yes
Family Tree Relief Nursery	OR	Healthcare Provider	2,000	30 Aug 2018	Hacking/IT Incident	Network Server	No
Massac County Surgery Center dba Orthopaedic Institute Surgery Center	IL	Healthcare Provider	2,000	8 Jun 2018	Hacking/IT Incident	Email	No
QUALITY-CARE PHARMACY	CA	Healthcare Provider	2,000	2 Apr 2018	Theft	Desktop Computer, Other, Other Portable Electronic Device, Paper/Films	No
Mercy Medical Center- North Iowa	IA	Healthcare Provider	1,971	26 Nov 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Florida Agency for Persons with Disabilities	FL	Health Plan	1,951	1 Jun 2018	Hacking/IT Incident	Email	No
CareMeridian, LLC	MA	Healthcare Provider	1,922	21 Mar 2018	Loss	Other Portable Electronic Device	Yes
Butler County Board of County Commissioners	OH	Health Plan	1,912	4 Dec 2018	Unauthorized Access/Disclosure	Email	No
Hunt Memorial Hospital District	TX	Healthcare Provider	1,887	29 Jun 2018	Unauthorized Access/Disclosure	Email	No
University of Virginia Medical Center	VA	Healthcare Provider	1,882	21 Feb 2018	Hacking/IT Incident	Desktop Computer, Laptop	No
Alive Hospice	TN	Healthcare Provider	1,868	13 Jul 2018	Hacking/IT Incident	Email	No
John J. Pershing VA Medical Center	MO	Healthcare Provider	1,843	7 Mar 2018	Unauthorized Access/Disclosure	Paper/Films	No
Personal Assistance Services of Colorado, LLC	CO	Healthcare Provider	1,839	20 Sep 2018	Hacking/IT Incident	Email	No
ConnectiCare	CT	Health Plan	1,834	21 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
CoreLink Administrative Solutions, LLC	ND	Business Associate	1,813	6 Aug 2018	Hacking/IT Incident	Email	Yes
CHRISTUS Spohn Hospital Corpus Christi-Shoreline	TX	Healthcare Provider	1,805	15 Jun 2018	Theft	Paper/Films	No
Dallas County Mental Health Mental Retardation Center dba Metrocare Services	TX	Healthcare Provider	1,804	1 Nov 2018	Hacking/IT Incident	Email	No
Authentic Recovery Center, LLC	CA	Healthcare Provider	1,790	17 Aug 2018	Hacking/IT Incident	Email	No
TMC HealthCare	AZ	Healthcare Provider	1,776	7 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
Echo Canyon Healthcare, Incorporated dba Heritage Court Post Acute of Scottsdale	AZ	Healthcare Provider	1,765	21 May 2018	Theft	Paper/Films	No
Dignity Health St. Rose Dominican Hospitals - San Martin	NV	Healthcare Provider	1,764	10 May 2018	Unauthorized Access/Disclosure	Paper/Films	No
UnitedHealth Group	MN	Health Plan	1,755	15 Mar 2018	Unauthorized Access/Disclosure	Paper/Films	No
Capitol Administrators, Inc	CA	Business Associate	1,733	11 May 2018	Hacking/IT Incident	Email	Yes
California Physicians Service d/b/a Blue Shield of California	CA	Health Plan	1,717	13 Apr 2018	Unauthorized Access/Disclosure	Email	No
The Trustees of Purdue University	IN	Healthcare Provider	1,711	25 May 2018	Hacking/IT Incident	Desktop Computer	No
Worldwide Insurance Services, LLC	PA	Business Associate	1,692	30 Apr 2018	Hacking/IT Incident	Email	Yes
Forrest General Hospital	MS	Healthcare Provider	1,670	1 Feb 2018	Hacking/IT Incident	Email	Yes
Henry Ford Health System	MI	Healthcare Provider	1,658	10 Apr 2018	Loss	Other Portable Electronic Device	No
Advanced Orthopedic Center	FL	Healthcare Provider	1,647	2 Jul 2018	Hacking/IT Incident	Network Server	Yes
Terros Incorporated	AZ	Healthcare Provider	1,618	5 Jun 2018	Hacking/IT Incident	Email	No
VA Palo Alto Health Care System	CA	Healthcare Provider	1,600	26 Mar 2018	Unauthorized Access/Disclosure	Paper/Films	No
Blue Cross & Blue Shield of Rhode Island	RI	Health Plan	1,567	13 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Simonian Sports Medicine Clinic, A Medical Corporation	CA	Healthcare Provider	1,541	10 Sep 2018	Unauthorized Access/Disclosure	Network Server	Yes
Memorial Hospital at Gulfport	MS	Healthcare Provider	1,512	28 Feb 2018	Unauthorized Access/Disclosure	Email	No
Robert Smith DMD, PC	TN	Healthcare Provider	1,500	22 Jan 2018	Hacking/IT Incident	Network Server	No
Rockdale Blackhawk, LLC d/b/a Little River Healthcare	TX	Healthcare Provider	1,494	7 Sep 2018	Unauthorized Access/Disclosure	Electronic Medical Record, Other	No
West Kendall Baptist Hospital	FL	Healthcare Provider	1,480	2 Apr 2018	Unauthorized Access/Disclosure	Other	No
Children's Mercy Hospital	MO	Healthcare Provider	1,463	27 Jun 2018	Hacking/IT Incident	Other	No
Southwest Oregon IPA	OR	Health Plan	1,449	18 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
Indiana University School of Medicine	IN	Healthcare Provider	1,431	11 Oct 2018	Theft	Paper/Films	No
inSite Digestive Health Care	CA	Healthcare Provider	1,424	9 Mar 2018	Theft	Paper/Films	No
Saint Francis Hospital	GA	Healthcare Provider	1,412	14 Mar 2018	Improper Disposal	Other	No
Hopebridge	IN	Healthcare Provider	1,411	31 Aug 2018	Hacking/IT Incident	Email	No
Dino-Peds	CO	Healthcare Provider	1,357	30 May 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Complete Family Medicine, LLC	NE	Healthcare Provider	1,331	30 Apr 2018	Theft	Laptop, Paper/Films	No
Dean Health Plan	WI	Health Plan	1,311	15 Jun 2018	Unauthorized Access/Disclosure	Paper/Films	No
Anne Arundel Dermatology, P.A.	MD	Healthcare Provider	1,310	9 Aug 2018	Theft	Paper/Films	No
Palomar Health (Palomar Medical Center (Escondido)	CA	Healthcare Provider	1,309	8 Jan 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Progressions Behavioral Health Services, Inc.	PA	Healthcare Provider	1,303	25 Jun 2018	Hacking/IT Incident	Email	No
InterAct of Michigan, Inc.	MI	Healthcare Provider	1,290	7 Aug 2018	Hacking/IT Incident	Email	No
The University of Texas MD Anderson Cancer Center	TX	Healthcare Provider	1,266	31 May 2018	Unauthorized Access/Disclosure	Email	No
Inova Health System	VA	Business Associate	1,265	19 Nov 2018	Hacking/IT Incident	Electronic Medical Record	Yes
New Jersey Department of Human Services	NJ	Health Plan	1,263	15 Jun 2018	Unauthorized Access/Disclosure	Paper/Films	No
Associated Dermatology & Skin Cancer Clinic of Helena, PC	MT	Healthcare Provider	1,254	28 Jun 2018	Theft	Paper/Films	No
SUNY Upstate Medical University	NY	Healthcare Provider	1,216	9 Nov 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
DJO, LLC	CA	Healthcare Provider	1,203	6 Jan 2018	Loss	Paper/Films	Yes
Center for Comprehensive Services, Inc.	MA	Healthcare Provider	1,176	21 Mar 2018	Loss	Other Portable Electronic Device	Yes
Monroe Operations, LLC d/b/a Newport Academy and Center for Families	TN	Healthcare Provider	1,165	17 Aug 2018	Hacking/IT Incident	Email	No
Benefit Outsourcing Solutions	MI	Business Associate	1,144	7 Jun 2018	Unauthorized Access/Disclosure	Network Server	Yes
Gordon Schanzlin New Vision Institute	CA	Healthcare Provider	1,130	10 Aug 2018	Theft	Paper/Films	No
Rocky Mountain Women's Health Center, Inc.	UT	Healthcare Provider	1,123	25 Jan 2018	Improper Disposal	Paper/Films	No
CCRM Dallas-Fort Worth	TX	Healthcare Provider	1,117	30 Nov 2018	Hacking/IT Incident	Email	No
Guardant Health, Inc.	CA	Healthcare Provider	1,112	14 Sep 2018	Hacking/IT Incident	Email	No
Yale University	CT	Healthcare Provider	1,102	17 Oct 2018	Unauthorized Access/Disclosure	Paper/Films	No
WellCare Health Plans, Inc.	FL	Health Plan	1,101	13 Jun 2018	Unauthorized Access/Disclosure	Other	Yes
MorshedEye, PLLC	KY	Healthcare Provider	1,100	13 Apr 2018	Unauthorized Access/Disclosure	Email	No
Rhode Island Executive Office of Health and Human Services	RI	Health Plan	1,100	27 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	No
Polk County Health Services, Inc	IA	Health Plan	1,071	12 Apr 2018	Unauthorized Access/Disclosure	Email	No
Front Range Dermatology Associates, P.C.	CO	Healthcare Provider	1,070	7 Mar 2018	Unauthorized Access/Disclosure	Electronic Medical Record, Email, Laptop	No
Penn Medicine	PA	Healthcare Provider	1,050	2 Jan 2018	Theft	Laptop	No
RoxSan Pharmacy, Inc.	CA	Healthcare Provider	1,049	12 Mar 2018	Unauthorized Access/Disclosure	Email	No
Tift Regional Medical Center	GA	Healthcare Provider	1,045	18 Dec 2018	Hacking/IT Incident	Email	No
VA Long Beach Healthcare System	CA	Healthcare Provider	1,030	22 Jun 2018	Unauthorized Access/Disclosure	Paper/Films	No
The Pediatric Endocrinology and Diabetes Specialists	NV	Healthcare Provider	1,021	18 Jan 2018	Hacking/IT Incident	Desktop Computer, Electronic Medical Record, Laptop	No
National Mentor Healthcare, LLC.	MA	Healthcare Provider	1,015	21 Mar 2018	Loss	Other Portable Electronic Device	Yes
Fort Defiance Indian Hospital	AZ	Healthcare Provider	1,000	17 Dec 2018	Hacking/IT Incident	Desktop Computer	No
Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC	AZ	Healthcare Provider	1,000	12 Dec 2018	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Email, Network Server, Other, Other Portable Electronic Device, Paper/Films	No
Missouri Dept. of Mental Health	MO	Healthcare Provider	1,000	21 Feb 2018	Unauthorized Access/Disclosure	Other	No
Mentor ABI, LLC	MA	Healthcare Provider	994	21 Mar 2018	Loss	Other Portable Electronic Device	Yes
Billings Clinic	MT	Healthcare Provider	949	27 Apr 2018	Hacking/IT Incident	Email	No
Coastal Cape Fear Eye Associates, P.A.	NC	Healthcare Provider	925	1 Feb 2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Pedes Orange County, Inc.	CA	Healthcare Provider	917	12 Jan 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
American Medical Response, Inc.	TX	Healthcare Provider	912	9 Nov 2018	Hacking/IT Incident	Email	Yes
SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund	PA	Health Plan	911	21 Dec 2018	Unauthorized Access/Disclosure	Email	Yes
Walgreen Co.	IL	Healthcare Provider	910	6 Apr 2018	Theft	Other Portable Electronic Device	No
Smile Designs by Sandwick	MN	Healthcare Provider	900	13 Dec 2018	Hacking/IT Incident	Other	No
Kaiser Foundation Health Plan of Colorado	CO	Health Plan	900	3 Aug 2018	Unauthorized Access/Disclosure	Paper/Films	No
San Francisco Department of Public Health	CA	Healthcare Provider	900	25 Jun 2018	Unauthorized Access/Disclosure	Network Server	Yes
East End Disability Associates, Inc.	NY	Healthcare Provider	896	20 Nov 2018	Hacking/IT Incident	Email	No
UnitedHealth Group	MN	Health Plan	896	10 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	No
University of Michigan/Michigan Medicine	MI	Healthcare Provider	871	25 Jun 2018	Theft	Laptop	No
Artesia General Hospital	NM	Healthcare Provider	864	27 Feb 2018	Hacking/IT Incident	Network Server	Yes
Contra Costa Health Plan	CA	Health Plan	862	13 Dec 2018	Unauthorized Access/Disclosure	Electronic Medical Record, Email	No
Boston Health Care for the Homeless Program	MA	Healthcare Provider	861	7 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
Home for Little Wanderers	MA	Healthcare Provider	861	3 Jul 2018	Unauthorized Access/Disclosure	Paper/Films	No
Total Diagnostix II, LLC	TX	Healthcare Provider	855	12 Sep 2018	Unauthorized Access/Disclosure	Network Server	No
WEA Insurance Corporation	WI	Health Plan	850	27 Dec 2018	Hacking/IT Incident	Email	No
VIRTUAL RADIOLOGIC PROFESSIONALS, LLC	MN	Healthcare Provider	846	19 Dec 2018	Hacking/IT Incident	Other	Yes
United Methodist Homes	NY	Healthcare Provider	843	31 Aug 2018	Unauthorized Access/Disclosure	Email	No
Western Washington Medical Group Inc.	WA	Healthcare Provider	842	12 Jan 2018	Improper Disposal	Paper/Films	No
Capital District Physicians' Health Plan	NY	Health Plan	839	20 Apr 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Gentle Dentistry Group PC	NJ	Healthcare Provider	831	26 Sep 2018	Unauthorized Access/Disclosure	Email	No
Central New York Cardiology	NY	Healthcare Provider	824	13 Jul 2018	Loss	Paper/Films	No
Oklahoma Department of Human Services	OK	Health Plan	813	8 Oct 2018	Hacking/IT Incident	Paper/Films	Yes
Diagnostic Radiology & Imaging, LLC	NC	Healthcare Provider	800	5 Apr 2018	Hacking/IT Incident	Email	No
Center for Sports Medicine and Orthopedics	TN	Healthcare Provider	800	26 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Alicia Ann Oswald	CA	Healthcare Provider	800	9 Jan 2018	Unauthorized Access/Disclosure	Email	No
Charles Cole Memorial Hospital	PA	Healthcare Provider	790	13 Jul 2018	Hacking/IT Incident	Email	No
Wisconsin Department of Health Services	WI	Health Plan	779	3 Apr 2018	Theft	Laptop	Yes
CoreSource, Inc.	IL	Business Associate	769	3 Aug 2018	Unauthorized Access/Disclosure	Other	Yes
David S. Ng, O.D.	CA	Healthcare Provider	758	16 Jun 2018	Theft	Other Portable Electronic Device	No
Walmart Inc.	AR	Healthcare Provider	741	26 Mar 2018	Unauthorized Access/Disclosure	Email, Other	No
Walmart, Inc.	AR	Healthcare Provider	735	22 Feb 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Dermatologists of Southwest Ohio	OH	Healthcare Provider	733	20 Dec 2018	Improper Disposal	Paper/Films	No
CHI Health Care, Inc.	MD	Healthcare Provider	722	30 Nov 2018	Unauthorized Access/Disclosure	Other Portable Electronic Device, Paper/Films	No
Pulse Systems, Inc.	KS	Business Associate	722	19 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Children's National Medical Center	DC	Healthcare Provider	722	30 Mar 2018	Theft	Laptop	No
Lane County Health & Human Services	OR	Healthcare Provider	715	1 Aug 2018	Loss	Paper/Films	No
Physician Associates, LLC	FL	Healthcare Provider	710	3 Jul 2018	Unauthorized Access/Disclosure	Other	Yes
University Of Missouri Health	MO	Healthcare Provider	706	5 Oct 2018	Unauthorized Access/Disclosure	Paper/Films	No
Walgreen Co.	IL	Healthcare Provider	703	27 Apr 2018	Theft	Paper/Films	No
Day Kimball Healthcare	CT	Healthcare Provider	698	22 Oct 2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Humana Inc	KY	Health Plan	684	31 Dec 2018	Theft	Paper/Films	No
StatCare Group LLC	MD	Healthcare Provider	679	20 Jul 2018	Hacking/IT Incident	Email	Yes
Prestera Center for Mental Health Services, Inc.	WV	Healthcare Provider	670	20 Mar 2018	Hacking/IT Incident	Email	No
Southwestern Eye Center	AZ	Healthcare Provider	667	1 Aug 2018	Unauthorized Access/Disclosure	Paper/Films	No
Atchison Hospital Association	KS	Healthcare Provider	667	11 Apr 2018	Hacking/IT Incident	Network Server	Yes
Sonoma County Indian Health Project, Inc	CA	Healthcare Provider	662	30 Mar 2018	Unauthorized Access/Disclosure	Desktop Computer, Email	No
Eastern Maine Medical Center	ME	Healthcare Provider	660	2 Feb 2018	Theft	Other Portable Electronic Device	Yes
DePaul University	IL	Health Plan	656	21 Dec 2018	Unauthorized Access/Disclosure	Email	No
Central States Southeast and Southwest Areas Health and Welfare Fund	IL	Health Plan	634	23 Jan 2018	Unauthorized Access/Disclosure	Paper/Films	No
Blue Cross and Blue Shield of North Carolina (Blue Cross NC)	NC	Health Plan	631	11 Oct 2018	Unauthorized Access/Disclosure	Paper/Films	No
Peter J Parker, M.D., Inc.	CA	Healthcare Provider	628	19 Jun 2018	Unauthorized Access/Disclosure	Electronic Medical Record	Yes
Overlake arthritis and Osteoporosis Center	WA	Healthcare Provider	627	6 Jul 2018	Hacking/IT Incident	Desktop Computer	No
California College of Arts	CA	Health Plan	623	26 Feb 2018	Theft	Laptop	No
HealthFitness	IL	Business Associate	614	28 Oct 2018	Unauthorized Access/Disclosure	Other	Yes
Healthland Inc.	MN	Business Associate	614	10 Jun 2018	Unauthorized Access/Disclosure	Other	Yes
University of Utah Health	UT	Healthcare Provider	607	2 Jun 2018	Theft	Laptop, Other Portable Electronic Device	No
Hancock County Board of Developmental Disabilities	OH	Healthcare Provider	607	17 May 2018	Unauthorized Access/Disclosure	Paper/Films	No
High Plains Surgical Associates	WY	Healthcare Provider	607	15 Jan 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Care Partners Hospice and Palliative Care	OR	Healthcare Provider	600	25 May 2018	Hacking/IT Incident	Email	No
Thielen Student Health Center	IA	Healthcare Provider	599	30 Nov 2018	Unauthorized Access/Disclosure	Email	No
SimplyWell	TX	Business Associate	597	1 Jun 2018	Unauthorized Access/Disclosure	Other	Yes
New York City Health and Hospitals Corporation - Harlem Hospital	NY	Healthcare Provider	595	29 Mar 2018	Theft	Laptop	No
Massachusetts General Hospital	MA	Healthcare Provider	588	14 Dec 2018	Unauthorized Access/Disclosure	Paper/Films	No
New Mexico Retiree Health Care Authority	NM	Health Plan	586	2 Oct 2018	Unauthorized Access/Disclosure	Paper/Films	No
Catholic Charities Neighborhood Services, Inc.	NY	Healthcare Provider	565	7 Sep 2018	Hacking/IT Incident	Email	No
Wardell Orthopaedics, P.C.	VA	Healthcare Provider	552	16 Aug 2018	Unauthorized Access/Disclosure	Other	No
HealthFitness	IL	Business Associate	550	15 Oct 2018	Unauthorized Access/Disclosure	Other	Yes
City of Detroit	MI	Healthcare Provider	544	5 Feb 2018	Loss	Other Portable Electronic Device	No
Utah Healing Center	UT	Healthcare Provider	543	7 Nov 2018	Unauthorized Access/Disclosure	Paper/Films	No
Denise M. Bowden, LAc	CA	Healthcare Provider	538	11 Jun 2018	Theft	Desktop Computer	No
Cornerstone Foot & Ankle	NJ	Healthcare Provider	533	16 Apr 2018	Unauthorized Access/Disclosure	Email	No
Summit Medical Group	NJ	Healthcare Provider	525	2 Nov 2018	Loss	Paper/Films	No
Nebraska Department of Health and Human Services	NE	Health Plan	516	4 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
Planned Parenthood of the Heartland	IA	Healthcare Provider	515	29 Jun 2018	Unauthorized Access/Disclosure	Paper/Films	No
Highmark Delaware	DE	Business Associate	508	14 May 2018	Unauthorized Access/Disclosure	Paper/Films	Yes
State of Alaska Department of Health and Social Services	AK	Health Plan	501	28 Jun 2018	Hacking/IT Incident	Desktop Computer, Email	No
Riverside Medical Center	IL	Healthcare Provider	501	20 Apr 2018	Theft	Desktop Computer, Other	No
Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis Mammography	AZ	Healthcare Provider	500	16 Dec 2018	Theft	Desktop Computer	No
Texas VSI, LLC	TX	Business Associate	500	16 Nov 2018	Hacking/IT Incident	Network Server	Yes
The University of Texas Health Science Center at Houston	TX	Healthcare Provider	500	18 Sep 2018	Theft	Paper/Films	No
Leominster Dermatology LLP	MA	Healthcare Provider	500	13 Sep 2018	Unauthorized Access/Disclosure	Paper/Films	No
First coast podiatric surgery and wound	FL	Business Associate	500	27 Aug 2018	Unauthorized Access/Disclosure	Network Server	Yes
Family Physicians of Old Town Fairfax PC	VA	Healthcare Provider	500	19 Jul 2018	Hacking/IT Incident	Network Server	No
Family Healthcare of Lake Norman	NC	Healthcare Provider	500	19 Jun 2018	Hacking/IT Incident	Network Server	No
Baystate Family Dental, Inc.	MA	Healthcare Provider	500	4 May 2018	Theft	Paper/Films	No

State not given in the HHS export (1)

Covered entity	Type	Individuals	Submitted	Breach type	Location	BA
Triple-S Advantage, Inc.	Health Plan	36,305	2 Feb 2018	Unauthorized Access/Disclosure	Paper/Films	No

← 2017: 358 filings 2019: 511 filings →Register hub

Index / Companion schedules

13 HHS breach register

→

Hub: every filing, by state, year and entity.

04 Biggest breaches

→

Mega-breaches with primary-source cost figures.

Industry / Healthcare

→

IBM 2026: $6.64M average, 13 years at #1.

Regulation / HIPAA penalties

→

OCR enforcement tiers and the 60-day rule.

11 50-state laws

→

Deadline, AG threshold and penalties per state.

Cost / Per record

→

Where the per-record model is reliable.

Provenance

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.

Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.

Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.