| Arizona Health Care Cost Containment System | AZ | Health Plan | 3146 | 03/11/2019 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Emerson Hospital | MA | Healthcare Provider | 6314 | 03/08/2019 | Unauthorized Access/Disclosure | Other | Yes | |
| Direct Scripts | OH | Healthcare Provider | 9319 | 03/06/2019 | Hacking/IT Incident | Network Server | No | |
| Maffi Clinics | AZ | Healthcare Provider | 10465 | 03/06/2019 | Hacking/IT Incident | Network Server | No | |
| St. Francis Physician Services | SC | Healthcare Provider | 32178 | 03/04/2019 | Hacking/IT Incident | Network Server | No | |
| RSC Insurance Brokerage, Inc. | MA | Business Associate | 2088 | 03/01/2019 | Theft | Laptop | Yes | |
| Arthritis & Rheumatism Associates, P.C. | MD | Healthcare Provider | 500 | 03/01/2019 | Hacking/IT Incident | Electronic Medical Record | No | |
| Pasquotank-Camden Emergency Medical Service | NC | Healthcare Provider | 20420 | 02/28/2019 | Hacking/IT Incident | Network Server | No | |
| Rush University Medical Center | IL | Healthcare Provider | 44924 | 02/28/2019 | Unauthorized Access/Disclosure | Network Server | Yes | |
| Humana Inc | KY | Health Plan | 1447 | 02/27/2019 | Hacking/IT Incident | Network Server | Yes | |
| West Virginia Public Employees Insurance Agency | WV | Health Plan | 1400 | 02/27/2019 | Hacking/IT Incident | Network Server | Yes | |
| Molina Healthcare | CA | Health Plan | 895 | 02/22/2019 | Hacking/IT Incident | Network Server | Yes | |
| Delaware Guidance Services for Children and Youth, Inc. | DE | Healthcare Provider | 50000 | 02/22/2019 | Hacking/IT Incident | Desktop Computer, Electronic Medical Record, Email, Laptop | No | |
| UConn Health | CT | Healthcare Provider | 326629 | 02/21/2019 | Hacking/IT Incident | Email | No | |
| Rocky Boy Health Center | MT | Healthcare Provider | 6000 | 02/21/2019 | Theft | Other | No | |
| Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center | VT | Healthcare Provider | 72224 | 02/20/2019 | Hacking/IT Incident | Email | No | |
| UW Medicine | WA | Healthcare Provider | 973024 | 02/20/2019 | Hacking/IT Incident | Network Server | No | |
| Columbia Surgical Specialist of Spokane | WA | Healthcare Provider | 400000 | 02/18/2019 | Hacking/IT Incident | Network Server | No | |
| OneDigital/Digital Insurance, LLC | GA | Business Associate | 2763 | 02/15/2019 | Theft | Laptop | Yes | |
| California Physicians' Service d/b/a Blue Shield of California | CA | Health Plan | 18416 | 02/15/2019 | Hacking/IT Incident | Network Server | Yes | |
| Kids Central Inc. | FL | Business Associate | 3250 | 02/15/2019 | Unauthorized Access/Disclosure | Email | Yes | |
| Memorial Hospital at Gulfport | MS | Healthcare Provider | 30642 | 02/15/2019 | Hacking/IT Incident | Email | No | |
| Blue Cross Blue Shield of Massachusetts | MA | Health Plan | 1262 | 02/15/2019 | Hacking/IT Incident | Email | Yes | |
| AltaMed Health Services Corporation | CA | Healthcare Provider | 6000 | 02/15/2019 | Hacking/IT Incident | Network Server | Yes | |
| Portsmouth Community Health Center | VA | Healthcare Provider | 12000 | 02/14/2019 | Hacking/IT Incident | Network Server | No | |
| Rocky Mountain Health Care Services | CO | Healthcare Provider | 971 | 02/11/2019 | Hacking/IT Incident | Email | No | |
| Crawford Wellness Center, Inc | TX | Healthcare Provider | 1500 | 02/11/2019 | Theft | Paper/Films | No | |
| Green Ridge Behavioral Health, LLC | MD | Healthcare Provider | 14000 | 02/11/2019 | Hacking/IT Incident | Electronic Medical Record, Network Server | No | |
| Kentucky Counseling Center, LLC | KY | Healthcare Provider | 16440 | 02/11/2019 | Unauthorized Access/Disclosure | Electronic Medical Record | No | |
| Rush University Medical Center | IL | Healthcare Provider | 908 | 02/11/2019 | Unauthorized Access/Disclosure | Paper/Films | No | |
| USR Holdings, LLC | FL | Business Associate | 2903 | 02/08/2019 | Hacking/IT Incident | Network Server | Yes | |
| AZ Plastic Surgery Center | AZ | Healthcare Provider | 5524 | 02/08/2019 | Hacking/IT Incident | Network Server | No | |
| AdventHealth Medical Group | FL | Healthcare Provider | 42161 | 02/05/2019 | Hacking/IT Incident | Network Server | No | |
| United Hospital District, Inc. | MN | Healthcare Provider | 2143 | 02/04/2019 | Hacking/IT Incident | Email | No | |
| Lakeland Care, Inc. | WI | Healthcare Provider | 1300 | 02/04/2019 | Hacking/IT Incident | Email | No | |
| Rainbow Dental Care PLLC | TX | Healthcare Provider | 10000 | 02/04/2019 | Hacking/IT Incident | Desktop Computer | No | |
| Anesthesia Associates of Kansas City | KS | Healthcare Provider | 3472 | 02/01/2019 | Theft | Paper/Films | No | |
| Reproductive Medicine and Infertility Associates, P.A. | MN | Healthcare Provider | 40000 | 02/01/2019 | Hacking/IT Incident | Desktop Computer, Network Server | No | |
| CHI - Lakewood Health | MN | Healthcare Provider | 885 | 01/31/2019 | Unauthorized Access/Disclosure | Email | No | |
| CVS Pharmacy | RI | Healthcare Provider | 5645 | 01/30/2019 | Theft | Paper/Films | Yes | |
| Aetna | CT | Health Plan | 2030 | 01/30/2019 | Hacking/IT Incident | Email | Yes | |
| Cambridge Healthcare Services, LLC | CA | Business Associate | 10866 | 01/29/2019 | Theft | Laptop | Yes | |
| Roper St. Francis Healthcare | SC | Healthcare Provider | 35253 | 01/29/2019 | Hacking/IT Incident | Email | No | |
| Lanier Family & Cosmetic Dentistry, P.C. | GA | Healthcare Provider | 1950 | 01/29/2019 | Unauthorized Access/Disclosure | Email | No | |
| Pawnee County Memorial Hospital | NE | Healthcare Provider | 7038 | 01/28/2019 | Hacking/IT Incident | Email | No | |
| Verity Health System of California, Inc. | CA | Business Associate | 2988 | 01/26/2019 | Hacking/IT Incident | Email | Yes | |
| Dr. DeLuca Dr. Marciano & Associates, P.C. | CT | Healthcare Provider | 23578 | 01/25/2019 | Hacking/IT Incident | Desktop Computer, Electronic Medical Record, Network Server | No | |
| Valley Professionals Community Health Center | IN | Healthcare Provider | 12029 | 01/25/2019 | Hacking/IT Incident | Email | No | |
| HealthFitness | IL | Business Associate | 1808 | 01/25/2019 | Unauthorized Access/Disclosure | Other | Yes | |
| Sunflower State Health Plan | KS | Health Plan | 1625 | 01/25/2019 | Unauthorized Access/Disclosure | Other | No | |
| Unum Group, on behalf of its subsidiaries - Unum Life Insurance and Colonial Life & Accident Insurance | TN | Health Plan | 532 | 01/24/2019 | Hacking/IT Incident | Email | No | |
| EyeSouth Partners | GA | Business Associate | 24113 | 01/23/2019 | Hacking/IT Incident | Email | Yes | |
| Stonehaven Dental | TX | Healthcare Provider | 6289 | 01/22/2019 | Theft | Network Server | No | |
| Critical Care, Pulmonary and Sleep Associates, PLLP | CO | Healthcare Provider | 23377 | 01/21/2019 | Hacking/IT Incident | Email | No | |
| Valley Hope Association | KS | Healthcare Provider | 70799 | 01/18/2019 | Hacking/IT Incident | Email | No | |
| Tri-Cities Chaplaincy | WA | Healthcare Provider | 1086 | 01/18/2019 | Hacking/IT Incident | Email | No | |
| FABEN Obstetrics and Gynecology, LLC | FL | Healthcare Provider | 6092 | 01/18/2019 | Hacking/IT Incident | Network Server | No | |
| Integrity, Inc. d/b/a Integrity House | NJ | Healthcare Provider | 7206 | 01/18/2019 | Theft | Desktop Computer, Laptop | No | |
| Las Colinas Orthopedic Surgery & Sports Medicine, PA | TX | Healthcare Provider | 76000 | 01/18/2019 | Theft | Other Portable Electronic Device | Yes | |
| ABB Inc. Active Employee Group Benefit Plan | NC | Health Plan | 6877 | 01/18/2019 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| Lebanon VA Medical Center | PA | Healthcare Provider | 1002 | 01/16/2019 | Unauthorized Access/Disclosure | Email | No | |
| Humana Inc. | KY | Health Plan | 598 | 01/15/2019 | Hacking/IT Incident | Other | No | |
| Premier Specialties, Incorporated | TX | Healthcare Provider | 1300 | 01/14/2019 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Sacred Heart Rehabilitation Center | MI | Healthcare Provider | 2266 | 01/10/2019 | Unauthorized Access/Disclosure | Email | No | |
| Humana Inc | KY | Health Plan | 1211 | 01/09/2019 | Unauthorized Access/Disclosure | Other | Yes | |
| Family Physicians of Winter Park, Inc. | KY | Healthcare Provider | 8429 | 01/08/2019 | Hacking/IT Incident | Email | No | |
| Dermacare Brickell | FL | Healthcare Provider | 1800 | 01/07/2019 | Improper Disposal | Paper/Films | No | |
| NORTH ATLANTA MEDICAL CLINIC | GA | Healthcare Provider | 2800 | 01/06/2019 | Hacking/IT Incident | Desktop Computer | No | |
| Managed Health Services | IN | Health Plan | 31300 | 01/03/2019 | Hacking/IT Incident | Email | Yes | |
| Managed Health Services | IN | Health Plan | 576 | 01/03/2019 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Centerstone Insurance and Financial Services (d/b/a BenefitMall) | TX | Business Associate | 111589 | 01/03/2019 | Hacking/IT Incident | Email | Yes | |
| Humana Inc | KY | Health Plan | 684 | 12/31/2018 | Theft | Paper/Films | No | |
| Choice Rehabilitation | MO | Business Associate | 4309 | 12/29/2018 | Hacking/IT Incident | Email, Laptop | Yes | |
| WEA Insurance Corporation | WI | Health Plan | 850 | 12/27/2018 | Hacking/IT Incident | Email | No | |
| SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund | PA | Health Plan | 911 | 12/21/2018 | Unauthorized Access/Disclosure | Email | Yes | |
| Kent County Community Mental Health Authority | MI | Healthcare Provider | 2284 | 12/21/2018 | Hacking/IT Incident | Email | No | |
| JAND Inc. d/b/a Warby Parker | NY | Healthcare Provider | 177890 | 12/20/2018 | Hacking/IT Incident | Network Server | No | |
| The Podiatric Offices of Bobby Yee | CA | Healthcare Provider | 24000 | 12/20/2018 | Hacking/IT Incident | Desktop Computer, Laptop, Other Portable Electronic Device | No | |
| Dermatologists of Southwest Ohio | OH | Healthcare Provider | 733 | 12/20/2018 | Improper Disposal | Paper/Films | No | |
| Virtual Radiologic Professionals, LLC | MN | Healthcare Provider | 2568 | 12/19/2018 | Hacking/IT Incident | Other | Yes | |
| Tift Regional Medical Center | GA | Healthcare Provider | 1045 | 12/18/2018 | Hacking/IT Incident | Email | No | |
| Barnes-Jewish Hospital | MO | Healthcare Provider | 1643 | 12/18/2018 | Hacking/IT Incident | Network Server | No | |
| University of Vermont Health Network - Elizabethtown Community Hospital | NY | Healthcare Provider | 32470 | 12/17/2018 | Hacking/IT Incident | Email | No | |
| Fort Defiance Indian Hospital | AZ | Healthcare Provider | 1000 | 12/17/2018 | Hacking/IT Incident | Desktop Computer | No | |
| Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis Mammography | AZ | Healthcare Provider | 500 | 12/16/2018 | Theft | Desktop Computer | No | |
| Massachusetts General Hospital | MA | Healthcare Provider | 588 | 12/14/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Contra Costa Health Plan | CA | Health Plan | 862 | 12/13/2018 | Unauthorized Access/Disclosure | Electronic Medical Record, Email | No | |
| Smile Designs by Sandwick | MN | Healthcare Provider | 900 | 12/13/2018 | Hacking/IT Incident | Other | No | |
| Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC | AZ | Healthcare Provider | 1000 | 12/12/2018 | Unauthorized Access/Disclosure | Desktop Computer, Electronic Medical Record, Email, Network Server, Other, Other Portable Electronic Device, Paper/Films | No | |
| Adams County | WI | Healthcare Provider | 258120 | 12/11/2018 | Unauthorized Access/Disclosure | Network Server, Other | No | |
| County of Ramsey | MN | Healthcare Provider | 599 | 12/11/2018 | Hacking/IT Incident | Email | No | |
| Butler County Board of County Commissioners | OH | Health Plan | 1912 | 12/04/2018 | Unauthorized Access/Disclosure | Email | No | |
| Georgia Department of Human Services | GA | Business Associate | 435339 | 11/30/2018 | Unauthorized Access/Disclosure | Network Server, Other Portable Electronic Device | Yes | |
| CHI Health Care, Inc. | MD | Healthcare Provider | 722 | 11/30/2018 | Unauthorized Access/Disclosure | Other Portable Electronic Device, Paper/Films | No | |
| Mind and Motion, LLC | GA | Healthcare Provider | 16000 | 11/30/2018 | Hacking/IT Incident | Network Server | No | |
| CCRM Dallas-Fort Worth | TX | Healthcare Provider | 1117 | 11/30/2018 | Hacking/IT Incident | Email | No | |
| Thielen Student Health Center | IA | Healthcare Provider | 599 | 11/30/2018 | Unauthorized Access/Disclosure | Email | No | |
| Prairie Fields Family Medicine, PC | NE | Healthcare Provider | 6450 | 11/30/2018 | Unauthorized Access/Disclosure | Email | No | |
| OrthoTexas Physicians and Surgeons, PLLC | TX | Healthcare Provider | 2172 | 11/28/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| Steward Medical Group | MA | Healthcare Provider | 16276 | 11/28/2018 | Hacking/IT Incident | Network Server | Yes | |