U.S. Department of Health & Human Services

As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary: Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
Show Advanced Options

We are generating the report for you. Please wait......

Breach Report Results


Name of Covered Entity	State	Covered Entity Type	Individuals Affected	Breach Submission Date	Type of Breach	Location of Breached Information	Business Associate Present
Lebanon VA Medical Center	PA	Healthcare Provider	1002	01/16/2019	Unauthorized Access/Disclosure	Email	No
Humana Inc.	KY	Health Plan	598	01/15/2019	Hacking/IT Incident	Other	No
Humana Inc	KY	Health Plan	1211	01/09/2019	Unauthorized Access/Disclosure	Other	Yes
Family Physicians of Winter Park, Inc.	KY	Healthcare Provider	8429	01/08/2019	Hacking/IT Incident	Email	No
Dermacare Brickell	FL	Healthcare Provider	1800	01/07/2019	Improper Disposal	Paper/Films	No
Managed Health Services	IN	Health Plan	31300	01/03/2019	Hacking/IT Incident	Email	Yes
Managed Health Services	IN	Health Plan	576	01/03/2019	Unauthorized Access/Disclosure	Paper/Films	No
Centerstone Insurance and Financial Services (d/b/a BenefitMall)	TX	Business Associate	111589	01/03/2019	Hacking/IT Incident	Email	Yes
Humana Inc	KY	Health Plan	684	12/31/2018	Theft	Paper/Films	No
Choice Rehabilitation	MO	Business Associate	4309	12/29/2018	Hacking/IT Incident	Email, Laptop	Yes
WEA Insurance Corporation	WI	Health Plan	850	12/27/2018	Hacking/IT Incident	Email	No
SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund	PA	Health Plan	911	12/21/2018	Unauthorized Access/Disclosure	Email	Yes
Kent County Community Mental Health Authority	MI	Healthcare Provider	2284	12/21/2018	Hacking/IT Incident	Email	No
DePaul University	IL	Health Plan	656	12/21/2018	Unauthorized Access/Disclosure	Email	No
JAND Inc. d/b/a Warby Parker	NY	Healthcare Provider	177890	12/20/2018	Hacking/IT Incident	Network Server	No
The Podiatric Offices of Bobby Yee	CA	Healthcare Provider	24000	12/20/2018	Hacking/IT Incident	Desktop Computer, Laptop, Other Portable Electronic Device	No
Dermatologists of Southwest Ohio	OH	Healthcare Provider	733	12/20/2018	Improper Disposal	Paper/Films	No
Virtual Radiologic Professionals, LLC	MN	Healthcare Provider	2568	12/19/2018	Hacking/IT Incident	Other	Yes
VIRTUAL RADIOLOGIC PROFESSIONALS, LLC	MN	Healthcare Provider	846	12/19/2018	Hacking/IT Incident	Other	Yes
Tift Regional Medical Center	GA	Healthcare Provider	1045	12/18/2018	Hacking/IT Incident	Email	No
Barnes-Jewish Hospital	MO	Healthcare Provider	1643	12/18/2018	Hacking/IT Incident	Network Server	No
University of Vermont Health Network - Elizabethtown Community Hospital	NY	Healthcare Provider	32470	12/17/2018	Hacking/IT Incident	Email	No
Fort Defiance Indian Hospital	AZ	Healthcare Provider	1000	12/17/2018	Hacking/IT Incident	Desktop Computer	No
Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis Mammography	AZ	Healthcare Provider	500	12/16/2018	Theft	Desktop Computer	No
Massachusetts General Hospital	MA	Healthcare Provider	588	12/14/2018	Unauthorized Access/Disclosure	Paper/Films	No
Contra Costa Health Plan	CA	Health Plan	862	12/13/2018	Unauthorized Access/Disclosure	Electronic Medical Record, Email	No
Smile Designs by Sandwick	MN	Healthcare Provider	900	12/13/2018	Hacking/IT Incident	Other	No
Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC	AZ	Healthcare Provider	1000	12/12/2018	Unauthorized Access/Disclosure	Desktop Computer, Electronic Medical Record, Email, Network Server, Other, Other Portable Electronic Device, Paper/Films	No
Adams County	WI	Healthcare Provider	258120	12/11/2018	Unauthorized Access/Disclosure	Network Server, Other	No
County of Ramsey	MN	Healthcare Provider	599	12/11/2018	Hacking/IT Incident	Email	No
CHI Health Care, Inc.	MD	Healthcare Provider	722	11/30/2018	Unauthorized Access/Disclosure	Other Portable Electronic Device, Paper/Films	No
Mind and Motion, LLC	GA	Healthcare Provider	16000	11/30/2018	Hacking/IT Incident	Network Server	No
CCRM Dallas-Fort Worth	TX	Healthcare Provider	1117	11/30/2018	Hacking/IT Incident	Email	No
Thielen Student Health Center	IA	Healthcare Provider	599	11/30/2018	Unauthorized Access/Disclosure	Email	No
Prairie Fields Family Medicine, PC	NE	Healthcare Provider	6450	11/30/2018	Unauthorized Access/Disclosure	Email	No
OrthoTexas Physicians and Surgeons, PLLC	TX	Healthcare Provider	2172	11/28/2018	Unauthorized Access/Disclosure	Paper/Films	Yes
Steward Medical Group	MA	Healthcare Provider	16276	11/28/2018	Hacking/IT Incident	Network Server	Yes
AccuDoc Solutions, Inc.	NC	Business Associate	2652537	11/27/2018	Hacking/IT Incident	Network Server	Yes
Cancer Treatment Centers of America (CTCA) at Western Regional Medical Center	AZ	Healthcare Provider	41948	11/26/2018	Hacking/IT Incident	Email	No
Baylor Scott & White Medical Center - Frisco	TX	Healthcare Provider	47984	11/26/2018	Hacking/IT Incident	Network Server	Yes
Mercy Medical Center- North Iowa	IA	Healthcare Provider	1971	11/26/2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
Tandigm Health	PA	Business Associate	7376	11/21/2018	Hacking/IT Incident	Network Server	Yes
East End Disability Associates, Inc.	NY	Healthcare Provider	896	11/20/2018	Hacking/IT Incident	Email	No
Inova Health System	VA	Business Associate	857	11/19/2018	Hacking/IT Incident	Electronic Medical Record	Yes
James R. Etzkorn, MD	MO	Healthcare Provider	6845	11/19/2018	Unauthorized Access/Disclosure	Paper/Films	No
HealthEquity, Inc.	UT	Business Associate	165800	11/17/2018	Hacking/IT Incident	Email	Yes
Texas VSI, LLC	TX	Business Associate	500	11/16/2018	Hacking/IT Incident	Network Server	Yes
New York Oncology Hematology, P.C.	NY	Healthcare Provider	128400	11/16/2018	Hacking/IT Incident	Email	No
Center for Vitreo-Retinal Diseases	IL	Healthcare Provider	20371	11/16/2018	Unauthorized Access/Disclosure	Network Server	No
Georgia Spine & Orthopaedics of Atlanta, LLC	GA	Healthcare Provider	7012	11/16/2018	Hacking/IT Incident	Email	No
Arthritis & Osteoporosis Consultants of the Carolinas	NC	Healthcare Provider	3930	11/09/2018	Improper Disposal	Paper/Films	No
American Medical Response, Inc.	TX	Healthcare Provider	912	11/09/2018	Hacking/IT Incident	Email	Yes
SUNY Upstate Medical University	NY	Healthcare Provider	1216	11/09/2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
James R. Etzkorn, MD	MO	Healthcare Provider	6845	11/09/2018	Hacking/IT Incident	Network Server	No
Utah Healing Center	UT	Healthcare Provider	543	11/07/2018	Unauthorized Access/Disclosure	Paper/Films	No
Southwest Washington Regional Surgery Center, LLC	WA	Healthcare Provider	2393	11/06/2018	Hacking/IT Incident	Email	No
Veterans Health Administration	DC	Healthcare Provider	19254	11/06/2018	Unauthorized Access/Disclosure	Paper/Films	Yes
FHN Family Counseling Center	IL	Healthcare Provider	4458	11/03/2018	Theft	Laptop	No
Rollins Brook Community Hospital	TX	Healthcare Provider	5019	11/02/2018	Loss	Paper/Films	No
Summit Medical Group	NJ	Healthcare Provider	525	11/02/2018	Loss	Paper/Films	No
Oprex Surgery (Baytown), L.P. d/b/a Altus Baytown Hospital	TX	Healthcare Provider	40000	11/02/2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Inova Health System	VA	Healthcare Provider	12331	11/02/2018	Theft	Electronic Medical Record, Paper/Films	No
Dallas County Mental Health Mental Retardation Center dba Metrocare Services	TX	Healthcare Provider	1804	11/01/2018	Hacking/IT Incident	Email	No
HealthFitness	IL	Business Associate	614	10/28/2018	Unauthorized Access/Disclosure	Other	Yes
Raley's/Bel Air Mart/Nob Hill General Store, Inc.	CA	Healthcare Provider	10124	10/26/2018	Theft	Laptop	No
CNO Financial Group, Inc.	IN	Health Plan	566217	10/25/2018	Unauthorized Access/Disclosure	Other	No
Missouri Department of Mental Health	MO	Healthcare Provider	9000	10/24/2018	Unauthorized Access/Disclosure	Other	Yes
The Children's Hospital of Philadelphia	PA	Healthcare Provider	5368	10/23/2018	Hacking/IT Incident	Email	No
Day Kimball Healthcare	CT	Healthcare Provider	698	10/22/2018	Unauthorized Access/Disclosure	Electronic Medical Record	No
CJ Elmwood Partners, L.P.	IA	Healthcare Provider	22416	10/22/2018	Hacking/IT Incident	Network Server	No
Jones Eye Center, P.C.	IA	Healthcare Provider	39605	10/22/2018	Hacking/IT Incident	Network Server	No
Smith Dental Care	TX	Healthcare Provider	5000	10/17/2018	Hacking/IT Incident	Desktop Computer, Email	No
Yale University	CT	Healthcare Provider	1102	10/17/2018	Unauthorized Access/Disclosure	Paper/Films	No
HealthFitness	IL	Business Associate	550	10/15/2018	Unauthorized Access/Disclosure	Other	Yes
HealthFitness	IL	Business Associate	1332	10/15/2018	Unauthorized Access/Disclosure	Other	Yes
Employees Retirement System of Texas	TX	Health Plan	1248263	10/15/2018	Unauthorized Access/Disclosure	Other	No
FirstCare Health Plans	TX	Health Plan	8056	10/12/2018	Unauthorized Access/Disclosure	Email	No
Catawba Valley Medical Center	NC	Healthcare Provider	20000	10/12/2018	Hacking/IT Incident	Email	No
West Sound Treatment Center	WA	Healthcare Provider	2300	10/11/2018	Unauthorized Access/Disclosure	Desktop Computer	No
Blue Cross and Blue Shield of North Carolina (Blue Cross NC)	NC	Health Plan	631	10/11/2018	Unauthorized Access/Disclosure	Paper/Films	No
West Sound Treatment Center	WA	Healthcare Provider	2300	10/11/2018	Theft	Laptop	No
Indiana University School of Medicine	IN	Healthcare Provider	1431	10/11/2018	Theft	Paper/Films	No
The May Eye Care Center	PA	Healthcare Provider	30000	10/11/2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Hormone Logics	FL	Healthcare Provider	3000	10/10/2018	Theft	Desktop Computer, Email, Laptop, Network Server, Other Portable Electronic Device, Paper/Films	No
Cigna	CT	Health Plan	3500	10/10/2018	Hacking/IT Incident	Network Server	No
Minnesota Department of Human Services	MN	Health Plan	20800	10/09/2018	Hacking/IT Incident	Email	No
Oklahoma Department of Human Services	OK	Health Plan	813	10/08/2018	Hacking/IT Incident	Paper/Films	Yes
Dr. Robert Carpenter	TX	Healthcare Provider	3000	10/07/2018	Hacking/IT Incident	Network Server	No
Dr. Amy Woodruff	TX	Healthcare Provider	10862	10/07/2018	Hacking/IT Incident	Network Server	No
Northwest Surgical Specialists, P.C.	WA	Healthcare Provider	2050	10/05/2018	Hacking/IT Incident	Email	No
Gold Coast Health Plan	CA	Business Associate	37005	10/05/2018	Hacking/IT Incident	Email	Yes
National Ambulatory Hernia Institute	CA	Healthcare Provider	15974	10/05/2018	Hacking/IT Incident	Network Server	No
Health First, Inc	FL	Healthcare Provider	42000	10/05/2018	Hacking/IT Incident	Email	No
Tillamook Chiropractic, PC	OR	Healthcare Provider	4058	10/03/2018	Hacking/IT Incident	Desktop Computer, Network Server	No
Reichert Prosthetics & Orthotics, LLC	WI	Healthcare Provider	3380	09/28/2018	Theft	Other Portable Electronic Device	Yes
Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan	IN	Health Plan	19320	09/28/2018	Hacking/IT Incident	Email	No
University of Michigan/Michigan Medicine	MI	Healthcare Provider	3624	09/28/2018	Unauthorized Access/Disclosure	Paper/Films	Yes
J&J MEDICAL SERVICE NETWORK INC	TX	Business Associate	2500	09/25/2018	Hacking/IT Incident	Network Server	Yes
Ransom Memorial Hospital	KS	Healthcare Provider	14329	09/25/2018	Hacking/IT Incident	Email	No
Personal Assistance Services of Colorado, LLC	CO	Healthcare Provider	1839	09/20/2018	Hacking/IT Incident	Email	No

We are generating the report for you. Please wait......

U.S. Department of Health and Human Services Office for Civil Rights Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

U.S. Department of Health and Human Services
Office for Civil Rights

Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information