U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Arizona Health Care Cost Containment SystemAZHealth Plan314603/11/2019Unauthorized Access/DisclosurePaper/FilmsNo
Emerson HospitalMAHealthcare Provider631403/08/2019Unauthorized Access/DisclosureOtherYes
Direct ScriptsOHHealthcare Provider931903/06/2019Hacking/IT IncidentNetwork ServerNo
Maffi ClinicsAZHealthcare Provider1046503/06/2019Hacking/IT IncidentNetwork ServerNo
St. Francis Physician ServicesSCHealthcare Provider3217803/04/2019Hacking/IT IncidentNetwork ServerNo
RSC Insurance Brokerage, Inc.MABusiness Associate208803/01/2019TheftLaptopYes
Arthritis & Rheumatism Associates, P.C.MDHealthcare Provider50003/01/2019Hacking/IT IncidentElectronic Medical RecordNo
Pasquotank-Camden Emergency Medical ServiceNCHealthcare Provider2042002/28/2019Hacking/IT IncidentNetwork ServerNo
Rush University Medical CenterILHealthcare Provider4492402/28/2019Unauthorized Access/DisclosureNetwork ServerYes
Humana IncKYHealth Plan144702/27/2019Hacking/IT IncidentNetwork ServerYes
West Virginia Public Employees Insurance AgencyWVHealth Plan140002/27/2019Hacking/IT IncidentNetwork ServerYes
Molina HealthcareCAHealth Plan89502/22/2019Hacking/IT IncidentNetwork ServerYes
Delaware Guidance Services for Children and Youth, Inc.DEHealthcare Provider5000002/22/2019Hacking/IT IncidentDesktop Computer, Electronic Medical Record, Email, LaptopNo
UConn HealthCTHealthcare Provider32662902/21/2019Hacking/IT IncidentEmailNo
Rocky Boy Health CenterMTHealthcare Provider600002/21/2019TheftOtherNo
Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center VTHealthcare Provider7222402/20/2019Hacking/IT IncidentEmailNo
UW MedicineWAHealthcare Provider97302402/20/2019Hacking/IT IncidentNetwork ServerNo
Columbia Surgical Specialist of SpokaneWAHealthcare Provider40000002/18/2019Hacking/IT IncidentNetwork ServerNo
OneDigital/Digital Insurance, LLCGABusiness Associate276302/15/2019TheftLaptopYes
California Physicians' Service d/b/a Blue Shield of CaliforniaCAHealth Plan1841602/15/2019Hacking/IT IncidentNetwork ServerYes
Kids Central Inc.FLBusiness Associate325002/15/2019Unauthorized Access/DisclosureEmailYes
Memorial Hospital at GulfportMSHealthcare Provider3064202/15/2019Hacking/IT IncidentEmailNo
Blue Cross Blue Shield of MassachusettsMAHealth Plan126202/15/2019Hacking/IT IncidentEmailYes
AltaMed Health Services CorporationCAHealthcare Provider600002/15/2019Hacking/IT IncidentNetwork ServerYes
Portsmouth Community Health CenterVAHealthcare Provider1200002/14/2019Hacking/IT IncidentNetwork ServerNo
Rocky Mountain Health Care ServicesCOHealthcare Provider97102/11/2019Hacking/IT IncidentEmailNo
Crawford Wellness Center, IncTXHealthcare Provider150002/11/2019TheftPaper/FilmsNo
Green Ridge Behavioral Health, LLCMDHealthcare Provider1400002/11/2019Hacking/IT IncidentElectronic Medical Record, Network ServerNo
Kentucky Counseling Center, LLCKYHealthcare Provider1644002/11/2019Unauthorized Access/DisclosureElectronic Medical RecordNo
Rush University Medical CenterILHealthcare Provider90802/11/2019Unauthorized Access/DisclosurePaper/FilmsNo
USR Holdings, LLCFLBusiness Associate290302/08/2019Hacking/IT IncidentNetwork ServerYes
AZ Plastic Surgery Center AZHealthcare Provider552402/08/2019Hacking/IT IncidentNetwork ServerNo
AdventHealth Medical GroupFLHealthcare Provider4216102/05/2019Hacking/IT IncidentNetwork ServerNo
United Hospital District, Inc.MNHealthcare Provider214302/04/2019Hacking/IT IncidentEmailNo
Lakeland Care, Inc.WIHealthcare Provider130002/04/2019Hacking/IT IncidentEmailNo
Rainbow Dental Care PLLCTXHealthcare Provider1000002/04/2019Hacking/IT IncidentDesktop ComputerNo
Anesthesia Associates of Kansas CityKSHealthcare Provider347202/01/2019TheftPaper/FilmsNo
Reproductive Medicine and Infertility Associates, P.A.MNHealthcare Provider4000002/01/2019Hacking/IT IncidentDesktop Computer, Network ServerNo
CHI - Lakewood HealthMNHealthcare Provider88501/31/2019Unauthorized Access/DisclosureEmailNo
CVS PharmacyRIHealthcare Provider564501/30/2019TheftPaper/FilmsYes
AetnaCTHealth Plan203001/30/2019Hacking/IT IncidentEmailYes
Cambridge Healthcare Services, LLCCABusiness Associate1086601/29/2019TheftLaptopYes
Roper St. Francis HealthcareSCHealthcare Provider3525301/29/2019Hacking/IT IncidentEmailNo
Lanier Family & Cosmetic Dentistry, P.C.GAHealthcare Provider195001/29/2019Unauthorized Access/DisclosureEmailNo
Pawnee County Memorial HospitalNEHealthcare Provider703801/28/2019Hacking/IT IncidentEmailNo
Verity Health System of California, Inc. CABusiness Associate298801/26/2019Hacking/IT IncidentEmailYes
Dr. DeLuca Dr. Marciano & Associates, P.C. CTHealthcare Provider2357801/25/2019Hacking/IT IncidentDesktop Computer, Electronic Medical Record, Network ServerNo
Valley Professionals Community Health CenterINHealthcare Provider1202901/25/2019Hacking/IT IncidentEmailNo
HealthFitnessILBusiness Associate180801/25/2019Unauthorized Access/DisclosureOtherYes
Sunflower State Health PlanKSHealth Plan162501/25/2019Unauthorized Access/DisclosureOtherNo
Unum Group, on behalf of its subsidiaries - Unum Life Insurance and Colonial Life & Accident InsuranceTNHealth Plan53201/24/2019Hacking/IT IncidentEmailNo
EyeSouth PartnersGABusiness Associate2411301/23/2019Hacking/IT IncidentEmailYes
Stonehaven DentalTXHealthcare Provider628901/22/2019TheftNetwork ServerNo
Critical Care, Pulmonary and Sleep Associates, PLLPCOHealthcare Provider2337701/21/2019Hacking/IT IncidentEmailNo
Valley Hope AssociationKSHealthcare Provider7079901/18/2019Hacking/IT IncidentEmailNo
Tri-Cities ChaplaincyWAHealthcare Provider108601/18/2019Hacking/IT IncidentEmailNo
FABEN Obstetrics and Gynecology, LLCFLHealthcare Provider609201/18/2019Hacking/IT IncidentNetwork ServerNo
Integrity, Inc. d/b/a Integrity HouseNJHealthcare Provider720601/18/2019TheftDesktop Computer, LaptopNo
Las Colinas Orthopedic Surgery & Sports Medicine, PATXHealthcare Provider7600001/18/2019TheftOther Portable Electronic DeviceYes
ABB Inc. Active Employee Group Benefit PlanNCHealth Plan687701/18/2019Unauthorized Access/DisclosurePaper/FilmsYes
Lebanon VA Medical CenterPAHealthcare Provider100201/16/2019Unauthorized Access/DisclosureEmailNo
Humana Inc.KYHealth Plan59801/15/2019Hacking/IT IncidentOtherNo
Premier Specialties, IncorporatedTXHealthcare Provider130001/14/2019Unauthorized Access/DisclosurePaper/FilmsNo
Sacred Heart Rehabilitation CenterMIHealthcare Provider226601/10/2019Unauthorized Access/DisclosureEmailNo
Humana IncKYHealth Plan121101/09/2019Unauthorized Access/DisclosureOtherYes
Family Physicians of Winter Park, Inc. KYHealthcare Provider842901/08/2019Hacking/IT IncidentEmailNo
Dermacare BrickellFLHealthcare Provider180001/07/2019Improper DisposalPaper/FilmsNo
NORTH ATLANTA MEDICAL CLINIC GAHealthcare Provider280001/06/2019Hacking/IT IncidentDesktop ComputerNo
Managed Health ServicesINHealth Plan3130001/03/2019Hacking/IT IncidentEmailYes
Managed Health ServicesINHealth Plan57601/03/2019Unauthorized Access/DisclosurePaper/FilmsNo
Centerstone Insurance and Financial Services (d/b/a BenefitMall)TXBusiness Associate11158901/03/2019Hacking/IT IncidentEmailYes
Humana Inc KYHealth Plan68412/31/2018TheftPaper/FilmsNo
Choice RehabilitationMOBusiness Associate430912/29/2018Hacking/IT IncidentEmail, LaptopYes
WEA Insurance CorporationWIHealth Plan85012/27/2018Hacking/IT IncidentEmailNo
SEIU Local 32BJ, District 36 Building Operators Welfare Trust FundPAHealth Plan91112/21/2018Unauthorized Access/DisclosureEmailYes
Kent County Community Mental Health AuthorityMIHealthcare Provider228412/21/2018Hacking/IT IncidentEmailNo
JAND Inc. d/b/a Warby Parker NYHealthcare Provider17789012/20/2018Hacking/IT IncidentNetwork ServerNo
The Podiatric Offices of Bobby YeeCAHealthcare Provider2400012/20/2018Hacking/IT IncidentDesktop Computer, Laptop, Other Portable Electronic DeviceNo
Dermatologists of Southwest OhioOHHealthcare Provider73312/20/2018Improper DisposalPaper/FilmsNo
Virtual Radiologic Professionals, LLCMNHealthcare Provider256812/19/2018Hacking/IT IncidentOtherYes
Tift Regional Medical CenterGAHealthcare Provider104512/18/2018Hacking/IT IncidentEmailNo
Barnes-Jewish HospitalMOHealthcare Provider164312/18/2018Hacking/IT IncidentNetwork ServerNo
University of Vermont Health Network - Elizabethtown Community HospitalNYHealthcare Provider3247012/17/2018Hacking/IT IncidentEmailNo
Fort Defiance Indian HospitalAZHealthcare Provider100012/17/2018Hacking/IT IncidentDesktop ComputerNo
Ben-Ora, Hansen & Vanesian Imaging, Ltd d/b/a Solis MammographyAZHealthcare Provider50012/16/2018TheftDesktop ComputerNo
Massachusetts General HospitalMAHealthcare Provider58812/14/2018Unauthorized Access/DisclosurePaper/FilmsNo
Contra Costa Health PlanCAHealth Plan86212/13/2018Unauthorized Access/DisclosureElectronic Medical Record, EmailNo
Smile Designs by Sandwick MNHealthcare Provider90012/13/2018Hacking/IT IncidentOtherNo
Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PCAZHealthcare Provider100012/12/2018Unauthorized Access/DisclosureDesktop Computer, Electronic Medical Record, Email, Network Server, Other, Other Portable Electronic Device, Paper/FilmsNo
Adams CountyWIHealthcare Provider25812012/11/2018Unauthorized Access/DisclosureNetwork Server, OtherNo
County of RamseyMNHealthcare Provider59912/11/2018Hacking/IT IncidentEmailNo
Butler County Board of County CommissionersOHHealth Plan191212/04/2018Unauthorized Access/DisclosureEmailNo
Georgia Department of Human ServicesGABusiness Associate43533911/30/2018Unauthorized Access/DisclosureNetwork Server, Other Portable Electronic DeviceYes
CHI Health Care, Inc.MDHealthcare Provider72211/30/2018Unauthorized Access/DisclosureOther Portable Electronic Device, Paper/FilmsNo
Mind and Motion, LLCGAHealthcare Provider1600011/30/2018Hacking/IT IncidentNetwork ServerNo
CCRM Dallas-Fort WorthTXHealthcare Provider111711/30/2018Hacking/IT IncidentEmailNo
Thielen Student Health CenterIAHealthcare Provider59911/30/2018Unauthorized Access/DisclosureEmailNo
Prairie Fields Family Medicine, PCNEHealthcare Provider645011/30/2018Unauthorized Access/DisclosureEmailNo
OrthoTexas Physicians and Surgeons, PLLCTXHealthcare Provider217211/28/2018Unauthorized Access/DisclosurePaper/FilmsYes
Steward Medical GroupMAHealthcare Provider1627611/28/2018Hacking/IT IncidentNetwork ServerYes
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201
OCR Portal CS10.5 Production Server (Port2). Build Date: 02/22/2019 22:12