U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Northeast Georgia Health SystemGAHealthcare Provider2100004/08/2025Hacking/IT IncidentNetwork ServerYes
Loretto Hospital ILHealthcare Provider50104/04/2025Hacking/IT IncidentNetwork ServerNo
Central Texas Pediatric Orthopedics TXHealthcare Provider14000004/04/2025Hacking/IT IncidentNetwork ServerNo
Worthington Steel Health and Welfare PlanOHHealth Plan386404/04/2025Hacking/IT IncidentNetwork ServerNo
True Dental Care For Kids and Adults LLCPAHealthcare Provider1764004/02/2025Hacking/IT IncidentNetwork ServerNo
Health Services LLCOHHealthcare Provider240004/01/2025Hacking/IT IncidentNetwork ServerNo
Family Centers, Inc.CTHealthcare Provider50103/31/2025Hacking/IT IncidentNetwork ServerNo
North Hudson Community Action CorporationNJHealthcare Provider50103/28/2025Hacking/IT IncidentNetwork ServerNo
Sentara HealthVAHealthcare Provider162003/28/2025Unauthorized Access/DisclosureElectronic Medical RecordNo
Community Dental Care, Inc. MNHealthcare Provider13490303/28/2025Hacking/IT IncidentNetwork ServerNo
Samaritan's PurseNCHealth Plan235003/28/2025Hacking/IT IncidentNetwork ServerYes
Apria Healthcare LLCINHealthcare Provider71303/28/2025Unauthorized Access/DisclosurePaper/FilmsNo
Mayo ClinicMNHealthcare Provider186903/28/2025Unauthorized Access/DisclosureEmailNo
SimonMed ImagingAZHealthcare Provider50003/27/2025Hacking/IT IncidentNetwork ServerNo
Georgia UrologyGAHealthcare Provider1239803/27/2025Hacking/IT IncidentEmailNo
Mercer County Joint Township Community HospitalOHHealthcare Provider8854103/26/2025Hacking/IT IncidentNetwork ServerNo
Western Wayne Family Physicians MIHealthcare Provider6200003/26/2025Hacking/IT IncidentNetwork ServerNo
Concord OrthopaedicsNHHealthcare Provider7281503/25/2025Hacking/IT IncidentOtherNo
Bigfork Valley HospitalMNHealthcare Provider849603/25/2025Hacking/IT IncidentEmailNo
William F Rinehart DMD PA SCHealthcare Provider2500003/24/2025Hacking/IT IncidentNetwork ServerNo
PAR RehabMIHealthcare Provider430003/21/2025Hacking/IT IncidentEmailNo
AmeriHealth Caritas Louisiana LAHealth Plan155203/21/2025Unauthorized Access/DisclosureNetwork Server, OtherNo
Pineland Community Service BoardGAHealthcare Provider50103/20/2025Hacking/IT IncidentNetwork ServerNo
Meigs County Emergency Medical ServicesOHHealthcare Provider580203/20/2025Hacking/IT IncidentEmailNo
Special Tree Ltd.MIHealthcare Provider382003/20/2025Hacking/IT IncidentNetwork ServerNo
Millennium Home Health CareOKHealthcare Provider474303/19/2025Hacking/IT IncidentNetwork ServerNo
Dove HealthcareWIHealthcare Provider1625503/18/2025Hacking/IT IncidentNetwork ServerNo
Presbyterian Health PlanNMHealth Plan710003/18/2025Hacking/IT IncidentEmailNo
Lena Pope Home Inc.TXHealthcare Provider352303/17/2025Hacking/IT IncidentEmailNo
Klickitat Valley HealthWAHealthcare Provider53103/14/2025Hacking/IT IncidentNetwork ServerNo
Welts, White, & Fontaine PCNHBusiness Associate50003/14/2025Hacking/IT IncidentNetwork ServerYes
CDHA Management, LLC and Spark DSO, LLC dba Chord Specialty Dental PartnersTNHealthcare Provider17343003/14/2025Hacking/IT IncidentEmailNo
Baylor Scott & White Texas Spine & Joint HospitalTXHealthcare Provider164003/14/2025Hacking/IT IncidentEmailNo
Lake Psychological ServicesPAHealthcare Provider98703/14/2025Hacking/IT IncidentNetwork ServerNo
Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy NYHealthcare Provider234803/14/2025Hacking/IT IncidentNetwork ServerNo
Columbia Eye Clinic SCHealthcare Provider50003/14/2025Hacking/IT IncidentNetwork ServerNo
Topy America Inc.KYHealth Plan182703/14/2025Hacking/IT IncidentNetwork ServerNo
CHC Solutions, Inc. PAHealthcare Provider79403/13/2025Hacking/IT IncidentEmailNo
PACE Greater New OrleansLAHealthcare Provider71503/13/2025Unauthorized Access/DisclosureEmailNo
OCH Regional Medical Center, MSMSHealthcare Provider5126603/11/2025Unauthorized Access/DisclosureOtherNo
Nice Healthcare Management Company, IncMNHealthcare Provider1000003/10/2025Hacking/IT IncidentNetwork ServerYes
Vision Upright MRICAHealthcare Provider2303103/10/2025Unauthorized Access/DisclosureNetwork ServerNo
Rocky Mountain Regional VA Medical CenterCOHealthcare Provider111503/10/2025Unauthorized Access/DisclosureEmailNo
St. Charles County Ambulance DistrictMOHealthcare Provider126503/07/2025Hacking/IT IncidentEmailNo
Sunflower Medical Group, P.A.KSHealthcare Provider22096803/07/2025Hacking/IT IncidentNetwork ServerNo
Hand & Plastic Surgery Centre, PLCMIHealthcare Provider1984603/07/2025Hacking/IT IncidentNetwork ServerNo
United Seating and Mobility, LLC d/b/a Numotion TNHealthcare Provider49432603/07/2025Hacking/IT IncidentEmailNo
SCLARCCABusiness Associate72203/06/2025TheftLaptop, Other Portable Electronic Device, Paper/FilmsYes
Madison County, MS MSHealth Plan608203/05/2025Hacking/IT IncidentEmailNo
Hillcrest Convalescent Center, Inc. NCHealthcare Provider10619403/04/2025Hacking/IT IncidentNetwork ServerNo
Bay Cove Human Services, Inc.MAHealthcare Provider2129503/03/2025Hacking/IT IncidentNetwork ServerNo
Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle CenterPAHealthcare Provider60203/03/2025TheftLaptop, Other Portable Electronic Device, Paper/FilmsNo
Vernon Rehabilitation and Healthcare CenterCTHealthcare Provider541603/03/2025Hacking/IT IncidentNetwork ServerNo
Manchester Rehabilitation and Healthcare CenterCTHealthcare Provider541503/03/2025Hacking/IT IncidentNetwork ServerNo
Community Care AllianceRIHealthcare Provider11497503/01/2025Hacking/IT IncidentNetwork ServerNo
Scott County, IowaIAHealthcare Provider433602/28/2025Hacking/IT IncidentEmailNo
Blue Shield of California CAHealth Plan53502/28/2025Unauthorized Access/DisclosureElectronic Medical RecordNo
Total Medical Imaging FLHealthcare Provider2700002/28/2025Unauthorized Access/DisclosureOtherYes
Southeast Series of Lockton Companies, LLC (Lockton)GABusiness Associate170602/28/2025Hacking/IT IncidentNetwork ServerYes
Legacy Professionals, LLPILBusiness Associate21675202/28/2025Hacking/IT IncidentNetwork ServerYes
NVW Newco, LLC AZHealthcare Provider323202/28/2025Unauthorized Access/DisclosureEmailNo
United Community Health CenterIAHealthcare Provider75002/28/2025Hacking/IT IncidentEmailNo
Stram Center for Integrative MedicineNYHealthcare Provider1526302/28/2025TheftElectronic Medical Record, Paper/FilmsNo
East Hawaii Rehab, Inc. DBA Lehua Physical Therapy and RehabHIHealthcare Provider847202/28/2025TheftOther, Other Portable Electronic Device, Paper/FilmsNo
Carolina Arthritis AssociatesNCHealthcare Provider3696102/27/2025Hacking/IT IncidentNetwork ServerNo
SMC Corporation of AmericaINHealth Plan656602/27/2025Hacking/IT IncidentNetwork ServerNo
Atlantis Operating LLC d/b/a The Phoenix Rehabilitation and Nursing CenterNYHealthcare Provider645902/26/2025Hacking/IT IncidentElectronic Medical RecordYes
Palmetto Operating LLC d/b/a Palmetto Subacute Care Center (‘Palmetto’)FLHealthcare Provider274602/26/2025Unauthorized Access/DisclosureElectronic Medical RecordYes
HHH Acquisition, LLC d/b/a The Grove at Valhalla Rehabilitation and Nursing CenterNYHealthcare Provider419602/26/2025Hacking/IT IncidentElectronic Medical RecordYes
Bassford Remele P.A.MNBusiness Associate443502/25/2025Hacking/IT IncidentEmailYes
Lake Washington VascularWAHealthcare Provider2153402/25/2025Hacking/IT IncidentNetwork ServerNo
Artistic Family DentalINHealthcare Provider391502/25/2025Hacking/IT IncidentNetwork ServerNo
Roswell Park Comprehensive Cancer CenterNYHealthcare Provider1143502/24/2025TheftOther Portable Electronic DeviceNo
HealthRev Partners, LLCMOBusiness Associate144602/20/2025Hacking/IT IncidentEmailYes
Central New York Cardiology NYHealthcare Provider50002/19/2025Hacking/IT IncidentNetwork ServerNo
Consultants in Pain MedicineTXHealthcare Provider112402/16/2025Hacking/IT IncidentNetwork ServerNo
Spring Management OK, LLCOKBusiness Associate249402/14/2025Hacking/IT IncidentNetwork ServerYes
Restorix Health, Inc.LABusiness Associate3855302/14/2025Unauthorized Access/DisclosureEmailYes
CDS in TexasTXHealthcare Provider56602/14/2025Unauthorized Access/DisclosureEmailNo
Charleston Area Medical CenterWVHealthcare Provider6741302/14/2025Hacking/IT IncidentEmailNo
Children's Dental Center at Preston Trail, P.C. d/b/a Park Place Pediatric Dentistry (Arlington, TX) TNHealthcare Provider169002/14/2025TheftLaptopNo
Somnia, Inc.NYBusiness Associate50002/14/2025Hacking/IT IncidentEmailYes
Fillmore County HospitalNEHealthcare Provider353502/13/2025Hacking/IT IncidentEmailNo
Precision Orthopedics and Sports MedicineMDHealthcare Provider190302/13/2025Hacking/IT IncidentEmailNo
Ottawa Family PhysiciansKSHealthcare Provider50102/13/2025Hacking/IT IncidentNetwork ServerNo
UNITED BACKCARE PS dba Pacific Rehabilitation CentersWAHealthcare Provider1890002/11/2025Hacking/IT IncidentNetwork ServerNo
New Era Life Insurance CompaniesTXHealth Plan33550602/11/2025Hacking/IT IncidentNetwork ServerNo
Heartland Medical Clinic, Inc. dba Heartland Community Health CenterKSHealthcare Provider4376802/10/2025Hacking/IT IncidentEmailNo
Columbus Division of FireOHHealthcare Provider73602/10/2025Hacking/IT IncidentNetwork ServerNo
CPS Solutions, LLCOHBusiness Associate50002/10/2025Hacking/IT IncidentEmailYes
Authority of the City of Bainbridge and Decatur County (“Memorial Hospital & Manor”)GAHealthcare Provider12008502/08/2025Hacking/IT IncidentNetwork ServerNo
Blue & Co., LLCINBusiness Associate50102/07/2025Hacking/IT IncidentNetwork ServerYes
St. Andrew’s Resources for Seniors SystemMOHealthcare Provider443402/07/2025Hacking/IT IncidentEmailNo
The League Treatment CenterNYHealthcare Provider82502/06/2025Hacking/IT IncidentNetwork ServerNo
U.S. HEALTHWORKS-SMMPP, L.C.AZBusiness Associate1067302/06/2025Hacking/IT IncidentNetwork ServerYes
Primary Health-SMMPP, L.C.AZBusiness Associate6756702/06/2025Hacking/IT IncidentNetwork ServerYes
St. Marys NDS LLCAZBusiness Associate1171502/06/2025Hacking/IT IncidentNetwork ServerYes
Catholic Charities West MichiganMIHealthcare Provider200002/06/2025Hacking/IT IncidentNetwork ServerNo
VectraRx Mail Pharmacy Services, LLCAZHealthcare Provider10938302/06/2025Hacking/IT IncidentNetwork ServerNo
City of McKinneyTXHealth Plan1775102/03/2025Unauthorized Access/DisclosureNetwork ServerNo
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure