U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......
ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Newport Harbor Pathology Medical Group, Inc.CAHealthcare Provider50101/10/2025Hacking/IT IncidentNetwork ServerNo
Summa HealthOHHealthcare Provider87401/10/2025Unauthorized Access/DisclosureElectronic Medical RecordNo
MHMR Concho ValleyTXHealthcare Provider133801/09/2025Hacking/IT IncidentEmailNo
Building Service Employees Insurance Health and Welfare PlanMOHealth Plan98001/09/2025TheftPaper/FilmsNo
BayMark Health Services, Inc.TXBusiness Associate317001/08/2025Hacking/IT IncidentNetwork ServerYes
McNall & Associates, P.C.AKBusiness Associate1017501/08/2025Hacking/IT IncidentNetwork ServerYes
Indiana University Health, Affiliated Covered EntityINHealthcare Provider51501/07/2025Hacking/IT IncidentEmailNo
DentaQuestWIHealth Plan86801/06/2025Unauthorized Access/DisclosurePaper/FilmsNo
Pediatric Home Respiratory Services, LLC d/b/a Pediatric Home ServiceMNHealthcare Provider4179201/06/2025Hacking/IT IncidentNetwork ServerNo
North Los Angeles County Regional CenterCABusiness Associate50001/06/2025Hacking/IT IncidentNetwork ServerYes
Ingham County Medical Care Facility, d/b/a Dobie RoadMIHealthcare Provider307801/05/2025Hacking/IT IncidentElectronic Medical RecordYes
TruBridge, Inc. ALBusiness Associate385501/04/2025Hacking/IT IncidentEmailYes
Buffalo Surgery CenterNYHealthcare Provider6400001/04/2025Hacking/IT IncidentNetwork ServerNo
Sidney Health CenterMTHealthcare Provider137001/03/2025Unauthorized Access/DisclosureEmailNo
Center for Child Development, INCDEHealthcare Provider54001/02/2025Unauthorized Access/DisclosureDesktop ComputerNo
Lifetime Psychiatry, LLCMOHealthcare Provider1692612/30/2024Hacking/IT IncidentEmailNo
Tycon Medical Systems, Inc.VAHealthcare Provider11284712/30/2024Hacking/IT IncidentNetwork ServerNo
Youngs Counseling, PLLCTXHealthcare Provider79012/30/2024Unauthorized Access/DisclosureEmailNo
Omaha Surgical CenterNEHealthcare Provider111012/30/2024Hacking/IT IncidentEmailNo
Dragonfly HealthAZBusiness Associate50112/27/2024Hacking/IT IncidentEmailYes
Judge Baker Children’s Center dba The Baker Center for Children and FamiliesMAHealthcare Provider271512/27/2024Hacking/IT IncidentNetwork ServerNo
Lexington Diagnostic CenterKYHealthcare Provider2981912/24/2024Hacking/IT IncidentNetwork ServerNo
Word & Brown Insurance Administrators, Inc. CABusiness Associate50112/23/2024Hacking/IT IncidentDesktop Computer, Network ServerYes
Dignity Health Lassen Medical Clinic CAHealthcare Provider6548212/23/2024Hacking/IT IncidentNetwork ServerNo
Khalil Foundation (DBA Khalil Center)ILHealthcare Provider115312/22/2024Unauthorized Access/DisclosureNetwork ServerNo
Effortless Office Enterprises, LLCNVBusiness Associate311212/20/2024Hacking/IT IncidentNetwork ServerYes
In-Home Attendant Services Ltd.TXHealthcare Provider2200012/20/2024Hacking/IT IncidentNetwork ServerNo
HealthEquity, Inc.UTBusiness Associate154912/20/2024Hacking/IT IncidentNetwork ServerYes
Vickers Engineering, Inc. MIHealth Plan85712/20/2024Hacking/IT IncidentNetwork ServerNo
AllyScripts, LLCALHealthcare Provider77612/20/2024Hacking/IT IncidentNetwork ServerNo
Youth Eastside ServicesWAHealthcare Provider50112/20/2024Hacking/IT IncidentNetwork ServerNo
Kansas City Hospice, IncMOHealthcare Provider362112/20/2024Hacking/IT IncidentNetwork ServerNo
Menorah Life, Inc.FLHealthcare Provider280012/20/2024Hacking/IT IncidentElectronic Medical RecordNo
BCBS of TXILHealth Plan102812/20/2024Unauthorized Access/DisclosurePaper/FilmsNo
Aetna ACECTHealth Plan131712/20/2024Unauthorized Access/DisclosureOther Portable Electronic DeviceYes
Alta Resources Corp.WIHealth Plan1216212/20/2024Hacking/IT IncidentNetwork ServerNo
Richmond University Medical CenterNYHealthcare Provider67403312/19/2024Hacking/IT IncidentNetwork ServerNo
Golden Age Home Health Inc.OKHealthcare Provider228012/18/2024Hacking/IT IncidentNetwork ServerNo
CHCM, Inc. dba College Hospital Costa MesaCAHealthcare Provider59112/18/2024Hacking/IT IncidentNetwork ServerNo
Ott Cone & Redpath, P.A.NCBusiness Associate2217112/18/2024Hacking/IT IncidentEmailYes
PracticeSuite, Inc.FLBusiness Associate1300012/17/2024Hacking/IT IncidentOtherYes
Regional Care, Inc.NEHealthcare Clearing House22572812/17/2024Hacking/IT IncidentNetwork ServerNo
California Correctional Health Care Services CAHealthcare Provider141612/17/2024LossPaper/FilmsNo
Kitsap Mental Health ServicesWAHealthcare Provider50012/16/2024Hacking/IT IncidentNetwork ServerNo
Massachusetts Department of Mental HealthMAHealthcare Provider95912/16/2024LossOther, Other Portable Electronic DeviceNo
VisionPoint Eye Center, PLLC ILHealthcare Provider6692612/15/2024Hacking/IT IncidentNetwork ServerNo
Brockton Neighborhood Health CenterMAHealthcare Provider9748812/13/2024Hacking/IT IncidentNetwork ServerNo
Summit Medical Group, PLLCTNHealthcare Provider61112/13/2024Hacking/IT IncidentEmailNo
Northwest Asthma and Allergy CenterWAHealthcare Provider100012/12/2024Hacking/IT IncidentEmailNo
ConnectOnCall.com, LLCDEBusiness Associate91413812/11/2024Hacking/IT IncidentNetwork ServerYes
El Paso Healthcare System, Ltd. d/b/a Las Palmas Del Sol HealthcareTXHealthcare Provider185412/11/2024Unauthorized Access/DisclosureElectronic Medical RecordNo
Insured RecoveryTNHealthcare Provider85012/11/2024Hacking/IT IncidentNetwork ServerNo
River Region CardiologyALHealthcare Provider50000012/11/2024Hacking/IT IncidentNetwork ServerNo
Rumpke Consolidated Companies, Inc. & Affiliates Benefits PlanOHHealth Plan1694612/10/2024Hacking/IT IncidentNetwork ServerNo
Hartson-Kennedy Inc. Group Benefit PlanINHealth Plan61912/09/2024Hacking/IT IncidentNetwork ServerNo
UT Southwestern Medical CenterTXHealthcare Provider4304812/09/2024Unauthorized Access/DisclosureEmailNo
Center for Vein RestorationMDBusiness Associate44609412/05/2024Hacking/IT IncidentNetwork ServerYes
Veterans Health AdministrationDCHealthcare Provider230212/03/2024Hacking/IT IncidentNetwork ServerYes
FC Compassus, LLCTNHealthcare Provider270312/02/2024Hacking/IT IncidentEmailYes
SAG-AFTRA Health PlanCAHealth Plan3559212/02/2024Hacking/IT IncidentEmailNo
Atrium HealthNCHealthcare Provider58595912/02/2024Unauthorized Access/DisclosureNetwork ServerNo
Jefferson Dental Center, Inc.INHealthcare Provider1234011/27/2024Hacking/IT IncidentNetwork ServerNo
Hardin County Emergency Medical ServicesKYHealthcare Provider104611/27/2024Hacking/IT IncidentEmailNo
Colonial Behavioral HealthVAHealthcare Provider2993011/27/2024Hacking/IT IncidentNetwork ServerNo
Continental Cafe Holdings, LLC Health PlanMIHealth Plan503911/27/2024Hacking/IT IncidentNetwork ServerNo
Georgia Department of Public HealthGAHealthcare Provider50011/26/2024Hacking/IT IncidentEmailNo
Texas Tech University Health Sciences Center El PasoTXHealthcare Provider81500011/25/2024Hacking/IT IncidentNetwork ServerNo
Texas Tech University Health Sciences CenterTXHealthcare Provider65000011/25/2024Hacking/IT IncidentNetwork ServerNo
Citadel of NorthbrookILHealthcare Provider215511/25/2024Hacking/IT IncidentElectronic Medical Record, Network ServerYes
Pavilion of BridgeviewILHealthcare Provider140711/25/2024Hacking/IT IncidentElectronic Medical RecordYes
American Addiction Centers, Inc.TNBusiness Associate41074711/25/2024Hacking/IT IncidentNetwork ServerYes
Conceptions Reproductive Associates of ColoradoCOHealthcare Provider8000011/25/2024Hacking/IT IncidentNetwork ServerNo
Ardon Health, LLC (“Ardon”)ORHealthcare Provider1009811/22/2024Hacking/IT IncidentEmailNo
Vann Virginia Center for Orthopaedics, PC dba Atlantic Orthopaedic SpecialistsVAHealthcare Provider1526411/22/2024Hacking/IT IncidentEmailNo
East Paris Internal Medicine Associates, PCMIHealthcare Provider523911/22/2024Unauthorized Access/DisclosureEmailNo
Lubbock County Hospital DistrictTXHealthcare Provider50111/22/2024Hacking/IT IncidentNetwork ServerNo
Green Castle Recovery Center DBA, Sanford Behavioral HealthMIHealthcare Provider70311/22/2024Hacking/IT IncidentEmailNo
Pinnacle Claims ManagementCABusiness Associate111911/21/2024Hacking/IT IncidentNetwork ServerYes
East Central Missouri Behavioral Health Services, Inc.MOHealthcare Provider2000011/21/2024Hacking/IT IncidentNetwork ServerNo
York County PAHealthcare Provider50111/20/2024Hacking/IT IncidentEmailNo
Laboratory Services Cooperative WAHealthcare Provider50111/20/2024Hacking/IT IncidentNetwork ServerNo
Enso Counseling Group, PLLCNHHealthcare Provider85011/20/2024Hacking/IT IncidentEmailNo
AuthoraCare CollectiveNCHealthcare Provider5801911/19/2024Unauthorized Access/DisclosureNetwork ServerNo
Athens County Bd of Dev. Disabilities OHHealthcare Provider310011/19/2024Hacking/IT IncidentNetwork ServerNo
The Arbors Operator, LLCINHealthcare Provider280811/18/2024Hacking/IT IncidentElectronic Medical Record, Network ServerYes
Terrace of HialeahFLHealthcare Provider117711/18/2024Hacking/IT IncidentNetwork ServerYes
Dolton Nursing & Rehab, LLCILHealthcare Provider155911/18/2024Hacking/IT IncidentElectronic Medical Record, Network ServerYes
Berkshire Nursing & Rehab Center, LLCILHealthcare Provider423711/18/2024Hacking/IT IncidentNetwork ServerYes
Aperion Care Marseilles, LLCILHealthcare Provider105211/18/2024Hacking/IT IncidentNetwork ServerYes
Villa St. Francis Catholic Care CenterKSHealthcare Provider252211/18/2024Unauthorized Access/DisclosureElectronic Medical RecordYes
Village Pharmacy GroupMAHealthcare Provider58411/18/2024Hacking/IT IncidentEmailNo
Option Care HealthILHealthcare Provider289711/15/2024Hacking/IT IncidentEmailNo
HealthFund Solutions, LLCFLBusiness Associate519811/15/2024Hacking/IT IncidentEmailYes
ESHA, Inc.TXBusiness Associate7692211/15/2024Hacking/IT IncidentNetwork ServerYes
Equinox, Inc. NYHealthcare Provider2156511/15/2024Hacking/IT IncidentNetwork ServerNo
Maternal Fetal Medicine Associates, PLLC, Carnegie Hill Imaging for Women, and Carnegie Women’s Health (collectively, “the Practices”)NYHealthcare Provider50111/15/2024Hacking/IT IncidentNetwork ServerNo
athenahealth, Inc.MABusiness Associate197411/15/2024Unauthorized Access/DisclosureNetwork ServerYes
VPS of MI PLLCMIHealthcare Provider2060411/15/2024Hacking/IT IncidentNetwork ServerNo
ASPEN HEALTHCARE SERVICES INCTXHealthcare Provider719511/15/2024Hacking/IT IncidentElectronic Medical RecordNo
TriHealth H, LLC d/b/a TriHealth Physician Partners (“TriHealth”)OHHealthcare Provider2742611/14/2024Hacking/IT IncidentElectronic Medical RecordYes
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure