U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Molina Healthcare of Iowa, Inc.IABusiness Associate164711/22/2023Hacking/IT IncidentEmailYes
Detroit Chassis, LLCMIHealth Plan95811/21/2023Hacking/IT IncidentNetwork ServerNo
1st Source BankINBusiness Associate147711/20/2023Hacking/IT IncidentNetwork ServerYes
CKF Addiction Treatment, Inc.KSHealthcare Provider50111/17/2023Hacking/IT IncidentEmailNo
California Physicians’ Service d/b/a Blue Shield of CaliforniaCAHealth Plan63684811/17/2023Hacking/IT IncidentNetwork ServerYes
Psychiatry Associates of Kansas CityKSHealthcare Provider1825511/17/2023Hacking/IT IncidentNetwork ServerNo
Blue Shield of California OR Blue Shield of California Promise Health PlanCABusiness Associate2652311/17/2023Hacking/IT IncidentNetwork ServerYes
Wyoming County Community Health SystemNYHealthcare Provider2600011/16/2023Hacking/IT IncidentNetwork ServerNo
Rock Valley Physical Therapy CenterILHealthcare Provider242111/16/2023Unauthorized Access/DisclosureEmailNo
CareTree, Inc.ILBusiness Associate109711/15/2023Hacking/IT IncidentNetwork ServerYes
Westside Community ServicesCAHealthcare Provider248411/15/2023Hacking/IT IncidentNetwork ServerNo
International Paper Company Group Health and Welfare Plan (the "IP Plan")TNHealth Plan7869211/14/2023Hacking/IT IncidentNetwork ServerYes
Medical College of WisconsinWIHealthcare Provider24066711/14/2023Hacking/IT IncidentNetwork ServerNo
Endocrine and Psychiatry CenterTXHealthcare Provider2853111/14/2023Hacking/IT IncidentNetwork ServerNo
Southwest Behavioral Health CenterUTHealthcare Provider1714711/13/2023Hacking/IT IncidentNetwork ServerNo
Medical University of South CarolinaSCHealthcare Provider175811/13/2023Unauthorized Access/DisclosureOtherNo
Woodfords Family ServicesMEHealthcare Provider669111/10/2023Hacking/IT IncidentNetwork ServerNo
Healix Infusion Therapy, LLCTXHealthcare Provider50111/09/2023Hacking/IT IncidentNetwork ServerNo
Warren General Hospital PAHealthcare Provider16892111/09/2023Hacking/IT IncidentNetwork ServerNo
Mariner Management Group OHHealthcare Provider175611/08/2023Hacking/IT IncidentNetwork ServerNo
Pharmacy Group of Mississippi, LLCMSHealthcare Provider1312911/07/2023Hacking/IT IncidentNetwork ServerNo
IPM Healthcare DBA Boomerang HealthcareCAHealthcare Provider120411/07/2023Unauthorized Access/DisclosureEmailNo
Prestige Care, Inc.WAHealthcare Provider50111/06/2023Hacking/IT IncidentNetwork ServerNo
Welltok, Inc.COBusiness Associate849337911/06/2023Hacking/IT IncidentNetwork ServerYes
WellLife Network Inc.NYHealthcare Provider50111/06/2023Hacking/IT IncidentNetwork ServerNo
Healthsoft LLCGABusiness Associate100011/06/2023Hacking/IT IncidentNetwork ServerYes
Financial Asset Management Systems ("FAMS")GABusiness Associate16479611/04/2023Hacking/IT IncidentNetwork ServerYes
Mayo ClinicMNHealthcare Provider115211/03/2023Unauthorized Access/DisclosureNetwork ServerNo
Sutter Health CAHealthcare Provider84544111/03/2023Hacking/IT IncidentNetwork ServerYes
South Austin Health Imaging LLC dba Longhorn Imaging CenterTXHealthcare Provider10064311/03/2023Hacking/IT IncidentNetwork Server, OtherYes
Perry Johnson & Associates, Inc., which does business as PJ&ANVBusiness Associate895221211/03/2023Hacking/IT IncidentNetwork ServerYes
Catholic Charities of the Diocese of Rockville Centre d/b/a Catholic Charities of Long IslandNYHealthcare Provider1300011/03/2023Hacking/IT IncidentNetwork ServerNo
WACOSAMNHealthcare Provider138011/03/2023Hacking/IT IncidentNetwork ServerNo
Westat, Inc.MDBusiness Associate2004511/03/2023Hacking/IT IncidentNetwork ServerYes
Life Generations Healthcare LLCCAHealthcare Provider583211/03/2023Hacking/IT IncidentEmailNo
Mulkay Cardiology Consultants at Holy Name Medical Center, P.C.NJHealthcare Provider7958211/03/2023Hacking/IT IncidentNetwork ServerNo
Postmeds, Inc.CAHealthcare Provider236435910/30/2023Hacking/IT IncidentOtherYes
Longhorn VillageTXHealthcare Provider167010/30/2023Hacking/IT IncidentEmailNo
Frederiksted Health Care, Inc.Healthcare Provider60010/30/2023Hacking/IT IncidentNetwork ServerNo
Northern Iowa Therapy PCIABusiness Associate510010/29/2023Hacking/IT IncidentNetwork ServerYes
PeakMedCOHealthcare Provider2780010/27/2023Hacking/IT IncidentNetwork ServerNo
Pause Pain & WellnessMSHealthcare Provider77710/27/2023Unauthorized Access/DisclosureEmailYes
Cadence BankMSBusiness Associate1386210/27/2023Hacking/IT IncidentNetwork ServerYes
Hospital Sisters Health SystemILBusiness Associate50010/26/2023Hacking/IT IncidentNetwork ServerYes
Greater Rochester Independent Practice Association, Inc.NYHealthcare Provider27915610/26/2023Hacking/IT IncidentNetwork ServerNo
Western Washington Medical Group MSHealthcare Provider35086310/26/2023Hacking/IT IncidentNetwork ServerNo
Fredericksburg Foot & Ankle Center, PLCVAHealthcare Provider1491210/25/2023Hacking/IT IncidentNetwork ServerNo
Edward C. Taylor, PhD., PLFLHealthcare Provider668410/25/2023Hacking/IT IncidentDesktop Computer, Network ServerNo
LCS Financial ServicesCOBusiness Associate76810/24/2023Hacking/IT IncidentNetwork ServerYes
eleHealthLABusiness Associate218710/24/2023Unauthorized Access/DisclosurePaper/FilmsYes
University of Michigan, on behalf of certain HIPAA-covered functions of the University that operate as a HIPAA hybrid entityMIHealthcare Provider6103310/23/2023Hacking/IT IncidentNetwork ServerNo
Dakota Eye InstituteNDHealthcare Provider10714310/23/2023Hacking/IT IncidentNetwork ServerNo
La Red Health CenterDEHealthcare Provider50110/20/2023Hacking/IT IncidentNetwork ServerNo
McLaren Health CareMIHealthcare Provider50110/20/2023Hacking/IT IncidentNetwork ServerNo
City of Philadelphia PAHealth Plan50110/20/2023Hacking/IT IncidentEmailNo
Radius Global SolutionsPABusiness Associate13574210/19/2023Hacking/IT IncidentNetwork ServerYes
Counseling and Recovery Services of OklahomaOKHealthcare Provider336510/19/2023Hacking/IT IncidentDesktop Computer, EmailNo
Hospital & Medical Foundation of Paris, IncILHealthcare Provider1659810/19/2023Hacking/IT IncidentNetwork ServerYes
Napa Integrated Medicine PCCABusiness Associate60010/19/2023TheftDesktop ComputerYes
Oscar Insurance Company of FloridaNYHealth Plan104510/19/2023Hacking/IT IncidentNetwork ServerNo
Singing River Health System and its wholly owned subsidiary, Singing River GulfportMSHealthcare Provider50110/18/2023Hacking/IT IncidentNetwork ServerNo
BHI Energy Health and Welfare Benefits PlanMAHealth Plan404910/18/2023Hacking/IT IncidentNetwork ServerNo
Helping the Aging Needy and Disabled IncTXHealthcare Provider62810/18/2023Hacking/IT IncidentEmailNo
Peerstar LLCPAHealthcare Provider1143810/16/2023Hacking/IT IncidentNetwork ServerNo
Pacific Clear Vision InstituteORHealthcare Provider62610/15/2023Unauthorized Access/DisclosureEmailNo
Westat, Inc.MDBusiness Associate5006510/13/2023Hacking/IT IncidentNetwork ServerYes
Atlas Healthcare CTCTHealthcare Provider1083110/13/2023Unauthorized Access/DisclosureNetwork ServerNo
NASCOGABusiness Associate295610/10/2023Hacking/IT IncidentNetwork ServerYes
BHS Physician Network, Inc. TXHealthcare Provider185710/10/2023Hacking/IT IncidentEmailNo
Data Media AssociatesGABusiness Associate203510/09/2023Unauthorized Access/DisclosurePaper/FilmsYes
Fellowship VillageNJHealthcare Provider50110/08/2023Hacking/IT IncidentNetwork ServerNo
Brooklyn Premier OrthopedicsNYHealthcare Provider4845910/06/2023Hacking/IT IncidentNetwork ServerNo
Neurovative Diagnostics, LLCTXHealthcare Provider159910/05/2023Unauthorized Access/DisclosureEmailNo
Carle Health ILHealthcare Provider67910/05/2023Hacking/IT IncidentNetwork ServerYes
Responsive Care SolutionsFLBusiness Associate520010/05/2023Unauthorized Access/DisclosurePaper/FilmsYes
Region 4 South Mental Health ConsortiumMNHealthcare Provider57110/05/2023Hacking/IT IncidentNetwork ServerNo
Walmart, Inc. Associates Health and Welfare PlanARHealth Plan8595210/04/2023Hacking/IT IncidentNetwork ServerYes
Borgfeld Dental Center PLLC dba Henwood Family DentistryTXHealthcare Provider730010/02/2023Unauthorized Access/DisclosureElectronic Medical Record, Network ServerNo
Arietis Health, LLCFLBusiness Associate197506609/29/2023Hacking/IT IncidentNetwork ServerYes
Prospect Medical Holdings, Inc.CABusiness Associate34237609/29/2023Hacking/IT IncidentNetwork ServerYes
Piedmont Healthcare, Inc.GAHealthcare Provider89509/29/2023Hacking/IT IncidentNetwork ServerYes
Physio Logic Medicine, PCNYHealthcare Provider128009/29/2023Hacking/IT IncidentNetwork ServerNo
International Business Machines CorporationNYBusiness Associate63075509/29/2023Unauthorized Access/DisclosureOtherYes
Physio Logic Chiropractic and Physical Therapy, PLLC and Dr. Patty DiBlasio, PCNYHealthcare Provider958009/29/2023Hacking/IT IncidentNetwork ServerNo
Mt. Graham Regional Medical CenterAZHealthcare Provider50109/29/2023Hacking/IT IncidentNetwork ServerNo
Georgia Northside Ear, Nose, and Throat, LLC.TXHealthcare Provider3777409/29/2023Hacking/IT IncidentEmailNo
Greater Dallas Healthcare EnterprisesTXHealthcare Provider14383309/29/2023Hacking/IT IncidentEmailNo
South Florida Behavioral Health Network FLBusiness Associate272909/29/2023Hacking/IT IncidentNetwork ServerYes
Acadia Health, LLC d/b/a Just Kids DentalALHealthcare Provider12946309/27/2023Hacking/IT IncidentNetwork ServerNo
Hospice of the Bluegrass, Inc. dba Bluegrass Care NavigatorsKYHealthcare Provider681409/26/2023Hacking/IT IncidentEmailNo
Entertainment Community Fund, dba Actors Fund HomeNJHealthcare Provider111009/26/2023Hacking/IT IncidentNetwork ServerNo
AIDS Alabama, Inc.ALHealthcare Provider192209/26/2023Hacking/IT IncidentNetwork ServerNo
Community First Medical CenterILHealthcare Provider21604709/26/2023Hacking/IT IncidentNetwork ServerNo
Riverdale Mental Health d/b/a Mosaic Mental Health NYHealthcare Provider728109/25/2023Hacking/IT IncidentNetwork ServerNo
Tangoe, Inc.INHealth Plan71809/25/2023Hacking/IT IncidentNetwork ServerNo
Cook County Health and Hospitals SystemILHealthcare Provider50009/24/2023Hacking/IT IncidentNetwork ServerYes
Navvis & Company, LLCMOBusiness Associate91709/22/2023Hacking/IT IncidentNetwork ServerYes
OrthoAlaska, LLCAKHealthcare Provider17620309/22/2023Hacking/IT IncidentNetwork ServerNo
Allegheny County, PennsylvaniaPABusiness Associate150509/22/2023Hacking/IT IncidentNetwork ServerYes
Blue Cross Blue Shield of TexasILBusiness Associate370809/22/2023Unauthorized Access/DisclosurePaper/FilmsYes
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure