U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Universal Health CorporationVAHealthcare Provider58311/06/2024Hacking/IT IncidentEmailNo
Planned Parenthood of MontanaMTHealthcare Provider1800311/05/2024Hacking/IT IncidentNetwork ServerNo
Embody Performance & RecoveryMOHealthcare Provider110011/04/2024Unauthorized Access/DisclosureEmailNo
Northeast Professional Home Care, Inc.OHHealthcare Provider64811/01/2024Hacking/IT IncidentEmailNo
Kaiser Foundation HospitalsCAHealthcare Provider4460011/01/2024Hacking/IT IncidentEmailNo
Potomac Medical Aesthetics, LLCMDHealthcare Provider287611/01/2024Unauthorized Access/DisclosureEmailNo
Regence BlueCross BlueShieldORHealth Plan61010/29/2024Unauthorized Access/DisclosurePaper/FilmsYes
Family Medical CenterMDHealthcare Provider210010/29/2024Hacking/IT IncidentNetwork ServerNo
BrightStar CareILHealthcare Provider118710/28/2024Hacking/IT IncidentEmailNo
The Physical Medicine & Rehabilitation Center, P.A.NJHealthcare Provider408310/28/2024Hacking/IT IncidentNetwork ServerNo
Mystic Valley Elder ServicesMAHealthcare Provider8513310/28/2024Hacking/IT IncidentNetwork ServerNo
Oregon Reproductive Medicine, LLC d/b/a ORM FertilityNYHealthcare Provider50010/25/2024Hacking/IT IncidentNetwork ServerNo
St. Anthony Regional HospitalIAHealthcare Provider50110/25/2024Hacking/IT IncidentNetwork ServerNo
Southwest Colorado Mental Health Center, Inc. d/b/a Axis Health SystemCOHealthcare Provider2338510/25/2024Hacking/IT IncidentNetwork ServerNo
Riverview HealthINHealthcare Provider156210/25/2024Hacking/IT IncidentNetwork ServerNo
GPS Sango Family Dentistry, PLLC d/b/a Sango Family DentistryTNHealthcare Provider2700010/24/2024Hacking/IT IncidentDesktop Computer, Laptop, Network ServerNo
Stanislaus County Behavioral Health and Recovery ServicesCAHealth Plan76710/24/2024Unauthorized Access/DisclosurePaper/FilmsNo
Gandara Mental Health Center MAHealthcare Provider2002410/24/2024Hacking/IT IncidentNetwork ServerNo
Northeast Spine and Sports Medicine, LLCNJHealthcare Provider630010/24/2024Hacking/IT IncidentNetwork ServerNo
Mystic Valley Elder ServicesMABusiness Associate240210/22/2024Hacking/IT IncidentNetwork ServerYes
Arkansas Blue Cross and Blue ShieldARHealth Plan63310/22/2024Hacking/IT IncidentNetwork ServerYes
Smiles in the PinesNCHealthcare Provider180010/21/2024Unauthorized Access/DisclosureDesktop Computer, Electronic Medical Record, Email, Other Portable Electronic Device, Paper/FilmsNo
Clay Platte Family MedicineMOHealthcare Provider5391610/18/2024Hacking/IT IncidentNetwork ServerNo
Advanced Recovery Equipment & Supplies, LLCNYHealthcare Provider5600010/18/2024Hacking/IT IncidentNetwork ServerNo
Survival Flight, Inc.AZHealthcare Provider1234210/18/2024Hacking/IT IncidentEmailNo
Detroit Wayne Integrated Health NetworkMIHealthcare Provider334710/18/2024Hacking/IT IncidentLaptopNo
Summit Pathology and Summit Pathology Laboratories, Inc.COHealthcare Provider181353810/18/2024Hacking/IT IncidentNetwork ServerNo
Chicago Cardiology InstituteILHealthcare Provider274310/18/2024Hacking/IT IncidentEmailNo
Valleygate Dental Surgery Centers of Charlotte, Fayetteville, and the West, LLC.NCHealthcare Provider1458910/17/2024Hacking/IT IncidentNetwork ServerNo
Jacksonville Children's Multispecialty Clinics/Atlantic Medical Management NCHealthcare Provider222410/17/2024Unauthorized Access/DisclosureEmailNo
Sarah Bush Lincoln Fayette County HospitalILHealthcare Provider484510/16/2024Hacking/IT IncidentEmailNo
Tri County Medical Supply And Respiratory Services Inc.ARHealthcare Provider800010/16/2024Improper DisposalPaper/FilmsNo
OnePoint Patient CareAZHealthcare Provider79591610/14/2024Hacking/IT IncidentNetwork ServerNo
Center for Urban Community ServicesNYBusiness Associate3800010/11/2024Hacking/IT IncidentNetwork ServerYes
Ad Valorem Records, Inc. TNBusiness Associate59010/11/2024Unauthorized Access/DisclosurePaper/FilmsYes
Cheasapeake Regional Information System for our Patients, Inc. (CRISP)MDBusiness Associate800810/11/2024Unauthorized Access/DisclosureElectronic Medical RecordYes
MiCare Health Center MTHealthcare Provider276610/11/2024Hacking/IT IncidentEmailNo
Gryphon Healthcare, LLCTXBusiness Associate39335810/11/2024Hacking/IT IncidentNetwork ServerYes
Tower Clock Eye CenterWIHealthcare Provider1073710/10/2024Hacking/IT IncidentEmailNo
Visionworks of America, Inc. TXHealthcare Provider3982510/10/2024Hacking/IT IncidentEmailNo
Wellfleet Group, LLCMABusiness Associate2295910/08/2024Unauthorized Access/DisclosureNetwork ServerYes
DMEscripts, LLCINBusiness Associate999310/08/2024Hacking/IT IncidentEmailYes
TheraCom, L.L.C.PAHealthcare Provider927110/08/2024Hacking/IT IncidentNetwork ServerNo
Smile Design Management LLCFLHealthcare Provider50010/07/2024Hacking/IT IncidentNetwork ServerNo
Schneider Regional Medical CenterHealthcare Provider157010/07/2024Hacking/IT IncidentNetwork ServerNo
Dohman, Akerlund & EddyNEBusiness Associate994110/07/2024Hacking/IT IncidentNetwork ServerYes
University of Minnesota Board of RegentsMNHealthcare Provider133110/07/2024Hacking/IT IncidentEmailNo
Ciox Health LLC, d/b/a Datavant GroupAZBusiness Associate50110/07/2024Hacking/IT IncidentEmailYes
ATSG, IncNYBusiness Associate90946910/04/2024Hacking/IT IncidentNetwork ServerYes
General Physician, P.C.NYHealthcare Provider50110/04/2024Hacking/IT IncidentEmailNo
Bayhealth Medical CenterDEHealthcare Provider50010/04/2024Hacking/IT IncidentNetwork ServerNo
Easter Seals DC | MD | VA, Inc.MDHealthcare Provider58410/04/2024Hacking/IT IncidentEmailNo
Omni Family HealthCAHealthcare Provider46834410/04/2024Hacking/IT IncidentNetwork ServerNo
Dr. Daniel J. Leeman, M.D.TXHealthcare Provider5000010/04/2024Hacking/IT IncidentNetwork ServerNo
Long Island Plastic Surgical Group, P.C.NYHealthcare Provider16170710/04/2024Hacking/IT IncidentNetwork ServerNo
Seven Counties Services, Inc.KYHealthcare Provider50110/04/2024Hacking/IT IncidentEmailNo
Judge Rotenberg Educational CenterMAHealthcare Provider257910/03/2024Hacking/IT IncidentNetwork ServerNo
Walgreen Co.ILHealthcare Provider191510/01/2024Unauthorized Access/DisclosureLaptopNo
Connally Memorial Medical Center TXHealth Plan122809/30/2024Hacking/IT IncidentEmailNo
Hafetz and Associates NJBusiness Associate2647409/27/2024Hacking/IT IncidentEmailYes
CF MedicalGABusiness Associate24220009/26/2024Hacking/IT IncidentNetwork ServerYes
Texas Spine Consultants, PLLC TXHealthcare Provider804809/26/2024Hacking/IT IncidentEmailNo
Community Clinic of Maui, Inc. dba Malama I Ke Ola Health CenterHIHealthcare Provider12381609/26/2024Hacking/IT IncidentNetwork ServerNo
University of Michigan/Michigan MedicineMIHealthcare Provider5789109/26/2024Hacking/IT IncidentEmailNo
Prentke Romich Company dba PRC-SaltilloOHHealthcare Provider5162709/25/2024Hacking/IT IncidentNetwork ServerNo
Holistix Treatment Center LLC d/b/a We Level Up Treatment Lake WorthFLHealthcare Provider656709/24/2024Hacking/IT IncidentNetwork ServerNo
UT Southwestern Medical CenterTXHealthcare Provider77809/24/2024Unauthorized Access/DisclosureElectronic Medical RecordNo
Asheville Arthritis and Osteoporosis Center, P.A.NCHealthcare Provider5825109/20/2024Hacking/IT IncidentNetwork ServerNo
Muskogee City County Enhanced 911 Trust AuthorityOKBusiness Associate18000009/20/2024Hacking/IT IncidentNetwork ServerYes
Jacobsen Construction Co., Inc. Health PlanUTHealth Plan212709/20/2024Hacking/IT IncidentNetwork ServerNo
Jefferson PA Heart and VascularPAHealthcare Provider75509/18/2024Unauthorized Access/DisclosurePaper/FilmsNo
Southern Bone & Joint Specialists, PA (“Southern Bone”)MSHealthcare Provider716209/17/2024Hacking/IT IncidentEmailNo
Rim Country Health and Rehabilitation AZHealthcare Provider72109/16/2024Hacking/IT IncidentEmailNo
ERLC LLC, d/b/a Elitecare Emergency HospitalTXHealthcare Provider2475409/16/2024Hacking/IT IncidentNetwork ServerNo
Michigan Masonic HomeMIHealthcare Provider50009/16/2024Hacking/IT IncidentEmailNo
JTaylor & Associates LLC TXBusiness Associate2231509/16/2024Hacking/IT IncidentEmailYes
Maryville AcademyILHealthcare Provider50009/13/2024Hacking/IT IncidentNetwork ServerNo
Atrium HealthNCHealthcare Provider3212009/13/2024Hacking/IT IncidentEmailNo
Access Ambulatory Surgery Center, LLCNHHealthcare Provider520509/12/2024Hacking/IT IncidentNetwork ServerNo
Young Consulting LLCGABusiness Associate95417709/11/2024Hacking/IT IncidentNetwork ServerYes
Local 1964 ILA Health & Insurance FundNJHealth Plan205909/10/2024Hacking/IT IncidentNetwork ServerNo
Richland County, WIWIHealthcare Provider7636509/09/2024Hacking/IT IncidentNetwork ServerNo
Millinocket Regional HospitalMEHealthcare Provider81309/09/2024Hacking/IT IncidentNetwork ServerNo
Nationwide Recovery Services, Inc.GABusiness Associate50109/09/2024Hacking/IT IncidentNetwork ServerYes
oficina medicaHealthcare Provider261809/08/2024TheftDesktop Computer, Other Portable Electronic DeviceNo
Welcome HealthCAHealthcare Provider59709/06/2024Hacking/IT IncidentEmailNo
Centers for Medicare & Medicaid ServicesMDHealth Plan311281509/06/2024Hacking/IT IncidentNetwork ServerYes
Seneca Nation Health SystemNYHealthcare Provider763309/06/2024Hacking/IT IncidentNetwork ServerNo
Guam Seventh-Day Adventist Clinic Healthcare Provider5663509/06/2024Hacking/IT IncidentEmailNo
County of Los Angeles Department of Mental HealthCAHealthcare Provider233409/05/2024Hacking/IT IncidentNetwork ServerNo
Premier Health Family Care – North and Premier Health Family Care of VandaliaOHHealthcare Provider309209/03/2024Unauthorized Access/DisclosurePaper/FilmsNo
United Way of Connecticut, Inc.CTBusiness Associate803909/03/2024Hacking/IT IncidentEmailYes
Service Access & Management, Inc.PAHealthcare Provider50109/02/2024Hacking/IT IncidentNetwork ServerNo
Washoe County School DistrictNVHealth Plan101708/30/2024Unauthorized Access/DisclosureNetwork ServerYes
EngageMED, Inc ARBusiness Associate50008/30/2024Hacking/IT IncidentNetwork ServerYes
Baptist Health Medical Center Drew CountyARHealthcare Provider520708/30/2024Hacking/IT IncidentNetwork ServerNo
Catholic Charities CYO of The Archdiocese of San FranciscoCAHealthcare Provider716808/30/2024Hacking/IT IncidentNetwork ServerNo
Minnesota Department of Human ServicesMNHealthcare Provider432908/30/2024Hacking/IT IncidentEmailNo
Illinois Bone & Joint Institute, LLCILHealthcare Provider18267008/30/2024Hacking/IT IncidentNetwork ServerNo
Mount Carmel Behavioral Health OHHealthcare Provider50008/30/2024Hacking/IT IncidentEmailNo
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure