U.S. Department of Health & Human Services

As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary: Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
Show Advanced Options

We are generating the report for you. Please wait......

Breach Report Results


Name of Covered Entity	State	Covered Entity Type	Individuals Affected	Breach Submission Date	Type of Breach	Location of Breached Information	Business Associate Present
Southeast Nursing and Rehab Center	TX	Healthcare Provider	600	06/06/2023	Improper Disposal	Other, Paper/Films	No
T. Rowe Price Group, Inc.	MD	Health Plan	684	06/02/2023	Hacking/IT Incident	Network Server	Yes
Elgon Information Systems	MA	Business Associate	31248	06/02/2023	Hacking/IT Incident	Network Server	Yes
Mercy Medical Center - Clinton, Inc.	IA	Healthcare Provider	20865	06/02/2023	Hacking/IT Incident	Network Server	No
Pain Relief Centers PA	NC	Healthcare Provider	7000	06/01/2023	Unauthorized Access/Disclosure	Electronic Medical Record	No
Builders FirstSource Flex Plan	TX	Health Plan	3690	05/30/2023	Hacking/IT Incident	Network Server	No
Iowa Department of Health and Human Services - Iowa Medicaid (Iowa HHS-IM)	IA	Health Plan	233834	05/30/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	996	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	1389	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	1191	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	1518	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	524	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	507	05/26/2023	Hacking/IT Incident	Network Server	Yes
Pioneer Valley Ophthalmic Consultants, PC	MA	Healthcare Provider	36275	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	983	05/26/2023	Hacking/IT Incident	Network Server	Yes
Brightline, Inc.	CA	Business Associate	8432	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	803	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	1147	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	537	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	796	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	1097	05/26/2023	Hacking/IT Incident	Network Server	Yes
Alvaria, Inc.	MA	Business Associate	916	05/26/2023	Hacking/IT Incident	Network Server	Yes
Sparta Community Hospital District	IL	Healthcare Provider	900	05/26/2023	Hacking/IT Incident	Email	No
Managed Care of North America (MCNA)	GA	Business Associate	8861076	05/26/2023	Hacking/IT Incident	Network Server	Yes
Iowa Department of Health and Human Services	IA	Health Plan	833	05/26/2023	Unauthorized Access/Disclosure	Paper/Films	Yes
South Jersey Behavioral Health Resources, Inc.	NJ	Healthcare Provider	2193	05/26/2023	Unauthorized Access/Disclosure	Email	No
Valley Orthopaedic Specialists	CT	Healthcare Provider	5062	05/26/2023	Hacking/IT Incident	Network Server	No
Lancaster Orthopedic Group	PA	Healthcare Provider	500	05/26/2023	Hacking/IT Incident	Network Server	No
Albany ENT & Allergy Services, PC.	NY	Healthcare Provider	224486	05/25/2023	Hacking/IT Incident	Network Server	No
Asian Health Services	CA	Healthcare Provider	6270	05/25/2023	Hacking/IT Incident	Email	No
Vascular Center of Intervention, Inc.	CA	Healthcare Provider	3833	05/24/2023	Hacking/IT Incident	Network Server	No
Harvard Pilgrim Health Care	MA	Health Plan	2550922	05/24/2023	Hacking/IT Incident	Network Server	No
MedInform, Inc.	OH	Business Associate	14453	05/24/2023	Hacking/IT Incident	Network Server	Yes
The CSC Generation Holdings, Inc. Health and Welfare Plan	WA	Health Plan	2219	05/24/2023	Hacking/IT Incident	Network Server	No
UI Community Home Care, a subsidiary of University of Iowa Health System	IA	Healthcare Provider	67897	05/24/2023	Hacking/IT Incident	Electronic Medical Record, Network Server	No
Culbertson Memorial Hospital	IL	Healthcare Provider	501	05/24/2023	Hacking/IT Incident	Network Server	No
Grant Regional Health Center	WI	Healthcare Provider	4135	05/23/2023	Hacking/IT Incident	Email	No
County of Sacramento	CA	Healthcare Provider	1000	05/23/2023	Hacking/IT Incident	Email	No
Topcon Healthcare Solutions, Inc.	NJ	Business Associate	4209	05/22/2023	Hacking/IT Incident	Network Server	Yes
PillPack LLC	NH	Healthcare Provider	19032	05/19/2023	Hacking/IT Incident	Network Server	No
PartsSource, Inc. Welfare Benefit Plan	OH	Health Plan	1474	05/19/2023	Hacking/IT Incident	Network Server	No
Tennessee Orthopaedic Clinics	TN	Healthcare Provider	500	05/19/2023	Hacking/IT Incident	Network Server	No
Marshall Information Services, LLC dba Primary Solutions	OH	Business Associate	7456	05/18/2023	Hacking/IT Incident	Network Server	Yes
University of Missouri Health Care	MO	Healthcare Provider	736	05/17/2023	Unauthorized Access/Disclosure	Electronic Medical Record	No
Clarke County Hospital	IA	Healthcare Provider	28003	05/17/2023	Hacking/IT Incident	Network Server	No
Buckeye Health Plan	OH	Health Plan	686	05/16/2023	Unauthorized Access/Disclosure	Email	No
Fertility Specialists Medical Group	CA	Healthcare Provider	9437	05/15/2023	Hacking/IT Incident	Network Server	No
Lehigh Valley Health Network	PA	Healthcare Provider	627	05/15/2023	Hacking/IT Incident	Network Server	No
R&B Corporation of Virginia d/b/a Credit Control Corporation	VA	Business Associate	345523	05/13/2023	Hacking/IT Incident	Network Server	Yes
PharMerica Corporation	KY	Healthcare Provider	5815591	05/12/2023	Hacking/IT Incident	Network Server	No
Great Expressions Dental Centers	MI	Healthcare Provider	528	05/12/2023	Hacking/IT Incident	Network Server	No
Sesame, Inc.	NY	Business Associate	1809	05/12/2023	Unauthorized Access/Disclosure	Network Server	Yes
Illinois Department of Healthcare and Family Services, Illinois Department of Human Services	IL	Health Plan	50839	05/12/2023	Hacking/IT Incident	Network Server	No
Solutran	MN	Business Associate	17728	05/12/2023	Hacking/IT Incident	Network Server	Yes
Health Benefit Plan of the Anchorage School District	AK	Health Plan	4598	05/12/2023	Theft	Laptop	No
United Healthcare Services, Inc. Single Affiliated Covered Entity	CT	Health Plan	1116	05/12/2023	Unauthorized Access/Disclosure	Email	No
Catholic Health System	NY	Healthcare Provider	12759	05/11/2023	Unauthorized Access/Disclosure	Electronic Medical Record	Yes
IMA Financial Group, Inc.	KS	Business Associate	2937	05/10/2023	Hacking/IT Incident	Network Server	Yes
Uintah Basin Healthcare	UT	Healthcare Provider	103974	05/10/2023	Hacking/IT Incident	Network Server	No
Brightline, Inc.	CA	Business Associate	28975	05/10/2023	Hacking/IT Incident	Other	Yes
Smile Doctors of Arizona, P.C. d/b/a Grinz Orthodontics ("Grinz Orthodontics")	AZ	Healthcare Provider	1034	05/09/2023	Theft	Desktop Computer	No
ASAS Health, LLC	TX	Healthcare Provider	25527	05/06/2023	Hacking/IT Incident	Desktop Computer, Laptop, Network Server	No
United Healthcare Services, Inc. Single Affiliated Covered Entity	CT	Health Plan	1971	05/05/2023	Unauthorized Access/Disclosure	Network Server	No
United Healthcare Services, Inc. Single Affiliated Covered Entity	CT	Health Plan	26561	05/05/2023	Hacking/IT Incident	Network Server	No
Our Sunday Visitor, Inc.	IN	Health Plan	965	05/05/2023	Hacking/IT Incident	Network Server	No
People Incorporated of Sequoyah County	OK	Healthcare Provider	8725	05/05/2023	Hacking/IT Incident	Network Server	No
New Mexico Department of Health	NM	Healthcare Provider	49000	05/04/2023	Unauthorized Access/Disclosure	Other	No
Methodist Family Health	AR	Healthcare Provider	5259	05/03/2023	Hacking/IT Incident	Network Server	No
Northwest Health – La Porte	IN	Healthcare Provider	10256	05/02/2023	Unauthorized Access/Disclosure	Paper/Films	No
Oyate Health Center	SD	Healthcare Provider	575	05/02/2023	Improper Disposal	Paper/Films	No
Herbert J. Thomas Memorial Hospital Association dba Thomas Memorial Hospital	WV	Healthcare Provider	2563	05/02/2023	Hacking/IT Incident	Network Server	Yes
University Urology	NY	Healthcare Provider	56816	05/01/2023	Hacking/IT Incident	Network Server	No
Summit Eye & Optical	NJ	Healthcare Provider	5727	05/01/2023	Hacking/IT Incident	Network Server	No
ReDiscover Mental Health	MO	Healthcare Provider	877	05/01/2023	Unauthorized Access/Disclosure	Email	No
Brightside Health, Inc.	CA	Healthcare Provider	767	04/30/2023	Unauthorized Access/Disclosure	Electronic Medical Record, Other	No
Link Audiology LLC	WA	Healthcare Provider	7200	04/28/2023	Hacking/IT Incident	Email	No
HealthPlan Services, Inc.	FL	Business Associate	9349	04/28/2023	Hacking/IT Incident	Network Server	Yes
Grohler Hearing Aid Center, INC DBA Beltone Hearing Aid Centers	VA	Healthcare Provider	5272	04/28/2023	Hacking/IT Incident	Email	No
Allina Health	MN	Healthcare Provider	1042	04/28/2023	Unauthorized Access/Disclosure	Network Server	No
Unlimited Care, Inc.	NY	Healthcare Provider	8453	04/27/2023	Hacking/IT Incident	Network Server	No
Delphi Drug & Alcohol Council	NY	Healthcare Provider	6288	04/27/2023	Hacking/IT Incident	Email	No
University of California, San Francisco	CA	Healthcare Provider	676	04/26/2023	Hacking/IT Incident	Email	No
CounSol, LLC	FL	Business Associate	4277	04/25/2023	Unauthorized Access/Disclosure	Network Server	Yes
Lake County Health Department and Community Health Center	IL	Healthcare Provider	17000	04/25/2023	Hacking/IT Incident	Email	No
Mars Area School District	PA	Health Plan	1270	04/24/2023	Hacking/IT Incident	Network Server	No
Robeson Health Care Corporation	NC	Healthcare Provider	15045	04/21/2023	Hacking/IT Incident	Network Server	No
Brightline, Inc.	CA	Business Associate	180694	04/20/2023	Hacking/IT Incident	Network Server, Other	Yes
Upper Peninsula Health Plan	MI	Health Plan	833	04/20/2023	Hacking/IT Incident	Network Server	Yes
Modern Cardiology Associates		Healthcare Provider	10000	04/19/2023	Hacking/IT Incident	Network Server	No
Graceworks Lutheran Services	OH	Healthcare Provider	6737	04/19/2023	Hacking/IT Incident	Network Server	No
Morgan Stanley	NY	Health Plan	535	04/18/2023	Unauthorized Access/Disclosure	Paper/Films	No
Integrated Medical Services	AZ	Healthcare Provider	6591	04/17/2023	Unauthorized Access/Disclosure	Paper/Films	No
Ethan Health, LLC	KY	Healthcare Provider	4047	04/14/2023	Hacking/IT Incident	Email	No
MiniMed Distribution Corp.	CA	Healthcare Provider	58374	04/14/2023	Unauthorized Access/Disclosure	Network Server	No
Dallas County	TX	Healthcare Provider	501	04/14/2023	Improper Disposal	Desktop Computer	No
United Steelworkers Local 286	PA	Health Plan	37965	04/14/2023	Hacking/IT Incident	Email	No
Two Rivers Public Health Department	NE	Healthcare Provider	15168	04/14/2023	Hacking/IT Incident	Email	No
Presence Healthcare Services dba Presence Medical Group	IL	Healthcare Provider	921	04/14/2023	Unauthorized Access/Disclosure	Paper/Films	No
Henry County Hospital	OH	Healthcare Provider	3689	04/14/2023	Hacking/IT Incident	Network Server	Yes
Brightline, Inc.	CA	Business Associate	49968	04/13/2023	Hacking/IT Incident	Network Server, Other	Yes

We are generating the report for you. Please wait......

U.S. Department of Health and Human Services Office for Civil Rights Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

U.S. Department of Health and Human Services
Office for Civil Rights

Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information