U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options
We are generating the report for you. Please wait......

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Pomona Valley Hospital Medical CenterCAHealthcare Provider1334503/20/2024Hacking/IT IncidentNetwork ServerYes
Valley Oaks Health INHealthcare Provider5003403/18/2024Hacking/IT IncidentNetwork ServerNo
Weirton Medical CenterWVHealthcare Provider2679303/18/2024Hacking/IT IncidentNetwork ServerNo
Philips RespironicsPABusiness Associate112503/15/2024Hacking/IT IncidentNetwork ServerYes
Cornerstone Healthcare Group Management Services LLCKYBusiness Associate50003/14/2024Hacking/IT IncidentNetwork ServerYes
California Correctional Health Care ServicesCAHealthcare Provider134803/14/2024Unauthorized Access/DisclosureEmailNo
Bronson Healthcare GroupMIHealthcare Provider159703/13/2024Unauthorized Access/DisclosureElectronic Medical RecordNo
Plymouth Tube Company Employee Benefit PlanILHealth Plan265203/13/2024Hacking/IT IncidentNetwork ServerNo
A5 PHARMACY INC.NYHealthcare Provider300003/13/2024Hacking/IT IncidentNetwork ServerNo
Lindsay Municipal HospitalOKHealthcare Provider50003/13/2024Hacking/IT IncidentEmailNo
Healthfirst (consisting of those plans under Healthfirst PHSP, Inc., Healthfirst Health Plan, Inc., and Healthfirst Insurance Company, Inc.NYHealth Plan683603/13/2024Unauthorized Access/DisclosureOtherNo
CCM HealthMNHealthcare Provider2876003/12/2024Hacking/IT IncidentNetwork ServerNo
R1 RCM Inc.ILBusiness Associate1612103/11/2024Hacking/IT IncidentNetwork ServerYes
Texas Health and Human Services EnterpriseTXHealth Plan339203/11/2024Unauthorized Access/DisclosureEmailNo
Rancho Family Medical Group, Inc.CAHealthcare Provider1048003/11/2024Hacking/IT IncidentNetwork ServerYes
Massachusetts Department of Developmental ServicesMAHealthcare Provider50003/11/2024Improper DisposalPaper/FilmsNo
UC San Diego Health Hillcrest- Hillcrest Medical CenterCAHealthcare Provider164203/08/2024Hacking/IT IncidentEmailNo
Orsini Pharmaceutical Services, LLCILHealthcare Provider143303/08/2024Hacking/IT IncidentEmailNo
Gunster, Yoakley, & Stewart, PAFLBusiness Associate955003/08/2024Hacking/IT IncidentNetwork ServerYes
Jewish Home Lifecare, Inc. NYHealthcare Provider50103/08/2024Hacking/IT IncidentNetwork ServerNo
Dental Group of AmarilloTXHealthcare Provider382103/06/2024Hacking/IT IncidentNetwork ServerNo
Orthopedic Associates of Flower Mound PLLCTXHealthcare Provider175903/06/2024Hacking/IT IncidentEmailNo
Seaglass ChiropracticNJHealthcare Provider65003/06/2024TheftLaptop, Other Portable Electronic DeviceNo
University of Wisconsin Hospitals and Clinics Authority WIHealthcare Provider8590203/05/2024Hacking/IT IncidentEmailNo
BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus TennesseeTNHealth Plan125103/05/2024Hacking/IT IncidentNetwork ServerNo
Orlando VA Medical CenterFLHealthcare Provider1005903/05/2024Unauthorized Access/DisclosureEmailNo
Philips RespironicsPABusiness Associate45715203/04/2024Hacking/IT IncidentNetwork ServerYes
Bay Surgical Specialists, LLCFLHealthcare Provider150503/04/2024Hacking/IT IncidentNetwork ServerYes
Lake of the Woods County Social ServicesMNHealthcare Provider53703/04/2024Hacking/IT IncidentNetwork ServerNo
Yakima Valley Radiology, PCWAHealthcare Provider23524903/01/2024Hacking/IT IncidentNetwork ServerNo
Cherry Street Services, Inc. d/b/a Cherry Health MIHealthcare Provider50002/29/2024Hacking/IT IncidentNetwork ServerNo
DGA-Producer Pension & Health PlansCAHealth Plan421102/29/2024Hacking/IT IncidentNetwork ServerYes
Highland Health SystemsALHealthcare Provider50002/29/2024Hacking/IT IncidentNetwork ServerNo
Kirkland & Ellis LLPILBusiness Associate4880202/29/2024Hacking/IT IncidentNetwork ServerYes
Eastern Radiologists, IncNCHealthcare Provider88674602/29/2024Hacking/IT IncidentNetwork ServerNo
Ada Technologies, Inc. OHHealth Plan239802/29/2024Hacking/IT IncidentNetwork ServerNo
kmj Health SolutionsMIBusiness Associate219102/28/2024Hacking/IT IncidentNetwork ServerYes
Littleton Regional HealthcareNHHealthcare Provider1261402/28/2024Unauthorized Access/DisclosureEmailNo
Oakland Community Health NetworkMIHealth Plan60702/28/2024Unauthorized Access/DisclosureEmailNo
Ohio Neurologic InstituteOHHealthcare Provider554802/28/2024TheftLaptopNo
Northeast Orthopedics and Sports Medicine, PLLCNYHealthcare Provider17710102/27/2024Hacking/IT IncidentNetwork ServerNo
Community Health Group Partnership PlanCAHealth Plan70802/27/2024Hacking/IT IncidentNetwork ServerYes
Ascend Healthcare Management LLCAZHealthcare Provider79102/26/2024Hacking/IT IncidentOtherNo
Bay Area Anesthesia, LLCFLHealthcare Provider1519602/26/2024Hacking/IT IncidentNetwork ServerYes
Scurry County Hospital District dba Cogdell Memorial HospitalTXHealthcare Provider8698102/24/2024Hacking/IT IncidentNetwork ServerNo
MedQ, Inc.TXBusiness Associate5472502/23/2024Hacking/IT IncidentNetwork ServerYes
Bold Quail Holdings, LLC (NewGen Administrative Services, LLC) CAHealthcare Provider10542502/23/2024Hacking/IT IncidentNetwork ServerYes
UNITE HERE NYBusiness Associate79127302/23/2024Hacking/IT IncidentNetwork ServerYes
Santa Clarita Community College DistrictCAHealth Plan232402/23/2024Hacking/IT IncidentNetwork ServerYes
CVS Caremark Part D Services, L.L.C. (“CVS”)RIBusiness Associate1119302/23/2024Unauthorized Access/DisclosurePaper/FilmsYes
Prague Regional Memorial Hospital OKHealthcare Provider134702/22/2024Hacking/IT IncidentEmailNo
Washington County Hospital and Nursing HomeALHealthcare Provider2934602/22/2024Hacking/IT IncidentNetwork ServerNo
Maryville, Inc.NJHealthcare Provider1550302/21/2024Hacking/IT IncidentEmailNo
interventional Pain and Regenerative MedicineTXHealthcare Provider284302/21/2024Unauthorized Access/DisclosurePaper/FilmsNo
East Carolina University’s Brody School of Medicine, a member of the ECU Health affiliated covered entityNCHealthcare Provider1908502/20/2024Unauthorized Access/DisclosureNetwork ServerNo
Egyptian Health Department ILHealthcare Provider10000002/20/2024Hacking/IT IncidentNetwork ServerNo
McKenzie County Healthcare System, Inc.NDHealthcare Provider2100002/16/2024Unauthorized Access/DisclosureEmailNo
Human Affairs International of CaliforniaCABusiness Associate1834702/16/2024Unauthorized Access/DisclosurePaper/FilmsYes
Hospice of HuntingtonWVHealthcare Provider901302/16/2024Hacking/IT IncidentNetwork ServerNo
Dedicated Physicians Group of Texas, PLLC d/b/a Dedicated Senior Medical CenterFLHealthcare Provider344102/16/2024TheftOtherNo
CareFirst BlueCross BlueShield Community Health Plan – District of ColumbiaDCBusiness Associate218902/16/2024Unauthorized Access/DisclosureNetwork ServerYes
Mental Health Center of North Central Alabama, Inc.ALHealthcare Provider100002/16/2024Hacking/IT IncidentNetwork ServerNo
CVS Pharmacy, Inc.RIHealthcare Provider189602/16/2024Unauthorized Access/DisclosureNetwork ServerNo
Dignity Health Welfare Benefits PlanCOHealth Plan74402/15/2024Unauthorized Access/DisclosurePaper/FilmsNo
Employee Benefits Corporation of America and Benefit Design Group, Inc.VAHealth Plan3891202/15/2024Hacking/IT IncidentNetwork ServerNo
Qualcomm IncorporatedCAHealth Plan2703802/15/2024Hacking/IT IncidentNetwork ServerYes
Amin Radiology d/b/a Citrus Diagnostic Center FLHealthcare Provider127302/15/2024Hacking/IT IncidentNetwork ServerNo
BlueCross BlueShield of Tennessee, Inc. and Volunteer State Health Plan, Inc. d/b/a BlueCare Plus TennesseeTNHealth Plan79002/15/2024Hacking/IT IncidentNetwork ServerNo
Lena Pope Home Inc.TXHealthcare Provider395402/15/2024Hacking/IT IncidentEmailNo
Insurance ACE/Humana Inc.KYHealth Plan348002/14/2024Unauthorized Access/DisclosurePaper/FilmsYes
North Hill Needham, Inc., North Hill Home Health Care, Inc. and North Hill Employee Dental PlanMAHealthcare Provider109602/14/2024Hacking/IT IncidentNetwork ServerNo
City of Dubuque Fire DepartmentIAHealthcare Provider138102/14/2024Unauthorized Access/DisclosureNetwork ServerYes
Roswell Park Comprehensive Cancer CenterNYHealthcare Provider75502/14/2024Hacking/IT IncidentEmailNo
Lexington Health, Inc.SCHealthcare Provider199402/12/2024Hacking/IT IncidentEmail, OtherNo
Erie Indemnity Company Group Dental Assistance PlanPAHealth Plan312202/12/2024Hacking/IT IncidentNetwork ServerYes
AGC Flat Glass North America, Inc. Welfare Benefits PlanGAHealth Plan1307902/12/2024Hacking/IT IncidentNetwork ServerNo
Coleman Professional Services Inc. OHHealthcare Provider5188902/12/2024Hacking/IT IncidentEmailNo
TiegermanNYHealthcare Provider1900002/12/2024Hacking/IT IncidentNetwork ServerNo
Prime Healthcare Employee Health PlanCAHealth Plan10113502/09/2024Hacking/IT IncidentNetwork ServerYes
CBIZ Marks Paneth, LLCOHBusiness Associate556202/08/2024Hacking/IT IncidentNetwork ServerYes
Insurance ACE/Humana Inc.KYHealth Plan74802/08/2024Unauthorized Access/DisclosureElectronic Medical Record, Network Server, OtherNo
Liberty HospitalMOHealthcare Provider50102/08/2024Hacking/IT IncidentNetwork ServerNo
Forward Healthcare, LLCMDHealthcare Provider399902/08/2024Hacking/IT IncidentNetwork ServerYes
Medical Management Resource Group, L.L.C.AZBusiness Associate235023602/06/2024Hacking/IT IncidentNetwork ServerYes
Insurance ACE/Humana Inc.KYHealth Plan644002/06/2024Unauthorized Access/DisclosurePaper/FilmsNo
The Bengtson Center for Aesthetics and Plastic SurgeryMIHealthcare Provider93502/05/2024Unauthorized Access/DisclosureDesktop Computer, Network ServerNo
Kentucky Cabinet for Health and Family ServicesKYHealth Plan85702/05/2024Unauthorized Access/DisclosurePaper/FilmsYes
Spectrum Vision PartnersNYBusiness Associate50002/02/2024Hacking/IT IncidentNetwork ServerYes
Greater Cincinnati Behavioral Health Services OHHealthcare Provider5000002/02/2024Hacking/IT IncidentNetwork ServerNo
East Side Health DistrictILHealthcare Provider55902/02/2024Hacking/IT IncidentNetwork ServerNo
Health Alliance Medical PlansILHealth Plan690002/02/2024Hacking/IT IncidentNetwork ServerYes
Capital Health System, Inc.NJHealthcare Provider50101/31/2024Hacking/IT IncidentNetwork ServerNo
Crescent Community Health CenterIAHealthcare Provider50101/31/2024Hacking/IT IncidentEmailNo
Saint Anthony Health Ministries ILHealthcare Provider50001/30/2024Hacking/IT IncidentNetwork ServerNo
Bay Area Heart Center, PAFLHealthcare Provider1170901/30/2024Hacking/IT IncidentNetwork ServerYes
Veterans Health AdministrationDCHealthcare Provider4667701/30/2024Unauthorized Access/DisclosurePaper/FilmsNo
OrthoArkansas, PA Employee Benefit PlanARHealth Plan127001/29/2024Hacking/IT IncidentNetwork ServerYes
Sun Pain Management, LLCAZHealthcare Provider298801/27/2024Hacking/IT IncidentNetwork ServerNo
CNO ACEINHealth Plan6529501/26/2024Hacking/IT IncidentNetwork ServerNo
Kern Regional CenterCAHealthcare Provider70001/26/2024Unauthorized Access/DisclosureEmailNo
We are generating the report for you. Please wait......
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure