| University of Vermont Health Network - Elizabethtown Community Hospital | NY | Healthcare Provider | 32470 | 12/17/2018 | Hacking/IT Incident | Email | No | |
| Fort Defiance Indian Hospital | AZ | Healthcare Provider | 1000 | 12/17/2018 | Hacking/IT Incident | Desktop Computer | No | |
| Massachusetts General Hospital | MA | Healthcare Provider | 588 | 12/14/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Alpha-Omega Endocrinology, Diabetes and Metabolism Center, PC | AZ | Healthcare Provider | 1000 | 12/12/2018 | Unauthorized Access/Disclosure | Desktop Computer, Electronic Medical Record, Email, Network Server, Other, Other Portable Electronic Device, Paper/Films | No | |
| Adams County | WI | Healthcare Provider | 258120 | 12/11/2018 | Unauthorized Access/Disclosure | Network Server, Other | No | |
| County of Ramsey | MN | Healthcare Provider | 599 | 12/11/2018 | Hacking/IT Incident | Email | No | |
| CHI Health Care, Inc. | MD | Healthcare Provider | 722 | 11/30/2018 | Unauthorized Access/Disclosure | Other Portable Electronic Device, Paper/Films | No | |
| Mind and Motion, LLC | GA | Healthcare Provider | 16000 | 11/30/2018 | Hacking/IT Incident | Network Server | No | |
| CCRM Dallas-Fort Worth | TX | Healthcare Provider | 1117 | 11/30/2018 | Hacking/IT Incident | Email | No | |
| Thielen Student Health Center | IA | Healthcare Provider | 599 | 11/30/2018 | Unauthorized Access/Disclosure | Email | No | |
| Prairie Fields Family Medicine, PC | NE | Healthcare Provider | 6450 | 11/30/2018 | Unauthorized Access/Disclosure | Email | No | |
| OrthoTexas Physicians and Surgeons, PLLC | TX | Healthcare Provider | 2172 | 11/28/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| Steward Medical Group | MA | Healthcare Provider | 16276 | 11/28/2018 | Hacking/IT Incident | Network Server | Yes | |
| AccuDoc Solutions, Inc. | NC | Business Associate | 2652537 | 11/27/2018 | Hacking/IT Incident | Network Server | Yes | |
| Cancer Treatment Centers of America (CTCA) at Western Regional Medical Center | AZ | Healthcare Provider | 41948 | 11/26/2018 | Hacking/IT Incident | Email | No | |
| Baylor Scott & White Medical Center - Frisco | TX | Healthcare Provider | 47984 | 11/26/2018 | Hacking/IT Incident | Network Server | Yes | |
| Mercy Medical Center- North Iowa | IA | Healthcare Provider | 1971 | 11/26/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | |
| Tandigm Health | PA | Business Associate | 7376 | 11/21/2018 | Hacking/IT Incident | Network Server | Yes | |
| East End Disability Associates, Inc. | NY | Healthcare Provider | 896 | 11/20/2018 | Hacking/IT Incident | Email | No | |
| Inova Health System | VA | Business Associate | 857 | 11/19/2018 | Hacking/IT Incident | Electronic Medical Record | Yes | |
| James R. Etzkorn, MD | MO | Healthcare Provider | 6845 | 11/19/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| HealthEquity, Inc. | UT | Business Associate | 165800 | 11/17/2018 | Hacking/IT Incident | Email | Yes | |
| Texas VSI, LLC | TX | Business Associate | 500 | 11/16/2018 | Hacking/IT Incident | Network Server | Yes | |
| New York Oncology Hematology, P.C. | NY | Healthcare Provider | 128400 | 11/16/2018 | Hacking/IT Incident | Email | No | |
| Center for Vitreo-Retinal Diseases | IL | Healthcare Provider | 20371 | 11/16/2018 | Unauthorized Access/Disclosure | Network Server | No | |
| Georgia Spine & Orthopaedics of Atlanta, LLC | GA | Healthcare Provider | 7012 | 11/16/2018 | Hacking/IT Incident | Email | No | |
| San Mateo Medical Center | CA | Healthcare Provider | 5000 | 11/13/2018 | Unauthorized Access/Disclosure | Other | No | |
| Arthritis & Osteoporosis Consultants of the Carolinas | NC | Healthcare Provider | 3930 | 11/09/2018 | Improper Disposal | Paper/Films | No | |
| American Medical Response, Inc. | TX | Healthcare Provider | 912 | 11/09/2018 | Hacking/IT Incident | Email | Yes | |
| SUNY Upstate Medical University | NY | Healthcare Provider | 1216 | 11/09/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | |
| James R. Etzkorn, MD | MO | Healthcare Provider | 6845 | 11/09/2018 | Hacking/IT Incident | Network Server | No | |
| Utah Healing Center | UT | Healthcare Provider | 543 | 11/07/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Southwest Washington Regional Surgery Center, LLC | WA | Healthcare Provider | 2393 | 11/06/2018 | Hacking/IT Incident | Email | No | |
| Veterans Health Administration | DC | Healthcare Provider | 19254 | 11/06/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| FHN Family Counseling Center | IL | Healthcare Provider | 4458 | 11/03/2018 | Theft | Laptop | No | |
| Rollins Brook Community Hospital | TX | Healthcare Provider | 5019 | 11/02/2018 | Loss | Paper/Films | No | |
| Summit Medical Group | NJ | Healthcare Provider | 525 | 11/02/2018 | Loss | Paper/Films | No | |
| Oprex Surgery (Baytown), L.P. d/b/a Altus Baytown Hospital | TX | Healthcare Provider | 40000 | 11/02/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | |
| Inova Health System | VA | Healthcare Provider | 12331 | 11/02/2018 | Theft | Electronic Medical Record, Paper/Films | No | |
| Dallas County Mental Health Mental Retardation Center dba Metrocare Services | TX | Healthcare Provider | 1804 | 11/01/2018 | Hacking/IT Incident | Email | No | |
| HealthFitness | IL | Business Associate | 614 | 10/28/2018 | Unauthorized Access/Disclosure | Other | Yes | |
| Raley's/Bel Air Mart/Nob Hill General Store, Inc. | CA | Healthcare Provider | 10124 | 10/26/2018 | Theft | Laptop | No | |
| CNO Financial Group, Inc. | IN | Health Plan | 566217 | 10/25/2018 | Unauthorized Access/Disclosure | Other | No | |
| Missouri Department of Mental Health | MO | Healthcare Provider | 9000 | 10/24/2018 | Unauthorized Access/Disclosure | Other | Yes | |
| The Children's Hospital of Philadelphia | PA | Healthcare Provider | 5368 | 10/23/2018 | Hacking/IT Incident | Email | No | |
| Day Kimball Healthcare | CT | Healthcare Provider | 698 | 10/22/2018 | Unauthorized Access/Disclosure | Electronic Medical Record | No | |
| CJ Elmwood Partners, L.P. | IA | Healthcare Provider | 22416 | 10/22/2018 | Hacking/IT Incident | Network Server | No | |
| Jones Eye Center, P.C. | IA | Healthcare Provider | 39605 | 10/22/2018 | Hacking/IT Incident | Network Server | No | |
| Smith Dental Care | TX | Healthcare Provider | 5000 | 10/17/2018 | Hacking/IT Incident | Desktop Computer, Email | No | |
| Yale University | CT | Healthcare Provider | 1102 | 10/17/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| HealthFitness | IL | Business Associate | 550 | 10/15/2018 | Unauthorized Access/Disclosure | Other | Yes | |
| HealthFitness | IL | Business Associate | 1332 | 10/15/2018 | Unauthorized Access/Disclosure | Other | Yes | |
| Employees Retirement System of Texas | TX | Health Plan | 1248263 | 10/15/2018 | Unauthorized Access/Disclosure | Other | No | |
| FirstCare Health Plans | TX | Health Plan | 8056 | 10/12/2018 | Unauthorized Access/Disclosure | Email | No | |
| Catawba Valley Medical Center | NC | Healthcare Provider | 20000 | 10/12/2018 | Hacking/IT Incident | Email | No | |
| West Sound Treatment Center | WA | Healthcare Provider | 2300 | 10/11/2018 | Unauthorized Access/Disclosure | Desktop Computer | No | |
| Blue Cross and Blue Shield of North Carolina (Blue Cross NC) | NC | Health Plan | 631 | 10/11/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| West Sound Treatment Center | WA | Healthcare Provider | 2300 | 10/11/2018 | Theft | Laptop | No | |
| Indiana University School of Medicine | IN | Healthcare Provider | 1431 | 10/11/2018 | Theft | Paper/Films | No | |
| The May Eye Care Center | PA | Healthcare Provider | 30000 | 10/11/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | |
| Hormone Logics | FL | Healthcare Provider | 3000 | 10/10/2018 | Theft | Desktop Computer, Email, Laptop, Network Server, Other Portable Electronic Device, Paper/Films | No | |
| Cigna | CT | Health Plan | 3500 | 10/10/2018 | Hacking/IT Incident | Network Server | No | |
| Minnesota Department of Human Services | MN | Health Plan | 20800 | 10/09/2018 | Hacking/IT Incident | Email | No | |
| Oklahoma Department of Human Services | OK | Health Plan | 813 | 10/08/2018 | Hacking/IT Incident | Paper/Films | Yes | |
| Dr. Robert Carpenter | TX | Healthcare Provider | 3000 | 10/07/2018 | Hacking/IT Incident | Network Server | No | |
| Dr. Amy Woodruff | TX | Healthcare Provider | 10862 | 10/07/2018 | Hacking/IT Incident | Network Server | No | |
| Northwest Surgical Specialists, P.C. | WA | Healthcare Provider | 2050 | 10/05/2018 | Hacking/IT Incident | Email | No | |
| Gold Coast Health Plan | CA | Business Associate | 37005 | 10/05/2018 | Hacking/IT Incident | Email | Yes | |
| National Ambulatory Hernia Institute | CA | Healthcare Provider | 15974 | 10/05/2018 | Hacking/IT Incident | Network Server | No | |
| Health First, Inc | FL | Healthcare Provider | 42000 | 10/05/2018 | Hacking/IT Incident | Email | No | |
| Tillamook Chiropractic, PC | OR | Healthcare Provider | 4058 | 10/03/2018 | Hacking/IT Incident | Desktop Computer, Network Server | No | |
| Reichert Prosthetics & Orthotics, LLC | WI | Healthcare Provider | 3380 | 09/28/2018 | Theft | Other Portable Electronic Device | Yes | |
| Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan | IN | Health Plan | 19320 | 09/28/2018 | Hacking/IT Incident | Email | No | |
| University of Michigan/Michigan Medicine | MI | Healthcare Provider | 3624 | 09/28/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| J&J MEDICAL SERVICE NETWORK INC | TX | Business Associate | 2500 | 09/25/2018 | Hacking/IT Incident | Network Server | Yes | |
| Ransom Memorial Hospital | KS | Healthcare Provider | 14329 | 09/25/2018 | Hacking/IT Incident | Email | No | |
| Personal Assistance Services of Colorado, LLC | CO | Healthcare Provider | 1839 | 09/20/2018 | Hacking/IT Incident | Email | No | |
| Pulse Systems, Inc. | KS | Business Associate | 722 | 09/19/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| The University of Texas Health Science Center at Houston | TX | Healthcare Provider | 500 | 09/18/2018 | Theft | Paper/Films | No | |
| Southwest Oregon IPA | OR | Health Plan | 1449 | 09/18/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Independence Blue Cross, LLC | PA | Business Associate | 16762 | 09/17/2018 | Unauthorized Access/Disclosure | Other | Yes | |
| Guardant Health, Inc. | CA | Healthcare Provider | 1112 | 09/14/2018 | Hacking/IT Incident | Email | No | |
| WellCare Health Plans, Inc. | FL | Health Plan | 26942 | 09/14/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Blue Cross & Blue Shield of Rhode Island | RI | Health Plan | 1567 | 09/13/2018 | Unauthorized Access/Disclosure | Paper/Films | Yes | |
| Leominster Dermatology LLP | MA | Healthcare Provider | 500 | 09/13/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Total Diagnostix II, LLC | TX | Healthcare Provider | 855 | 09/12/2018 | Unauthorized Access/Disclosure | Network Server | No | |
| Simonian Sports Medicine Clinic, A Medical Corporation | CA | Healthcare Provider | 1541 | 09/10/2018 | Unauthorized Access/Disclosure | Network Server | Yes | |
| Ohio Living | OH | Healthcare Provider | 6510 | 09/07/2018 | Hacking/IT Incident | Email | No | |
| TMC HealthCare | AZ | Healthcare Provider | 1776 | 09/07/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Rockdale Blackhawk, LLC d/b/a Little River Healthcare | TX | Healthcare Provider | 1494 | 09/07/2018 | Unauthorized Access/Disclosure | Electronic Medical Record, Other | No | |
| Boston Health Care for the Homeless Program | MA | Healthcare Provider | 861 | 09/07/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Catholic Charities Neighborhood Services, Inc. | NY | Healthcare Provider | 565 | 09/07/2018 | Hacking/IT Incident | Email | No | |
| J.A. Stokes Ltd. | NV | Healthcare Provider | 3200 | 09/05/2018 | Hacking/IT Incident | Desktop Computer, Electronic Medical Record, Network Server | No | |
| Nebraska Department of Health and Human Services | NE | Health Plan | 516 | 09/04/2018 | Unauthorized Access/Disclosure | Paper/Films | No | |
| Reliable Respiratory | MA | Healthcare Provider | 21311 | 09/01/2018 | Hacking/IT Incident | Email | No | |
| Port City Operating Company doing business as St. Joseph's Medical Center | CA | Healthcare Provider | 4984 | 08/31/2018 | Loss | Other Portable Electronic Device | Yes | |
| Carpenters Benefit Funds of Philadelphia | PA | Health Plan | 20015 | 08/31/2018 | Hacking/IT Incident | Email | No | |
| Hopebridge | IN | Healthcare Provider | 1411 | 08/31/2018 | Hacking/IT Incident | Email | No | |
| United Methodist Homes | NY | Healthcare Provider | 843 | 08/31/2018 | Unauthorized Access/Disclosure | Email | No | |
| David G. Simon, DMD, PA, d/b/a Simon Orthodontics | FL | Healthcare Provider | 15129 | 08/31/2018 | Hacking/IT Incident | Network Server | No | |