HHS OCR breach register

Breaches of unsecured protected health information affecting 500 or more individuals, as reported to the Office for Civil Rights. Refreshed daily from the OCR breach portal (about this source).

Updated 18 hours ago ()

What this means for you

598 breach reports to OCR so far in 2026; Hacking/IT Incident leads at 86%, and Network Server is the most common location of PHI (72%).

Sign up free and set your program profile to see organizations like yours.

Reports per month

Last 24 months by submission date

By type

Last 24 months
8,049 breach reports
Showing 11 to 20. Open an entity for the full report; narrower screens show fewer columns.
EntityStateEntity typeIndividualsSubmittedBreach typeLocation of PHIBAStatus
The Kenaitze Indian TribeAKHealthcare Provider9,319Sep 25, 2026Hacking/IT IncidentNetwork ServerNoUnder investigation
Ultramobile ImagingNYHealthcare Provider75,000Sep 25, 2026Hacking/IT IncidentNetwork Server, OtherNoUnder investigation
Center for bone and Joint Surgery of the Palm BeachesFLHealthcare Provider5,461Sep 25, 2026Hacking/IT IncidentNetwork Server, OtherNoUnder investigation
Source Care Management, LLC d/b/a NextStep CareGAHealthcare Provider685Sep 25, 2026Unauthorized Access/DisclosurePaper/FilmsNoUnder investigation
Vascular Associates of South AlabamaALHealthcare Provider623Sep 25, 2026Unauthorized Access/DisclosureEmailNoUnder investigation
Kostelic and Associates 3PLLCNCHealthcare Provider535Sep 25, 2026Hacking/IT IncidentEmailNoUnder investigation
New York Psychiatric Services P.C.NYHealthcare Provider777Sep 23, 2026Hacking/IT IncidentNetwork ServerNoUnder investigation
Ridgeway Pharmacy, LtdMTHealthcare Provider258,920Sep 21, 2026Hacking/IT IncidentNetwork Server, OtherYesUnder investigation
Imagine the PossibilitiesIAHealth Plan1,693Sep 21, 2026Hacking/IT IncidentNetwork ServerYesArchived
Woodlawn HospitalINHealthcare Provider742Sep 21, 2026Hacking/IT IncidentEmailNoUnder investigation
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.