U.S. Department of Health and Human Services
Office for Civil Rights
Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information

Person sitting at a laptop


As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary:

Cases Currently Under Investigation
This page lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.
  Show Advanced Options

ExcelPDFCSVXML
Breach Report Results
Expand AllName of Covered EntityStateCovered Entity TypeIndividuals AffectedBreach Submission DateType of BreachLocation of Breached Information
Maximus, Inc.VABusiness Associate452904/25/2025Unauthorized Access/DisclosureNetwork ServerYes
Carlton County Public Health and Human ServicesMNHealthcare Provider350204/25/2025Hacking/IT IncidentEmailNo
Brainard Surgery Center LLCOHHealthcare Provider50104/24/2025Hacking/IT IncidentNetwork ServerNo
Drug and Alcohol Treatment Services, Inc.PAHealthcare Provider2221504/24/2025Hacking/IT IncidentNetwork ServerNo
Orthopaedic Specialists of ConnecticutCTHealthcare Provider2254104/23/2025Hacking/IT IncidentNetwork ServerNo
Marc Irwin Sharfman, M.D., P.A.FLHealthcare Provider65004/23/2025Hacking/IT IncidentNetwork ServerYes
Charleston Fire DepartmentWVHealthcare Provider258304/22/2025Hacking/IT IncidentEmailNo
Onsite MammographyMABusiness Associate35726504/21/2025Hacking/IT IncidentEmailYes
Rheumatology Associates of BaltimoreMDHealthcare Provider2896804/21/2025Unauthorized Access/DisclosureNetwork ServerYes
Langdon Prairie HealthNDHealthcare Provider115204/18/2025Unauthorized Access/DisclosureEmailNo
90 Degree Benefits, Inc. – St. PaulWIBusiness Associate126804/18/2025Hacking/IT IncidentEmailYes
WPM Pathology Laboratory, Chartered KSBusiness Associate569404/17/2025Hacking/IT IncidentNetwork ServerYes
HEALTH AND WELLNESS OF TEXASTXHealthcare Provider50004/16/2025Unauthorized Access/DisclosureElectronic Medical Record, EmailNo
Thrive Physical Therapy PartnersILBusiness Associate98604/16/2025Hacking/IT IncidentEmailYes
Thrive Physical Therapy PartnersILBusiness Associate340304/16/2025Hacking/IT IncidentEmailYes
Highland Rivers Behavioral HealthGAHealthcare Provider225304/15/2025Hacking/IT IncidentNetwork ServerYes
The City of Long Beach, CACAHealthcare Provider25819104/14/2025Hacking/IT IncidentNetwork ServerNo
Alternate Solutions Health Network, LLCOHHealthcare Provider9358904/14/2025Hacking/IT IncidentEmailNo
Scharnhorst Ast Kennard Griffin PCMOBusiness Associate63904/14/2025Hacking/IT IncidentEmail, OtherYes
Bell Ambulance, Inc.WIHealthcare Provider11400004/14/2025Hacking/IT IncidentNetwork ServerNo
Bassett Healthcare NetworkNYHealthcare Provider556504/14/2025Unauthorized Access/DisclosureElectronic Medical Record, Email, Laptop, Paper/FilmsNo
AHS Sherman LLC dba AHS Sherman Medical CenterTXHealthcare Provider90804/14/2025Unauthorized Access/DisclosureEmailNo
Health Care Service CorporationILHealth Plan294404/13/2025Unauthorized Access/DisclosureOtherNo
Blue Cross and Blue Shield of TexasILHealth Plan1208604/13/2025Unauthorized Access/DisclosureOtherNo
Blue Cross and Blue Shield of OklahomaILHealth Plan102004/13/2025Unauthorized Access/DisclosureOtherNo
Blue Cross and Blue Shield of IllinoisILHealth Plan690304/13/2025Unauthorized Access/DisclosureOtherNo
Summit Healthcare Medical AssociatesAZHealthcare Provider186104/11/2025Unauthorized Access/DisclosureElectronic Medical RecordNo
Yale New Haven Health SystemCTHealthcare Provider555670204/11/2025Hacking/IT IncidentNetwork ServerNo
Whitman County Public Hospital District No. 3WAHealthcare Provider6345304/11/2025Hacking/IT IncidentNetwork ServerNo
Altior Healthcare, LLCCAHealthcare Provider100204/11/2025Hacking/IT IncidentEmailNo
Endue SoftwareMEBusiness Associate11802804/11/2025Hacking/IT IncidentNetwork ServerYes
Boudreaux’s Specialty Compounding PharmacyLAHealthcare Provider627004/10/2025Hacking/IT IncidentNetwork ServerNo
Jacksonville Medical Care ARHealthcare Provider626204/10/2025Hacking/IT IncidentNetwork ServerNo
Cabot Medical Care ARHealthcare Provider2146704/10/2025Hacking/IT IncidentNetwork ServerNo
RHEA MEDICAL CENTERTNHealthcare Provider830904/10/2025Unauthorized Access/DisclosureNetwork ServerYes
Erlanger HealthTNHealthcare Provider319304/10/2025Hacking/IT IncidentNetwork ServerYes
Kelly & Associates Insurance Group, Inc. MDBusiness Associate3223404/09/2025Hacking/IT IncidentNetwork ServerYes
Blue Shield of CaliforniaCABusiness Associate470000004/09/2025Hacking/IT IncidentNetwork ServerYes
California Correctional Health Care ServicesCAHealthcare Provider410504/09/2025Unauthorized Access/DisclosureEmailNo
Alabama Ophthalmology AssociatesALHealthcare Provider13157604/08/2025Hacking/IT IncidentDesktop Computer, Network ServerNo
Benefits Partner, LLC dba Salus Group*MIBusiness Associate4017704/08/2025Hacking/IT IncidentEmailYes
Northeast Georgia Health SystemGAHealthcare Provider2100004/08/2025Hacking/IT IncidentNetwork ServerYes
Hebrew Home for Aged Disabled d/b/a San Francisco Campus for Jewish LivingCAHealthcare Provider256804/07/2025Hacking/IT IncidentEmailNo
Friendship House, Inc.NEHealthcare Provider50104/04/2025Hacking/IT IncidentNetwork ServerNo
Loretto Hospital ILHealthcare Provider50104/04/2025Hacking/IT IncidentNetwork ServerNo
Central Texas Pediatric Orthopedics TXHealthcare Provider14000004/04/2025Hacking/IT IncidentNetwork ServerNo
Worthington Steel Health and Welfare PlanOHHealth Plan386404/04/2025Hacking/IT IncidentNetwork ServerNo
Hamilton County GovernmentTNHealthcare Provider1408104/03/2025Hacking/IT IncidentNetwork ServerYes
Gilead Sciences, Inc.CAHealth Plan1222404/02/2025Unauthorized Access/DisclosurePaper/FilmsYes
Dameron HospitalCAHealthcare Provider21070604/02/2025Hacking/IT IncidentNetwork ServerNo
True Dental Care For Kids and Adults LLCPAHealthcare Provider1764004/02/2025Hacking/IT IncidentNetwork ServerNo
Health Services LLCOHHealthcare Provider240004/01/2025Hacking/IT IncidentNetwork ServerNo
Gardner Health ServicesCAHealthcare Provider2600004/01/2025Unauthorized Access/DisclosurePaper/FilmsYes
Howard Health Systems dba Howard Memorial HospitalARHealthcare Provider1770303/31/2025Hacking/IT IncidentNetwork ServerNo
Family Centers, Inc.CTHealthcare Provider50103/31/2025Hacking/IT IncidentNetwork ServerNo
North Hudson Community Action CorporationNJHealthcare Provider50103/28/2025Hacking/IT IncidentNetwork ServerNo
Sentara HealthVAHealthcare Provider162003/28/2025Unauthorized Access/DisclosureElectronic Medical RecordNo
Community Dental Care, Inc. MNHealthcare Provider13490303/28/2025Hacking/IT IncidentNetwork ServerNo
Samaritan's PurseNCHealth Plan235003/28/2025Hacking/IT IncidentNetwork ServerYes
Apria Healthcare LLCINHealthcare Provider71303/28/2025Unauthorized Access/DisclosurePaper/FilmsNo
Mayo ClinicMNHealthcare Provider186903/28/2025Unauthorized Access/DisclosureEmailNo
Frederick HealthMDHealthcare Provider93432603/28/2025Hacking/IT IncidentNetwork ServerNo
SimonMed ImagingAZHealthcare Provider50003/27/2025Hacking/IT IncidentNetwork ServerNo
Georgia UrologyGAHealthcare Provider1239803/27/2025Hacking/IT IncidentEmailNo
Mercer County Joint Township Community HospitalOHHealthcare Provider8854103/26/2025Hacking/IT IncidentNetwork ServerNo
Western Wayne Family Physicians MIHealthcare Provider6200003/26/2025Hacking/IT IncidentNetwork ServerNo
Concord OrthopaedicsNHHealthcare Provider7281503/25/2025Hacking/IT IncidentOtherNo
Bigfork Valley HospitalMNHealthcare Provider849603/25/2025Hacking/IT IncidentEmailNo
William F Rinehart DMD PA SCHealthcare Provider2500003/24/2025Hacking/IT IncidentNetwork ServerNo
Fundamental Administrative Services, LLCMDBusiness Associate50003/21/2025Hacking/IT IncidentNetwork ServerYes
PAR RehabMIHealthcare Provider430003/21/2025Hacking/IT IncidentEmailNo
AmeriHealth Caritas Louisiana LAHealth Plan155203/21/2025Unauthorized Access/DisclosureNetwork Server, OtherNo
Pineland Community Service BoardGAHealthcare Provider50103/20/2025Hacking/IT IncidentNetwork ServerNo
Graphium HealthUTHealthcare Provider118703/20/2025Unauthorized Access/DisclosurePaper/FilmsYes
Meigs County Emergency Medical ServicesOHHealthcare Provider580203/20/2025Hacking/IT IncidentEmailNo
Special Tree Ltd.MIHealthcare Provider382003/20/2025Hacking/IT IncidentNetwork ServerNo
Millennium Home Health CareOKHealthcare Provider474303/19/2025Hacking/IT IncidentNetwork ServerNo
The Pavilion at HealthPark, LLC dba Park Royal HospitalFLHealthcare Provider934903/18/2025Hacking/IT IncidentEmailNo
Dove HealthcareWIHealthcare Provider1625503/18/2025Hacking/IT IncidentNetwork ServerNo
Presbyterian Health PlanNMHealth Plan710003/18/2025Hacking/IT IncidentEmailNo
Heart to Heart Hospice Holdings, LLCTXHealthcare Provider1903403/18/2025Hacking/IT IncidentNetwork ServerNo
Lena Pope Home Inc.TXHealthcare Provider352303/17/2025Hacking/IT IncidentEmailNo
Klickitat Valley HealthWAHealthcare Provider53103/14/2025Hacking/IT IncidentNetwork ServerNo
Welts, White, & Fontaine PCNHBusiness Associate50003/14/2025Hacking/IT IncidentNetwork ServerYes
CDHA Management, LLC and Spark DSO, LLC dba Chord Specialty Dental PartnersTNHealthcare Provider17343003/14/2025Hacking/IT IncidentEmailNo
Baylor Scott & White Texas Spine & Joint HospitalTXHealthcare Provider164003/14/2025Hacking/IT IncidentEmailNo
Lake Psychological ServicesPAHealthcare Provider98703/14/2025Hacking/IT IncidentNetwork ServerNo
Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy NYHealthcare Provider234803/14/2025Hacking/IT IncidentNetwork ServerNo
Columbia Eye Clinic SCHealthcare Provider50003/14/2025Hacking/IT IncidentNetwork ServerNo
Topy America Inc.KYHealth Plan182703/14/2025Hacking/IT IncidentNetwork ServerNo
CHC Solutions, Inc. PAHealthcare Provider79403/13/2025Hacking/IT IncidentEmailNo
PACE Greater New OrleansLAHealthcare Provider71503/13/2025Unauthorized Access/DisclosureEmailNo
OCH Regional Medical Center, MSMSHealthcare Provider5126603/11/2025Unauthorized Access/DisclosureOtherNo
Nice Healthcare Management Company, IncMNHealthcare Provider1000003/10/2025Hacking/IT IncidentNetwork ServerYes
Vision Upright MRICAHealthcare Provider2303103/10/2025Unauthorized Access/DisclosureNetwork ServerNo
Rocky Mountain Regional VA Medical CenterCOHealthcare Provider111503/10/2025Unauthorized Access/DisclosureEmailNo
St. Charles County Ambulance DistrictMOHealthcare Provider126503/07/2025Hacking/IT IncidentEmailNo
Sunflower Medical Group, P.A.KSHealthcare Provider22096803/07/2025Hacking/IT IncidentNetwork ServerNo
Hand & Plastic Surgery Centre, PLCMIHealthcare Provider1984603/07/2025Hacking/IT IncidentNetwork ServerNo
United Seating and Mobility, LLC d/b/a Numotion TNHealthcare Provider49432603/07/2025Hacking/IT IncidentEmailNo
  
U.S. Department of Health & Human Services - 200 Independence Avenue, S.W. - Washington, D.C. 20201 HHS Vulnerability Disclosure