DC Health Care Finance reports unauthorized access to nearly 400,000 records
The Department of Health Care Finance for the District of Columbia filed a breach report with HHS OCR on September 3, 2026. The filing covers 399,086 individuals whose protected health information was involved in an unauthorized access or disclosure. The compromised data resided in an electronic medical record system. As a health plan, this entity is a covered entity under HIPAA. This submission date reflects when the report was filed with the government, not necessarily when the incident occurred or was discovered. Healthcare administrators should note the scale of this event involving a major public health plan.