From ClingantryAI Health Regulator News

iRhythm Technologies, Inc., a healthcare provider in California, submitted a breach report to HHS OCR on 10/03/2026. The incident involved a hacking/IT incident targeting a network server. This breach potentially exposed the protected health information of 8,179,772 individuals. As a covered entity, iRhythm is responsible for notifying affected individuals and the government. Healthcare administrators should review their own vendor contracts and security protocols, especially if they interact with iRhythm or similar device manufacturers, to ensure adequate safeguards are in place against similar cyber threats.

Atlantic Digestive Specialists, PLLC, a healthcare provider in New Hampshire, submitted a breach report to HHS OCR on 09/30/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 173,853 individuals were affected. This submission date reflects when the report was filed with the regulator, not necessarily when the breach occurred or was discovered. Healthcare administrators should note that this specific entity is a provider, not a business associate, though the scale of data exposure is significant. No further details on the nature of the hack or specific data types were included in the public record.

Tarter Krinsky & Drogin LLP, a business associate based in New York, submitted a breach filing to HHS OCR on 09/15/2026. The incident involved a hacking/IT incident targeting a network server. The breach potentially exposed the protected health information of 196,645 individuals. As a business associate, this entity is responsible for reporting the incident to its covered entity partners, who must then report to HHS if required. Administrators should verify if their organization is one of the covered entities linked to this business associate to assess potential notification obligations for their patients.

Leggett & Platt, Incorporated Employee Benefit Plan, a health plan in Missouri, reported a hacking/IT incident involving its network server. The breach impacts 61,702 individuals. HHS OCR received the filing on 09/15/2026. This submission date is when the report was filed, not necessarily when the breach occurred or was discovered. Health plans must notify affected individuals and HHS for breaches involving unsecured protected health information. Administrators should verify if their vendors or partners are similarly exposed to network server vulnerabilities.

Healthcare administrators should note that Clover Health, a health plan operating in Minnesota, recently reported a significant data breach to HHS OCR. The incident, classified as a Hacking/IT Incident, affected 138,677 individuals. The breach involved information stored on a network server and other locations. This filing, submitted on September 14, 2026, highlights the ongoing cybersecurity risks faced by health plans and other healthcare entities. Organizations should review their own security protocols to protect patient data from similar threats.

The Department of Health Care Finance for the District of Columbia filed a breach report with HHS OCR on September 3, 2026. The filing covers 399,086 individuals whose protected health information was involved in an unauthorized access or disclosure. The compromised data resided in an electronic medical record system. As a health plan, this entity is a covered entity under HIPAA. This submission date reflects when the report was filed with the government, not necessarily when the incident occurred or was discovered. Healthcare administrators should note the scale of this event involving a major public health plan.

Osceola Mental Health Inc. (dba Park Place Behavioral Healthcare), a healthcare provider in Florida, filed a breach report with HHS OCR on 08/26/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 71,702 individuals were affected. This submission date reflects when the report was sent to the regulator, not when the breach occurred. Healthcare administrators in Florida should review their own cybersecurity controls, particularly for network servers, to ensure adequate protection against similar unauthorized access events.

Kern Psychiatric Health and Wellness Center, Inc, a healthcare provider in California, filed a report with HHS OCR on 08/21/2026 for a hacking/IT incident. The breach involved unauthorized access to a network server and impacted 51,352 individuals. This submission date reflects when the entity notified the regulator, not when the incident occurred. Healthcare administrators should review their own cybersecurity controls and breach notification procedures to ensure readiness for similar IT security events.

Home health provider AdaptHealth, LLC filed a breach report with HHS OCR on August 14, 2026, disclosing that a hacking/IT incident compromised the protected health information of 4,115,802 individuals. The unauthorized access occurred on a network server. As a healthcare provider, AdaptHealth is a covered entity under HIPAA. This filing date represents when the report was submitted to the government, not necessarily when the breach occurred or was discovered. Healthcare administrators should monitor for further details regarding the specific data elements exposed and any potential impact on shared patient records.

A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons, a healthcare provider in Arkansas, submitted a reportable breach filing to HHS OCR on 07/31/2026. The incident involved a hacking/IT incident affecting 64,831 individuals. The breached information was located on a network server. This submission date reflects when the report was filed, not when the breach occurred. Providers and business associates should review their own cybersecurity controls and breach notification procedures to ensure readiness for similar incidents.

CareCloud, Inc., a business associate based in New Jersey, reported a hacking/IT incident to HHS OCR on July 24, 2026. The breach affected 3,756,469 individuals, with data compromised on a network server. Because CareCloud is a business associate, any healthcare providers, health plans, or other covered entities that use its services may need to verify if their patient data was included in this incident. Organizations should review their contracts and communications from CareCloud to determine exposure. This filing date is when the report was submitted to the regulator, not necessarily when the breach occurred or was discovered.

A Business Associate named Unlimited Technology Systems, LLC reported a hacking/IT incident to HHS OCR on July 21, 2026. The filing indicates that 3,803,750 individuals were affected. The unauthorized access occurred on a network server. Because the entity is a Business Associate, your organization may be impacted if you contract with this vendor for services involving protected health information. Review your vendor contracts and security logs to determine if you are among the affected clients. This submission date is when the report was filed, not necessarily when the breach occurred or was discovered.

One Medical Group, Inc., a healthcare provider in California, filed a breach report with HHS OCR on July 17, 2026. The filing describes a hacking/IT incident that compromised the protected health information of 153,174 individuals. The breached data was located on a network server. This submission date marks when the report was sent to regulators, not necessarily when the breach occurred or was discovered. Healthcare administrators should monitor their own vendor contracts and security protocols, as large-scale provider breaches often signal broader industry threats. While this specific incident involves One Medical Group, the scale highlights the ongoing risk of network server vulnerabilities in healthcare IT infrastructure.

DentaQuest, LLC, a health plan operating in Massachusetts, filed a report with HHS OCR on July 16, 2026, disclosing a significant security incident. The filing indicates that a hacking/IT incident compromised data stored on a network server, potentially exposing the protected health information of 15 million individuals. This submission date reflects when the report was sent to regulators, not necessarily when the breach occurred. Healthcare administrators should monitor this case closely, as large-scale breaches often signal broader industry vulnerabilities. While DentaQuest is a covered entity, vendors serving health plans should review their own security protocols to ensure they are not similarly exposed to network-level attacks.

A healthcare provider in Massachusetts has filed a report with HHS OCR regarding a hacking/IT incident. The entity, operating as Brown Health Medical Group-MA, states that the breach impacted 311,760 individuals. The unauthorized access occurred on a network server. This filing was submitted to the government on July 16, 2026. Healthcare administrators should note that this is a covered entity report, distinct from a business associate filing. While the specific data elements are not detailed here, the scale suggests significant patient data exposure. Monitor for further disclosures from the provider regarding notification timelines and remediation steps.

Madera Community Hospital, a healthcare provider in California, filed a breach report with HHS OCR on July 13, 2026. The filing describes a hacking/IT incident involving a network server. The breach potentially exposed the protected health information of 150,810 individuals. This submission date marks when the report was sent to regulators, not when the incident occurred. Healthcare administrators should note the scale of this exposure as a reminder of the risks associated with network server vulnerabilities. While this specific event affects a single provider, it highlights the ongoing threat of cyberattacks in the healthcare sector. Monitor your own systems for similar indicators of compromise.

A Florida-based business associate, Operation PAR, Inc., filed a report with HHS OCR regarding a hacking/IT incident. The filing, submitted on June 25, 2026, indicates that 145,714 individuals were affected. The breach occurred on a network server. Because this entity is a business associate, its covered entities (such as health plans or providers) may need to verify their own notification obligations. Administrators should check if they contract with this vendor and review their business associate agreements for specific reporting requirements.

Chicago Family Health Center, a healthcare provider in Illinois, submitted a breach report to HHS OCR on 06/22/2026. The incident involved a hacking or IT incident targeting a network server. The filing indicates that 90,000 individuals were affected. This submission date marks when the report was filed, not when the breach occurred. Providers in Illinois should review their own cybersecurity controls and incident response plans. The organization is classified as a healthcare provider, meaning it has direct obligations under HIPAA. Administrators should ensure their teams are aware of this event to reinforce vigilance against similar network-based attacks.

A major healthcare provider, Centers Lab NJ LLC, has reported a significant data breach to the HHS Office for Civil Rights. The incident involved a hacking/IT incident targeting a network server, compromising the records of 542,377 individuals. The breach was officially filed on June 18, 2026. Hospital administrators should monitor this case closely as a reminder of the risks associated with network security vulnerabilities. While this specific report does not detail immediate operational changes for other facilities, it underscores the critical need for robust cybersecurity measures to protect patient data from unauthorized access.

HHS OCR received a breach filing from the Gay & Lesbian Community Services Center of Orange County, Inc., a healthcare provider in california. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 75,532 individuals were affected. The submission date recorded is 06/05/2026. This date reflects when the report was submitted to the regulator, not when the breach occurred or was discovered. Healthcare administrators should review this filing to understand the scope of incidents involving community health centers and ensure their own incident response protocols align with current reporting timelines.

A business associate named Xsolis, Inc. filed a breach report with HHS OCR on June 5, 2026, disclosing a hacking/IT incident that compromised the data of 1,396,519 individuals. The unauthorized access occurred on a network server. Because Xsolis is a business associate, its clients—likely healthcare providers or health plans—may also have reporting obligations to their own patients or members. Administrators should verify if their organization uses Xsolis services and review internal protocols for handling third-party breach notifications. This filing date reflects when the report was submitted to the government, not necessarily when the breach occurred or was discovered.

Mid Florida Dermatology & Plastic Surgery, a healthcare provider in Florida, submitted a breach report to HHS OCR on 05/01/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 85,585 individuals were affected. This submission date reflects when the report was filed with the government, not necessarily when the breach occurred or was discovered. Healthcare administrators in Florida should review their own security controls against similar network server vulnerabilities. This entry concerns a covered entity; business associates serving this provider should ensure their own incident response plans align with these findings.

Western Orthopaedics, P.C., a healthcare provider in Colorado, filed a breach notification with HHS OCR on May 1, 2026. The filing reports a hacking/IT incident that compromised the protected health information of 113,330 individuals. The unauthorized access occurred on the organization's network server. This submission date marks when the report was sent to the regulator, not necessarily when the breach occurred or was discovered. As a covered entity, Western Orthopaedics is required to report breaches affecting 500 or more individuals within 60 days of discovery. Healthcare administrators should monitor for similar IT incidents and ensure their own incident response plans are current.

HHS OCR has accepted a reportable breach filing from Hematology Oncology Consultants, a healthcare provider in Michigan. The incident involved a hacking/IT incident affecting data stored on a network server. The filing indicates that 62,972 individuals were impacted. The submission date recorded with the Office for Civil Rights is 04/24/2026. This date reflects when the report was filed, not when the breach occurred or was discovered. Providers and vendors should monitor OCR updates for further details on enforcement actions or required corrective measures.

GrayRobinson, P.A., a business associate based in Florida, submitted a breach filing to HHS OCR on 04/24/2026. The incident involved a hacking/IT incident targeting a network server. The breach impacts 54,131 individuals. Because GrayRobinson acts as a business associate, its obligations differ from those of a covered entity. Healthcare administrators should review their contracts with this vendor to ensure compliance. The filing date is the submission date, not the discovery date. No further details on the scope of data were provided in the source.

Laurel Eye Clinic in Pennsylvania has reported a significant cybersecurity incident to the HHS Office for Civil Rights. The breach involved a hacking or IT incident targeting the clinic's network server. This event potentially exposed the protected health information of 145,221 individuals. The report was submitted on April 22, 2026. Hospital administrators should review their own network security protocols to ensure similar vulnerabilities are addressed. While this specific incident is contained to one provider, it highlights the ongoing risk of server-based attacks in healthcare settings. Ensure your IT teams are monitoring for unauthorized access and that incident response plans are up to date.

A healthcare provider in South Carolina, Innovative Scientific Solutions, LLC, reported a hacking/IT incident to HHS OCR on April 17, 2026. The breach affected 143,842 individuals after unauthorized access to a network server. This filing date reflects when the report was submitted, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor for further details regarding the specific data compromised and any required notifications to affected patients or partners.

Rocky Mountain Associated Physicians, P.C., a healthcare provider in Utah, submitted a breach report to HHS OCR on 04/03/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 50,640 individuals were affected. This submission date reflects when the report was filed with the government, not necessarily when the breach occurred or was discovered. Healthcare administrators should review their own cybersecurity controls, particularly for network servers, to ensure they are protected against similar unauthorized access events.

Erie Family Health Centers, a healthcare provider in Illinois, submitted a breach notification to HHS OCR on March 27, 2026. The filing reports a hacking/IT incident that compromised the protected health information of 570,000 individuals. The breach occurred on a network server. This submission date reflects when the report was filed with the regulator, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor for further details regarding the specific data types involved and any required notifications to affected patients.

Coastal Carolina Health Care, PA in North Carolina has reported a significant data breach to the Department of Health and Human Services. The incident involved a hacking or IT incident targeting a network server. This breach affects 110,304 individuals, exposing their protected health information. The report was submitted on March 24, 2026. Hospital administrators should review their own cybersecurity protocols to ensure similar vulnerabilities are not present in their systems. While this specific incident is contained to Coastal Carolina Health Care, it serves as a reminder of the ongoing risks posed by cyber threats to healthcare networks. Ensure your IT teams are monitoring for unusual activity and that incident response plans are up to date.

Navia Benefit Solutions, Inc., a Washington-based business associate for employee benefits (FSA, HSA, HRA, COBRA, DCAP), reported a hacking/IT incident to HHS OCR on March 18, 2026. The filing lists 2,151,330 individuals affected, but external reports from the Maine Attorney General and other sources cite a total of approximately 2,697,540 individuals. The breach involved data on a network server and other locations. Because Navia serves employers rather than hospitals, health plans, self-insured employers, and benefits administrators should verify if they use Navia. If so, review your vendor contracts and assess potential exposure to your members or employees. This filing date is when the report was submitted to OCR, not when the breach occurred.

OpenLoop Health, Inc., a business associate based in Iowa, reported a hacking/IT incident to HHS OCR on March 17, 2026. The filing indicates that 716,000 individuals were affected by the unauthorized access to data stored on a network server. Because OpenLoop Health is a business associate, your organization may be impacted if you use their services for administrative or clinical support. Review your contracts and communication channels to determine if this incident affects your operations or requires you to notify your own patients. The submission date reflects when the report was filed with the government, not necessarily when the breach occurred.

IPPC Inc., IPPC of New York LLC, and Innovative Pharmacy LLC (collectively IPPC) filed a breach report with HHS OCR on February 27, 2026. The New Jersey-based healthcare provider reported a hacking/IT incident involving its network server. The filing indicates that 133,862 individuals were affected by the unauthorized access. This submission date marks when the report was sent to regulators, not necessarily when the breach occurred or was discovered. Healthcare administrators should monitor their own vendor relationships and security protocols, as large-scale provider breaches often signal broader industry threats.

National Association on Drug Abuse Problems, a healthcare provider in New York, filed a breach report with HHS OCR on 02/13/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 90,000 individuals were affected. This submission date reflects when the report was sent to the government, not when the breach occurred. Healthcare administrators should review this filing to understand the scope of incidents involving similar provider types. The data was stored on a network server, highlighting the risks associated with centralized digital storage systems for protected health information.

Academic Urology & Urogynecology of Arizona, a healthcare provider in Arizona, submitted a breach report to HHS OCR on 02/13/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 73,281 individuals were affected. This submission date reflects when the report was filed, not when the breach occurred. Healthcare administrators should review this filing to understand the scope of potential exposure in their region and ensure their own security controls are robust against similar network-based threats.

Counseling Center of Wayne & Holmes Counties, a healthcare provider in Ohio, submitted a breach report to HHS OCR on 02/09/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 83,354 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred or was discovered. Healthcare administrators in Ohio should review their own security controls for network servers and ensure their incident response plans are current. This entry concerns a specific provider and does not impose new obligations on other entities beyond standard HIPAA compliance requirements.

TriZetto Provider Solutions, a business associate serving healthcare providers, reported a hacking/IT incident to HHS OCR. The filing, submitted on February 6, 2026, states that 3,433,965 individuals were affected. The breach occurred on a network server. Because TriZetto is a business associate, your organization may be impacted if you use their services for claims processing or other administrative functions. Review your contracts and contact your vendor management team to confirm whether your entity is among those affected and to understand any required next steps.

The Minnesota Department of Human Services, a state health plan, filed a breach report with HHS OCR on January 16, 2026. The filing covers 303,965 individuals and cites unauthorized access or disclosure of data stored on a network server. Healthcare administrators should note that this is a reportable breach involving a large number of people. The record does not specify whether the access was external or internal, only that it was unauthorized. Monitor for further updates from the agency regarding remediation steps or additional notifications.

Insightin Health, Inc., a business associate based in Maryland, filed a report with HHS OCR on January 16, 2026, disclosing a hacking/IT incident. The breach compromised the protected health information of 1,949,534 individuals. The unauthorized access occurred on a network server. Because Insightin Health is a business associate, your organization may be impacted if you contract with them for services such as claims processing or data analytics. Review your vendor contracts and assess whether you receive data from this entity. If so, contact your legal and compliance teams to determine if you need to notify your own patients or take additional risk mitigation steps.

North East Medical Services, a healthcare provider in California, submitted a breach report to HHS OCR on 12/18/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 91,513 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred. Providers in California should review their cybersecurity posture, particularly regarding network servers, to ensure adequate protection against unauthorized access.

Brevard Skin and Cancer Center, a healthcare provider in Florida, submitted a breach report to HHS OCR on 12/12/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 54,570 individuals were affected. This submission date reflects when the report was filed with the regulator, not necessarily when the breach occurred or was discovered. Healthcare administrators in Florida should review this filing to understand the scope of potential exposure in their region and ensure their own security controls against similar network-based threats are robust.

MedStar Health, Inc., a healthcare provider in Maryland, submitted a breach report to HHS OCR on 12/03/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 64,332 individuals were affected. This submission date reflects when the report was filed, not when the breach occurred. Providers and business associates should review their own security logs and incident response plans to ensure they can meet reporting timelines if similar events occur.

Spindletop Center, a healthcare provider in Texas, submitted a reportable breach filing to HHS OCR on 11/28/2025. The incident involved a hacking/IT incident targeting a network server. The breach affects 88,863 individuals. This submission date reflects when the report was filed, not when the breach occurred. Providers in Texas should review their cybersecurity controls and incident response plans to ensure readiness for similar network-based threats.

Persante Health Care, a business associate operating in New Jersey, filed a breach notification with HHS OCR on November 26, 2025. The filing reports a hacking/IT incident involving a network server that exposed the protected health information of 111,815 individuals. Because Persante is a business associate, this incident likely impacts the covered entities—such as hospitals, clinics, or health plans—that rely on its services. Healthcare administrators should check whether their organization uses Persante’s services and review any communications from the vendor regarding next steps for affected patients. The submission date reflects when the report was filed with regulators, not necessarily when the breach occurred or was discovered.

Central Kansas Mental Health Center, a healthcare provider in Kansas, filed a reportable breach notice with HHS OCR on 11/25/2025. The incident involved a hacking/IT incident affecting data stored on a network server. Approximately 80,860 individuals were impacted. This submission date reflects when the filing was made, not when the breach occurred. Providers and vendors should review their own security logs for similar unauthorized access patterns. The organization is classified as a covered entity, meaning it must comply with HIPAA breach notification rules for affected patients.

A health plan, Delta Dental of Virginia, filed a breach notification with HHS OCR on November 21, 2025. The filing reports a hacking/IT incident that compromised the protected health information of 126,953 individuals. The breached data was located in email systems. This submission date reflects when the report was filed with the government, not necessarily when the breach occurred or was discovered. As a covered entity, the health plan is required to report breaches affecting 500 or more individuals within 60 days of discovery. Healthcare administrators should monitor for further details regarding the specific data elements exposed and any required notifications to affected individuals.

A Business Associate named Fieldtex Products, Inc. in New York reported a hacking/IT incident affecting 238,615 individuals. The filing was submitted to HHS OCR on November 20, 2025. The breach involved data stored on a network server. As a Business Associate, Fieldtex handles protected health information on behalf of covered entities. If your organisation contracts with Fieldtex for services, you should verify whether your patient data was among the affected records and review your business associate agreement for notification obligations. This filing confirms the incident was reported to the regulator; it does not specify the exact date the breach occurred or was discovered.

A healthcare provider in Texas has reported a significant data breach to HHS OCR. The Denton MHMR Center filed a notice on November 5, 2025, disclosing that a hacking/IT incident compromised the records of 108,967 individuals. The unauthorized access occurred on a network server. This filing date reflects when the report was submitted to regulators, not necessarily when the breach occurred or was discovered. Healthcare administrators should monitor for further details as the investigation proceeds, noting the large volume of affected records.

A Pennsylvania-based eye care provider, Tri Century Eye Care PC, filed a report with HHS OCR regarding a hacking/IT incident. The filing, submitted on October 31, 2025, indicates that the personal information of 200,000 individuals was compromised. The breach originated from a network server. As a healthcare provider, this entity is a covered entity under HIPAA. Administrators should note this as a significant data security event in the ophthalmology sector. The submission date marks when the report was filed with the government, not necessarily when the incident occurred or was discovered. No further details on the specific data types or remediation steps are provided in this initial filing.

Sierra Vista Hospital & Clinics, a healthcare provider in New Mexico, submitted a breach filing to HHS OCR on 10/06/2025. The incident involved a hacking/IT incident targeting a network server. The breach affects 75,054 individuals. This submission date reflects when the report was filed, not when the breach occurred. Healthcare administrators should review this filing for context on regional security trends. No further details were provided in the web description.

Brightstar Global Solutions Corporation, a health plan based in Rhode Island, filed a report with HHS OCR on October 3, 2025, regarding a hacking/IT incident. The breach compromised the protected health information of 103,879 individuals. The unauthorized access occurred on a network server. As a covered entity, Brightstar is required to notify affected individuals and report the incident to the government. Healthcare administrators should monitor this case to understand how large-scale cyber incidents are handled by health plans. This filing confirms the breach was reported to regulators; it does not indicate when the incident originally occurred or was discovered.

A healthcare provider named Harbor has filed a report with HHS OCR regarding a hacking/IT incident. The breach involved unauthorized access to a network server, potentially exposing the protected health information of 216,000 individuals. The filing was submitted on September 30, 2025. As a covered entity, Harbor is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for notifications if their patients may be members of this organization, and review their own vendor contracts to ensure business associates have robust security measures for network servers.

Rockhill Women’s Care, a healthcare provider in Missouri, submitted a breach filing to HHS OCR on 09/25/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 70,129 individuals were affected. This submission date reflects when the report was filed, not when the breach occurred or was discovered. Providers and business associates should review their own cybersecurity controls and incident response plans to ensure readiness for similar threats. Monitoring HHS OCR updates for further details on this specific case is recommended for compliance awareness.

Doctors Imaging Group, a healthcare provider in Florida, filed a breach report with HHS OCR on September 24, 2025. The filing covers a hacking/IT incident that compromised the personal health information of 171,862 individuals. The unauthorized access occurred on a network server. While this specific incident involves an imaging group, administrators at hospitals, clinics, and health plans should review their own vendor contracts and security monitoring protocols. The submission date marks when the report was filed, not necessarily when the breach occurred or was discovered. Organizations should verify if they share data with this entity or similar providers to assess potential downstream risks.

A significant security incident has been reported by Philadelphia Corporation for Aging (PCA), a Business Associate operating in Pennsylvania. The organization filed a report with HHS OCR on September 23, 2025, disclosing a hacking/IT incident that compromised data stored on a network server. This breach affects a substantial number of individuals, with 410,491 people impacted. Because PCA is a Business Associate, this incident likely involves the health data of patients from various covered entities, such as clinics or health plans, that contract with them. Healthcare administrators should review their vendor contracts and security protocols to ensure their own Business Associates are maintaining adequate safeguards against cyber threats.

Survival Flight, Inc., a healthcare provider in Arizona, filed a breach report with HHS OCR on 09/15/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 97,217 individuals were affected. This submission date reflects when the report was filed, not when the breach occurred or was discovered. Healthcare administrators should review this filing to understand the scope of potential exposure in their region or supply chain. No further details regarding the specific data types or remediation steps are provided in the public record.

Sandhills Medical Foundation, a healthcare provider in South Carolina, reported a data breach to HHS OCR. The incident is classified as a hacking/IT incident, with data compromised on a network server. A total of 169,017 individuals were affected. The report was submitted on September 14, 2025. This filing highlights risks for providers and other covered entities. Administrators should review their own incident response plans. Ensure your breach notification procedures are current and ready for immediate deployment if a similar incident occurs at your organisation.

A Florida healthcare provider, Medical Associates of Brevard, LLC, has filed a report with HHS OCR regarding a hacking/IT incident. The filing, submitted on September 5, 2025, indicates that the personal information of 246,711 individuals was compromised. The breach occurred on a network server. As a covered entity, this provider is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for similar threats to their own network infrastructure and ensure their incident response plans are current.

University of Iowa Health Care, a healthcare provider in Iowa, filed a breach notification with HHS OCR on August 29, 2025. The filing reports a hacking/IT incident involving data stored on a network server. The breach potentially affected 101,875 individuals. This submission date marks when the report was sent to the regulator, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor such filings to understand the scale of recent cyber threats facing large provider systems. While this specific incident involves a university health system, it highlights the ongoing risk of server-based attacks that can expose large volumes of patient records. No further details on the specific data types or remediation steps are provided in this summary record.

University of Iowa Community Home Care, a healthcare provider, filed a breach report with HHS OCR on August 29, 2025. The filing describes a hacking/IT incident involving a network server. The breach potentially affected 109,029 individuals. As a covered entity, the provider is required to notify affected patients and report the incident to the government. This submission date marks when the report was filed, not necessarily when the breach occurred. Healthcare administrators should monitor for similar IT security risks within their own networks and ensure their incident response plans are current.

CPAP Medical Supplies and Services Inc., a healthcare provider in Florida, submitted a breach filing to HHS OCR on 08/15/2025. The incident involved a hacking/IT incident affecting 90,133 individuals. The breached information was located on a network server. This submission date reflects when the report was filed, not when the breach occurred. Administrators in Florida should review this filing for context on local provider risks. No further details were provided in the web description.

Aflac Incorporated, a health plan, filed a report with HHS OCR on August 8, 2025, disclosing a hacking/IT incident that compromised the data of 13,924,906 individuals. The breach occurred on a network server. As this filing date represents when the report was submitted to regulators, not when the incident occurred or was discovered, the timeline of exposure remains unclear.

Kettering Adventist Healthcare, a healthcare provider in Ohio, filed a breach report with HHS OCR on July 21, 2025. The filing indicates a hacking/IT incident compromised data on a network server, affecting 1,695,382 individuals. This submission date is when the report was sent to regulators, not necessarily when the breach occurred or was discovered. As a covered entity, the provider is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for official notifications if they serve patients in this region or have data-sharing agreements with the organization.

A healthcare provider in Maryland has reported a significant security incident to HHS OCR. Anne Arundel Dermatology filed a breach notification on July 11, 2025, stating that a hacking/IT incident compromised data on a network server. The filing indicates that 1,905,000 individuals were affected. This submission date marks when the report was sent to regulators, not necessarily when the breach occurred or was discovered. As a covered entity, the dermatology group is required to report breaches affecting 500 or more individuals within 60 days of discovery. Healthcare administrators should note the scale of this incident for risk assessment purposes.

A major healthcare provider in Michigan, McLaren Health Care, has filed a report with HHS OCR regarding a significant hacking/IT incident. The filing, submitted on June 24, 2025, indicates that the personal information of 743,131 individuals was compromised. The breach originated from a network server within the organisation. While the submission date marks when the report reached regulators, it does not necessarily reflect when the incident occurred or was discovered. Healthcare administrators should monitor this situation as a reminder of the scale of potential cybersecurity risks facing large provider networks. This filing highlights the importance of robust data-breach response protocols and ongoing vigilance against hacking attempts targeting critical health infrastructure.

Diversified Services Enterprises, a business associate in Florida, filed a report with HHS OCR on 06/13/2025 for a hacking/IT incident. The breach involves data from a network server and impacts 61,066 individuals. Because the entity is a business associate, covered entities that contract with them should review their Business Associate Agreements and monitor for any potential notification obligations to patients. The filing date is the submission date to HHS, not the date the breach occurred or was discovered. Administrators should verify if their organization is among those affected and ensure their vendor management processes are up to date.

The Cooper Health System, a healthcare provider in New Jersey, submitted a breach report to HHS OCR on 05/23/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 57,412 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred or was discovered. Administrators should verify if their own systems share similar vulnerabilities or if they are business associates of this provider. The event is classified as a hacking incident under HIPAA regulations.

Harbin Clinic, LLC, a healthcare provider in Georgia, reported a hacking/IT incident to HHS OCR on May 16, 2025. The breach affected 176,149 individuals after unauthorized access to a network server. This filing date is when the report was submitted to the government, not necessarily when the incident occurred. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current. While this specific event involves a provider, the risk of server-based attacks applies to all entities handling protected health information. Review your own security logs and vendor contracts to confirm adequate protections are in place against unauthorized access.

Weiser Memorial Hospital in Idaho submitted a breach filing to HHS OCR on 05/15/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 59,990 individuals were affected. As a healthcare provider, the hospital is responsible for notifying those impacted and correcting the vulnerability. Other healthcare administrators should review their own network security protocols to ensure similar unauthorized access cannot occur within their systems.

A healthcare provider operating under the City of Long Beach, CA, reported a hacking/IT incident to HHS OCR on April 14, 2025. The breach affected 258,191 individuals, with data compromised on a network server. This filing date reflects when the report was submitted to regulators, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor this case to understand how large-scale municipal provider breaches are handled. While this specific incident involves a city-run entity, the scale highlights the ongoing risk of server-based attacks. Review your own incident response plans to ensure they can handle mass notification requirements if a similar event impacts your organization.

Benefits administrator Endue Software filed a breach report with HHS OCR on April 11, 2025, disclosing a hacking/IT incident that exposed data for 118,028 individuals. As a Business Associate, Endue is required to notify its covered entity clients, who must then notify affected patients. The breach occurred on a network server. If your organisation contracts with Endue for claims processing or other services, verify whether you have received notification from them. If you are a covered entity, ensure you have protocols in place to receive and act on such vendor notifications promptly. This filing date reflects when the report was submitted to HHS, not necessarily when the incident occurred or was discovered.

A Maryland-based insurance group, Kelly & Associates Insurance Group, Inc., has filed a report with HHS OCR regarding a significant data breach. As a Business Associate, this entity handles protected health information on behalf of covered entities. The filing, submitted on April 9, 2025, indicates that a hacking/IT incident compromised data stored on a network server. The breach affects 553,332 individuals. Healthcare administrators should note this as a high-volume incident involving a vendor. While the submission date is April 9, the actual breach likely occurred earlier. This event highlights the risks associated with third-party data storage and the importance of monitoring vendor security practices.

A healthcare provider in Alabama has filed a breach notification with HHS OCR. Alabama Ophthalmology Associates reported that a hacking/IT incident compromised the protected health information of 131,576 individuals. The unauthorized access occurred on a desktop computer and a network server. This filing was submitted on April 8, 2025, which is the date the report was received by the regulator, not necessarily the date the breach occurred. As a covered entity, the provider is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for similar incidents involving network servers and ensure their own incident response plans are current.

Dameron Hospital in California has reported a significant data breach to HHS OCR. The incident involved a hacking or IT incident that compromised information stored on a network server. This breach affects 210,706 individuals, making it a large-scale event that hospital administrators should monitor for potential industry-wide trends. The filing was submitted on April 2, 2025. While this specific report does not detail the exact data types exposed, the scale suggests a serious security failure. Administrators should review their own server security protocols and ensure incident response plans are current. This is a confirmed breach, not a proposal, and highlights the ongoing risk of cyberattacks on healthcare infrastructure.

The Central District Health Department of Nebraska, a healthcare provider, reported a hacking/IT incident involving its network server. The breach impacts 58,519 individuals. HHS OCR received the filing on 04/01/2025. This date reflects when the report was submitted, not when the incident occurred. Administrators in Nebraska should review their own network security controls. Verify if your organization shares similar infrastructure vulnerabilities. Check your incident response plans to ensure they address unauthorized access via network servers. This filing highlights the ongoing risk of IT incidents to public health entities.

Health Services LLC, a healthcare provider in Ohio, submitted a breach filing to HHS OCR on 04/01/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 75,906 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred. Providers and business associates should review their own security logs for similar unauthorized access patterns. The organization is classified as a covered entity under HIPAA. This entry serves as a notice of a reported incident for tracking purposes.

Community Dental Care, Inc., a healthcare provider in Minnesota, filed a breach report with HHS OCR on March 28, 2025. The filing details a hacking/IT incident that compromised data on a network server, affecting 134,903 individuals. This submission date marks when the report was sent to regulators, not necessarily when the breach occurred. As a covered entity, the dental group is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor this case to understand how large-scale data exposures are being reported in the dental sector, though no specific remediation steps are detailed in this filing.

SimonMed Imaging, a healthcare provider in Arizona, filed a report with HHS OCR on March 27, 2025, disclosing a hacking/IT incident. The breach compromised the protected health information of 1,275,669 individuals. The unauthorized access occurred on a network server. As a covered entity, SimonMed is required to notify affected individuals and report the incident to the government. Healthcare administrators should monitor for similar threats to their own network infrastructure and ensure their incident response plans are current.

Concord Orthopaedics, an orthopaedic practice in New Hampshire, submitted a reportable breach filing to HHS OCR on 03/25/2025. The incident involved a hacking or IT incident that compromised data stored on a network server. The filing affects 72,815 individuals. This submission date reflects when the report was filed, not when the breach occurred. Healthcare administrators should review this filing to understand the scope of incidents affecting similar provider types. No further details on the nature of the hack or specific data elements accessed were provided in the initial report.

Community Care Alliance, a healthcare provider in Rhode Island, filed a breach report with HHS OCR on March 1, 2025. The filing indicates a hacking/IT incident compromised data stored on a network server. The breach affected 114,975 individuals. This submission date marks when the report was filed with the regulator, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor for further details regarding the specific data types involved and any required notifications to affected patients or state authorities.

A major Business Associate, Southeast Series of Lockton Companies, LLC (Lockton), reported a hacking/IT incident to HHS OCR on February 28, 2025. The filing states that 1,124,727 individuals were affected. The breach occurred on a network server. As a healthcare administrator, you must determine if your organization uses Lockton for services involving protected health information. If you do, this is a Business Associate breach that may require you to notify your patients or take other steps under HIPAA. Check your vendor contracts immediately to see if Lockton is a covered entity or business associate for your specific operations.

Primary Health-SMMPP, L.C., a business associate based in Arizona, submitted a breach report to HHS OCR on 02/06/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 67,567 individuals were affected. This submission date reflects when the report was filed with the government, not when the breach occurred or was discovered. As a business associate, this entity has specific obligations under HIPAA regarding the protection of protected health information it handles on behalf of covered entities. Organizations working with this vendor should review their business associate agreements and ensure their own security protocols are robust against similar network threats.

Escambia Community Clinics, Inc., operating as Community Health Northwest Florida, filed a breach report with HHS OCR on February 3, 2025. The healthcare provider disclosed that a hacking/IT incident compromised data stored on a network server. The filing indicates that 143,969 individuals were affected by this unauthorized access. As a covered entity, the clinic is required to report breaches of this scale. Administrators at similar community health centers and clinics should review their own server security protocols and incident response plans, noting that submission dates reflect when the report was filed, not necessarily when the breach occurred or was discovered.

Healthcare administrators should note that PIH Health, Inc., a healthcare provider in California, filed a report with HHS OCR for a significant data breach. The filing, submitted on January 31, 2025, indicates that a hacking/IT incident compromised the personal information of 2,947,264 individuals. The unauthorized access occurred on a network server. While this specific filing details the scope of the incident at PIH Health, it serves as a reminder for all covered entities to review their own cybersecurity protocols. This report reflects the submission date to the regulator, not necessarily the date the breach was discovered or announced to patients.

A hacking/IT incident at Allegheny Health Network Home Medical Equipment LLC and Allegheny Health Network Home Infusion LLC in Pennsylvania compromised the data of 292,773 individuals. The breach occurred on a network server, and the healthcare provider submitted the report to HHS OCR on January 17, 2025. As a healthcare provider, this entity is directly responsible for reporting this incident. Administrators should note the scale of the exposure and the specific vulnerability of network servers to unauthorized access. This filing confirms the incident was reported to federal regulators, but does not detail the specific types of data lost or the timeline of the attack.

A healthcare provider in Kansas, Mid America Physician Services, filed a breach notification with HHS OCR on January 13, 2025. The filing reports a hacking/IT incident involving a network server that exposed the protected health information of 104,513 individuals. As a covered entity, the provider is required to report breaches affecting 500 or more people within 60 days of discovery. This submission date reflects when the report was filed with the regulator, not necessarily when the breach occurred. Healthcare administrators should monitor such filings to understand the evolving threat landscape for cybersecurity risks targeting provider networks.

Conceptions Reproductive Associates of Colorado, a healthcare provider, submitted a breach report to HHS OCR on 11/25/2024. The incident involved a hacking/IT incident affecting data stored on a network server. Approximately 80,000 individuals were impacted. This submission date reflects when the report was filed with the regulator, not when the breach occurred or was discovered. As a covered entity, the provider is responsible for managing the breach notification obligations under HIPAA. Administrators should review their own incident response protocols to ensure alignment with reporting timelines and security standards for network infrastructure.

ESHA, Inc., a business associate based in Texas, submitted a breach report to HHS OCR on 11/15/2024. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 76,922 individuals were affected. Because ESHA is a business associate, its obligations differ from those of a covered entity. Administrators should review their contracts with ESHA and other vendors to ensure adequate safeguards are in place. This submission date reflects when the report was filed, not necessarily when the breach occurred.

Radiologic Medical Services, P.C., a healthcare provider in Iowa, submitted a breach filing to HHS OCR on 11/12/2024. The incident involved a hacking/IT incident that exposed the protected health information of 56,902 individuals. The compromised data was located in Email systems. This submission date reflects when the report was filed with the government, not when the breach occurred or was discovered. Healthcare administrators should review this filing to understand the scope of potential exposure in their region and ensure their own email security protocols are robust against similar threats.

Great Plains Regional Medical Center, a healthcare provider in Oklahoma, filed a breach report with HHS OCR on November 7, 2024. The filing indicates a hacking/IT incident compromised data stored on a network server. The breach affected 133,149 individuals. This submission date reflects when the report was filed with the government, not necessarily when the incident occurred or was discovered. Healthcare administrators should review their own cybersecurity protocols and business associate agreements to ensure robust protections for patient data. While this specific incident involves a hospital system, the risk of server-based attacks applies to any entity handling patient data. Monitor HHS OCR updates for further details on the nature of the exposed information.

Clay Platte Family Medicine, a healthcare provider in Missouri, submitted a breach filing to HHS OCR on 10/18/2024. The incident involved a hacking/IT incident targeting a network server. The breach potentially exposed the protected health information of 53,916 individuals. This submission date reflects when the report was filed, not necessarily when the breach occurred or was discovered. Providers should review their own cybersecurity controls and incident response plans to ensure they are prepared for similar threats. Monitoring for potential identity theft or fraud may be advisable for affected individuals.

Summit Pathology and Summit Pathology Laboratories, Inc., a healthcare provider in Colorado, filed a breach report with HHS OCR on October 18, 2024. The filing covers a hacking/IT incident involving a network server that exposed the protected health information of 1,813,538 individuals. This submission date is when the report was filed with the government, not necessarily when the breach occurred. As a covered entity, Summit Pathology is responsible for notifying affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for notification letters if their patients or staff received pathology services from this organization, as the scale of this incident suggests widespread exposure of sensitive medical data.

A significant data breach has been reported involving ATSG, Inc., a business associate operating in New York. This incident, classified as a hacking/IT event, compromised the protected health information of 909,469 individuals. The breach occurred on a network server and was reported to the HHS Office for Civil Rights on October 4, 2024. Hospital administrators should review their own business associate agreements to ensure vendors have robust cybersecurity measures. While this specific incident affects ATSG, it serves as a stark reminder of the risks associated with third-party data handling. Monitor your own systems for unusual activity and verify that your partners are compliant with security standards.

Acadian Ambulance Service, Inc., a healthcare provider in Louisiana, filed a report with HHS OCR on August 20, 2024, disclosing a hacking/IT incident. The breach exposed the protected health information of 2,896,985 individuals. The compromised data was stored on a network server. This filing date reflects when the report was submitted to the government, not necessarily when the incident occurred or was discovered. Healthcare administrators should note the scale of this incident as a reminder of the risks associated with network security. While this specific event involves an ambulance service, the underlying vulnerability type is relevant to any organization managing electronic health records.

A business associate named Kerber, Eck & Braeckel LLP filed a breach report with HHS OCR on August 16, 2024. The filing covers a hacking/IT incident that compromised data for 134,918 individuals. The breached information was located on a network server. Because this entity is a business associate, your organization may be affected if you contract with them for services handling protected health information. Review your vendor contracts and security logs to determine if you are among the impacted covered entities. This submission date reflects when the report was filed with HHS, not necessarily when the breach occurred or was discovered.

HealthEquity, Inc., a Business Associate based in Utah, filed a report with HHS OCR on August 9, 2024, disclosing a hacking/IT incident. The breach impacted the protected health information of 4.3 million individuals. The compromised data was located on a network server. Because HealthEquity is a Business Associate, your organization may be affected if you use its services for health savings accounts or related benefits administration. Review your contracts and incident response plans to understand your obligations when a vendor experiences a security incident. This filing date reflects when the report was submitted to the regulator, not necessarily when the breach occurred.

A healthcare provider in Colorado, Delta County Memorial Hospital District (Delta Health), filed a report with HHS OCR regarding a hacking/IT incident. The breach affected 148,363 individuals. The submission was made to the regulator on July 29, 2024. The compromised information was located on a network server. As a covered entity, the hospital district is required to report breaches of this scale. This filing confirms the incident was reported to federal authorities; it does not specify when the breach occurred or was discovered. Healthcare administrators should monitor for further details regarding the specific data types involved and any required notifications to affected patients.

United of Omaha Life Insurance Company, a health plan based in Nebraska, filed a report with HHS OCR regarding a hacking/IT incident. The breach affected 107,894 individuals. According to the filing, the compromised information was located in email. The report was submitted to HHS OCR on July 26, 2024. As a covered entity, the health plan is required to report breaches of unsecured protected health information affecting 500 or more individuals. This filing confirms the incident met that threshold. Healthcare administrators should note that email remains a common vector for data exposure. While this specific breach involves a health plan, the incident highlights the ongoing risks associated with email security across the healthcare ecosystem.

Change Healthcare, a major business associate serving the healthcare industry, filed a report with HHS OCR regarding a hacking/IT incident. The filing, submitted on July 19, 2024, indicates that the personal information of 192.7 million individuals was compromised. The breach occurred on a network server. Because Change Healthcare acts as a business associate, this incident likely impacts the many covered entities—hospitals, clinics, and health plans—that rely on its services. Administrators should verify if their organization uses Change Healthcare and review any communications regarding patient notification or remediation steps. This is a submission date, not necessarily the date the breach occurred.

Kootenai Health, a healthcare provider in Idaho, filed a report with HHS OCR on April 24, 2024, disclosing a significant hacking/IT incident. The breach compromised the protected health information of 464,088 individuals. The unauthorized access occurred on a network server. As a covered entity, Kootenai Health is required to notify affected individuals and report the incident to the government. Healthcare administrators should note the scale of this incident as a reminder of the risks associated with network server vulnerabilities. While this specific filing does not detail the exact nature of the data accessed, the volume of affected records highlights the potential impact of IT security failures on large provider organizations.

Delta Health System, a healthcare provider in Mississippi, filed a breach notification with HHS OCR on March 29, 2024. The filing reports a hacking/IT incident that compromised the protected health information of 216,532 individuals. The unauthorized access occurred on a network server. This submission date reflects when the report was filed with the regulator, not necessarily when the breach occurred or was discovered. Healthcare administrators should note this incident as a reminder of the risks associated with network infrastructure vulnerabilities. While this specific event involves a provider in Mississippi, the scale of the breach highlights the importance of monitoring IT security across all covered entities and business associates.