Loading...
Loading...
Rankings and statistics for 1,638 healthcare data breaches affecting 461,776,367 patients. See the largest breaches by individuals affected, organizations with repeat incidents, and state-by-state rankings.
| # | Organization | State | Individuals Affected | Date | Breach Type |
|---|---|---|---|---|---|
| 1 | Change Healthcare, Inc.critical | MN | 192,700,000 | 2024-07-19 | Hacking/IT Incident |
| 2 | Aflac Incorporated (“Aflac”)critical | GA | 13,924,906 | 2025-08-08 | Hacking/IT Incident |
| 3 | Kaiser Foundation Health Plan, Inc.critical | CA | 13,400,000 | 2024-04-12 | Unauthorized Access/Disclosure |
| 4 | HCA Healthcarecritical | TN | 11,270,000 | 2023-07-31 | Hacking/IT Incident |
| 5 | Perry Johnson & Associates, Inc., which does business as PJ&Acritical | NV | 8,952,212 | 2023-11-03 | Hacking/IT Incident |
| 6 | Managed Care of North America (MCNA)critical | GA | 8,861,076 | 2023-05-26 | Hacking/IT Incident |
| 7 | Welltok, Inc.critical | CO | 8,493,379 | 2023-11-06 | Hacking/IT Incident |
| 8 | Episource, LLCcritical | CA | 6,725,572 | 2025-06-06 | Hacking/IT Incident |
| 9 | PharMerica Corporationcritical | KY | 5,815,591 | 2023-05-12 | Hacking/IT Incident |
| 10 | Ascension Healthcritical | MO | 5,466,931 | 2024-07-03 | Hacking/IT Incident |
| 11 | Blue Shield of Californiacritical | CA | 4,700,000 | 2025-04-09 | Hacking/IT Incident |
| 12 | HealthEC LLCcritical | NJ | 4,452,782 | 2023-12-21 | Hacking/IT Incident |
| 13 | HealthEquity, Inc.critical | UT | 4,300,000 | 2024-08-09 | Hacking/IT Incident |
| 14 | Reventics, LLCcritical | FL | 4,212,823 | 2023-02-10 | Hacking/IT Incident |
| 15 | OneTouchPoint, Inc.critical | WI | 4,112,892 | 2022-07-27 | Hacking/IT Incident |
| 16 | Colorado Department of Health Care Policy & Financingcritical | CO | 4,091,794 | 2023-08-11 | Hacking/IT Incident |
| 17 | Concentra Health Services, Inc.critical | TX | 3,998,162 | 2024-01-09 | Hacking/IT Incident |
| 18 | Regal Medical Group,Lakeside Medical Organization, ADOC Acquisition, & Greater Covina Medical Groupcritical | CA | 3,388,856 | 2023-02-01 | Hacking/IT Incident |
| 19 | CareSourcecritical | OH | 3,180,537 | 2023-07-27 | Unauthorized Access/Disclosure |
| 20 | Cerebral, Inccritical | DE | 3,179,835 | 2023-03-01 | Unauthorized Access/Disclosure |
| 21 | NationsBenefits Holdings, LLCcritical | FL | 3,037,303 | 2023-04-13 | Hacking/IT Incident |
| 22 | Acadian Ambulance Service, Inc.critical | LA | 2,896,985 | 2024-08-20 | Hacking/IT Incident |
| 23 | A&A Services d/b/a Sav-Rxcritical | NE | 2,812,336 | 2024-05-24 | Hacking/IT Incident |
| 24 | Maximus, Inc.critical | VA | 2,781,617 | 2023-08-04 | Hacking/IT Incident |
| 25 | ESO Solutions, Inc. critical | TX | 2,700,000 | 2023-12-18 | Hacking/IT Incident |
| 26 | DaVita Inc.critical | CO | 2,689,826 | 2025-08-01 | Hacking/IT Incident |
| 27 | Connexin Software, Inc.critical | PA | 2,675,934 | 2022-11-11 | Hacking/IT Incident |
| 28 | Harvard Pilgrim Health Carecritical | MA | 2,624,191 | 2023-05-24 | Hacking/IT Incident |
| 29 | WebTPA Employer Services, LLC (“WebTPA”)critical | TX | 2,518,533 | 2024-05-08 | Hacking/IT Incident |
| 30 | Enzo Clinical Labs, Inc.critical | NY | 2,470,000 | 2023-06-05 | Hacking/IT Incident |
| 31 | Florida Health Sciences Center, Inc. dba Tampa General Hospital critical | FL | 2,430,920 | 2023-07-28 | Hacking/IT Incident |
| 32 | INTEGRIS Healthcritical | OK | 2,385,646 | 2024-01-26 | Hacking/IT Incident |
| 33 | Postmeds, Inc.critical | CA | 2,364,359 | 2023-10-30 | Hacking/IT Incident |
| 34 | Centers for Medicare & Medicaid Servicescritical | MD | 2,342,357 | 2023-07-28 | Hacking/IT Incident |
| 35 | Shields Health Care Group, Inc.critical | MA | 2,000,000 | 2022-05-27 | Hacking/IT Incident |
| 36 | Arietis Health, LLCcritical | FL | 1,975,066 | 2023-09-29 | Hacking/IT Incident |
| 37 | Professional Finance Company, Inc.critical | CO | 1,918,941 | 2022-07-01 | Hacking/IT Incident |
| 38 | Anne Arundel Dermatologycritical | MD | 1,905,000 | 2025-07-11 | Hacking/IT Incident |
| 39 | Apria Healthcare LLCcritical | IN | 1,868,831 | 2022-05-16 | Hacking/IT Incident |
| 40 | Summit Pathology and Summit Pathology Laboratories, Inc.critical | CO | 1,813,538 | 2024-10-18 | Hacking/IT Incident |
| 41 | Baptist Medical Centercritical | TX | 1,608,549 | 2022-06-15 | Hacking/IT Incident |
| 42 | Lubbock County Hospital Districtcritical | TX | 1,461,776 | 2024-11-22 | Hacking/IT Incident |
| 43 | Radiology Associates of Richmond, Inc.critical | VA | 1,419,091 | 2025-07-01 | Hacking/IT Incident |
| 44 | Geisingercritical | PA | 1,276,026 | 2024-06-21 | Unauthorized Access/Disclosure |
| 45 | Virginia Dept. of Medical Assistance Servicescritical | VA | 1,229,333 | 2023-09-18 | Hacking/IT Incident |
| 46 | PurFoods, LLCcritical | IA | 1,229,333 | 2023-08-25 | Hacking/IT Incident |
| 47 | Palomar Health Medical Groupcritical | CA | 1,140,221 | 2024-07-03 | Hacking/IT Incident |
| 48 | Southeast Series of Lockton Companies, LLC (Lockton)critical | GA | 1,124,727 | 2025-02-28 | Hacking/IT Incident |
| 49 | Community Health Center, Inc.critical | CT | 1,060,936 | 2025-01-30 | Hacking/IT Incident |
| 50 | Superior Air-Ground Ambulance Service, Inc.critical | IL | 1,039,972 | 2024-05-10 | Hacking/IT Incident |
Organizations with multiple healthcare data breaches reported to the HHS Office for Civil Rights.
| Organization | Breaches | Total Affected | |
|---|---|---|---|
| Ascension Health | 2 | 5,904,260 | |
| Blue Shield of California | 6 | 4,704,230 | |
| HealthEquity, Inc. | 2 | 4,301,549 | |
| Maximus, Inc. | 2 | 2,786,146 | |
| DaVita Inc. | 2 | 2,757,269 | |
| Enzo Clinical Labs, Inc. | 2 | 2,471,700 | |
| Centers for Medicare & Medicaid Services | 2 | 2,449,511 | |
| Virginia Dept. of Medical Assistance Services | 2 | 1,653,157 | |
| Fred Hutchinson Cancer Center | 2 | 891,503 | |
| The Harris Center for Mental Health and IDD | 2 | 837,830 | |
| United Healthcare Services, Inc. Single Affiliated Covered Entity | 6 | 747,557 | |
| McLaren Health Care | 2 | 743,632 | |
| Radius Global Solutions | 2 | 736,536 | |
| VITAS Hospice Services, LLC | 2 | 638,354 | |
| Atrium Health | 2 | 618,079 | |
| Illinois Department of Healthcare and Family Services, Illinois Department of Human Services | 2 | 531,274 | |
| CorrectCare Integrated Health, Inc. | 2 | 443,093 | |
| Fieldtex Products, Inc. | 3 | 348,587 | |
| 90 Degree Benefits, Inc. | 2 | 347,450 | |
| Minnesota Department of Human Services | 2 | 308,294 |
| # | State | Breach Count | % of Total | |
|---|---|---|---|---|
| 1 | Texas | 144 | 8.8% | |
| 2 | California | 135 | 8.2% | |
| 3 | New York | 103 | 6.3% | |
| 4 | Florida | 98 | 6.0% | |
| 5 | Illinois | 85 | 5.2% | |
| 6 | Pennsylvania | 73 | 4.5% | |
| 7 | Michigan | 58 | 3.5% | |
| 8 | Ohio | 53 | 3.2% | |
| 9 | North Carolina | 52 | 3.2% | |
| 10 | Georgia | 51 | 3.1% | |
| 11 | Massachusetts | 46 | 2.8% | |
| 12 | Tennessee | 41 | 2.5% | |
| 13 | Indiana | 40 | 2.4% | |
| 14 | Missouri | 40 | 2.4% | |
| 15 | New Jersey | 39 | 2.4% | |
| 16 | Minnesota | 36 | 2.2% | |
| 17 | Virginia | 33 | 2.0% | |
| 18 | Maryland | 32 | 2.0% | |
| 19 | Wisconsin | 32 | 2.0% | |
| 20 | Washington | 30 | 1.8% | |
| 21 | Kansas | 26 | 1.6% | |
| 22 | Connecticut | 26 | 1.6% | |
| 23 | Colorado | 25 | 1.5% | |
| 24 | Arizona | 25 | 1.5% | |
| 25 | Alabama | 22 | 1.3% | |
| 26 | Kentucky | 22 | 1.3% | |
| 27 | Oregon | 21 | 1.3% | |
| 28 | Oklahoma | 21 | 1.3% | |
| 29 | Nebraska | 20 | 1.2% | |
| 30 | Louisiana | 19 | 1.2% | |
| 31 | Arkansas | 18 | 1.1% | |
| 32 | Iowa | 17 | 1.0% | |
| 33 | Mississippi | 17 | 1.0% | |
| 34 | New Hampshire | 15 | 0.9% | |
| 35 | Utah | 14 | 0.9% | |
| 36 | Maine | 12 | 0.7% | |
| 37 | South Carolina | 11 | 0.7% | |
| 38 | Alaska | 10 | 0.6% | |
| 39 | Idaho | 10 | 0.6% | |
| 40 | Rhode Island | 9 | 0.5% | |
| 41 | Delaware | 7 | 0.4% | |
| 42 | New Mexico | 7 | 0.4% | |
| 43 | North Dakota | 7 | 0.4% | |
| 44 | Montana | 7 | 0.4% | |
| 45 | Nevada | 7 | 0.4% | |
| 46 | West Virginia | 6 | 0.4% | |
| 47 | Hawaii | 5 | 0.3% | |
| 48 | Wyoming | 4 | 0.2% | |
| 49 | District of Columbia | 4 | 0.2% | |
| 50 | South Dakota | 3 | 0.2% |
Search our database to see if your healthcare provider was involved in a breach.
Healthcare Data Breaches Hub
Browse all breaches by type, state, and severity
Data Breach Lawsuits
Check eligibility for class action lawsuits
Disclaimer: This page provides educational information about healthcare data breaches. It is not legal advice. Data is sourced from the HHS OCR Breach Portal and may not reflect the most current information. Consult a qualified attorney for specific legal questions about a data breach affecting you.