{"unit":"source_records","unit_description":"One row is one assertion by one source: a filing, an enforcement action. It is NOT a breach event. Several rows can describe the same underlying breach, and most rows here are not breach reports.","model":"Source records as published. NOT Patient Protect Canonical Data Model output. This file contains no canonical events and no PPE identifiers.","record_classes":{"breach_filing":{"count":1477,"source_types":["hhs_breach"],"description":"A breach notification submitted to the HHS OCR Breach Portal."},"regulatory_action":{"count":2583,"source_types":["ocr_enforcement"],"description":"An OCR resolution agreement or civil money penalty. An enforcement action is not a breach report, and counting these as breaches overstates breach volume by roughly 2.4x on this file."}},"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","license_scope":"Patient Protect licenses under CC BY 4.0 only the copyright and database rights it owns in the dataset's selection, arrangement, schema, documentation and original enrichment. Underlying government records and third-party source materials retain their original legal status and terms. No endorsement by any source agency is implied.","source":"HHS OCR Breach Portal (hhs_breach) and OCR resolution agreements / civil money penalties (ocr_enforcement). Non-HHS channels visible on the dashboard (state AG, FTC, CISA, Patient Protect Network, AI-modeled projections) are excluded — the FTC channel in particular records userbase counts rather than PHI-breach counts, and mixing that semantics with HHS records would corrupt any aggregate.","counting_guidance":{"breach_counts":"Filter record_class = 'breach_filing' first. Counting every row as a breach overstates by ~2.4x on this file.","affected_sums":"Filter to breach_filing, then take one value per source_event_group_id. Summing every row without filtering yields roughly 2.2 billion, against roughly 345 million on the correct basis.","not_reproducible":"Source-record counts and affected-count sums will NOT reproduce Patient Protect Breach Intelligence figures. The dashboard and state pages use the internal Canonical Data Model, which reconciles multiple public records describing one underlying event across a wider source corpus than this file contains. Grouping by source_event_group_id is not that model and does not approximate it.","methodology_url":"https://patient-protect.com/breachdash/methodology"},"field_coverage":{"breach_submission_date":"Populated on breach_filing rows only.","enforcement_action_date":"Populated on regulatory_action rows only.","individuals_affected":"As stated by the source. Not deduplicated at person level; someone affected by two breaches is counted in both.","summary":"Present on most regulatory_action rows and few breach_filing rows."},"deprecations":{"event_id":{"replacement":"source_event_group_id","retires":"2027-02-01","reason":"The name implied canonical event identity. It is an upstream grouping key, and grouping by it does not yield Patient Protect canonical events."},"severity_score":{"replacement":null,"retires":"2027-02-01","reason":"A legacy modeled field on a nine-value ladder. It is not used by Patient Protect's canonical breach metrics, is easily misread as breach seriousness or compliance risk, and will be removed rather than documented into legitimacy."},"covered_entity_type":{"replacement":null,"retires":"removed in this revision","reason":"Documented as a column and empty on every row of this file. An advertised field with no values is worse than an absent one."}},"attribution":"Patient Protect — patient-protect.com/breachdash","retrieved_at":"2026-10-26T18:32:14.914Z","count":4060,"incidents":[{"record_id":"78253767-d6c0-40af-882a-c73254a67588","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services, Inc.","state":"MA","individuals_affected":206695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"First OCR settlement specifically addressing a ransomware breach investigation against a business associate, finding failures to review information system activity logs.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":50},{"record_id":"37465860-5af6-4738-9962-f377f6f9129d","source_event_group_id":"76348fa0-e966-406a-90a1-f6f160e28a60","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"iHealth Solutions, LLC d/b/a Advansys","state":"KY","individuals_affected":267,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Business associate suffered an unauthorized intrusion on an unprotected server storing patient documents following transfer without proper access safeguards.","event_id":"76348fa0-e966-406a-90a1-f6f160e28a60","severity_score":50},{"record_id":"f0608ef5-b7a5-472c-97a8-f4538fceaf29","source_event_group_id":"85bb74f0-d5ed-4bcd-b67c-9019f46369e1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Great Expressions Dental Centers, P.C.","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental organization refused to release patient records without charging excessive, unallowable copy fees, violating the Right of Access standard.","event_id":"85bb74f0-d5ed-4bcd-b67c-9019f46369e1","severity_score":50},{"record_id":"ef4d2dd8-5d78-4576-8a96-ecec482119eb","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University Center for Health Sciences (OSU-CHS)","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolved investigation into a hacking incident involving unauthorized third-party access to an internal server with patient billing and clinical information.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"3b1a8fea-ea49-4941-ac14-a33515b37340","source_event_group_id":"752d2eab-f7e3-4af2-95fd-929cdc8d2827","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Plastic Surgery Associates of South Dakota, P.B.C.","state":"SD","individuals_affected":10200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ransomware incident impacted patient records; OCR found lack of risk management processes, inadequate audit controls, and insufficient employee training on phishing/malware.","event_id":"752d2eab-f7e3-4af2-95fd-929cdc8d2827","severity_score":65},{"record_id":"148572c3-4e75-4491-9948-36133a9a2b6c","source_event_group_id":"2cfeb330-cf90-4d98-929a-af598ad8b862","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Medical Management, LLC","state":"CA","individuals_affected":319485,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Management services organization suffered unauthorized network intrusion leading to exfiltration of patient records, with OCR finding deficiencies in risk analysis and access controls.","event_id":"2cfeb330-cf90-4d98-929a-af598ad8b862","severity_score":90},{"record_id":"f5ceb031-5022-4d46-8195-cc77d930bd99","source_event_group_id":"e7036ca0-0e5c-4adc-b671-07bfa29dd295","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care Specialists of Central Florida, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Primary practice agreed to monetary settlement and CAP after failing to provide an individual with timely access to their complete medical record.","event_id":"e7036ca0-0e5c-4adc-b671-07bfa29dd295","severity_score":50},{"record_id":"f2ae88b8-90b9-4114-ab09-0153f67ca783","source_event_group_id":"0494535d-1df9-41fc-85b8-acb77539da09","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Eye Care Center","state":"ME","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice failed to provide complete medical records to a patient within the required 30-day window, resolving OCR's 13th Right of Access action.","event_id":"0494535d-1df9-41fc-85b8-acb77539da09","severity_score":50},{"record_id":"f226a9af-3b27-4dfe-8af8-2c7df870ae94","source_event_group_id":"27d554ad-1329-4d13-8ebf-1d07071cc53c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peter Wrobel, M.D., P.C. d/b/a Advanced Neurologic Associates","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Specialty practice failed to fulfill a patient's multiple requests for paper copies of their medical records in a timely manner.","event_id":"27d554ad-1329-4d13-8ebf-1d07071cc53c","severity_score":50},{"record_id":"b086370c-aea6-407c-b36a-770c4d60c69b","source_event_group_id":"d32282f2-c8cb-40a3-974a-eeed49ddb28e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Emergency Physicians, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Emergency medical group resolved OCR Right of Access allegations after failing to deliver medical billing and treatment records to a patient within required time limits.","event_id":"d32282f2-c8cb-40a3-974a-eeed49ddb28e","severity_score":50},{"record_id":"9ff25b83-8419-42c2-bb45-eb2c3a0d8369","source_event_group_id":"e7b75ec1-f6ff-4073-8609-91325fd5972d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pinehurst Surgical Clinic, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Clinic failed to provide an individual with access to requested medical diagnostic records until after OCR intervention.","event_id":"e7b75ec1-f6ff-4073-8609-91325fd5972d","severity_score":50},{"record_id":"86753dcf-a89d-4127-8c74-c6c54e2e470c","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology, P.C. d/b/a New England Dermatology and Laser Center","state":"MA","individuals_affected":13726,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice improperly disposed of specimen collection jars and diagnostic materials containing unredacted patient labels in an unsecured outside dumpster.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":65},{"record_id":"459326cf-4ab5-457b-8a77-e540536ebfff","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":2810000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Comprehensive settlement concerning a large 2016 breach by an APT attacker who compromised POS payment systems and health servers affecting 2.81 million individuals.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"e869a54f-15e1-4104-87d1-30422c69135e","source_event_group_id":"8623b9da-097c-4280-8a32-cd7ef5df85e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of Providence","state":"RI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Municipal entity failed to provide an individual with access to payroll and injury health records held within designated record sets under the Privacy Rule.","event_id":"8623b9da-097c-4280-8a32-cd7ef5df85e2","severity_score":65},{"record_id":"e2ce4aed-5b9b-4ade-a9c0-f4934adef218","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC d/b/a AEON Clinical Laboratories","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diagnostic testing laboratory failed to conduct an enterprise-wide risk analysis and failed to adopt written HIPAA Security Rule policies and procedures.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"db33c32b-4388-481b-89ee-42cb3b183255","source_event_group_id":"f39a46af-eb9a-4542-a5f1-531403d7f25d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Primary Care, P.A.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Primary care provider failed to deliver an individual's medical records despite numerous requests and OCR intervention.","event_id":"f39a46af-eb9a-4542-a5f1-531403d7f25d","severity_score":50},{"record_id":"d5e93d20-f8c2-4249-830d-c8cd30adc1ea","source_event_group_id":"ca191a8e-500f-468d-a0f9-02a3e443c6a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northcutt Dental Practice, LLC","state":"AL","individuals_affected":3657,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice impermissibly disclosed PHI by providing patient names and addresses to a political campaign manager for campaign mailings.","event_id":"ca191a8e-500f-468d-a0f9-02a3e443c6a8","severity_score":50},{"record_id":"bc071d56-4602-43ad-bcb5-dae8ce4bcb22","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR issued a CMP after a dental practice impermissibly disclosed a patient's PHI on a Google review response and failed to adopt privacy policies or cooperate with OCR.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"9bd10bad-443a-42b1-b5fc-7e3d419c4b8b","source_event_group_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jacob and Associates, LLC","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Psychiatric medical practice failed to provide a patient access to their psychotherapy notes and medical records within standard statutory guidelines.","event_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","severity_score":50},{"record_id":"9b34e674-9648-4e8c-834c-713fabf1bec3","source_event_group_id":"e9ca75e2-96cb-4296-804c-98001e289c58","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CAP Sleep, PLLC","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sleep medicine practice agreed to a monetary settlement and corrective action plan after failing to timely release records to a requesting patient.","event_id":"e9ca75e2-96cb-4296-804c-98001e289c58","severity_score":50},{"record_id":"50fb470c-ef6e-42c1-af6a-d3520423971c","source_event_group_id":"53cca8b5-8094-4fe1-94b7-e2cb681545be","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premier Orthopedic Center, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice failed to grant timely patient access to medical charts, settling under the Right of Access enforcement push.","event_id":"53cca8b5-8094-4fe1-94b7-e2cb681545be","severity_score":50},{"record_id":"490ab70a-62e8-4030-be4c-609e8d420c18","source_event_group_id":"b8bf8727-ae7b-4fcd-b9c5-0bcdcdfc5f5f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of New Haven Health Department","state":"CT","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Former employee accessed and downloaded ePHI onto a personal USB drive after termination. OCR found lack of password sharing prevention and deficient termination access revocation.","event_id":"b8bf8727-ae7b-4fcd-b9c5-0bcdcdfc5f5f","severity_score":65},{"record_id":"1a1e9ef1-530d-416a-9704-d116d2c72f60","source_event_group_id":"4ccd25b3-55f7-417e-8abc-2052ead5344b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Clinical Dermatology, P.C.","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology practice failed to fulfill a patient's repeated requests for electronic records until OCR initiated an investigation.","event_id":"4ccd25b3-55f7-417e-8abc-2052ead5344b","severity_score":50},{"record_id":"fff02df5-c975-4ea2-a7cc-d8d7ea4cb65d","source_event_group_id":"9eddb1af-1757-4c98-a23d-0a707f449541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wise Radiology, P.C.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to provide an individual with access to their requested diagnostic imaging films and reports in a timely manner.","event_id":"9eddb1af-1757-4c98-a23d-0a707f449541","severity_score":50},{"record_id":"d625ab07-1aa2-4521-ae39-b7c9ee8b0091","source_event_group_id":"2a98071e-d4b0-4c6d-b7d9-3ed7e5571531","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village of Sugar Grove","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Local government failed to provide an employee/patient access to medical records maintained in connection with health plan coverage.","event_id":"2a98071e-d4b0-4c6d-b7d9-3ed7e5571531","severity_score":50},{"record_id":"b18cbd24-882b-491f-adb0-4252536ee35e","source_event_group_id":"24bbd4b6-c003-4fa5-a1c0-5f0ca2569281","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King's Daughters' Medical Center","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to timely supply diagnostic imaging records upon patient request under the Right of Access Initiative.","event_id":"24bbd4b6-c003-4fa5-a1c0-5f0ca2569281","severity_score":50},{"record_id":"8ea6d435-632e-403f-944d-cc7ca891eee9","source_event_group_id":"cf6d6a98-6561-4f9a-a6b0-c84a80e31734","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Local Initiative Health Authority for Los Angeles County d/b/a L.A. Care Health Plan","state":"CA","individuals_affected":1497,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health plan suffered a breach involving member portal misconfigurations; investigation found systemic failures in risk management, audit controls, and media sanitization.","event_id":"cf6d6a98-6561-4f9a-a6b0-c84a80e31734","severity_score":90},{"record_id":"7688f825-a4e9-48eb-95a5-971f33f925b0","source_event_group_id":"f71a9138-e9cd-45ae-86fb-c5bc61f99b9d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Health Medical Center","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to provide timely access to a mother requesting copies of her minor child's medical records after multiple requests.","event_id":"f71a9138-e9cd-45ae-86fb-c5bc61f99b9d","severity_score":65},{"record_id":"66b26671-4922-4390-917e-ec5fe8f7ecb3","source_event_group_id":"5b0080c0-d4e6-42c1-b030-ae3e388f29dc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Petersburg Pediatrics","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pediatric clinic failed to provide a mother with timely access to her child's medical records following a dispute over record fees.","event_id":"5b0080c0-d4e6-42c1-b030-ae3e388f29dc","severity_score":50},{"record_id":"5b26b5f6-47dd-4b83-848a-051796f31f8e","source_event_group_id":"45e59fe1-0ebb-4fb5-88ef-3f812124aedc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Speech Pathology","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR Right of Access initiative settlement after the provider repeatedly refused to deliver medical records to a mother on behalf of her child.","event_id":"45e59fe1-0ebb-4fb5-88ef-3f812124aedc","severity_score":50},{"record_id":"46c61d56-9fea-4554-818b-4e1374ae5aec","source_event_group_id":"ad24fb94-dd5f-4ede-88ee-42e7144ea41a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Medical Center","state":"NY","individuals_affected":3,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospital permitted news media personnel access to COVID-19 treatment areas and allowed filming of patients without obtaining prior written HIPAA authorizations.","event_id":"ad24fb94-dd5f-4ede-88ee-42e7144ea41a","severity_score":50},{"record_id":"40b91aea-bf01-491c-96f9-76b01b905044","source_event_group_id":"579c8c4b-083f-4ff6-abb6-0623b5b8fb1b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes, Endocrinology & Lipid Associates, P.C.","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice failed to provide an individual with a copy of their protected health information in violation of the HIPAA Right of Access standard.","event_id":"579c8c4b-083f-4ff6-abb6-0623b5b8fb1b","severity_score":50},{"record_id":"1338bf5f-845b-4eb9-9a9c-2f5de4966138","source_event_group_id":"eb2e3d4e-bcc4-400a-b123-c9d0b07be4be","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"National Spine & Pain Centers d/b/a MD Spine Solutions","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pain clinic failed to respond to a patient request for medical records within the allowable 30-day timeframe under the Right of Access.","event_id":"eb2e3d4e-bcc4-400a-b123-c9d0b07be4be","severity_score":50},{"record_id":"f5834aa0-f589-45cc-b3f2-fd075ff5426d","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health system failed to timely provide medical records to two separate patients upon request, resolving OCR's 14th Right of Access action.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"9112f1a9-a69d-4dd5-a4a9-f1f904885ef8","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services d/b/a Agape Health Services","state":"NC","individuals_affected":1263,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Federally qualified health center failed to conduct risk analyses, implement risk management plans, or establish security awareness training. Settled after breach notice of impermissible disclosure.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"79cf2dd7-282c-4a5d-b85a-e95b828a6b74","source_event_group_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Health System (Public Health Trust of Miami-Dade County)","state":"FL","individuals_affected":24136,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple HIPAA violations were uncovered across several years, including lost paper records, employee snooping into NFL player Jason Pierre-Paul's medical records, and leaking to media. OCR imposed a CMP for long-standing compliance failures and delayed notifications.","event_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","severity_score":90},{"record_id":"45580e45-19ad-4d71-8ccd-9c8a749a1464","source_event_group_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York and Presbyterian Hospital & Trustees of Columbia University in the City of New York","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and Columbia University paid a combined $4.8 million ($3.3M NYP, $1.5M Columbia) after a personally-owned server deactivated firewall protections, exposing records of 6,800 patients on Internet search engines.","event_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","severity_score":90},{"record_id":"11a42281-869b-4e89-888d-2423dc3d91a1","source_event_group_id":"23f98213-a40c-4c71-bc1d-d63b37015530","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Authority of the City of Los Angeles (HACLA)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Second enforcement action under the HIPAA Right of Access Initiative; the public housing authority failed to timely furnish requested medical records to a tenant/patient.","event_id":"23f98213-a40c-4c71-bc1d-d63b37015530","severity_score":50},{"record_id":"553f1c8e-395d-4995-8127-079eaa398e10","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Foundation","state":"MA","individuals_affected":3531,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI agreed to pay $1.5 million after an unencrypted personal laptop containing patient health information was stolen, revealing systemic non-compliance with Security Rule risk analysis requirements.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"2f4dbb47-196a-45aa-8720-4a2b143336dc","source_event_group_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Regents of the University of California","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System agreed to pay $865,500 following allegations that unauthorized employees repeatedly snooped on the electronic medical records of celebrity patients without a legitimate medical reason.","event_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","severity_score":80},{"record_id":"2e2bc52a-ce6f-4dd4-a353-711e61f449eb","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BlueCross BlueShield of Tennessee","state":"TN","individuals_affected":1023209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled for $1.5 million after 57 unencrypted hard drives containing audio recordings and PHI of over one million individuals were stolen from a leased facility.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"c31b909d-a997-4b33-8e71-9bc6b34a9ddb","source_event_group_id":"ad1cd91d-40d9-4c7b-b83a-d1204f211083","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bay Area Psychological Consultants","state":"FL","individuals_affected":5679,"breach_submission_date":"2026-10-01","enforcement_action_date":null,"summary":"","event_id":"ad1cd91d-40d9-4c7b-b83a-d1204f211083","severity_score":50},{"record_id":"65e0cbcf-f489-4da1-83e8-3a170416dc6f","source_event_group_id":"30f8f7c8-4b1a-4457-a999-a4d182a8b28f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Franklin/Fulton Mental Health/Intellectual & Developmental Disabilities/Early Intervention","state":"PA","individuals_affected":640,"breach_submission_date":"2026-10-05","enforcement_action_date":null,"summary":"","event_id":"30f8f7c8-4b1a-4457-a999-a4d182a8b28f","severity_score":30},{"record_id":"1e249599-058b-4f66-9dce-7f8bb87f7a4d","source_event_group_id":"4c9eee51-ce8d-49da-81af-acf64a732063","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Denver Health Medical Plan","state":"CO","individuals_affected":238083,"breach_submission_date":"2026-10-01","enforcement_action_date":null,"summary":"","event_id":"4c9eee51-ce8d-49da-81af-acf64a732063","severity_score":85},{"record_id":"e914f5a4-46ed-49c1-861e-a0aba8a8a37a","source_event_group_id":"eebdcde6-19cf-4780-b2f5-b4a1ee30fa6c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wichita Family Dental","state":"KS","individuals_affected":1273,"breach_submission_date":"2026-09-11","enforcement_action_date":null,"summary":"","event_id":"eebdcde6-19cf-4780-b2f5-b4a1ee30fa6c","severity_score":50},{"record_id":"f105c7f0-1adc-4934-a66c-575ed198c081","source_event_group_id":"57164c2b-9eb3-4b2a-a2c3-1bdd32ec7da3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care Authority of the City of Anniston","state":"AL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving an investigation finding that the regional medical center failed to provide timely access to records requested by a patient representative.","event_id":"57164c2b-9eb3-4b2a-a2c3-1bdd32ec7da3","severity_score":65},{"record_id":"ec5caa4c-9dfb-4f8d-9991-510d8a186a02","source_event_group_id":"8634600f-8cdd-4cb0-a127-d41a3fb0c6b4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Optum Health Care Solutions, LLC","state":"MN","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR enforcement action resolving comprehensive HIPAA Security Rule investigations into inadequate perimeter defenses, lack of multi-factor authentication, and deficiency in ongoing risk analysis.","event_id":"8634600f-8cdd-4cb0-a127-d41a3fb0c6b4","severity_score":90},{"record_id":"d4ce9e61-f106-4216-a1c7-443ee9cf17c9","source_event_group_id":"752d2eab-f7e3-4af2-95fd-929cdc8d2827","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Plastic Surgery Associates of South Dakota, P.C.","state":"SD","individuals_affected":10200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement following a ransomware incident finding lack of multi-factor authentication, inadequate risk analysis, and failure to enter business associate agreements with IT vendors.","event_id":"752d2eab-f7e3-4af2-95fd-929cdc8d2827","severity_score":65},{"record_id":"c88545b6-400f-452d-9bb5-39da49366d9d","source_event_group_id":"37689723-4e80-4c4c-a196-b19656c60fe4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"American Academy of Ophthalmology","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement addressing prolonged failure to provide diagnostic ophthalmic records to an authorized patient representative.","event_id":"37689723-4e80-4c4c-a196-b19656c60fe4","severity_score":50},{"record_id":"b70a818e-d0b9-43e7-b012-66ef288aa5a9","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology, P.C.","state":"MA","individuals_affected":17740,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement following a breach where specimen collection bottles with patient labels were improperly disposed of in an unsecure outdoor dumpster.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":65},{"record_id":"bcf84c90-2522-45ee-9621-c86a6fb55110","source_event_group_id":"cf6d6a98-6561-4f9a-a6b0-c84a80e31734","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Local Initiative Health Authority for Los Angeles County","state":"CA","individuals_affected":70500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR settled with the largest publicly operated health plan in the country after multiple breaches and an investigation revealed systemic noncompliance with Security Rule risk analysis and evaluation requirements.","event_id":"cf6d6a98-6561-4f9a-a6b0-c84a80e31734","severity_score":90},{"record_id":"aaa27274-3499-4ac6-9ac0-04581ba9fe28","source_event_group_id":"cae7c69e-caf5-4a59-a0e9-661aa9fa670c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Donald Brockley, D.D.S.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement after a dental provider refused and delayed providing patient dental records upon request.","event_id":"cae7c69e-caf5-4a59-a0e9-661aa9fa670c","severity_score":50},{"record_id":"92e98f0b-fcbf-40d9-ba8d-5ae447106ce4","source_event_group_id":"432f1541-7ad6-4f24-ae05-b2bf33bfb400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Health, Inc.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forty-third Right of Access settlement resolving a complaint regarding failure to provide a patient access to her medical records.","event_id":"432f1541-7ad6-4f24-ae05-b2bf33bfb400","severity_score":50},{"record_id":"88153779-e5b1-4b19-9387-56514faacf00","source_event_group_id":"96d2acc1-8148-4503-a56a-0af99f29d255","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northland Clinic","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Twenty-eighth Right of Access settlement resolving an investigation into an unfulfilled record request.","event_id":"96d2acc1-8148-4503-a56a-0af99f29d255","severity_score":50},{"record_id":"6ece2bd6-8301-4a3e-9b16-769ab8c841d9","source_event_group_id":"aac61528-d40a-4405-87ef-5fcbb443e404","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Healthcare","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement under Right of Access Initiative resolving a complaint that a federally qualified health center failed to provide timely copies of medical records.","event_id":"aac61528-d40a-4405-87ef-5fcbb443e404","severity_score":50},{"record_id":"4b425bca-19ba-4433-bd89-8be18b07e9a4","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health & Hospital Authority","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement resolving a complaint that Denver Health failed to provide an individual with access to requested records within 30 days.","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":50},{"record_id":"1a9d34ae-0eeb-4a73-bc29-d0e837aa228c","source_event_group_id":"be4d17b5-e4e4-4966-a900-5b3e9936758b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wake Research Associates LLC","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement resolving an investigation that confirmed repeated failure to provide a patient with access to clinical trial records.","event_id":"be4d17b5-e4e4-4966-a900-5b3e9936758b","severity_score":50},{"record_id":"e189c62f-4cfe-4783-a36f-20c85e012f4e","source_event_group_id":"637f949e-2a01-4733-979f-1b179ea0f330","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Medical Institute","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement resolving repeated complaints regarding delays and excessive fee demands when releasing patient records.","event_id":"637f949e-2a01-4733-979f-1b179ea0f330","severity_score":65},{"record_id":"d695b52f-76af-4d82-8e94-42d53652b207","source_event_group_id":"81ddcf2b-a68f-416a-ad43-f4970aa2bbbe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Rajesh Patel, M.D.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eleventh Right of Access settlement where a physician failed to provide a patient timely access to her complete medical records despite repeated requests.","event_id":"81ddcf2b-a68f-416a-ad43-f4970aa2bbbe","severity_score":50},{"record_id":"cee6b0cc-a54c-45a8-8609-3ef21ce682fe","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Twelfth Right of Access settlement resolving a patient's complaint that Elite Dental failed to timely provide a copy of her medical records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"974b5ef5-f664-4556-abe1-ceef1d876688","source_event_group_id":"dd714b17-3dfe-4372-99d4-73319988014e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Heart Consultants, P.C.","state":"NE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Thirteenth Right of Access settlement after a medical practice failed to provide a patient with requested medical records within the required statutory timeframe.","event_id":"dd714b17-3dfe-4372-99d4-73319988014e","severity_score":50},{"record_id":"61f0b7be-e67a-4d12-9200-4c681d4a1ea7","source_event_group_id":"f9f66984-da3a-47f9-9194-62dfaff991d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allied Cycle & Physical Therapy","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement resolving a failure to furnish medical records to a patient within thirty days of request.","event_id":"f9f66984-da3a-47f9-9194-62dfaff991d3","severity_score":50},{"record_id":"d96f49d9-f023-48c5-b1a3-cfd53a4092eb","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services, Inc.","state":"MA","individuals_affected":206695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"First-ever OCR settlement involving a ransomware attack, resolving findings that the business associate lacked continuous monitoring, risk analysis, and information system activity reviews.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":50},{"record_id":"d5e01ad9-a8c2-480a-8298-3d66cda7e317","source_event_group_id":"eab88e07-f07b-4b37-b03b-1dd3f9b901ae","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside University Health System","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tenth Right of Access settlement resolving a complaint regarding failure to provide a patient with timely access to requested medical records.","event_id":"eab88e07-f07b-4b37-b03b-1dd3f9b901ae","severity_score":50},{"record_id":"c08350de-266b-4349-baa3-5108d2106289","source_event_group_id":"faf70570-a975-4b37-8e65-c3cd05fde199","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Park Nicollet Health Services","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fifth Right of Access settlement where the clinic failed to provide a patient with timely access to her diagnostic mammography records.","event_id":"faf70570-a975-4b37-8e65-c3cd05fde199","severity_score":50},{"record_id":"a84fd5c3-c41e-4ad8-867c-05d0c7106441","source_event_group_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jacob and Associates","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving a Right of Access complaint where a psychiatric practice failed to provide a patient with timely access to her medical records.","event_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","severity_score":50},{"record_id":"78c8e176-848e-42d3-b2ae-588ebc55eb83","source_event_group_id":"a433023f-ce1e-4c14-b5f0-3016fdaf76d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wise Psychiatry","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sixth Right of Access settlement involving an individual's delayed access to psychiatric records.","event_id":"a433023f-ce1e-4c14-b5f0-3016fdaf76d2","severity_score":50},{"record_id":"6fa597ee-22aa-4f5d-b26b-55f57441f24a","source_event_group_id":"25819805-1b57-4d20-ad6d-c08147325224","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"iHealth Solutions, LLC","state":"MD","individuals_affected":267,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement with a business associate that left an unencrypted server containing patients' protected health information publicly accessible over the internet.","event_id":"25819805-1b57-4d20-ad6d-c08147325224","severity_score":50},{"record_id":"605d8344-5876-4a73-84a5-b8f617bb4e8b","source_event_group_id":"66fce6f1-ea87-4a31-8623-17a312e85cc7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rainier Surgical, Inc.","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving Right of Access noncompliance where an individual experienced significant delays receiving copies of their records.","event_id":"66fce6f1-ea87-4a31-8623-17a312e85cc7","severity_score":50},{"record_id":"51df1cbb-2650-4dec-97e0-6a6580135d1c","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ninth Right of Access settlement resolving a complaint that the hospital took over 22 months and six requests to provide a patient's medical records.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"25ec716a-c822-48df-b0d7-4826b2b98a6a","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Twentieth Right of Access settlement following a parent's complaint that the medical center failed to furnish medical records in a timely manner.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":50},{"record_id":"f7fff1ee-11a0-47f0-a993-f938995e9364","source_event_group_id":"539c6a76-35a5-4cc8-b26c-c348c134c921","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care Authority for Baptist Health","state":"AL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving an investigation concerning online PHI disclosures without authorization.","event_id":"539c6a76-35a5-4cc8-b26c-c348c134c921","severity_score":50},{"record_id":"f396e809-a283-4e2f-90b2-43b77483f381","source_event_group_id":"a6d13584-cc35-4e8d-bb5c-dbdabf0bbff1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village South, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eighteenth Right of Access settlement resolving a complaint regarding failure to provide a former client access to treatment records.","event_id":"a6d13584-cc35-4e8d-bb5c-dbdabf0bbff1","severity_score":50},{"record_id":"dfe49c39-3d6a-4bfe-8899-5051d5b35843","source_event_group_id":"2d888be6-6288-40ad-9cd8-7ddeb2505627","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Authority of the County of King","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Third Right of Access settlement where a patient was denied timely access to their records despite multiple requests.","event_id":"2d888be6-6288-40ad-9cd8-7ddeb2505627","severity_score":50},{"record_id":"cb97062a-f86b-4654-b8f1-222fcffa43db","source_event_group_id":"ed2296d1-72f6-4ad7-b5f0-7d4b70768770","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MedEvolve, Inc.","state":"AR","individuals_affected":230572,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement with a HIPAA business associate after an unsecured FTP server containing ePHI of over 230,000 individuals was left publicly accessible on the internet without access controls or risk analysis.","event_id":"ed2296d1-72f6-4ad7-b5f0-7d4b70768770","severity_score":65},{"record_id":"792df253-934a-4867-9bbc-9b9b0b0f3f8d","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCHS settled potential HIPAA Security Rule violations after failing to conduct any risk analysis, implement security awareness training, or establish security policies and procedures.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"5e572e57-2f81-42e1-b8da-1b65282afc19","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Nineteenth Right of Access settlement involving a patient's prolonged struggle to obtain their clinical documentation from a dermatology practice.","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"5902b7f4-d80b-4631-876a-c95b9904c776","source_event_group_id":"6c9f2506-0210-4900-ad7e-d97881bdb54a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allina Health System","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fourth Right of Access settlement involving multiple failures to provide a parent with timely copies of her child's medical records.","event_id":"6c9f2506-0210-4900-ad7e-d97881bdb54a","severity_score":50},{"record_id":"260d66ee-ba11-4b83-b323-afb89c41319c","source_event_group_id":"efa5a560-a230-42f2-97be-4d992fad9715","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Deaconess Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Second Right of Access Initiative settlement resolving a complaint that BIDMC failed to provide a personal representative with timely access to a patient's medical records.","event_id":"efa5a560-a230-42f2-97be-4d992fad9715","severity_score":50},{"record_id":"01ab4212-daf5-475f-9c26-b7e7287874eb","source_event_group_id":"fa5dd119-2e01-4c45-a18d-11606f03ea9a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"David M. Stern, M.D.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forty-second Right of Access settlement resolving a complaint regarding failure to provide a patient access to her medical records.","event_id":"fa5dd119-2e01-4c45-a18d-11606f03ea9a","severity_score":50},{"record_id":"6d877641-78ba-4b2f-a14d-04b87a008d6a","source_event_group_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospitalists PL","state":"FL","individuals_affected":9227,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACH contracted with an individual who posted patient medical records to an unauthorized public website without entering into a Business Associate Agreement. OCR discovered ACH had failed to execute BAAs or conduct an enterprise risk analysis.","event_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","severity_score":65},{"record_id":"f81b0ae9-9794-493f-a58b-794c8d2f785f","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care of Minnesota","state":"MN","individuals_affected":9497,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop was stolen from a business associate's workforce member's locked vehicle. OCR found that North Memorial failed to execute a Business Associate Agreement before granting access to ePHI and failed to complete an enterprise-wide risk analysis.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"c49f552e-15cd-4638-8c3d-28dc4872411b","source_event_group_id":"25ea1023-5832-4261-a6f4-15dc8c38a0fd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cascade Eye & Skin Centers, P.C.","state":"WA","individuals_affected":291000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ransomware settlement after a specialty medical group suffered a cyberattack that encrypted clinical records, finding failure to conduct risk analysis and failure to monitor activity.","event_id":"25ea1023-5832-4261-a6f4-15dc8c38a0fd","severity_score":65},{"record_id":"12390c9e-2a5b-448b-b1ca-e0cfdd2d8fc6","source_event_group_id":"9728d6e2-729e-46af-ab29-d5071cc20647","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Great Expressions Dental Centers","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving a Right of Access complaint where the provider conditioned providing records on payment of a $170 copying fee contrary to HIPAA reasonable fee limits.","event_id":"9728d6e2-729e-46af-ab29-d5071cc20647","severity_score":50},{"record_id":"1c685706-1c1b-4458-ab6b-befe1e65f74d","source_event_group_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lincare Inc.","state":"FL","individuals_affected":278,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An employee left physical documents containing PHI behind in a former home, exposing the records to an unauthorized individual. Lincare contested the charges, but an Administrative Law Judge upheld OCR's determination and penalty for inadequate physical safeguards and policies.","event_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","severity_score":65},{"record_id":"1862e89b-288a-49dc-ba42-38a15fd1305a","source_event_group_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete P.T., Pool & Physical Therapy, Inc.","state":"CA","individuals_affected":70,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The physical therapy clinic posted patient testimonials and PHI on its website and social media channels without valid HIPAA authorizations. OCR found that the provider had failed to establish policies and procedures regarding marketing and patient authorizations.","event_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","severity_score":50},{"record_id":"c6ff812c-376f-4b08-b23a-37f7afae2ca5","source_event_group_id":"74407a03-bc76-43e9-9d20-b7d266c18c96","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Clinic Hospital, Inc.","state":"MA","individuals_affected":599,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop that operated portable CT equipment was stolen from an unlocked radiology room. OCR determined that Lahey failed to conduct a comprehensive risk analysis, safeguard equipment, or implement user unique identifiers.","event_id":"74407a03-bc76-43e9-9d20-b7d266c18c96","severity_score":80},{"record_id":"893594d4-77da-4288-8f09-d142edacd8f4","source_event_group_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County, Washington","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ePHI containing testing and clinical information was inadvertently made accessible to the public on an open county server. The settlement marked OCR's first enforcement action against a county government, highlighting deficiencies in hybrid entity designations and general security policies.","event_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","severity_score":65},{"record_id":"502b1629-d88c-4249-ab24-1b1c89b50e63","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":405,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop was stolen from Concentra's Springfield Medical Center, revealing systematic delays and failures in encrypting mobile workstations despite identified risks. Concentra agreed to a $1.725 million settlement and a robust corrective action plan.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"384ef0aa-cfd6-45ae-a261-98b923c8425a","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, P.C. (APDerm)","state":"MA","individuals_affected":2200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted USB flash drive containing 2,200 patient records was stolen from the vehicle of an APDerm employee. OCR found APDerm lacked written policies and procedures to comply with the Breach Notification Rule and had never conducted a risk assessment.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"6bcd68a4-20ac-4dcb-800f-8fd74bba62eb","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center","state":"CA","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospital leadership disclosed a patient's confidential medical records to local media and multiple newspaper editors to refute assertions in a published news article. OCR penalized Shasta Regional $275,000 for impermissibly disclosing PHI and failing to sanction involved supervisory personnel.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":65},{"record_id":"34491eef-dedd-40f1-b692-522d3ef9b40a","source_event_group_id":"26603acd-008d-4c07-a184-3f5d2a297a88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho State University (ISU)","state":"ID","individuals_affected":17500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Firewall protections were inadvertently disabled on servers at the ISU Pocatello Family Medicine Clinic, leaving patient records accessible on the public Internet for ten months. ISU settled with OCR for $400,000 due to failure to conduct continuous risk assessments and implement adequate technical safeguards.","event_id":"26603acd-008d-4c07-a184-3f5d2a297a88","severity_score":65},{"record_id":"113c3a94-9453-4e86-958e-2f1f9736bb32","source_event_group_id":"e8a01d8d-c447-48df-9a09-c2bbee315f7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"WellPoint, Inc. (now Elevance Health)","state":"IN","individuals_affected":612402,"breach_submission_date":null,"enforcement_action_date":null,"summary":"WellPoint failed to implement adequate security safeguards on an online application tracker database, leaving over 612,000 applicants' PHI accessible over the Internet without authentication. OCR found the insurer failed to verify identity access controls or perform timely technical vulnerability evaluations.","event_id":"e8a01d8d-c447-48df-9a09-c2bbee315f7f","severity_score":90},{"record_id":"0f1ee18e-c941-41bf-887f-4207ff01562f","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity returned multiple leased photocopiers to a leasing company without wiping the hard drives, which contained hundreds of thousands of electronic patient records. Affinity settled for $1.215 million and agreed to a CAP after failing to assess security risks inherent in leased multi-function equipment.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"a7ead412-9fb9-4a38-802a-bf0fbfd495a4","source_event_group_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of North Idaho (HONI)","state":"ID","individuals_affected":441,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR reached its first settlement involving a breach affecting fewer than 500 individuals after an unencrypted laptop was stolen from an employee's vehicle. HONI agreed to pay $50,000 and implement a corrective action plan to remediate its lack of risk assessments and mobile device policies.","event_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","severity_score":50},{"record_id":"2c5b85e5-161d-4aff-81d9-47c85029355e","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Foundation, Inc. (MEEI)","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop containing patient names, diagnoses, and medical histories was stolen from an MEEI physician while traveling abroad. OCR found that MEEI failed to conduct an enterprise-wide risk analysis and did not properly safeguard or encrypt portable media devices.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"cd6576f1-043e-434a-b37d-0128aba785cd","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services (DHSS)","state":"AK","individuals_affected":501,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A portable USB hard drive containing ePHI was stolen from the vehicle of a state contractor/employee. The OCR investigation uncovered widespread compliance gaps including outdated policies, lack of workforce training, and absence of encryption or risk assessments.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"76a9353d-7fe0-4cda-be76-cd92bd172a6c","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BlueCross BlueShield of Tennessee (BCBST)","state":"TN","individuals_affected":1023209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fifty-seven unencrypted hard drives containing audio recordings and PHI of over one million individuals were stolen from a leased facility closet. BCBST settled for $1.5 million in the first enforcement action resulting directly from the HITECH Breach Notification Rule.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"267a806e-bbeb-4873-b7b8-e4760738f103","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery, P.C.","state":"AZ","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A physician practice posted clinical and surgical appointments on an Internet-based calendar without business associate agreements or appropriate security safeguards. OCR found extensive non-compliance including lack of a security risk analysis and missing policies, settling for $100,000.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"a36db680-fb7a-4c99-9a6a-754f643d13b5","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System, Inc.","state":"IN","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview employees delivered 71 cardboard boxes containing paper medical records of thousands of patients to the driveway and porch of a retiring physician's unattended residence. OCR reached an $800,000 settlement due to gross failure to maintain physical custody and safeguard records during transport.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"99ab76c4-3dc8-41d5-869a-773e5b1660e6","source_event_group_id":"3f26164d-5782-4a76-885b-baca013b6760","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation and Massachusetts General Physicians Organization (Mass General)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An employee left paper billing encounter forms containing sensitive PHI (including infectious disease statuses) for 192 patients on a subway train. Mass General agreed to pay $1 million and establish a corrective action plan addressing physical security, remote record transport, and mandatory workforce retraining.","event_id":"3f26164d-5782-4a76-885b-baca013b6760","severity_score":80},{"record_id":"987c7911-4019-4415-81b6-cdcaf133b04d","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services (ACMHS)","state":"AK","individuals_affected":2743,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Malware infiltrated ACMHS systems, compromising the ePHI of 2,743 individuals because ACMHS failed to patch known operating system vulnerabilities or update its antivirus software. ACMHS settled with OCR for $150,000 and agreed to an IT infrastructure remediation plan.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"88df8269-00b4-4919-9ba9-71ed536d6cc9","source_event_group_id":"ec720041-fde3-48e8-b892-0903352f472f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"As part of the joint NYP/Columbia investigation regarding public search engine exposure of 6,800 patients' records, Columbia settled for $1.5 million. OCR cited failures in server authorization, absence of prior security review before software changes, and insufficient risk management.","event_id":"ec720041-fde3-48e8-b892-0903352f472f","severity_score":90},{"record_id":"61c6166b-5bea-49ad-b7a3-1dd277022f31","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Regents of the University of California (UCLA Health System)","state":"CA","individuals_affected":40,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated unauthorized access by hospital employees into the electronic health records of numerous celebrity patients. UCLA Health System settled for $865,500 and agreed to an extensive CAP requiring enhanced access controls, auditing mechanisms, and disciplinary sanctions for snooping.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"3b9a4308-aa92-4fa6-b01d-0f9943f80639","source_event_group_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rite Aid Corporation","state":"PA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR and FTC investigated reports that Rite Aid stores disposed of patient labels and records containing PHI in unlocked commercial dumpsters. Rite Aid agreed to pay $1 million and implement strict disposal policies, employee training, and internal monitoring.","event_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","severity_score":80},{"record_id":"1f86c3c4-9943-404c-aa90-c452fe0841c1","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George's County","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HHS OCR issued its first-ever Civil Money Penalty after Cignet violated 41 patients' rights to access their medical records and refused to cooperate with OCR's investigation. The penalty included $1.3 million for failing to provide records and $3 million for willful neglect and non-cooperation.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"fc349eb5-852d-4cef-a632-dd473ff25d43","source_event_group_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Health & Services","state":"WA","individuals_affected":386000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HHS OCR's first-ever comprehensive settlement agreement arose after multiple electronic media devices containing unencrypted ePHI, including backup tapes and optical disks, were stolen from employees' vehicles and homes. Providence agreed to pay $100,000 and implement a corrective action plan to overhaul physical and technical safeguards for portable media.","event_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","severity_score":50},{"record_id":"e8803617-c7a5-4b76-b05b-452071828e2e","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Investigation revealed CVS retail pharmacies disposed of sensitive paper records containing PHI, including prescription information, in open dumpsters accessible to the public. CVS agreed to pay $2.25 million in a joint settlement with OCR and the FTC to resolve Privacy Rule violations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"e1781c19-074d-45f7-bd2a-08b1f59cf273","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York and Presbyterian Hospital (NYP)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A shared server deactivated by a Columbia physician caused ePHI of 6,800 patients to be indexed by Google and other search engines. NYP agreed to pay $3.3 million as its portion of the joint $4.8 million resolution for failing to safeguard system configurations and conduct risk assessments.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"70af6522-30e7-4374-b6b8-bdc0af72b663","source_event_group_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"QCA Health Plan, Inc.","state":"AR","individuals_affected":148,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop containing ePHI was stolen from an employee's vehicle parked outside their home. OCR determined QCA had failed to implement device encryption policies or conduct adequate inventory and device management controls.","event_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","severity_score":65},{"record_id":"e49b952d-bced-4a1f-b6e5-d9fefce9d2cd","source_event_group_id":"e136805a-18ab-4d12-be6d-5aa062deed3c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Paylogix LLC","state":"NY","individuals_affected":41739,"breach_submission_date":"2026-09-18","enforcement_action_date":null,"summary":"","event_id":"e136805a-18ab-4d12-be6d-5aa062deed3c","severity_score":70},{"record_id":"7d636435-e7c1-4ebd-9d68-a3c59af245f3","source_event_group_id":"b51d39f3-aa70-428a-8a75-a3280041e16a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lift Dental PLLC dba Artistic Smiles","state":"CO","individuals_affected":3735,"breach_submission_date":"2026-09-18","enforcement_action_date":null,"summary":"","event_id":"b51d39f3-aa70-428a-8a75-a3280041e16a","severity_score":50},{"record_id":"7031431f-b56c-47e0-82b6-8d42da7d9c64","source_event_group_id":"ea234864-650c-4310-94eb-2bbc5cf33f40","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tarboro Family Dentistry","state":"NC","individuals_affected":4713,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"ea234864-650c-4310-94eb-2bbc5cf33f40","severity_score":50},{"record_id":"f94a2ebc-de05-4692-bdb4-1a37d5d89a22","source_event_group_id":"20f3a4bf-d7cf-497c-9e4e-222b0591db55","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Kenaitze Indian Tribe","state":"AK","individuals_affected":9319,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"20f3a4bf-d7cf-497c-9e4e-222b0591db55","severity_score":50},{"record_id":"ccdbfb9b-6fa1-4b11-a98d-0aca8f358851","source_event_group_id":"f2810231-23a8-4429-a3f1-bd9c09f8f413","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Eskenazi Health","state":"IN","individuals_affected":1604,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"f2810231-23a8-4429-a3f1-bd9c09f8f413","severity_score":50},{"record_id":"7d3d2dd3-196d-48e1-a92c-95586da5fede","source_event_group_id":"ca93e0bc-84aa-4180-96e0-fee4a66a07b0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Physicians, Inc.","state":"OH","individuals_affected":885,"breach_submission_date":"2026-10-01","enforcement_action_date":null,"summary":"","event_id":"ca93e0bc-84aa-4180-96e0-fee4a66a07b0","severity_score":30},{"record_id":"33e89e00-3bd8-4def-acfe-45f6e4c2205d","source_event_group_id":"48fcc718-44b9-496e-bf4a-64994f822244","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Martin Brother Distributing Company, Inc.","state":"IA","individuals_affected":2303,"breach_submission_date":"2026-09-29","enforcement_action_date":null,"summary":"","event_id":"48fcc718-44b9-496e-bf4a-64994f822244","severity_score":50},{"record_id":"1b9689d9-d5a8-4376-afcc-719e578975c0","source_event_group_id":"7afa36c2-9985-493d-af7c-db88655696cc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ultramobile Imaging","state":"NY","individuals_affected":75000,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"7afa36c2-9985-493d-af7c-db88655696cc","severity_score":70},{"record_id":"e5705a79-a857-43ed-858a-07d00abb0729","source_event_group_id":"81f74af3-1d0b-4871-8862-3fe876d77b4d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tarter Krinsky & Drogin LLP","state":"NY","individuals_affected":196645,"breach_submission_date":"2026-09-15","enforcement_action_date":null,"summary":"","event_id":"81f74af3-1d0b-4871-8862-3fe876d77b4d","severity_score":85},{"record_id":"e0ec13ca-3842-4dfb-bea5-33a646572b4f","source_event_group_id":"7be44428-2a25-43c7-983e-40982e1a6554","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Young C. Park DDS., PC d/b/a Park Dental","state":"VA","individuals_affected":12400,"breach_submission_date":"2026-09-18","enforcement_action_date":null,"summary":"","event_id":"7be44428-2a25-43c7-983e-40982e1a6554","severity_score":70},{"record_id":"cad31546-d935-4232-8fa0-219b89be0585","source_event_group_id":"21d50db2-51d0-4038-932b-5b756b89d43a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ridgeway Pharmacy, Ltd","state":"MT","individuals_affected":258920,"breach_submission_date":"2026-09-21","enforcement_action_date":null,"summary":"","event_id":"21d50db2-51d0-4038-932b-5b756b89d43a","severity_score":85},{"record_id":"c8acbb9e-71fb-442f-a74b-f311c5778cc2","source_event_group_id":"fc27773b-3019-4f45-b7b3-54db434a0d9f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prescribe FIT, Inc.","state":"OH","individuals_affected":4537,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"fc27773b-3019-4f45-b7b3-54db434a0d9f","severity_score":50},{"record_id":"a2fe4723-62ab-4325-af80-4aca625bb9c5","source_event_group_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trinity Health","state":"MI","individuals_affected":33234,"breach_submission_date":"2026-09-30","enforcement_action_date":null,"summary":"","event_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","severity_score":70},{"record_id":"9b07b86d-81c7-4895-af32-580c0214c303","source_event_group_id":"f00fb2db-1be2-4aa0-b67a-14f8d5c18473","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Viking Enterprises, Inc. d/b/a City Ambulance Service","state":"TX","individuals_affected":14324,"breach_submission_date":"2026-08-31","enforcement_action_date":null,"summary":"","event_id":"f00fb2db-1be2-4aa0-b67a-14f8d5c18473","severity_score":70},{"record_id":"51630b9a-bae3-4de9-9bf0-173459acf5a0","source_event_group_id":"7b947581-ecde-4093-927e-53c06380a0f4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Paradigm Healthcare Services","state":"CA","individuals_affected":970403,"breach_submission_date":"2026-09-14","enforcement_action_date":null,"summary":"","event_id":"7b947581-ecde-4093-927e-53c06380a0f4","severity_score":95},{"record_id":"3e665790-f023-44e6-9612-fc41b2eed101","source_event_group_id":"f2fb100c-6493-48d7-b69d-7179497037b9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Osceola Mental Health Inc. dba Park Place Behavioral Healthcare","state":"FL","individuals_affected":71702,"breach_submission_date":"2026-08-26","enforcement_action_date":null,"summary":"","event_id":"f2fb100c-6493-48d7-b69d-7179497037b9","severity_score":70},{"record_id":"0b55f938-2a98-4922-9f12-72cbac221954","source_event_group_id":"87c397bf-b32f-4670-bd11-d8f5067deec6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radia Inc., PS","state":"WA","individuals_affected":616,"breach_submission_date":"2026-09-18","enforcement_action_date":null,"summary":"","event_id":"87c397bf-b32f-4670-bd11-d8f5067deec6","severity_score":30},{"record_id":"d38bc833-386c-4c62-88e2-d34a9e2a2164","source_event_group_id":"894ab676-e2ca-4f79-983d-0c90dee41bcf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health Prime International","state":"IL","individuals_affected":501,"breach_submission_date":"2026-09-29","enforcement_action_date":null,"summary":"","event_id":"894ab676-e2ca-4f79-983d-0c90dee41bcf","severity_score":30},{"record_id":"4c073e34-dbc3-4d93-b22e-dc49723a4c15","source_event_group_id":"dab6e9c0-3172-48ca-b3bd-fc9a3c00137a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"New York Psychiatric Services P.C.","state":"NY","individuals_affected":777,"breach_submission_date":"2026-09-23","enforcement_action_date":null,"summary":"","event_id":"dab6e9c0-3172-48ca-b3bd-fc9a3c00137a","severity_score":30},{"record_id":"704a0cff-613b-435f-a4ad-864c3397b378","source_event_group_id":"fba78a24-4f86-475b-b016-e54ced61a578","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Green Ridge Behavioral Health, LLC","state":"MD","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Second OCR ransomware settlement, resolving allegations of failure to perform risk assessments and implement security incident response procedures.","event_id":"fba78a24-4f86-475b-b016-e54ced61a578","severity_score":50},{"record_id":"34db53c9-7cf8-4c74-badc-360024ac4313","source_event_group_id":"88930e11-92ae-4f04-8b11-c61d4881a4d1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alderwood Surgical Center, LLC","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access investigation following an individual's complaint that the surgical facility failed to timely furnish copies of requested records.","event_id":"88930e11-92ae-4f04-8b11-c61d4881a4d1","severity_score":50},{"record_id":"7aa6fb87-2d10-41c5-bba3-5150f1a01283","source_event_group_id":"0763dd47-139d-456e-91ec-9a6937670fea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care Resource Centers LLC","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access violation for failing to provide a patient with access to their medical records.","event_id":"0763dd47-139d-456e-91ec-9a6937670fea","severity_score":65},{"record_id":"776b7293-d1f5-4149-89d0-c141dbb0b513","source_event_group_id":"4b89b0d7-95ad-4522-9624-931bc5febb11","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Healthcare, LLC","state":"OK","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access violation for failing to supply a daughter with her deceased mother's medical records upon request.","event_id":"4b89b0d7-95ad-4522-9624-931bc5febb11","severity_score":50},{"record_id":"55a07ce7-58a9-467a-ae9d-4dd1a9f5c3fe","source_event_group_id":"d6c0bf84-dfc5-47af-a6dc-7d9569b2a091","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northvale Dental Group, P.C.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access violation for failing to provide a patient with their dental records until well after OCR intervened.","event_id":"d6c0bf84-dfc5-47af-a6dc-7d9569b2a091","severity_score":65},{"record_id":"34f07e01-b9b8-451f-ac46-52a097941c7e","source_event_group_id":"57bcc004-0ce9-45a8-babc-3abcad78ae1c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Life Hope Labs, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving failure to timely provide a personal representative with deceased patient diagnostic test records.","event_id":"57bcc004-0ce9-45a8-babc-3abcad78ae1c","severity_score":50},{"record_id":"eed80910-2bd8-436d-85a5-9fd733edc7e9","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology, P.C.","state":"MA","individuals_affected":58106,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled HIPAA Privacy Rule violations after empty specimen containers with labels containing patient PHI were disposed of in unsecured outdoor dumpsters.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":65},{"record_id":"ee0448e4-123b-4141-aa8e-e197ae5b9cff","source_event_group_id":"ab8c2d77-be2b-4d1b-89a2-0b9339023fcd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Des Moines Orthopaedic Surgeons, P.C.","state":"IA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access enforcement action after failing to furnish a patient with requested medical records within 30 days.","event_id":"ab8c2d77-be2b-4d1b-89a2-0b9339023fcd","severity_score":50},{"record_id":"e3356a0c-da4d-4739-bf9c-088e5eeada25","source_event_group_id":"330e4c4f-e0d2-437e-bf28-827a75335c7a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AEGIS Sciences Corporation","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR settled with AEGIS under the Right of Access Initiative for failing to respond timely to a patient request for laboratory test results.","event_id":"330e4c4f-e0d2-437e-bf28-827a75335c7a","severity_score":50},{"record_id":"84654d3d-7cae-431e-9a89-6c9b07d7f00b","source_event_group_id":"d3bcd6f3-93f8-412a-9928-13f3f2cd3445","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Yakima Valley Farm Workers Clinic","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled a Right of Access violation involving substantial delays in responding to patient requests for medical records.","event_id":"d3bcd6f3-93f8-412a-9928-13f3f2cd3445","severity_score":65},{"record_id":"3fed5707-34d9-4bb9-88c9-37e0d94a7c2c","source_event_group_id":"a42dd5c4-ac66-4a78-a2eb-61cf085c9ee4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Not-for-Profit Hospital Corporation","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR issued a $500,000 civil money penalty against United Medical Center for failing to respond to repeated patient requests for medical records and failing to cooperate with OCR.","event_id":"a42dd5c4-ac66-4a78-a2eb-61cf085c9ee4","severity_score":65},{"record_id":"16e4f635-f5fb-41e4-b718-67acd1bb2f92","source_event_group_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Cincinnati Medical Center","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR resolved a Right of Access complaint after UCMC failed to provide records to a patient's designated third-party representative.","event_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","severity_score":50},{"record_id":"fd85641d-248e-4550-944e-8cc666541be1","source_event_group_id":"67757874-95ef-45b5-ba3a-b05108f356c9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Genesis Healthcare, Inc.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement addressing systemic delays in fulfilling nursing home resident and representative requests for medical records.","event_id":"67757874-95ef-45b5-ba3a-b05108f356c9","severity_score":50},{"record_id":"fa9b2765-451f-4d0b-8821-397364d27888","source_event_group_id":"eab88e07-f07b-4b37-b03b-1dd3f9b901ae","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside County Health System","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement addressing failure to provide an individual with timely access to complete medical records under the Right of Access Initiative.","event_id":"eab88e07-f07b-4b37-b03b-1dd3f9b901ae","severity_score":50},{"record_id":"ea5ece3f-b982-4bce-8003-d1fa8438d388","source_event_group_id":"eaaf2a98-a2b0-474b-af88-73e4951b15c1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peter A. Wrobel, M.D., P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access violation after failing to provide patient records until after OCR intervened.","event_id":"eaaf2a98-a2b0-474b-af88-73e4951b15c1","severity_score":50},{"record_id":"d82b02c1-9b24-4871-b273-b5736d212300","source_event_group_id":"4151ffe2-64a4-45c8-a54e-9ca92cebc067","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Midwest Orthopaedic Consultants, S.C.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access complaint after failing to provide a patient access to diagnostic imaging and clinical records within statutory deadlines.","event_id":"4151ffe2-64a4-45c8-a54e-9ca92cebc067","severity_score":50},{"record_id":"bae85d09-c92e-4778-8a78-44fe739fc797","source_event_group_id":"a0c9e6c0-ca75-4ab2-aa28-9a47421b2aa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert Glaser","state":"MO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Investigated under the Right of Access Initiative for failing to give a former patient prompt access to their records.","event_id":"a0c9e6c0-ca75-4ab2-aa28-9a47421b2aa8","severity_score":50},{"record_id":"9bde2bbd-f74f-4955-9a87-e4a363cb4248","source_event_group_id":"85bb74f0-d5ed-4bcd-b67c-9019f46369e1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Great Expressions Dental Centers, P.C.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled failure to provide a patient access to complete dental records under the Right of Access Initiative.","event_id":"85bb74f0-d5ed-4bcd-b67c-9019f46369e1","severity_score":50},{"record_id":"8d3ef828-ad3f-4b6a-a105-308de7f1eda1","source_event_group_id":"78caf4bc-0328-470b-8641-353c7d1badb3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Charities of the Diocese of Albany","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving a Right of Access complaint where the entity delayed providing a patient with requested treatment notes.","event_id":"78caf4bc-0328-470b-8641-353c7d1badb3","severity_score":50},{"record_id":"899f255e-1eee-4cf3-aea7-d2f7659b83a8","source_event_group_id":"77273537-a98f-4d3e-9704-b6b628321709","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"San Joaquin County","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolved multiple complaints that San Joaquin General Hospital failed to grant patients timely access to medical records.","event_id":"77273537-a98f-4d3e-9704-b6b628321709","severity_score":65},{"record_id":"843d79b2-bf4f-412a-8566-b1c9a1c967f2","source_event_group_id":"2772e10c-84a5-43b2-b661-35050ce17c4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of New Haven","state":"CT","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement following a breach where a former employee accessed and downloaded ePHI onto a personal USB drive after termination.","event_id":"2772e10c-84a5-43b2-b661-35050ce17c4d","severity_score":65},{"record_id":"5e6825a1-111c-45fc-bc95-30fd34281542","source_event_group_id":"775fdb53-ea5f-43dd-a5f1-ac4673aa5997","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bio-Reference Laboratories, Inc.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR settled with Bio-Reference Laboratories under the Right of Access initiative for failing to provide timely access to lab results.","event_id":"775fdb53-ea5f-43dd-a5f1-ac4673aa5997","severity_score":65},{"record_id":"3e9fce75-50c2-4e47-a11b-f71f753382eb","source_event_group_id":"bd5538fa-8838-41a8-bdd3-d4e01128c873","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Heritage Valley Health System","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled potential HIPAA Security Rule violations stemming from the NotPetya cyberattack, including failures to conduct risk analysis and contingency planning.","event_id":"bd5538fa-8838-41a8-bdd3-d4e01128c873","severity_score":80},{"record_id":"d9749f38-697d-47fa-9ac2-251c840535c9","source_event_group_id":"918c0afe-ce00-4b6d-9678-76e8e4233fda","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rainrock Treatment Center LLC","state":"OR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement under the Right of Access Initiative for refusing to provide a former patient with copies of their medical records.","event_id":"918c0afe-ce00-4b6d-9678-76e8e4233fda","severity_score":65},{"record_id":"d20b67ad-3800-40f7-803b-69868cc56c16","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc. (MIE)","state":"IN","individuals_affected":3500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MIE, a business associate offering electronic health records, settled with OCR after hackers exploited a known vulnerability to access ePHI of 3.5 million patients. OCR found MIE failed to conduct a comprehensive risk analysis prior to the breach.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":50},{"record_id":"bd2143b5-9288-4aca-a4ef-b182f6a53159","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":3500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolved allegations that the federally qualified health center failed to perform any security risk analysis or implement HIPAA security policies and procedures prior to 2011.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"90725347-8107-465c-aa4c-5b6f802684ff","source_event_group_id":"8d141308-0ec5-429e-a85b-9257cf30ed06","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Clinical Laboratory of San Bernardino, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Right of Access settlement resolving a complaint that the lab failed to provide an individual with access to requested lab reports.","event_id":"8d141308-0ec5-429e-a85b-9257cf30ed06","severity_score":50},{"record_id":"717ec473-bc91-4149-90ac-b90f88fe3429","source_event_group_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital Foundation","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled allegations of Right of Access violations after failing to deliver records to a patient's mother for over a year.","event_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","severity_score":50},{"record_id":"70933794-849f-4c0f-9675-7ae76ddb6bf7","source_event_group_id":"6b16a600-f8b1-4936-8d6c-df9caf314a71","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kingman Hospital Inc.","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agreed to a $10,000 settlement and corrective action plan after failing to timely fulfill a patient's request for their medical records.","event_id":"6b16a600-f8b1-4936-8d6c-df9caf314a71","severity_score":50},{"record_id":"56b2c05f-ef38-465f-a7d9-c9fb7b19f35b","source_event_group_id":"a433023f-ce1e-4c14-b5f0-3016fdaf76d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wise Psychiatry, PC","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolving a complaint that a psychiatric clinic failed to provide a patient access to their health records.","event_id":"a433023f-ce1e-4c14-b5f0-3016fdaf76d2","severity_score":50},{"record_id":"4b2ee616-a150-4b52-8b3f-dbbea85d989c","source_event_group_id":"0b2881c8-bc8b-42ff-8849-2bc2f25d1304","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Caplan Dental Group","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Resolved failure to provide an individual with a copy of their dental records under HIPAA Right of Access.","event_id":"0b2881c8-bc8b-42ff-8849-2bc2f25d1304","severity_score":50},{"record_id":"40aac0b5-d04c-41d1-8b34-58d4e7f0683c","source_event_group_id":"2f0a3714-23b6-4e58-ab9c-c74238bb1963","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Optum Medical Network","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement under the Right of Access Initiative resolving an individual's complaint concerning unreasonable delays in receiving requested medical records.","event_id":"2f0a3714-23b6-4e58-ab9c-c74238bb1963","severity_score":50},{"record_id":"328a20c7-11dd-47cd-9702-21a1a0bd9b09","source_event_group_id":"c22e408b-47d6-40a0-8b12-65d16e0b50b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Health System","state":"FL","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR imposed a $2.154 million civil money penalty following an investigation revealing multiple HIPAA Security and Privacy Rule violations, including loss of paper records, unauthorized employee access, and failure to conduct enterprise-wide risk analysis.","event_id":"c22e408b-47d6-40a0-8b12-65d16e0b50b8","severity_score":90},{"record_id":"0ec11e66-fa31-47a1-81cc-e1421eaeb4e6","source_event_group_id":"01e4a0d5-5017-4ef8-8308-abab1645502b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Intersocietal Accreditation Commission","state":"MD","individuals_affected":291000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Security Rule violations after IAC experienced a cyberattack affecting server data containing patient imaging and diagnostic reports.","event_id":"01e4a0d5-5017-4ef8-8308-abab1645502b","severity_score":65},{"record_id":"0e8919ed-f237-406a-ad87-9cfd24391963","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services, Inc.","state":"MA","individuals_affected":206695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR's first ransomware-specific settlement resolved a breach where unauthorized actors accessed DMS's network via Remote Desktop Protocol.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":50},{"record_id":"0c3d706a-6c87-4bbe-aee7-b379d2c2f348","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled Right of Access failure regarding patient access to diagnostic test and treatment records.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":50},{"record_id":"b5b774b3-7e88-4192-bb2a-5485579bd67c","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":6126,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR imposed a civil money penalty of over $3.2 million after Children's Medical Center experienced breaches in 2009 and 2013 involving stolen unencrypted portable devices. Children's failed to implement risk-management measures and encryption despite prior internal audits recommending it.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"aee01f7a-5c1d-49e2-a8f0-79fb817ab55a","source_event_group_id":"64ece584-6885-4da7-82f2-595a90d0d254","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Hartford, P.C.","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates settled after a doctor spoke to a television reporter about a patient's medical condition and care to defend the practice following a patient complaint, impermissibly disclosing PHI without consent.","event_id":"64ece584-6885-4da7-82f2-595a90d0d254","severity_score":65},{"record_id":"a39b60d4-2763-4194-bd0d-6258d6860a6f","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System (MHHS)","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MHHS agreed to pay $2.4 million after publishing a press release containing a patient's name and disclosing details of a fraudulent identification incident to news outlets and politicians without consent, violating HIPAA privacy rules.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"9eb4d465-9dd1-43e9-b426-d8902caf6c30","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst (UMass)","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMass Amherst agreed to pay $650,000 after malware infected a workstation at its Center for Language, Speech, and Hearing, compromising 1,670 individuals' ePHI. OCR cited UMass for failing to designate hybrid entity components and failing to conduct a risk analysis.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"9b8569f8-723f-4b92-8e06-0517c6bca520","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas M.D. Anderson Cancer Center","state":"TX","individuals_affected":34883,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An ALJ granted summary judgment and imposed a $4.3 million penalty on MD Anderson for failing to encrypt portable devices containing ePHI following three separate breaches between 2012 and 2013 involving a stolen unencrypted laptop and lost unencrypted USB flash drives.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"3b17907f-e623-4fe1-834e-28b21150cdb3","source_event_group_id":"615e24a8-b993-4737-9f03-7899edb354cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brigham and Women's Hospital (BWH)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brigham and Women's Hospital settled with OCR for allowing an ABC documentary crew to film patients without obtaining written authorization, violating HIPAA Privacy Rule protections.","event_id":"615e24a8-b993-4737-9f03-7899edb354cf","severity_score":65},{"record_id":"1efe89f1-4aa3-45f2-b40f-615a9105bb8e","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates, Dallas","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental settled with OCR after impermissibly disclosing a patient's name, treatment details, and health condition in a public response to a negative Yelp review, and failing to have compliant privacy policies.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"1c484d46-a466-49d0-b5b3-4ac425725a75","source_event_group_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Public Health Trust of Miami-Dade County (Jackson Health System)","state":"FL","individuals_affected":758,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR imposed a $2.15 million CMP against Jackson Health System following multiple compliance failures between 2013 and 2016, including employees stealing paper surgical records and selling ePHI to the media, without timely reporting or adequate security access controls.","event_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","severity_score":90},{"record_id":"9e4a6d04-4fd0-478c-af3c-ffbdd64cabd1","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine (UWM)","state":"WA","individuals_affected":90000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UWM settled with OCR after malware infected an employee workstation, compromising ePHI of approximately 90,000 individuals. OCR found UWM failed to implement security policies and procedures requiring its affiliated entities to conduct comprehensive risk analyses.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"8ef8f7a6-adbf-47f3-810a-96b84195690a","source_event_group_id":"e8a0b57a-3560-454b-94e6-59c331b2fd4e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community College","state":"NE","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community College entered into a Corrective Action Plan with OCR without a monetary settlement to resolve potential HIPAA Security Rule deficiencies identified during an compliance review.","event_id":"e8a0b57a-3560-454b-94e6-59c331b2fd4e","severity_score":55},{"record_id":"7912e850-502e-4c69-a66a-c6ce9cd12fc8","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System (CNE)","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CNE agreed to pay $400,000 after an unencrypted backup tape was lost during transport from Women & Infants Hospital of Rhode Island. OCR found that CNE had failed to update its business associate agreement with WIH following the 2013 HIPAA Omnibus Rule revisions.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":65},{"record_id":"77f26382-788c-4156-b99f-0e93ff653b27","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":70587,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled multiple Security and Privacy Rule violations following data breaches involving member payment portals and mailing errors.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":90},{"record_id":"3fdb9a40-088a-44d1-9c39-bbc7c4af490d","source_event_group_id":"27724b93-159c-49bb-b150-a28c5fa9ec9e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Dental Medicine, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement resolved a complaint regarding failure to provide a patient access to their complete dental records in a timely manner.","event_id":"27724b93-159c-49bb-b150-a28c5fa9ec9e","severity_score":50},{"record_id":"3242100c-05cc-47c5-b6b4-9c7395d1e8fb","source_event_group_id":"3b107c3c-5bfe-42bd-8cc0-c55f7f883be0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Curators of the University of Missouri","state":"MO","individuals_affected":14400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Curators of the University of Missouri entered into a resolution agreement without a monetary penalty to address Security Rule deficiencies uncovered following the theft of unencrypted mobile devices.","event_id":"3b107c3c-5bfe-42bd-8cc0-c55f7f883be0","severity_score":55},{"record_id":"299aeb44-0ca4-4d19-8e22-037d869e6471","source_event_group_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospitalists PL (ACH)","state":"FL","individuals_affected":9255,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACH paid $500,000 after an unauthorized individual posted patient clinical billing data on a public website. OCR discovered ACH had engaged the individual for medical billing services for over two years without executing a Business Associate Agreement.","event_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","severity_score":65},{"record_id":"28ae2aa4-0968-4ef1-b2f6-f1179a67ff0f","source_event_group_id":"ba93d094-4463-4823-89d1-902d7b594cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph Health (SJH)","state":"CA","individuals_affected":31800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SJH settled potential violations after ePHI stored on its servers was left accessible on the public internet via search engines due to misconfigured file-sharing software. OCR found SJH failed to conduct an accurate risk assessment or implement proper technical security measures.","event_id":"ba93d094-4463-4823-89d1-902d7b594cfa","severity_score":90},{"record_id":"16c1d780-82bc-4e41-8955-6023305bb287","source_event_group_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CompletePT Pool & Land Physical Therapy, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CompletePT agreed to a resolution agreement after posting patient testimonials, full names, and clinical photographs on its website without obtaining valid HIPAA authorizations. OCR also discovered the physical therapy practice lacked required HIPAA privacy policies and procedures.","event_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","severity_score":50},{"record_id":"141041b1-c4b8-4b13-98b3-709cef532af3","source_event_group_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York and Presbyterian Hospital and Trustees of Columbia University in the City of New York","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and Columbia University paid a combined $4.8 million ($3.3M by NYP, $1.5M by Columbia) after a physician attempted to deactivate a personal computer server on the shared network, causing patient records to be indexed and searchable on Google. OCR determined both entities failed to conduct risk analyses or verify appropriate firewall protections.","event_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","severity_score":90},{"record_id":"1358e72b-c88a-4a37-a55f-396a56f4cb29","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System (MHS)","state":"FL","individuals_affected":115141,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MHS paid $5.5 million after two employees and an affiliated physician office staff member improperly accessed patient records for over a year to sell data. OCR found MHS failed to regularly review information system activity logs or manage access controls.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"07394ecf-d5e5-4a47-a577-a71c80ae042a","source_event_group_id":"3f26164d-5782-4a76-885b-baca013b6760","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corp. and Massachusetts General Physicians Organization (Mass General)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General entered into a Corrective Action Plan without a monetary payment following an unauthorized disclosure of ePHI during biomedical research, agreeing to overhaul internal privacy safeguards and training.","event_id":"3f26164d-5782-4a76-885b-baca013b6760","severity_score":55},{"record_id":"053ec8b5-b160-4bcb-ae9b-ec93a9115873","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital (MGH)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH paid $515,000 to resolve HIPAA privacy violations stemming from unauthorized filming of patients by an ABC television crew without obtaining prior patient consent.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"ebc478ac-f238-4d9f-95d5-4977369aaabd","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George's County","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR imposed its first civil money penalty of $4.3 million against Cignet Health for denying 41 patients access to their medical records and failing to cooperate with federal investigators. Cignet refused to respond to OCR's subpoenas and inquiries regarding patient complaints.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"ea6a9914-95f0-4f11-baac-763fc1e49295","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross and Blue Shield of Tennessee","state":"TN","individuals_affected":1023209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST agreed to pay $1.5 million after 57 unencrypted computer hard drives containing the ePHI of over one million members were stolen from a leased storage facility. OCR cited BCBST for failing to implement adequate physical safeguards and facility access controls.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"9a86a0b7-eeda-47cc-a4f7-443057aefa5b","source_event_group_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System agreed to pay $865,500 following investigations into unauthorized employee access and snooping into the medical records of celebrity patients. OCR determined that UCLA failed to enforce sanctions and monitor user access audits on its electronic health record system.","event_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","severity_score":80},{"record_id":"9a1ea630-d8e1-47bd-8d7a-c80d1f8eee21","source_event_group_id":"ccce7cb7-65d7-4181-96b3-0588d2b24a3b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Healthcare Services, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity agreed to pay over $1.2 million after returning leased photocopiers containing unencrypted ePHI on hard drives without wiping the drives. OCR found that Affinity failed to implement policies for electronic media sanitization prior to returning leased equipment.","event_id":"ccce7cb7-65d7-4181-96b3-0588d2b24a3b","severity_score":90},{"record_id":"5423e2e4-d239-48da-a76a-c9b52e7762d8","source_event_group_id":"3f26164d-5782-4a76-885b-baca013b6760","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The General Hospital Corporation and Massachusetts General Physicians Organization, Inc.","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General settled for $1 million after an employee left sensitive patient encounter documents, including diagnoses for individuals with HIV/AIDS, on a subway train. OCR found that the hospital lacked adequate policies and physical safeguards for transporting PHI outside hospital grounds.","event_id":"3f26164d-5782-4a76-885b-baca013b6760","severity_score":80},{"record_id":"413f1c64-1b52-4388-9970-616836ed9476","source_event_group_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc.","state":"MA","individuals_affected":3588,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI agreed to a $1.5 million settlement following the theft of an unencrypted personal laptop used by a physician during a lecture. OCR found that MEEI failed to conduct an enterprise-wide risk analysis or encrypt portable electronic devices storing ePHI.","event_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","severity_score":90},{"record_id":"f45c71da-00eb-4828-8291-de110dbd59f3","source_event_group_id":"e5332c86-8b6b-4211-8d35-2640b42a4898","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Center for bone and Joint Surgery of the Palm Beaches","state":"FL","individuals_affected":5461,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"e5332c86-8b6b-4211-8d35-2640b42a4898","severity_score":50},{"record_id":"a0da4c94-07f7-4630-aefa-933878db2fe4","source_event_group_id":"37eb5e62-0ea8-4c6e-81c2-b3856fd836cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Indiana University Health, Affiliated Covered Entity","state":"IN","individuals_affected":2080,"breach_submission_date":"2026-09-29","enforcement_action_date":null,"summary":"","event_id":"37eb5e62-0ea8-4c6e-81c2-b3856fd836cf","severity_score":50},{"record_id":"b52eabe4-4f5f-4b50-a0d2-33e33e217b02","source_event_group_id":"dbaa5bb1-8137-4ca8-b848-f541568020e9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Celerity Consulting Group","state":"CA","individuals_affected":1200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Celerity Consulting Group, a business associate, settled a case involving the impermissible disclosure of protected health information due to the theft of an unencrypted laptop.","event_id":"dbaa5bb1-8137-4ca8-b848-f541568020e9","severity_score":50},{"record_id":"7a241b67-413d-4c02-98fc-ecd35b2c29a4","source_event_group_id":"a5780735-564d-4d76-910e-0e6fc022da6f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Louisiana (PGL)","state":"LA","individuals_affected":34000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PGL agreed to pay $650,000 to settle potential HIPAA violations after a breach involving unsecured ePHI.","event_id":"a5780735-564d-4d76-910e-0e6fc022da6f","severity_score":80},{"record_id":"3ddc0f1f-a748-4c0e-adb7-d9b5ab909785","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University - Center for Health Sciences (OSU-CHS)","state":"OK","individuals_affected":279862,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OSU-CHS agreed to pay $875,000 to settle potential HIPAA violations after a breach involving unsecured ePHI.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"b95c3326-84bd-4376-995a-692c04f8be51","source_event_group_id":"5daba1c9-fb71-45ad-9520-78eb26de2aa9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. James A. Reese, Jr., D.D.S.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. James A. Reese, Jr., D.D.S. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"5daba1c9-fb71-45ad-9520-78eb26de2aa9","severity_score":50},{"record_id":"996a3d69-de2c-4b43-a3b1-fcc99f312a51","source_event_group_id":"4214fcfc-8add-47fe-bef9-b7c167e33067","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Family Practice","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Family Practice settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"4214fcfc-8add-47fe-bef9-b7c167e33067","severity_score":50},{"record_id":"98e7408d-3e79-43a7-8d63-b9eb1269cd28","source_event_group_id":"197002f3-7122-4d04-a146-38382737526c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Eye Associates, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Eye Associates, P.C. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"197002f3-7122-4d04-a146-38382737526c","severity_score":50},{"record_id":"70818e3f-34db-4ea4-856a-09e74492bb27","source_event_group_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NorthStar Anesthesia, LLC","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NorthStar Anesthesia settled its second enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","severity_score":65},{"record_id":"df0779de-9981-4c21-9efd-426407941246","source_event_group_id":"431a46b6-75dd-46e2-b5dd-b61f8c79fde3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Mark R. Rosen, M.D.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mark R. Rosen, M.D. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"431a46b6-75dd-46e2-b5dd-b61f8c79fde3","severity_score":50},{"record_id":"d7b004d7-cab9-44ec-9b59-000496331e9a","source_event_group_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Dermatology","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Dermatology settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","severity_score":50},{"record_id":"d3a0d861-4304-43e1-b108-b996436d031e","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health settled its fourth enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"b10114d0-4e42-42b6-95f1-545c5cce30b0","source_event_group_id":"e517a805-99a2-484a-a848-498a84e86214","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Horace J. Bass, Jr.","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Horace J. Bass, Jr. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"e517a805-99a2-484a-a848-498a84e86214","severity_score":50},{"record_id":"af2a62ee-4a39-4f1e-8f08-1cb58b2ba9d7","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"ac00214e-c57a-4943-974e-6997df218958","source_event_group_id":"57f168fd-54b6-4f84-83d9-0c5a81b27053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"57f168fd-54b6-4f84-83d9-0c5a81b27053","severity_score":50},{"record_id":"8e3518fa-c1ed-4278-9c3d-48c632543ee1","source_event_group_id":"95886043-88fa-4f87-bc20-02c94ba01c36","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shah, M.D.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shah, M.D. settled its second enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"95886043-88fa-4f87-bc20-02c94ba01c36","severity_score":50},{"record_id":"515caa48-f936-4b29-a0bd-06bf619be41c","source_event_group_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Erie County Medical Center Corporation","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ECMCC settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","severity_score":65},{"record_id":"224b715a-67f9-4706-b621-6014b0ac894a","source_event_group_id":"14ac6cf4-903e-4fd6-bd68-1ecbb1df35dd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Florida Medical Center, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Florida Medical Center, Inc. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"14ac6cf4-903e-4fd6-bd68-1ecbb1df35dd","severity_score":50},{"record_id":"2054c8b6-b3cf-42cd-be69-ed244148d9e8","source_event_group_id":"03193df3-c281-47d4-b5e0-5e23d045b535","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardiology Associates of North Mississippi","state":"MS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cardiology Associates of North Mississippi settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"03193df3-c281-47d4-b5e0-5e23d045b535","severity_score":50},{"record_id":"f9021d74-e7ce-40df-b634-30e3d6448c29","source_event_group_id":"1958451a-c1b9-4dd2-9e6d-54b987bbf6c9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Physical Therapy","state":"RI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Physical Therapy settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"1958451a-c1b9-4dd2-9e6d-54b987bbf6c9","severity_score":50},{"record_id":"ec234209-af4b-47e5-8ea2-4ee313d6d663","source_event_group_id":"fd1aec6b-41fe-4409-8a98-6a10d8574b18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baus Family Dentistry, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baus Family Dentistry, LLC settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"fd1aec6b-41fe-4409-8a98-6a10d8574b18","severity_score":50},{"record_id":"e8ab8655-76a8-42af-b8e6-e7a961ff19c8","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. settled its second enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"e223a682-aa92-483d-8269-c7fca27e93f6","source_event_group_id":"cdebaeb2-2b4d-4c84-b3a9-d235782ed96f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Dental Associates","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connecticut Dental Associates settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"cdebaeb2-2b4d-4c84-b3a9-d235782ed96f","severity_score":50},{"record_id":"e1b53974-6a2a-49b3-8e0b-e78031ec3a79","source_event_group_id":"5d84430f-a099-4e69-a5ad-e9c1c7687510","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Dermatology","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Dermatology settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"5d84430f-a099-4e69-a5ad-e9c1c7687510","severity_score":50},{"record_id":"d9c5b5b5-34d5-4f48-ae50-2d375e33eb9c","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health settled its third enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"d9ba39c5-9089-4a69-9f87-081c0422f3bf","source_event_group_id":"f6d4d47d-4a8c-49ff-bfa6-910b5d7f458e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Park Dentistry","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Park Dentistry settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"f6d4d47d-4a8c-49ff-bfa6-910b5d7f458e","severity_score":50},{"record_id":"c435a4d2-2530-434b-8ca8-9b6be6ce662d","source_event_group_id":"7d550b46-a190-482e-a296-49c3efe1a97c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Long Island Surgical, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Long Island Surgical, P.C. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"7d550b46-a190-482e-a296-49c3efe1a97c","severity_score":50},{"record_id":"b6904a1e-c418-45c5-a9ff-4bf1602abdd7","source_event_group_id":"8449f87e-3c90-41b1-bc7a-302bd086b564","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cosmetic & Dermatology Center","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cosmetic & Dermatology Center settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"8449f87e-3c90-41b1-bc7a-302bd086b564","severity_score":50},{"record_id":"ac4c80eb-0c59-4fab-ac57-37db07d357cf","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health","state":"UT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Utah Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":65},{"record_id":"87f0bed7-cfed-4256-8c0e-0d0d24a4a40b","source_event_group_id":"dfa6d21c-1df4-4dca-9cb2-96a7acb18ff1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Endoscopy Center","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Georgia Endoscopy Center settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"dfa6d21c-1df4-4dca-9cb2-96a7acb18ff1","severity_score":50},{"record_id":"857a321c-d2d8-41d2-a973-50b38cd2ad4a","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Presbyterian Hospital","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York Presbyterian Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":80},{"record_id":"7e5c655c-48e8-49e2-8d86-6832967762da","source_event_group_id":"8c17d64f-be39-401e-8ee4-07b2debee4d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Coastal ENT","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Coastal ENT settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"8c17d64f-be39-401e-8ee4-07b2debee4d7","severity_score":50},{"record_id":"7a24dc4d-ec4b-420b-b4e3-cc8e68812b46","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":65},{"record_id":"6f56d82b-dc3b-461e-88cb-eb7187ba84a8","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":65},{"record_id":"5e843135-21ca-48f9-972c-779cbbf778c1","source_event_group_id":"58c9dd9f-2aeb-4148-b093-57c72e9215ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Healthcare, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro Community Healthcare, Inc. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"58c9dd9f-2aeb-4148-b093-57c72e9215ce","severity_score":50},{"record_id":"5d776332-30a4-4aba-8c5b-c413b1d1353a","source_event_group_id":"11d3f2d6-bd6a-4508-a411-aad94f02dc64","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Specialists of Boston","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eye Care Specialists of Boston settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"11d3f2d6-bd6a-4508-a411-aad94f02dc64","severity_score":50},{"record_id":"49f2de58-06ed-4794-b2aa-eb576cb26ee2","source_event_group_id":"c8de192d-db93-440b-ac98-88630ebcaf86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jersey Spine and Rehabilitation","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jersey Spine and Rehabilitation settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c8de192d-db93-440b-ac98-88630ebcaf86","severity_score":50},{"record_id":"409c44c2-ec26-4a9c-865a-b10b2bfedb0b","source_event_group_id":"ae7debfa-dd90-4c41-8c79-4a2410832c60","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excel Family Medical Associates, P.C.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excel Family Medical Associates, P.C. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ae7debfa-dd90-4c41-8c79-4a2410832c60","severity_score":50},{"record_id":"3214b0e6-2856-4651-86bf-09af99b98aa9","source_event_group_id":"c86c0a3c-5fc8-42c9-804e-c0ad641aa0d5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Frank W. Scott, Jr., D.D.S.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Frank W. Scott, Jr., D.D.S. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c86c0a3c-5fc8-42c9-804e-c0ad641aa0d5","severity_score":50},{"record_id":"1c36e43d-59cd-41ba-8040-df923346a544","source_event_group_id":"a0594e78-47a0-4fce-93d6-c2205ad21ced","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Kim's Medical Spa","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Kim's Medical Spa settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a0594e78-47a0-4fce-93d6-c2205ad21ced","severity_score":50},{"record_id":"120b1748-e404-4c90-976c-9adae536be22","source_event_group_id":"84ff523e-5ee6-47ba-8f1b-bd5d686b7fa4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachford Hospital","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachford Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"84ff523e-5ee6-47ba-8f1b-bd5d686b7fa4","severity_score":50},{"record_id":"faa355a5-029a-42dd-ba78-de4f9dae23eb","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excellus Health Plan settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":80},{"record_id":"ecff21d9-f229-4b35-ac50-5506e1103615","source_event_group_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwell Health","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northwell Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","severity_score":80},{"record_id":"d5465506-00c3-4689-962e-927c0a918ed6","source_event_group_id":"4f44ac49-1ecf-4e9d-b8b7-0b54fe21ad15","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Peter D. Mark, M.D.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Peter D. Mark, M.D. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"4f44ac49-1ecf-4e9d-b8b7-0b54fe21ad15","severity_score":50},{"record_id":"bcb7adfa-bb3b-4d05-a823-a8a318c6a0e0","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital & Medical Center of Omaha","state":"NE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital & Medical Center of Omaha settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"bbf753cf-faec-4c3a-b10e-b8a02b6fc504","source_event_group_id":"18cc08ab-d88a-4e48-9509-6a3e1c4590df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Dental Care","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Dental Care settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"18cc08ab-d88a-4e48-9509-6a3e1c4590df","severity_score":50},{"record_id":"9dc8a762-d5ce-4deb-8c15-226dc84287a9","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"98b5ac35-1325-462b-a7be-60ee8f9adb32","source_event_group_id":"4ed93a7d-fa2e-49f0-9954-9b02af5206e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Priority Spine","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Priority Spine settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"4ed93a7d-fa2e-49f0-9954-9b02af5206e7","severity_score":50},{"record_id":"8d730312-43b5-427a-9570-f6df58db84d1","source_event_group_id":"3a63f5ea-0a60-465d-9699-2f913838548a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Patrick N. Osakwe, M.D., P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Patrick N. Osakwe, M.D., P.C. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"3a63f5ea-0a60-465d-9699-2f913838548a","severity_score":50},{"record_id":"7d338307-2891-4904-9a20-652ba5e983af","source_event_group_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sharp HealthCare","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sharp HealthCare settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","severity_score":50},{"record_id":"784581ea-4388-4c2f-95b2-1d10a5e79486","source_event_group_id":"312acd99-dd7f-4b0d-86ae-4b29f59acafd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Donald E. Smith, Jr., M.D.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Donald E. Smith, Jr., M.D. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"312acd99-dd7f-4b0d-86ae-4b29f59acafd","severity_score":50},{"record_id":"70787d62-5183-4201-9ca9-0498425abf7d","source_event_group_id":"f8ce0e7b-6b4a-4eee-bc28-3ad137eed704","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy and Asthma Specialists, P.C.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy and Asthma Specialists, P.C. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"f8ce0e7b-6b4a-4eee-bc28-3ad137eed704","severity_score":50},{"record_id":"616c1bb9-9c86-466f-bda5-efb4818d4e4f","source_event_group_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of New Mexico Hospital","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of New Mexico Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","severity_score":65},{"record_id":"4a8f101f-e2e5-4364-8c29-9038d62602dd","source_event_group_id":"27256834-555a-41eb-bfab-9100ee33f85a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group of Arkansas, P.A.","state":"AR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology Group of Arkansas, P.A. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"27256834-555a-41eb-bfab-9100ee33f85a","severity_score":50},{"record_id":"188b3ed4-169a-4a3b-b4ca-d3ae7216802b","source_event_group_id":"8fced7ca-1430-4645-af0f-6ecbcf162098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Maxum Physical Therapy","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Maxum Physical Therapy settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"8fced7ca-1430-4645-af0f-6ecbcf162098","severity_score":50},{"record_id":"13b8c700-1ba1-43d5-8c41-a76ab893c547","source_event_group_id":"930d093a-9e17-44f7-b68d-444af30173cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Idaho Correctional Institution","state":"ID","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NICI settled potential HIPAA violations for failing to provide timely access to an inmate's medical records.","event_id":"930d093a-9e17-44f7-b68d-444af30173cf","severity_score":50},{"record_id":"0faf18ec-e5c1-4d5c-98cd-3f4b294f24d0","source_event_group_id":"a150f738-35ac-4c25-8228-598967437a24","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Corazon M. Mendoza, M.D.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Corazon M. Mendoza, M.D. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a150f738-35ac-4c25-8228-598967437a24","severity_score":50},{"record_id":"053130da-5eb2-4b7d-8133-234db48adbaa","source_event_group_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"United Healthcare Services, Inc.","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"United Healthcare Services settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","severity_score":65},{"record_id":"0050fdcf-8c56-448a-bd22-62ef552f8890","source_event_group_id":"95886043-88fa-4f87-bc20-02c94ba01c36","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shah, M.D.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shah, M.D. settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"95886043-88fa-4f87-bc20-02c94ba01c36","severity_score":50},{"record_id":"f6137b7b-1260-4858-8341-cbd84afd3083","source_event_group_id":"70497e9b-990b-4377-9c0c-8e712e77f74c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Nemours Foundation","state":"DE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Nemours Foundation settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"70497e9b-990b-4377-9c0c-8e712e77f74c","severity_score":50},{"record_id":"9264440b-0464-43e9-b931-1c91811624c2","source_event_group_id":"b689c77a-f5df-4d1d-81af-9606158c0ebf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Potomac Plastic Surgery","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Potomac Plastic Surgery settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"b689c77a-f5df-4d1d-81af-9606158c0ebf","severity_score":50},{"record_id":"8839c387-4d6c-492e-9f9e-3a88b21a329d","source_event_group_id":"6d763a63-36cc-4e45-b169-8746d973545c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ark Behavioral Health","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ark Behavioral Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"6d763a63-36cc-4e45-b169-8746d973545c","severity_score":65},{"record_id":"75eafe49-7ef1-4be7-b1d9-30df8fd78097","source_event_group_id":"b7ab94d0-4e8f-4d44-9e71-4555334ad55a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic Associates","state":"KS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AOA settled potential HIPAA violations after failing to provide a patient with timely access to their medical records.","event_id":"b7ab94d0-4e8f-4d44-9e71-4555334ad55a","severity_score":50},{"record_id":"5bfe191a-2c20-4bf1-9689-6d8d11b81c8c","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"3721bb3c-d25d-43b2-b359-f4659c1ca26a","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health settled its second enforcement action under the Right of Access Initiative for failing to provide timely access to a patient's medical records.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"13b5b77c-1811-494e-a598-599eb2a59215","source_event_group_id":"fffe8063-b8f8-4428-bfaf-e44a8fe34310","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B. Jefferson Ford's Dental Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"B. Jefferson Ford's Dental Group settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"fffe8063-b8f8-4428-bfaf-e44a8fe34310","severity_score":50},{"record_id":"8df5b788-f5b0-4410-a831-d12fa02f48c5","source_event_group_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arbour Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arbour Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","severity_score":50},{"record_id":"7561fa71-2f85-4264-888a-d402aae1a6da","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR announced its third enforcement action under its HIPAA Right of Access Initiative to ensure patients can access their medical records in a timely and affordable manner. This dental practice failed to provide a patient with a copy of her protected health information.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"6e19e416-b504-45d7-aea0-fa010a8805a1","source_event_group_id":"5d39bdb9-b016-476e-b11b-44e083246eaf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Health System Affiliated Covered Entities","state":"RI","individuals_affected":20431,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifespan settled potential HIPAA violations after a laptop containing the ePHI of over 20,000 individuals was stolen.","event_id":"5d39bdb9-b016-476e-b11b-44e083246eaf","severity_score":90},{"record_id":"c37537fd-e6ac-455c-baa4-095919f86c6f","source_event_group_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Orthopedic Clinic, P.A.","state":"GA","individuals_affected":208557,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Orthopedic Clinic settled potential HIPAA violations related to a breach of unsecured ePHI impacting over 200,000 individuals.","event_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","severity_score":90},{"record_id":"8a03df13-1347-4329-a860-37da43e80323","source_event_group_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Hospital","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's National Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","severity_score":50},{"record_id":"5224a7bd-2e1f-480b-bbd6-f0c18c49c19c","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"053975fb-98ba-4281-bfa5-66f0c813ae50","source_event_group_id":"d6f0159e-62d8-4c5b-973d-43157320da04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of New Orleans","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of New Orleans settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"d6f0159e-62d8-4c5b-973d-43157320da04","severity_score":50},{"record_id":"d754c535-f1f0-47aa-ad25-23e8b10f16b4","source_event_group_id":"7cd55829-881f-4882-b446-fa026f5f5aeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health New England, Inc.","state":"MA","individuals_affected":10738,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HNE agreed to settle potential HIPAA violations following a breach that exposed the ePHI of over 10,000 individuals.","event_id":"7cd55829-881f-4882-b446-fa026f5f5aeb","severity_score":65},{"record_id":"d6d1b50b-479d-436c-99bd-e3c4351238ea","source_event_group_id":"c6b93a4f-a526-4c94-b2de-da8040154b40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Grand View Health","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Grand View Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c6b93a4f-a526-4c94-b2de-da8040154b40","severity_score":50},{"record_id":"a5a9ad04-3ce9-41fb-bfa7-9c46a30bcb06","source_event_group_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danbury Hospital","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danbury Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","severity_score":50},{"record_id":"92ea56b4-5ba2-4564-a9cf-9411aec9eb9f","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":65},{"record_id":"703adc97-75e8-497f-961e-2586e0f56f53","source_event_group_id":"b20838ff-db03-49f4-b686-27a6c09a3daf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Kent, DDS","state":"MO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. David Kent, DDS settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"b20838ff-db03-49f4-b686-27a6c09a3daf","severity_score":50},{"record_id":"50f5f12b-6b07-4505-acf7-0b5f78ea1fd5","source_event_group_id":"537aee5c-f3f6-4436-8aa1-20567ce3b9ea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health, d.b.a. St. Rose Hospital","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Rose Hospital settled potential HIPAA violations for impermissibly disclosing PHI on its website in response to a negative online review.","event_id":"537aee5c-f3f6-4436-8aa1-20567ce3b9ea","severity_score":50},{"record_id":"42477c84-dca6-4d6b-a594-9ae77f1079ef","source_event_group_id":"615e24a8-b993-4737-9f03-7899edb354cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Brigham and Women's Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Brigham and Women's Hospital agreed to pay $384,000 to settle potential HIPAA violations after an impermissible disclosure of PHI to a film crew.","event_id":"615e24a8-b993-4737-9f03-7899edb354cf","severity_score":65},{"record_id":"405ba177-35fa-4de3-a8ce-8de75a8c20db","source_event_group_id":"df975e5f-7291-4070-85b6-ffee0a713b89","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Jude Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Jude Medical Center settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"df975e5f-7291-4070-85b6-ffee0a713b89","severity_score":50},{"record_id":"2e2d9ba6-bea6-49e1-b50c-8189dcb3508b","source_event_group_id":"c0d4520c-d215-4519-b575-03d9be13327d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Schuyler Hospital","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Schuyler Hospital settled potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c0d4520c-d215-4519-b575-03d9be13327d","severity_score":50},{"record_id":"e8fba6f1-286d-442c-837c-177dff75368b","source_event_group_id":"4755bf84-0d75-417e-81eb-00a798efe78a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark","state":"RI","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark entered into a resolution agreement regarding the disposal of PHI, following allegations of improper disposal of prescription bottles and patient information in open trash dumpsters.","event_id":"4755bf84-0d75-417e-81eb-00a798efe78a","severity_score":90},{"record_id":"ddbbbf36-87e9-4a0c-b057-181ebfcc622c","source_event_group_id":"032ab6a1-203f-47b8-a6ff-7a50602e05c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allied Orthopedic and Rehabilitation","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allied Orthopedic and Rehabilitation agreed to pay $15,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"032ab6a1-203f-47b8-a6ff-7a50602e05c8","severity_score":50},{"record_id":"d7019242-d3a9-49a3-b593-32b2ae394462","source_event_group_id":"18f5ecce-0985-4e35-812a-b532339f1fc0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Golden Grove, Inc.","state":"KY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Golden Grove, Inc. agreed to pay $40,000 to settle potential HIPAA violations after impermissibly disclosing PHI.","event_id":"18f5ecce-0985-4e35-812a-b532339f1fc0","severity_score":50},{"record_id":"74168286-ca41-4020-96e8-9aa170a33fca","source_event_group_id":"10503658-e787-45db-bba1-a6ded60a6de2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Data Processing, Inc. (ADP)","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Data Processing, Inc. agreed to pay $500,000 to settle potential HIPAA violations after a breach involving unsecured ePHI.","event_id":"10503658-e787-45db-bba1-a6ded60a6de2","severity_score":65},{"record_id":"4cc06c08-b55f-495f-ad27-cbffe511d1b7","source_event_group_id":"abd49c71-61ed-4940-af5f-24b02da5beac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The South Broward Hospital District","state":"FL","individuals_affected":115000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The South Broward Hospital District settled a case for failing to implement appropriate safeguards to protect the ePHI of 115,000 patients when a former employee allegedly downloaded patient data to a USB drive.","event_id":"abd49c71-61ed-4940-af5f-24b02da5beac","severity_score":80},{"record_id":"4bc91de3-b80f-459b-b5a0-2a66d669eca4","source_event_group_id":"25dca95f-b634-4ede-a839-72478492ddf3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Digital Care Management (DCM)","state":"NJ","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DCM agreed to pay $275,000 to settle potential HIPAA violations after failing to have a business associate agreement in place.","event_id":"25dca95f-b634-4ede-a839-72478492ddf3","severity_score":65},{"record_id":"3760136c-696b-4ac0-8c3c-786be495103c","source_event_group_id":"0d302952-d641-4f9f-827c-5641c80ea13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BCBSNC (Blue Cross Blue Shield of North Carolina)","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSNC agreed to pay $1.5 million to settle potential HIPAA violations after a breach involving unsecured ePHI.","event_id":"0d302952-d641-4f9f-827c-5641c80ea13c","severity_score":90},{"record_id":"1cccca40-07e9-4e10-b45f-6c5b672d67bd","source_event_group_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna","state":"CT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna agreed to pay $1 million to settle potential HIPAA violations after impermissibly disclosing PHI in connection with a mailing.","event_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","severity_score":80},{"record_id":"129386f0-9117-41ff-baae-d729924d0c01","source_event_group_id":"38ef8017-d10a-4f29-9d79-5702153ad27f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Doctors Management, LLC","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Doctors Management, LLC agreed to pay $100,000 to settle potential HIPAA violations for failing to provide a patient with timely access to medical records.","event_id":"38ef8017-d10a-4f29-9d79-5702153ad27f","severity_score":50},{"record_id":"8639d185-99c9-417f-b6f6-820f5fd36d27","source_event_group_id":"e3245944-cd07-47ae-aee5-b1939cd9deb5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Source Care Management, LLC d/b/a NextStep Care","state":"GA","individuals_affected":685,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"e3245944-cd07-47ae-aee5-b1939cd9deb5","severity_score":30},{"record_id":"384f39bb-2f4f-4c0b-9555-182260afc1e1","source_event_group_id":"41fb80df-638b-451c-9fb2-7348aa305e50","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Universal Dermatology & Vein Care","state":"FL","individuals_affected":35295,"breach_submission_date":"2026-09-30","enforcement_action_date":null,"summary":"","event_id":"41fb80df-638b-451c-9fb2-7348aa305e50","severity_score":70},{"record_id":"841f9bf1-0206-4f14-92fa-9c4a344a381d","source_event_group_id":"9d914e9f-363b-4cd9-9b2b-096fb1c339fa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kim Knobbe","state":"MO","individuals_affected":11927,"breach_submission_date":"2026-08-27","enforcement_action_date":null,"summary":"","event_id":"9d914e9f-363b-4cd9-9b2b-096fb1c339fa","severity_score":70},{"record_id":"e831b537-3ecd-48dc-abc7-eb543d998443","source_event_group_id":"2cf42f0c-2b9e-4291-a691-fa22fbeba5f2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kostelic and Associates 3PLLC","state":"NC","individuals_affected":535,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"2cf42f0c-2b9e-4291-a691-fa22fbeba5f2","severity_score":30},{"record_id":"bffcc8cb-e803-4c4b-84c3-816576f7ebb4","source_event_group_id":"831eba81-23f4-4993-a4e0-aeab8fb9cfb3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vascular Associates of South Alabama","state":"AL","individuals_affected":623,"breach_submission_date":"2026-09-25","enforcement_action_date":null,"summary":"","event_id":"831eba81-23f4-4993-a4e0-aeab8fb9cfb3","severity_score":30},{"record_id":"e01d5f11-5569-428d-a8d8-1d1b5b1cc5f6","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health agreed to pay $75,000 for failing to provide timely access to medical records to a patient.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"d8720c9b-c50d-4079-ae56-80b728b117eb","source_event_group_id":"dac1d59b-d6f1-4402-971a-7fecabd3f82d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John H. Ng","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Ng agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"dac1d59b-d6f1-4402-971a-7fecabd3f82d","severity_score":50},{"record_id":"be99f885-9fa0-4fc1-a45d-dfb67012dd5b","source_event_group_id":"b4f5901b-8102-47c7-98a0-172996c6d5ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert P. Perlman","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Perlman agreed to pay $25,000 for failing to provide timely access to medical records to a patient.","event_id":"b4f5901b-8102-47c7-98a0-172996c6d5ec","severity_score":50},{"record_id":"b4d409e9-36ac-47e8-9be1-2aebeae9f8f9","source_event_group_id":"dac1d59b-d6f1-4402-971a-7fecabd3f82d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John H. Ng","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Ng agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"dac1d59b-d6f1-4402-971a-7fecabd3f82d","severity_score":50},{"record_id":"b307c1a2-69c4-45c5-b125-23a772b62e0b","source_event_group_id":"524ef15f-9151-4705-b2ee-82496f4d1782","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Harry Singh, DDS, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Singh agreed to pay $5,000 for failing to provide timely access to medical records to a patient.","event_id":"524ef15f-9151-4705-b2ee-82496f4d1782","severity_score":50},{"record_id":"7750f50c-99cc-4e37-bbf0-f85369953828","source_event_group_id":"72fde99a-badd-4996-a700-84e1b05f57fb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Endodontists of North Florida","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Endodontists agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"72fde99a-badd-4996-a700-84e1b05f57fb","severity_score":50},{"record_id":"5693c3ae-1492-412d-ab38-ae58f2ccfd92","source_event_group_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David M. Salo, M.D., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Salo agreed to pay $25,000 for failing to provide timely access to medical records to a patient.","event_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","severity_score":50},{"record_id":"4804a12a-3720-4c07-b420-4dc151e95ee0","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Children's Hospital of Philadelphia","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHOP agreed to pay $500,000 for failing to provide timely access to medical records to parents of a child.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":65},{"record_id":"4153ae7c-434e-4a23-b46d-8f9315b7ea16","source_event_group_id":"dad45e9a-808c-46fa-909d-3b4897844231","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Humboldt General Hospital","state":"NV","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Humboldt General Hospital agreed to pay $350,000 to settle potential HIPAA violations after a cyberattack exposed the ePHI of over 100,000 individuals.","event_id":"dad45e9a-808c-46fa-909d-3b4897844231","severity_score":65},{"record_id":"1e6de16f-f085-4e04-811f-68b263217197","source_event_group_id":"6bdfd3fb-0dcf-47ff-8eb0-acca63b7d70f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley View Hospital","state":"CO","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Valley View Hospital agreed to pay $300,000 to settle potential HIPAA violations after an impermissible disclosure of PHI of approximately 2,000 individuals due to an email incident.","event_id":"6bdfd3fb-0dcf-47ff-8eb0-acca63b7d70f","severity_score":65},{"record_id":"1097c078-7ce7-4e77-ae42-8d6cd7fc4da7","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":2000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health agreed to pay $1.2 million to settle potential HIPAA violations related to an impermissible disclosure of PHI of approximately 2 million individuals due to a cyberattack.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"040be48e-c7ac-411a-bae3-f5a02c3cdf4f","source_event_group_id":"5b4974f6-0752-437c-87ba-86b3298c5d9c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Conviva Care Center","state":"FL","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Conviva Care Center agreed to pay $350,000 to settle potential HIPAA violations after a breach resulted in the impermissible disclosure of the PHI of over 1,500 patients.","event_id":"5b4974f6-0752-437c-87ba-86b3298c5d9c","severity_score":65},{"record_id":"f5a3b114-af0e-401d-8ddf-7addbb851cc3","source_event_group_id":"261817b1-0a96-47bf-b349-cb5804703454","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lumos Diagnostics, Inc.","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lumos Diagnostics agreed to pay $75,000 to settle potential HIPAA violations related to an impermissible disclosure of PHI due to a third-party vendor breach.","event_id":"261817b1-0a96-47bf-b349-cb5804703454","severity_score":50},{"record_id":"ee993838-c3f2-4f8e-af29-944c7157b958","source_event_group_id":"8ae8bce2-85da-4ec1-a594-e276f93772c6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blackbaud, Inc.","state":"SC","individuals_affected":10000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Blackbaud, a business associate, agreed to pay $3.5 million to settle potential HIPAA violations after a data breach affected over 10 million individuals across multiple covered entities.","event_id":"8ae8bce2-85da-4ec1-a594-e276f93772c6","severity_score":90},{"record_id":"ecb921a5-6696-4ef2-85a2-2c5c8a674cbf","source_event_group_id":"537aee5c-f3f6-4436-8aa1-20567ce3b9ea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health, dba St. Rose Hospital","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health agreed to pay $120,000 for failing to provide timely access to medical records to a patient.","event_id":"537aee5c-f3f6-4436-8aa1-20567ce3b9ea","severity_score":65},{"record_id":"c0d74a02-f11d-424d-a6d0-94e5083601c2","source_event_group_id":"2611bfaf-2454-46b7-b2be-17e0b78f8166","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BocaCare, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BocaCare agreed to pay $100,000 to settle potential HIPAA violations related to an impermissible disclosure of patient information on its website.","event_id":"2611bfaf-2454-46b7-b2be-17e0b78f8166","severity_score":50},{"record_id":"aebed17a-f157-44f0-97b1-4347e70480fd","source_event_group_id":"59eab53f-20e3-41ad-a60d-592670b7e3e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Ronald W. McClintock","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. McClintock agreed to pay $5,000 for failing to provide timely access to medical records to a patient.","event_id":"59eab53f-20e3-41ad-a60d-592670b7e3e0","severity_score":50},{"record_id":"a6c78342-7f1a-4c72-aa9d-4860b4f0c2d7","source_event_group_id":"fba1c451-b58c-4649-a989-eb33c872fed5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes Care Group, P.A.","state":"MA","individuals_affected":24000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes Care Group agreed to pay $25,000 to settle potential HIPAA violations related to an impermissible disclosure of PHI due to a hacking incident.","event_id":"fba1c451-b58c-4649-a989-eb33c872fed5","severity_score":50},{"record_id":"61214341-011b-4639-b2aa-fc93d18f1116","source_event_group_id":"d519e623-6a1f-4228-9aa6-2018cea9ffe8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"SSM Health St. Louis","state":"MO","individuals_affected":27911,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SSM Health agreed to pay $500,000 to settle potential HIPAA violations after a former employee impermissibly disclosed the PHI of 27,911 patients.","event_id":"d519e623-6a1f-4228-9aa6-2018cea9ffe8","severity_score":65},{"record_id":"5927463a-9a23-49f9-9723-666e7828c443","source_event_group_id":"7d6bcc3b-2412-4175-8195-24974b3456fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Glenn C. Davis","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Davis agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"7d6bcc3b-2412-4175-8195-24974b3456fe","severity_score":50},{"record_id":"4d78106d-cb30-450f-a79f-cd3cbacf2604","source_event_group_id":"524ef15f-9151-4705-b2ee-82496f4d1782","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Harry Singh, DDS, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Singh agreed to pay $5,000 for failing to provide timely access to medical records to a patient.","event_id":"524ef15f-9151-4705-b2ee-82496f4d1782","severity_score":50},{"record_id":"47793edd-6290-4ffd-bf09-76e9535eaa36","source_event_group_id":"7c8a9cfb-37f3-4dc3-9314-9bb319e2504b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John Smith","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Smith's practice agreed to pay $5,000 for failing to provide a patient with timely access to their medical records.","event_id":"7c8a9cfb-37f3-4dc3-9314-9bb319e2504b","severity_score":50},{"record_id":"469d1aeb-9cdf-46e8-b39a-7086a2d223e9","source_event_group_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forefront Dermatology, S.C.","state":"WI","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forefront Dermatology agreed to pay $250,000 to settle potential HIPAA violations related to a breach that impermissibly disclosed the ePHI of 30,000 individuals.","event_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","severity_score":65},{"record_id":"26d92e75-60de-4ac4-b921-f542f18482c1","source_event_group_id":"32302b95-2009-47b8-a6cb-ebed7e728475","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert Patrow","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Patrow's practice agreed to pay $30,000 for failing to provide timely access to medical records to a patient.","event_id":"32302b95-2009-47b8-a6cb-ebed7e728475","severity_score":50},{"record_id":"173fb1d9-d1ad-4873-bd02-3683ce125181","source_event_group_id":"df35f32a-f0a8-4736-b51f-d91cf4b34dd0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Brockley's Dental Office","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brockley's dental office agreed to pay $30,000 for failing to provide timely access to medical records to a patient.","event_id":"df35f32a-f0a8-4736-b51f-d91cf4b34dd0","severity_score":50},{"record_id":"fdd84bca-acc9-4495-b63d-c11e8140e44f","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America, Inc.","state":"FL","individuals_affected":3624045,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCNA agreed to pay $1.6 million to settle potential HIPAA violations related to an impermissible disclosure of the ePHI of over 3.6 million individuals due to a cyberattack.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"e4d193be-ed4e-4d42-804f-44669fd31c6a","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem agreed to pay $16 million to settle potential HIPAA violations stemming from a series of cyberattacks that led to the impermissible disclosure of the protected health information of nearly 79 million people.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"e3610848-4851-4fd2-96a1-f79202aa5d3a","source_event_group_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David M. Salo, M.D., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Salo agreed to pay $25,000 for failing to provide timely access to medical records to a patient.","event_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","severity_score":50},{"record_id":"e17470ea-bd25-4746-8c04-a79b8ebc3619","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America, Inc.","state":"FL","individuals_affected":8000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCNA agreed to pay $2.5 million to settle potential HIPAA violations after a cyberattack resulted in the impermissible disclosure of ePHI of over 8 million individuals.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"df33fbb7-0d66-41f5-914f-2cc919b1c397","source_event_group_id":"edc6dc56-3098-4dfc-bfda-4c5efce014a6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Management Resources, Inc.","state":"TX","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Management Resources, Inc. agreed to pay $100,000 to settle potential HIPAA violations after a data breach exposed the ePHI of over 20,000 individuals.","event_id":"edc6dc56-3098-4dfc-bfda-4c5efce014a6","severity_score":50},{"record_id":"db07b88b-c2d3-440b-911a-436df1aeb7f1","source_event_group_id":"12097da5-f3f4-431a-b8d5-97914e6dcd26","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Colorado Department of Human Services","state":"CO","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CDHS agreed to pay $400,000 to settle potential HIPAA violations after a phishing attack compromised the ePHI of over 20,000 individuals.","event_id":"12097da5-f3f4-431a-b8d5-97914e6dcd26","severity_score":65},{"record_id":"d00d64a7-ac53-40c0-839a-18bd554752d5","source_event_group_id":"ca191a8e-500f-468d-a0f9-02a3e443c6a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northcutt Dental Practice","state":"AL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northcutt Dental Practice agreed to pay $6,500 for failing to provide timely access to medical records to a patient.","event_id":"ca191a8e-500f-468d-a0f9-02a3e443c6a8","severity_score":50},{"record_id":"c4ed6eae-6baa-4976-b01e-cb8aeb3776b5","source_event_group_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David M. Salo, M.D., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Salo agreed to pay $25,000 for failing to provide timely access to medical records to a patient.","event_id":"bf56a167-0a70-4445-a39d-b197a1a15b19","severity_score":50},{"record_id":"c1969b86-c885-4ea1-9172-a23fc57cbe1e","source_event_group_id":"4bbd9102-6a86-47c7-b0c3-a3814edff3b5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Elizabeth Long","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Elizabeth Long agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"4bbd9102-6a86-47c7-b0c3-a3814edff3b5","severity_score":50},{"record_id":"b9e7ad6a-b54c-4611-884c-2678ec104071","source_event_group_id":"84ff523e-5ee6-47ba-8f1b-bd5d686b7fa4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachford Hospital","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachford Hospital agreed to pay $25,000 to settle potential HIPAA violations after impermissibly disclosing the PHI of a patient to a local news outlet.","event_id":"84ff523e-5ee6-47ba-8f1b-bd5d686b7fa4","severity_score":50},{"record_id":"b438248f-9c34-474c-a037-4d2e17a8ac72","source_event_group_id":"4075a3af-5853-438c-be49-6aa402b05706","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Paul H. Kim","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Kim agreed to pay $5,000 for failing to provide timely access to medical records to a patient.","event_id":"4075a3af-5853-438c-be49-6aa402b05706","severity_score":50},{"record_id":"ae3e205b-34b0-4074-9e71-d8adc43d077a","source_event_group_id":"707b353d-0c77-4d47-9704-382a8f8d06d5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Frank Brown's Dental Office","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brown's dental office agreed to pay $10,000 for failing to provide timely access to medical records to a patient.","event_id":"707b353d-0c77-4d47-9704-382a8f8d06d5","severity_score":50},{"record_id":"a07d7911-0a05-453a-90dd-ec9166ebf7d2","source_event_group_id":"7d2383ed-17ad-4e5d-b277-e25120e57329","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Maximus, Inc.","state":"VA","individuals_affected":1700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Maximus, Inc. agreed to pay $2.7 million to settle potential HIPAA violations after a breach resulted in the impermissible disclosure of the PHI of approximately 1.7 million individuals.","event_id":"7d2383ed-17ad-4e5d-b277-e25120e57329","severity_score":90},{"record_id":"9f6825d4-5778-4cd4-a00e-eb749b9061f4","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":1263,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agape Health Services agreed to pay $25,000 and implement a corrective action plan to settle potential HIPAA violations after a breach exposed the ePHI of 1,263 patients.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"887916c2-a44a-460f-9454-aeff7c2c49cb","source_event_group_id":"4075a3af-5853-438c-be49-6aa402b05706","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Paul H. Kim","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Kim agreed to pay $5,000 for failing to provide timely access to medical records to a patient.","event_id":"4075a3af-5853-438c-be49-6aa402b05706","severity_score":50},{"record_id":"796a1e08-9cde-41b5-9429-feb3f835bc89","source_event_group_id":"6c381295-a23f-40c0-9b1f-f003911e93c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John F. Hamel, D.M.D.","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Dr. John F. Hamel after a breach involving the impermissible disclosure of PHI. Dr. Hamel impermissibly disclosed the PHI of 1,000 patients in response to an online review.","event_id":"6c381295-a23f-40c0-9b1f-f003911e93c7","severity_score":50},{"record_id":"60a33dd4-a09e-427b-8ae2-d82f552ded39","source_event_group_id":"bac813d9-f86f-4f30-83bc-6a442b4f334c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Scott","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. David Scott's dental practice agreed to pay $30,000 to settle potential HIPAA violations for impermissibly disclosing PHI to a local newspaper in response to a patient's complaint.","event_id":"bac813d9-f86f-4f30-83bc-6a442b4f334c","severity_score":50},{"record_id":"4c25ff9b-7104-4b45-acec-7484a6bd5d51","source_event_group_id":"7f475ede-1a8d-42e5-a048-02d2c7ac9cda","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Retrieval-Masters Creditors Bureau Inc.","state":"NY","individuals_affected":26975283,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Retrieval-Masters Creditors Bureau Inc. (RMCB), a business associate of several healthcare entities, agreed to pay $493,920 to settle potential HIPAA violations due to a breach that affected almost 27 million individuals.","event_id":"7f475ede-1a8d-42e5-a048-02d2c7ac9cda","severity_score":65},{"record_id":"36fbbc44-4157-462f-a1d1-482ff4968d7f","source_event_group_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwell Health","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northwell Health agreed to pay $50,000 for failing to provide timely access to medical records to a patient.","event_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","severity_score":50},{"record_id":"25b0e452-6185-43c8-94dd-fa1499d4aae3","source_event_group_id":"a5c4a649-7f37-40c4-aebe-34cb176043c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Physicians","state":"GA","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Elite Emergency Physicians after a breach involving the impermissible disclosure of ePHI. The ePHI of 12,000 patients was compromised in a phishing attack, and the entity failed to conduct a risk analysis.","event_id":"a5c4a649-7f37-40c4-aebe-34cb176043c7","severity_score":50},{"record_id":"23d30688-0bc2-43b9-99d8-e5547fe1e042","source_event_group_id":"32302b95-2009-47b8-a6cb-ebed7e728475","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert A. Patrow","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Patrow agreed to pay $30,000 for failing to provide timely access to medical records to a patient.","event_id":"32302b95-2009-47b8-a6cb-ebed7e728475","severity_score":50},{"record_id":"192a0c04-3060-4e98-85b0-a47bb0d6f55f","source_event_group_id":"cae337fd-2d0f-4254-913f-9b57730c8c1c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optimal Healthcare","state":"NY","individuals_affected":10,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Optimal Healthcare agreed to pay $100,000 and implement a CAP to settle potential HIPAA violations after multiple impermissible disclosures of patient information.","event_id":"cae337fd-2d0f-4254-913f-9b57730c8c1c","severity_score":50},{"record_id":"ecd188c7-603c-441d-8246-0f8e5720530d","source_event_group_id":"c2609283-09a4-4d63-ae80-68f7b9c8539c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group in Puerto Rico","state":"PR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a medical group in Puerto Rico after a complaint alleged impermissible disclosure of PHI. The medical group posted PHI of multiple patients on its website, violating the HIPAA Privacy Rule.","event_id":"c2609283-09a4-4d63-ae80-68f7b9c8539c","severity_score":50},{"record_id":"bd08828d-6305-4914-bd15-2f58c1b43142","source_event_group_id":"08bc45bd-991e-451d-9358-8e622bfe07a7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kornerstone Counseling, LLC","state":"UT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Kornerstone Counseling after a breach involving the impermissible disclosure of PHI. Kornerstone impermissibly disclosed the PHI of 1,000 patients in response to a patient's online review.","event_id":"08bc45bd-991e-451d-9358-8e622bfe07a7","severity_score":50},{"record_id":"a61c919d-9a92-4a87-a15d-bb8cbfcd09ab","source_event_group_id":"b7ab94d0-4e8f-4d44-9e71-4555334ad55a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic Associates","state":"KS","individuals_affected":17000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advanced Orthopedic Associates after a breach report indicated that an impermissible disclosure of PHI occurred. PHI of 17,000 individuals was compromised after an unencrypted server was accessed.","event_id":"b7ab94d0-4e8f-4d44-9e71-4555334ad55a","severity_score":50},{"record_id":"70aaa554-9ca2-44a4-9a4e-d7c7cae32405","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Elite Dental Associates after a breach involving the impermissible disclosure of PHI. Elite Dental impermissibly disclosed the PHI of 1,000 patients when responding to an online review.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"43b6aa59-056e-4104-9eeb-1bacc283e4e8","source_event_group_id":"4ec4890f-9f86-4725-9442-ac9f035b183e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Oncology Group, P.C.","state":"PA","individuals_affected":4800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medical Oncology Group after a breach involving the impermissible disclosure of ePHI. The ePHI of 4,800 patients was compromised in a phishing attack, and the group failed to conduct a risk analysis.","event_id":"4ec4890f-9f86-4725-9442-ac9f035b183e","severity_score":50},{"record_id":"435926c2-9274-4c4f-aff9-18a6409e6e0e","source_event_group_id":"6a8be926-6579-46ee-80e7-25ec70737692","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Digital Care Provider in Washington","state":"WA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a digital care provider in Washington after a breach involving the impermissible disclosure of ePHI. The ePHI of 1,000 patients was compromised when an unencrypted laptop was stolen, and the provider failed to conduct a risk analysis.","event_id":"6a8be926-6579-46ee-80e7-25ec70737692","severity_score":50},{"record_id":"2a30960e-d5df-4a9d-b8b3-5e402e68973e","source_event_group_id":"f8fc93f5-4f6b-47a4-bc1d-5f0b339909aa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"United States Anesthesia Partners of New York, P.C.","state":"NY","individuals_affected":119,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated USAP of NY after a data breach involving the impermissible disclosure of PHI. The PHI of 119 individuals was impermissibly disclosed through an email error.","event_id":"f8fc93f5-4f6b-47a4-bc1d-5f0b339909aa","severity_score":50},{"record_id":"124406ec-6335-4878-8f94-57cda8be5c0a","source_event_group_id":"e617481d-b7af-4909-8193-dfe131ad8771","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice in South Carolina","state":"SC","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a practice in South Carolina after a breach involving the impermissible disclosure of PHI. The PHI of 1,000 patients was compromised when an unencrypted laptop was stolen, and the practice failed to conduct a risk analysis.","event_id":"e617481d-b7af-4909-8193-dfe131ad8771","severity_score":50},{"record_id":"00851b66-b37e-437e-9b34-192c829cd226","source_event_group_id":"3ac80d3a-94ab-47b9-a0c1-c924a9da27ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medley Management LLC","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medley Management after a breach involving the impermissible disclosure of ePHI. The ePHI of 1,000 patients was exposed due to a misconfigured server, and Medley failed to conduct a risk analysis.","event_id":"3ac80d3a-94ab-47b9-a0c1-c924a9da27ed","severity_score":50},{"record_id":"f2066031-d6a7-468b-b1bd-bed99c4a1ea3","source_event_group_id":"ad587f36-d21e-47c6-8350-3fc7b598be41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oconee Medical Center","state":"SC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Oconee Medical Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"ad587f36-d21e-47c6-8350-3fc7b598be41","severity_score":55},{"record_id":"f0422142-f9e0-4665-ad76-955a7e3929fb","source_event_group_id":"665d5206-92cf-4ed9-8015-fde39ddd7e78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physician's Medical Group of San Jose","state":"CA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated PMG after a breach involving the impermissible disclosure of ePHI. The ePHI of 200,000 individuals was exposed due to a misconfigured server, and PMG failed to conduct a risk analysis.","event_id":"665d5206-92cf-4ed9-8015-fde39ddd7e78","severity_score":90},{"record_id":"cffe309f-9326-4596-bd9b-4873adafafb6","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Catholic Health Care Services after multiple breaches of unsecured ePHI. CHCS failed to conduct a risk analysis and implement security measures to protect the ePHI of 412 individuals.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"ce39940a-d3c5-4590-bcbb-2bf9805bd0c5","source_event_group_id":"90f2429d-8bb4-4d46-8036-e88edfde863e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas at Austin","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UT Austin after a breach involving the impermissible disclosure of ePHI. The ePHI of 1,000 individuals was compromised when a server was attacked, and UT Austin failed to conduct a risk analysis.","event_id":"90f2429d-8bb4-4d46-8036-e88edfde863e","severity_score":50},{"record_id":"914a82e5-0851-4a25-bad5-05a924d8a1e0","source_event_group_id":"bfdeee11-dff5-4d69-9156-76fb1d3a25d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Christ Hospital","state":"OH","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Christ Hospital settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"bfdeee11-dff5-4d69-9156-76fb1d3a25d2","severity_score":55},{"record_id":"7ac5ab92-3135-42c2-b9f5-18cbe5a00a1b","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children’s Digestive Health","state":"IL","individuals_affected":18127,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CCDH after receiving a complaint regarding a business associate's impermissible disclosure of PHI. The investigation found that CCDH failed to have a business associate agreement in place, affecting 18,127 individuals.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"61563f10-b26b-46b4-92af-b2371c5c8d03","source_event_group_id":"8ab47690-7ca3-489c-af27-3eac364b1ca9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Disclosure Entity","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated an unnamed medical entity for potential HIPAA violations regarding the impermissible disclosure of PHI. This resolution agreement addresses issues of patient record access and privacy.","event_id":"8ab47690-7ca3-489c-af27-3eac364b1ca9","severity_score":50},{"record_id":"43f1240f-7f83-42b1-aec8-c175effe4013","source_event_group_id":"3fac3ced-7f81-411e-82f7-43172e196b0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Access Pacific, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Access Pacific after a complaint that a patient's PHI was impermissibly disclosed through a public website. The investigation revealed noncompliance with the HIPAA Privacy Rule regarding safeguarding PHI.","event_id":"3fac3ced-7f81-411e-82f7-43172e196b0b","severity_score":65},{"record_id":"30cd0023-59ff-402a-a7ce-82820eb28c84","source_event_group_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Apria Healthcare Group, Inc.","state":"CA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Apria Healthcare Group settled with OCR after an unsecured device led to the impermissible disclosure of ePHI of 4,000-5,000 patients. OCR found a failure to conduct an adequate risk analysis.","event_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","severity_score":55},{"record_id":"eebc5e70-c1d0-437c-a0ba-59bd98e2ffae","source_event_group_id":"543d6c88-4abb-42ce-aa86-9ff95cb62293","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mercy Hospital and Trauma Center","state":"WI","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mercy Hospital and Trauma Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"543d6c88-4abb-42ce-aa86-9ff95cb62293","severity_score":55},{"record_id":"e5aab1ba-e2c5-4fb1-a61e-fe156e1416c8","source_event_group_id":"a0ceaa6f-506f-40e5-a591-d8e9725c450c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Heart Clinic, Inc.","state":"MS","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Heart Clinic settled with OCR after a publicly accessible internet server exposed ePHI of over 14,000 patients. OCR found a failure to conduct an adequate risk analysis.","event_id":"a0ceaa6f-506f-40e5-a591-d8e9725c450c","severity_score":65},{"record_id":"e266964f-093d-4017-864b-77ab94e63ab0","source_event_group_id":"65db7788-a7bb-4f2a-9271-c7b79c5e8bba","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Chicago Medical Center","state":"IL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Chicago Medical Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"65db7788-a7bb-4f2a-9271-c7b79c5e8bba","severity_score":55},{"record_id":"cf72d0f3-512c-4bc8-b541-5868d629cc1d","source_event_group_id":"3c815548-f858-4b9b-8dac-80aa9483f5c3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho Health Data Exchange","state":"ID","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"IHDE settled with OCR after an investigation revealed impermissible disclosures of PHI due to insufficient safeguards and a lack of proper policies and procedures.","event_id":"3c815548-f858-4b9b-8dac-80aa9483f5c3","severity_score":55},{"record_id":"c2891c38-0066-48ed-89bd-1b69d54d5d72","source_event_group_id":"9839b954-25cc-49f1-96ba-92bb876f516d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Gwinnett Medical Center","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Gwinnett Medical Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"9839b954-25cc-49f1-96ba-92bb876f516d","severity_score":55},{"record_id":"b3ef25db-3778-41ec-9720-1e55b67a16b9","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System settled with OCR after an employee repeatedly accessed the medical records of celebrities and other patients without a permissible reason, violating patient privacy.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"8acb6091-1026-4a04-8379-c1b31d10024f","source_event_group_id":"ba93d094-4463-4823-89d1-902d7b594cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph Health System","state":"CA","individuals_affected":31800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SJHS settled with OCR after an unsecured computer server led to the impermissible disclosure of ePHI of over 31,000 patients. OCR found a lack of a comprehensive risk analysis.","event_id":"ba93d094-4463-4823-89d1-902d7b594cfa","severity_score":90},{"record_id":"76964dbe-068f-404a-8782-cffffad87c14","source_event_group_id":"ce4c2e45-ec12-4787-833f-0f6323ed9896","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of South Florida Physicians Group","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of South Florida Physicians Group settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"ce4c2e45-ec12-4787-833f-0f6323ed9896","severity_score":55},{"record_id":"725ad1d8-d486-4822-b2cd-604ccd2a0fc3","source_event_group_id":"99a9b413-e5df-4524-bc13-4efceac40a82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Carolinas HealthCare System","state":"NC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Carolinas HealthCare System settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"99a9b413-e5df-4524-bc13-4efceac40a82","severity_score":55},{"record_id":"4b45fc46-beef-4c69-812b-77bd94da0d16","source_event_group_id":"4b50745b-c23a-4be8-9bbd-284014c28d73","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Methodist Le Bonheur Healthcare","state":"TN","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Methodist Le Bonheur Healthcare settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"4b50745b-c23a-4be8-9bbd-284014c28d73","severity_score":55},{"record_id":"4b30914f-61e5-423a-98fa-eaff90582a0a","source_event_group_id":"6a7a5458-0d07-44dc-889a-272bfcfba85e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Accident Care and Treatment Center, P.A.","state":"KS","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Accident Care and Treatment Center settled with OCR after leaving medical records accessible to unauthorized individuals in a public waiting room and failing to implement proper safeguards.","event_id":"6a7a5458-0d07-44dc-889a-272bfcfba85e","severity_score":55},{"record_id":"405a5eca-62f0-48c9-b18f-cb47d5980532","source_event_group_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Miami Health System","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMHS settled with OCR after a laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","severity_score":55},{"record_id":"3a285529-e2eb-4c72-b93f-0394287cb5e3","source_event_group_id":"9b4354ac-bf13-43b0-920c-3be0330089ea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Vanderbilt University Medical Center","state":"TN","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Vanderbilt University Medical Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"9b4354ac-bf13-43b0-920c-3be0330089ea","severity_score":55},{"record_id":"2c5b977d-9ba0-4976-aa98-b1f53064db79","source_event_group_id":"41d61694-fab5-4e16-a225-771d40c9e45f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Regents University","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Georgia Regents University settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"41d61694-fab5-4e16-a225-771d40c9e45f","severity_score":55},{"record_id":"2a3f806d-608f-4625-900f-c805fa8b8b58","source_event_group_id":"7da71981-c510-4d14-8305-4ba6b372ace0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The George Washington University Hospital","state":"DC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The George Washington University Hospital settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"7da71981-c510-4d14-8305-4ba6b372ace0","severity_score":55},{"record_id":"df8a8ded-4736-42b2-9d90-6672821b42d2","source_event_group_id":"5e7b1e5c-be2d-4a9b-9ddf-85c0caadd48c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Emergency Medical Services","state":"WA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County EMS settled with OCR after ePHI of 1,000-5,000 patients was impermissibly disclosed due to a portable media device being lost or stolen. OCR cited a lack of risk analysis.","event_id":"5e7b1e5c-be2d-4a9b-9ddf-85c0caadd48c","severity_score":55},{"record_id":"a68e7fd4-b1f4-4851-93cb-a4e9f4e5b76f","source_event_group_id":"1e01a9ac-485b-41da-9a8d-f83654851cb9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Piedmont Hospital","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Piedmont Hospital settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"1e01a9ac-485b-41da-9a8d-f83654851cb9","severity_score":55},{"record_id":"8cf1657c-6b0a-43d1-9fba-7693a7e552bd","source_event_group_id":"1a4a9bf0-dacb-459d-b9e3-fdab0c0db57d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Systems, Inc.","state":"TN","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Community Health Systems, Inc. settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"1a4a9bf0-dacb-459d-b9e3-fdab0c0db57d","severity_score":55},{"record_id":"8288794c-379c-4837-8183-f0b636fac14f","source_event_group_id":"69f6f0d1-105a-4bce-aba9-d08b7323a399","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Palmetto Health","state":"SC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Palmetto Health settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"69f6f0d1-105a-4bce-aba9-d08b7323a399","severity_score":55},{"record_id":"7e425be6-5bb3-4500-aaab-384c971bd9cd","source_event_group_id":"5424dde4-26b8-471f-a18d-80fa375ec32f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Regional Medical Center","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Regional Medical Center settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"5424dde4-26b8-471f-a18d-80fa375ec32f","severity_score":55},{"record_id":"731d0294-ce9d-4aa5-a3b7-2465b62ec852","source_event_group_id":"90f87914-c577-41e0-b072-277f26689f26","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Emergency Healthcare Physicians, Ltd.","state":"AZ","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Emergency Healthcare Physicians, Ltd. settled with OCR after a breach involving an unencrypted portable electronic device containing ePHI of 1,000-5,000 patients. OCR cited a lack of risk analysis.","event_id":"90f87914-c577-41e0-b072-277f26689f26","severity_score":55},{"record_id":"6a669f66-f155-416d-8800-ec7030df8f20","source_event_group_id":"d39a7d3a-9209-4e2d-bb31-9d7f9bc3c2b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University Health Care System","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University Health Care System settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"d39a7d3a-9209-4e2d-bb31-9d7f9bc3c2b6","severity_score":55},{"record_id":"690af755-d5a6-48ef-84bc-978b395858df","source_event_group_id":"8495992a-9ef6-4bf5-ae3a-5eaa83ce7705","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Agape Health Services","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agape Health Services settled with OCR for failing to provide timely access to medical records for an individual. This was a direct violation of the right of access.","event_id":"8495992a-9ef6-4bf5-ae3a-5eaa83ce7705","severity_score":55},{"record_id":"1cb3cbe4-3192-420d-8b64-0531feb50fd0","source_event_group_id":"9b87f983-81f5-4e90-a200-2ac9e3960630","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Central Bronx Hospital","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Central Bronx Hospital settled with OCR after patient information, including HIV status, was impermissibly disclosed when papers were found by a patient in a public area.","event_id":"9b87f983-81f5-4e90-a200-2ac9e3960630","severity_score":55},{"record_id":"a51b5ff1-d619-437d-a519-9e3361bf7c14","source_event_group_id":"76303630-da0e-4d3c-be41-638da4ee1965","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hospice of the Comforter","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Hospice of the Comforter settled with OCR after a laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"76303630-da0e-4d3c-be41-638da4ee1965","severity_score":55},{"record_id":"9392400d-ffa2-4f75-91af-9bc051b3adee","source_event_group_id":"9edd21ef-adba-4001-822d-6dd24bd3e95b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"U.S. Department of Veterans Affairs","state":"DC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The VA settled with OCR following multiple incidents of loss and theft of unencrypted electronic media containing ePHI, indicating systemic failures in security measures.","event_id":"9edd21ef-adba-4001-822d-6dd24bd3e95b","severity_score":55},{"record_id":"8dc2ddd6-8881-4af0-8b74-9fc850ac4c87","source_event_group_id":"9cce0154-e22b-4e6c-8491-079b9d08efa0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Carolina Baptist Hospital","state":"NC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Carolina Baptist Hospital settled with OCR after an unencrypted laptop containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"9cce0154-e22b-4e6c-8491-079b9d08efa0","severity_score":55},{"record_id":"8b8a5001-5498-46d2-8a27-631b9ac98348","source_event_group_id":"94d4700b-e42c-4589-97e7-266312413dfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Medical Group","state":"IL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Medical Group settled with OCR after a breach involving the theft of unencrypted computers containing ePHI of 1,000-5,000 patients. OCR found a failure to conduct an adequate risk analysis.","event_id":"94d4700b-e42c-4589-97e7-266312413dfa","severity_score":55},{"record_id":"86a004ab-5b8b-4c62-b603-0a28c6c27e2f","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records upon request. OCR attempted to resolve the matter informally but Cignet failed to cooperate, eventually leading to a civil money penalty.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"51b3cbe9-27b9-45db-b8c0-cd3ca53ab3c2","source_event_group_id":"d903af83-cff5-497b-86be-13373ba202ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of UPenn","state":"PA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO of UPenn settled with OCR after an unencrypted USB drive containing ePHI of 1,000-5,000 patients was stolen. OCR found a failure to conduct an adequate risk analysis and implement encryption.","event_id":"d903af83-cff5-497b-86be-13373ba202ce","severity_score":55},{"record_id":"4b02eb32-e4ec-4a80-a54b-131b849f8e84","source_event_group_id":"0dcec26d-0e81-473b-9c54-f1aea4136aa7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Woodlawn Hospital","state":"IN","individuals_affected":742,"breach_submission_date":"2026-09-21","enforcement_action_date":null,"summary":"","event_id":"0dcec26d-0e81-473b-9c54-f1aea4136aa7","severity_score":30},{"record_id":"c0718e2c-cca3-4c4b-af20-d8f9f98bdc27","source_event_group_id":"8091a84f-4d5e-4302-91fc-319934bbf536","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advanced Radiology Services, P.C.","state":"MI","individuals_affected":826,"breach_submission_date":"2026-09-16","enforcement_action_date":null,"summary":"","event_id":"8091a84f-4d5e-4302-91fc-319934bbf536","severity_score":30},{"record_id":"b89231e8-f62b-4202-b27f-888e04639ee9","source_event_group_id":"5d194e36-bc7a-4315-a24c-f3a66e6a9992","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Commons at St. Andrew's","state":"WA","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Commons at St. Andrew's, an assisted living facility, agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of two residents when it sent the PHI to a local newspaper.","event_id":"5d194e36-bc7a-4315-a24c-f3a66e6a9992","severity_score":50},{"record_id":"9ee05bb5-2307-4e3b-b827-8a95a00a32b1","source_event_group_id":"0c66b48f-267a-42a3-83ea-c1ded44defc7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Commonwealth Health Corporation dba Western Kentucky Diagnostic Imaging","state":"KY","individuals_affected":2490,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Commonwealth Health Corporation agreed to settle potential HIPAA violations for failing to provide timely notification of a breach of unsecured electronic protected health information (ePHI) to affected individuals and OCR.","event_id":"0c66b48f-267a-42a3-83ea-c1ded44defc7","severity_score":65},{"record_id":"64edf19e-f85f-4617-8224-8b85e3c84847","source_event_group_id":"df975e5f-7291-4070-85b6-ffee0a713b89","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Jude Medical","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Jude Medical agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 1,000 patients when an unencrypted laptop was stolen.","event_id":"df975e5f-7291-4070-85b6-ffee0a713b89","severity_score":50},{"record_id":"3ff709c4-5856-4c4a-b615-53d58bb14d9f","source_event_group_id":"55cda3ab-5a49-496c-8184-2484b841860d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Home Health Care Group, Inc. d/b/a St. Anthony's Home Health Care","state":"PA","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Home Health Care Group agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 200 patients by leaving patient documents in a dumpster.","event_id":"55cda3ab-5a49-496c-8184-2484b841860d","severity_score":50},{"record_id":"1927f945-a902-4971-83f5-9ebc8797991f","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center, Inc. (now Mount Sinai St. Luke's)","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center, Inc. agreed to settle potential HIPAA violations for failing to implement appropriate safeguards to protect the protected health information (PHI) of its patients from impermissible disclosure.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"0f1a823f-9370-4fb5-87c0-1b7e05ab3002","source_event_group_id":"67a84bea-0e1e-40cf-866b-a084c521fc0f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brooke Army Medical Center","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brooke Army Medical Center agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 1,000 patients when an unencrypted laptop was stolen.","event_id":"67a84bea-0e1e-40cf-866b-a084c521fc0f","severity_score":65},{"record_id":"c1c56aa4-f006-4a9c-be12-3c14de35d595","source_event_group_id":"ddd59481-f899-4381-93a5-1b60c1ddfcb2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Coachella Valley Children's Center (CVCC)","state":"CA","individuals_affected":790,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Coachella Valley Children's Center (CVCC) agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information of 790 patients when it disposed of paper records in an unsecured dumpster.","event_id":"ddd59481-f899-4381-93a5-1b60c1ddfcb2","severity_score":50},{"record_id":"b48139c9-d2db-419a-ae15-5212ee707661","source_event_group_id":"1e9bce8d-13b5-47f0-be23-8d08ba3a7e8a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Frontier Science and Technology Research Foundation","state":"NY","individuals_affected":792473,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Frontier Science and Technology Research Foundation agreed to settle potential HIPAA violations for a breach of unsecured electronic protected health information (ePHI) after a hacker gained unauthorized access to one of its servers.","event_id":"1e9bce8d-13b5-47f0-be23-8d08ba3a7e8a","severity_score":90},{"record_id":"512a0b57-877c-4fe9-a5ee-cb9e420993ab","source_event_group_id":"63565587-c672-4f88-b3d7-492c1e46cb57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HIPAA E-Tool, LLC","state":"NC","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HIPAA E-Tool, LLC agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 1,700 patients by maintaining an unsecured server.","event_id":"63565587-c672-4f88-b3d7-492c1e46cb57","severity_score":50},{"record_id":"20117922-ae2b-4fe9-a571-bd7b1cbee9fc","source_event_group_id":"a1d2d5fb-6f36-4c25-ac20-80c7aaeafc1e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Revco Solutions","state":"NC","individuals_affected":2133,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Revco Solutions, a debt collection agency, agreed to settle potential HIPAA violations for impermissibly disclosing protected health information (PHI) of 2,133 patients when it mailed collection notices to patients that revealed their PHI to unauthorized individuals.","event_id":"a1d2d5fb-6f36-4c25-ac20-80c7aaeafc1e","severity_score":65},{"record_id":"1b8e9e28-e98a-47e0-aa57-09d1abcb442d","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering (MIE)","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering (MIE) agreed to settle potential HIPAA violations related to a breach of unsecured electronic protected health information (ePHI) that affected 3.9 million individuals.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"e29e3acb-ef49-44bd-9834-0f1d08875793","source_event_group_id":"2c52e769-c1ce-4660-b4a4-62be9f62266a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touro Infirmary","state":"LA","individuals_affected":2277,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Touro Infirmary agreed to settle potential HIPAA violations after an OCR investigation revealed that a former employee impermissibly accessed the protected health information of 2,277 patients.","event_id":"2c52e769-c1ce-4660-b4a4-62be9f62266a","severity_score":65},{"record_id":"a43ea19f-4513-4d98-85a0-a8de57977a34","source_event_group_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas (Spartanburg Regional Healthcare System)","state":"SC","individuals_affected":8634,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas agreed to settle potential HIPAA violations after a breach exposed the protected health information of 8,634 patients. The breach occurred when an unauthorized third-party gained access to an employee's email account.","event_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","severity_score":65},{"record_id":"910eb267-bb83-483f-928c-99e5cf694b99","source_event_group_id":"3be07ad3-f6d2-4dcd-ad40-b8368c33d068","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital of New Orleans","state":"LA","individuals_affected":3800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital of New Orleans agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 3,800 patients when an unencrypted laptop was stolen.","event_id":"3be07ad3-f6d2-4dcd-ad40-b8368c33d068","severity_score":80},{"record_id":"8d83518b-2b92-4c4f-94ea-8818ea3176de","source_event_group_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de Familia, Inc.","state":"NM","individuals_affected":2500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de Familia, Inc. agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 2,500 patients when an unencrypted laptop was stolen.","event_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","severity_score":50},{"record_id":"59300a61-a4ff-4d1c-b719-9beda0cfb4f2","source_event_group_id":"043cda92-2723-4122-b340-a6fc327304ea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Saratoga Hospital","state":"NY","individuals_affected":150,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Saratoga Hospital agreed to settle potential HIPAA violations after an employee impermissibly accessed the protected health information of 150 patients.","event_id":"043cda92-2723-4122-b340-a6fc327304ea","severity_score":65},{"record_id":"4aca4b6f-844d-4ff6-806f-b3ca0e72bfd3","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Mississippi Medical Center (UMMC) agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 10,000 patients when a former employee failed to encrypt a laptop.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"46c1a412-6ebb-4a11-a5bd-ae96aaaa3110","source_event_group_id":"b6b84bd6-8943-4482-9249-81657fc84e59","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Occlusion Connections","state":"NV","individuals_affected":62,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Occlusion Connections agreed to settle potential HIPAA violations for impermissibly disclosing the protected health information (PHI) of 62 individuals by posting patient testimonials on its website without obtaining valid authorizations.","event_id":"b6b84bd6-8943-4482-9249-81657fc84e59","severity_score":50},{"record_id":"119fcfe0-ce9c-4367-a4f1-9bf44d4ac0b2","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (a.k.a. Agape Health Services)","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services agreed to settle potential HIPAA violations for failing to provide timely access to medical records to a patient and failing to conduct a risk analysis.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"7d783605-a3fd-47ae-bab4-6309c39a0cf4","source_event_group_id":"3c4cb370-8157-4958-91d9-af432d97df32","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eastern Idaho Regional Medical Center (EIRMC)","state":"ID","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"EIRMC settled potential HIPAA violations after a breach involving a misplaced unencrypted USB drive containing the ePHI of 500 individuals. OCR found a failure to conduct a risk analysis.","event_id":"3c4cb370-8157-4958-91d9-af432d97df32","severity_score":65},{"record_id":"621bfb42-6194-44bb-bb7b-8209cce4b5dd","source_event_group_id":"54b61a88-f490-436a-ad35-aa96cdb41622","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Houston Methodist Hospital","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Houston Methodist Hospital settled potential HIPAA violations for an impermissible disclosure of PHI on social media. OCR found a failure to implement appropriate policies and procedures.","event_id":"54b61a88-f490-436a-ad35-aa96cdb41622","severity_score":65},{"record_id":"45cdf287-526d-4f47-b29e-bf8f7887efd6","source_event_group_id":"10dde06b-7ef0-4ff2-8959-02823bfee63d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Business Associate (undisclosed)","state":"CA","individuals_affected":4000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is the first enforcement action against a business associate, related to a breach affecting 4,000 individuals due to unsecured devices. OCR found failure to conduct a risk analysis and implement security measures.","event_id":"10dde06b-7ef0-4ff2-8959-02823bfee63d","severity_score":80},{"record_id":"35f8e560-ab5b-4dff-afe2-886e71d926d9","source_event_group_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Children’s Hospital","state":"FL","individuals_affected":1020,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Children’s Hospital settled potential HIPAA violations after the ePHI of 1,020 individuals was inadvertently made publicly available on the internet. OCR found a lack of a comprehensive risk analysis.","event_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","severity_score":65},{"record_id":"78b06b2d-f6df-4fff-9496-a5b7fcfe8d4d","source_event_group_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Health & Services – Washington","state":"WA","individuals_affected":334994,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This settlement resolved potential HIPAA violations stemming from a breach involving unencrypted laptops. The breach affected a significant number of individuals.","event_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","severity_score":90},{"record_id":"6b1f965c-cb79-4608-aa1e-c090177ad335","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":869,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This was the second settlement with Concentra, this time for a breach involving an unencrypted laptop affecting 869 individuals. This demonstrated a systemic lack of safeguards.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"ee6c614f-e5f3-496e-87a1-459815fe4b1f","source_event_group_id":"3fa1c31b-f579-4ad7-96f9-d04011b4ca47","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lexington Hospital Corporation","state":"TN","individuals_affected":67000,"breach_submission_date":"2026-09-08","enforcement_action_date":null,"summary":"","event_id":"3fa1c31b-f579-4ad7-96f9-d04011b4ca47","severity_score":70},{"record_id":"e951028c-fc06-48fc-9bc7-05f69fa53d1e","source_event_group_id":"4954b981-77c5-441d-92dc-f33e352f5c96","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Project Belle, LLC","state":"NH","individuals_affected":840,"breach_submission_date":"2026-09-17","enforcement_action_date":null,"summary":"","event_id":"4954b981-77c5-441d-92dc-f33e352f5c96","severity_score":30},{"record_id":"00d8687d-559d-49e5-89d3-cdab68afc1c7","source_event_group_id":"d26d6cae-0fc8-4492-938c-694b669732bd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OU Medicine, Inc.","state":"OK","individuals_affected":854,"breach_submission_date":"2026-09-18","enforcement_action_date":null,"summary":"","event_id":"d26d6cae-0fc8-4492-938c-694b669732bd","severity_score":30},{"record_id":"d6109d06-0c94-4964-9d0d-06a0189196a3","source_event_group_id":"3dd3cb53-76d4-490d-9fdd-097a255f7602","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Applied Healthcare Nursing Division, Inc. d/b/a Doctor's Choice Home Care","state":"TX","individuals_affected":14333,"breach_submission_date":"2026-09-19","enforcement_action_date":null,"summary":"","event_id":"3dd3cb53-76d4-490d-9fdd-097a255f7602","severity_score":70},{"record_id":"431e9613-f111-4724-a1c6-4929fc6bb19d","source_event_group_id":"2eb75d73-4bdb-463d-8732-372a10cd4dca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Imagine the Possibilities","state":"IA","individuals_affected":1693,"breach_submission_date":"2026-09-21","enforcement_action_date":null,"summary":"","event_id":"2eb75d73-4bdb-463d-8732-372a10cd4dca","severity_score":50},{"record_id":"e3b7fbb6-a19b-409d-b446-1f072f27d46a","source_event_group_id":"1816770e-d1e5-470d-8b67-852d4422995e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Prime Healthcare Services – Garden Grove, LLC","state":"CA","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Prime Healthcare Services settled for impermissible disclosure of PHI of 2,000 individuals due to an employee's unauthorized access.","event_id":"1816770e-d1e5-470d-8b67-852d4422995e","severity_score":65},{"record_id":"d679ece0-b419-4d27-927d-264dd1d30dd6","source_event_group_id":"6a4e3f8e-6540-4d7f-8b42-8d1464a35115","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FHP Health Center","state":"GU","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FHP Health Center settled after unencrypted patient registration documents were left in an unsecured accessible area, affecting 2,100 individuals.","event_id":"6a4e3f8e-6540-4d7f-8b42-8d1464a35115","severity_score":50},{"record_id":"ab1f34aa-8f78-455c-8749-72d14b0b0cf1","source_event_group_id":"9f5971df-ca1b-4133-9975-488ccc686278","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Weight Loss Doc","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Weight Loss Doc settled for impermissible disclosure of PHI of 1,000 individuals through an unsecured website.","event_id":"9f5971df-ca1b-4133-9975-488ccc686278","severity_score":65},{"record_id":"7622c360-79ca-4308-bfb5-5bfe8add215f","source_event_group_id":"7e7783b5-6ddc-4a05-822d-b2c91a77d477","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Puerto Rico Department of Health","state":"PR","individuals_affected":4000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Puerto Rico Department of Health settled after a data breach involving a server exposed PHI of 4,000 individuals.","event_id":"7e7783b5-6ddc-4a05-822d-b2c91a77d477","severity_score":65},{"record_id":"747c5e8c-edd2-467f-9fab-dd325aae14b7","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Goshen Hospital","state":"IN","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health Goshen Hospital settled for impermissible disclosure of PHI of 14,000 individuals due to a fax error.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":65},{"record_id":"38f16455-49db-4cf7-9f8c-691648efbe66","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Goshen Hospital","state":"IN","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health Goshen Hospital settled for impermissible disclosure of PHI of 14,000 individuals due to a fax error.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":65},{"record_id":"389c24d3-59ec-4103-b735-312abc9b979d","source_event_group_id":"14d0af7d-b17b-45ce-88c2-1419cbe5f45d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Newport Beach Surgery Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Newport Beach Surgery Center settled for failing to provide timely access to medical records to an individual.","event_id":"14d0af7d-b17b-45ce-88c2-1419cbe5f45d","severity_score":50},{"record_id":"313c99ab-6c67-4c54-9add-515e474b00f0","source_event_group_id":"4407e3ce-0414-475f-b5cf-42da7dc69287","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UROGYN","state":"OH","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UROGYN settled for failing to provide timely access to medical records to an individual.","event_id":"4407e3ce-0414-475f-b5cf-42da7dc69287","severity_score":50},{"record_id":"1d73723c-63de-4bba-85a3-e8e0b496050d","source_event_group_id":"d16b5d1c-4082-4a01-a122-842e4f0864a6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Methodist Hospital of Sacramento","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Methodist Hospital of Sacramento settled for failing to provide timely access to medical records to an individual.","event_id":"d16b5d1c-4082-4a01-a122-842e4f0864a6","severity_score":50},{"record_id":"fe7db4b4-13a5-478c-89e5-9d5e16b3cdea","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center settled for impermissible disclosure of PHI of 500 individuals due to an employee's unauthorized access.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"b941f236-a947-42ca-8b18-b22202d5a240","source_event_group_id":"bc34bc94-911a-4f5a-ae11-b8e5a5d63bec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CarePoint Health System","state":"NJ","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CarePoint Health System settled for impermissible disclosure of PHI of 1,000 individuals due to an employee's email error.","event_id":"bc34bc94-911a-4f5a-ae11-b8e5a5d63bec","severity_score":65},{"record_id":"ae14a461-afda-4c6d-8c5c-0c942affcdcc","source_event_group_id":"7da97ea8-79ce-43d1-9a32-8a07a5405c5a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Network of Montana","state":"MT","individuals_affected":1228,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Community Health Network of Montana settled for impermissible disclosure of PHI of 1,228 individuals due to a misconfigured server.","event_id":"7da97ea8-79ce-43d1-9a32-8a07a5405c5a","severity_score":65},{"record_id":"a9bb8ba8-7d9c-4833-b7ea-cd5394a94d9d","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":289000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care settled after an impermissible disclosure of PHI of 289,000 individuals due to a business associate's insecure file transfer application.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"90527059-cf86-4e8c-af86-b56b224e99a4","source_event_group_id":"8abc27fd-bee0-4b4f-87fb-ba7b83f3e20c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Jude Medical, Inc.","state":"MN","individuals_affected":2130,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Jude Medical settled for impermissible disclosure of PHI of 2,130 individuals due to mailing lists issues.","event_id":"8abc27fd-bee0-4b4f-87fb-ba7b83f3e20c","severity_score":50},{"record_id":"77fafa2c-39bd-4dbf-9991-62645990ecbe","source_event_group_id":"ceec1393-980b-4ff6-9f4f-95f0c0e4a948","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arcadia Health Care","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arcadia Health Care settled for impermissible disclosure of PHI of 1,000 individuals due to an unsecured server.","event_id":"ceec1393-980b-4ff6-9f4f-95f0c0e4a948","severity_score":65},{"record_id":"74232921-a6ef-4e86-866e-b9021b6b1e5d","source_event_group_id":"bb353ea7-03d3-41ca-873c-93b91a95c805","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Digital Care Management","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Digital Care Management settled for failing to provide timely access to an individual's medical records.","event_id":"bb353ea7-03d3-41ca-873c-93b91a95c805","severity_score":50},{"record_id":"65f870e4-9575-40ff-aaa4-08939808d05b","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University – Center for Health Sciences","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OSU-CHS settled after a server containing PHI of over 279,000 individuals was compromised by malware.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"64ebf262-3b0d-48ad-9f84-d49d3d179b86","source_event_group_id":"ab1f2ab7-0592-4f84-adfd-31ea3b596db7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Easton Hospital","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Easton Hospital settled for failing to provide timely access to medical records to an individual.","event_id":"ab1f2ab7-0592-4f84-adfd-31ea3b596db7","severity_score":50},{"record_id":"55e832c1-29d3-41de-b686-989db515d824","source_event_group_id":"597aa69f-e61a-4729-bb99-9f3f86648b50","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPS Anesthesia Management, LLC","state":"IL","individuals_affected":34700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPS Anesthesia Management, LLC settled for failing to conduct an enterprise-wide risk analysis and other HIPAA failures after a hacking incident affected 34,700 individuals.","event_id":"597aa69f-e61a-4729-bb99-9f3f86648b50","severity_score":50},{"record_id":"3170e74c-4a10-4b5a-908b-9b6f2ab7a402","source_event_group_id":"ba93d094-4463-4823-89d1-902d7b594cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph Health","state":"CA","individuals_affected":31000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph Health settled for impermissible disclosure of PHI of 31,000 individuals due to a server misconfiguration.","event_id":"ba93d094-4463-4823-89d1-902d7b594cfa","severity_score":90},{"record_id":"2a5a43f7-6291-4470-a80f-5338980253bf","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center","state":"MA","individuals_affected":1120,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boston Medical Center settled after an employee disclosed PHI of over 1000 individuals to a third-party, impacting 1,120 individuals.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"12c99aff-9b75-48cb-b1e0-b554d8796b2f","source_event_group_id":"cc27d483-68ec-467b-9073-ec733371d290","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hobbs Medical Center","state":"NM","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hobbs Medical Center settled for impermissible disclosure of PHI of 1,000 individuals due to an employee's email error.","event_id":"cc27d483-68ec-467b-9073-ec733371d290","severity_score":65},{"record_id":"01fa43b1-1d9b-4f5c-b485-16f58e558be4","source_event_group_id":"be6ed3fb-d862-4e08-9c65-d8065764b699","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hamilton Relay, Inc.","state":"NE","individuals_affected":9778,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hamilton Relay, Inc. settled for an impermissible disclosure of PHI of 9,778 individuals due to a server misconfiguration.","event_id":"be6ed3fb-d862-4e08-9c65-d8065764b699","severity_score":65},{"record_id":"f3813963-a69d-4177-897c-8ed1268c9f35","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, LLC","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet settled after an unencrypted laptop containing PHI was stolen from an employee's car, affecting 1,391 individuals.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"afe6ae2a-6aa1-490f-b472-29826a6a169e","source_event_group_id":"0a75c80f-8d8e-484a-97e8-843e5a256b62","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DFW Family Medical Center, PLLC","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DFW Family Medical Center settled for failing to provide timely access to medical records to an individual.","event_id":"0a75c80f-8d8e-484a-97e8-843e5a256b62","severity_score":50},{"record_id":"9bc4b925-e894-4077-9dc0-4bb3768f6e0a","source_event_group_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Clinic, P.A.","state":"AR","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fayetteville Diagnostic Clinic settled after a complaint alleged failure to secure patient PHI, leading to a breach affecting 1,000 individuals.","event_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","severity_score":50},{"record_id":"99c68c23-e3d6-4170-bdae-4b59894d414f","source_event_group_id":"b7b4f343-2e3b-4c62-a787-d11689e8b86e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fulton County Department of Health and Wellness","state":"GA","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fulton County Department of Health and Wellness settled for impermissible disclosure of PHI of 1,700 individuals due to an email breach.","event_id":"b7b4f343-2e3b-4c62-a787-d11689e8b86e","severity_score":50},{"record_id":"970d19d5-f2a5-4659-b735-36698c177d8a","source_event_group_id":"378d0416-2681-43f6-9c29-0eeecef6800e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allied Orthopedic and Foot & Ankle Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allied Orthopedic and Foot & Ankle Center settled for failing to provide timely access to medical records to an individual.","event_id":"378d0416-2681-43f6-9c29-0eeecef6800e","severity_score":50},{"record_id":"955a5fc2-4294-4546-9389-880b6b323ce2","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":33509,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson was assessed a civil money penalty for three separate data breaches involving unencrypted laptops and USB drives, affecting over 33,500 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"4be02722-6700-43e8-b71d-6a1d86e447d4","source_event_group_id":"286d61c1-bcad-4c14-abbb-89e799c277ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Services of Broward","state":"FL","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Services of Broward settled after a data breach involving a server exposed PHI of 2,000 individuals.","event_id":"286d61c1-bcad-4c14-abbb-89e799c277ce","severity_score":50},{"record_id":"f6403d4b-d245-44b4-97cc-48c10d34b89a","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Mass General Hospital)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General Hospital settled potential HIPAA violations after a patient's PHI was impermissibly disclosed to the public during a media event. This case underscored the importance of patient privacy in public settings.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"c59e6574-7904-4aa8-a4fb-4f7ef7143d97","source_event_group_id":"d26fffe9-e473-4773-bc54-9d1b321a3292","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Therapy Resource Management (TRM)","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"TRM settled potential HIPAA violations related to an unauthorized disclosure of PHI to a marketing vendor. This case highlighted the need for strong business associate agreements.","event_id":"d26fffe9-e473-4773-bc54-9d1b321a3292","severity_score":50},{"record_id":"9d09a21a-3800-4408-a6c0-657c0624635b","source_event_group_id":"bc8a2db3-a295-47bf-a60e-a62a1052eec7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVPH Medical Center","state":"NY","individuals_affected":1308,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVPH Medical Center settled potential HIPAA violations after patient information was exposed on its website. The breach, affecting 1,308 individuals, highlighted the importance of technical safeguards.","event_id":"bc8a2db3-a295-47bf-a60e-a62a1052eec7","severity_score":65},{"record_id":"7a3f3692-b430-4483-a4b0-1b2b01ad36d6","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medical Center (UWMC)","state":"WA","individuals_affected":33650,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UWMC settled potential HIPAA violations related to the loss of unencrypted backup tapes, affecting 33,650 individuals. This case highlighted the necessity of encrypting electronic protected health information (ePHI) on backup media.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"339cae3c-95d6-4260-b70b-3b687d44ed19","source_event_group_id":"b61b1cf4-82f5-4e27-8c1a-3f1d9398354d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital (MGH) and Partners HealthCare System (PHS)","state":"MA","individuals_affected":19200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH and PHS settled potential HIPAA violations related to the loss of unencrypted backup tapes containing PHI. This incident affected 19,200 individuals and highlighted the importance of encryption for backup media.","event_id":"b61b1cf4-82f5-4e27-8c1a-3f1d9398354d","severity_score":80},{"record_id":"ecaf9924-91e8-4d0c-b4cc-730dc57b1050","source_event_group_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Miami Hospital (UMH)","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMH settled potential HIPAA violations related to the impermissible disclosure of patient information on a publicly accessible website. This case emphasized the need for proper technical safeguards.","event_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","severity_score":55},{"record_id":"df742fb0-c9c0-4257-a1a2-42b0426ceb31","source_event_group_id":"468034e3-429e-48be-b8d1-db3bf75b843b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pillars of Family Health","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pillars of Family Health settled potential HIPAA violations due to a failure to implement policies and procedures to safeguard PHI, resulting in an impermissible disclosure.","event_id":"468034e3-429e-48be-b8d1-db3bf75b843b","severity_score":50},{"record_id":"b4019f82-2f52-4257-b88f-4aea89021b29","source_event_group_id":"fca72db8-f5cd-4eee-bf67-b5b5086f4a73","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HUPAA (Health Care Provider Alliance Association)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HUPAA settled potential HIPAA violations after an online calendar containing patient information was publicly accessible. This case emphasized the need for proper configuration of electronic systems.","event_id":"fca72db8-f5cd-4eee-bf67-b5b5086f4a73","severity_score":50},{"record_id":"bd3a0a8e-2c92-4b17-9fe0-dafcd8b34759","source_event_group_id":"56e5e1fd-8e6b-4ebc-b43b-d395d8df2a05","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bacon County Health Services, Inc.","state":"GA","individuals_affected":501,"breach_submission_date":"2026-09-15","enforcement_action_date":null,"summary":"","event_id":"56e5e1fd-8e6b-4ebc-b43b-d395d8df2a05","severity_score":30},{"record_id":"e866d902-0e68-4449-9b8c-c1b33a3bb4dc","source_event_group_id":"e592b499-93fc-470b-9bf6-7196fa4d9867","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Three Oaks Hospice, Incorporated","state":"TX","individuals_affected":36622,"breach_submission_date":"2026-09-17","enforcement_action_date":null,"summary":"","event_id":"e592b499-93fc-470b-9bf6-7196fa4d9867","severity_score":70},{"record_id":"ddfd42c1-d0be-45b1-984e-50a123e6ac64","source_event_group_id":"cc67795b-0f86-4099-bf2a-f9466e9bbebf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"American Addiction Centers","state":"TN","individuals_affected":327754,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"cc67795b-0f86-4099-bf2a-f9466e9bbebf","severity_score":85},{"record_id":"dd2d7f32-b0c8-4a1e-848f-09c47eebabdd","source_event_group_id":"d125b490-a1f0-4c1e-9084-9d03cc245cb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Interim HealthCare Inc.","state":"FL","individuals_affected":1283,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"d125b490-a1f0-4c1e-9084-9d03cc245cb2","severity_score":50},{"record_id":"af3f3fb5-b747-4950-a981-839988a0b802","source_event_group_id":"bde30564-22f7-4006-9b7c-bcee2187c755","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vernon & Waldrep OB-Gyn Associates","state":"TX","individuals_affected":17435,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"bde30564-22f7-4006-9b7c-bcee2187c755","severity_score":70},{"record_id":"91ee7308-99bf-455d-a1a5-aa4acb6b5598","source_event_group_id":"e5d9e126-0f0a-41e6-b15c-72844ab70027","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lakes Region Visiting Nursing Association","state":"NH","individuals_affected":1274,"breach_submission_date":"2026-09-14","enforcement_action_date":null,"summary":"","event_id":"e5d9e126-0f0a-41e6-b15c-72844ab70027","severity_score":50},{"record_id":"830e398c-6d20-4bdc-be93-42e18df1a5ab","source_event_group_id":"1a09cdd0-4932-4f73-9213-66262926dd9a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Life Unlimited, Inc.","state":"MO","individuals_affected":1530,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"1a09cdd0-4932-4f73-9213-66262926dd9a","severity_score":50},{"record_id":"7d466bf3-eb41-4424-a457-d53e253d3f53","source_event_group_id":"0d94f355-0dd9-4b45-86a8-e6119f0d1cb5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McDermott Will & Schulte LLP","state":"IL","individuals_affected":5427,"breach_submission_date":"2026-08-26","enforcement_action_date":null,"summary":"","event_id":"0d94f355-0dd9-4b45-86a8-e6119f0d1cb5","severity_score":50},{"record_id":"5fa4676c-98c0-4384-8ad7-cca89d2bb926","source_event_group_id":"a74634f8-4862-477a-a86f-742afb6ed882","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"zHealth, Inc.","state":"CA","individuals_affected":118563,"breach_submission_date":"2026-07-29","enforcement_action_date":null,"summary":"","event_id":"a74634f8-4862-477a-a86f-742afb6ed882","severity_score":85},{"record_id":"5970a500-11a7-4e27-a36e-4d0b6c59e50f","source_event_group_id":"b014b13a-327c-4f89-84e8-89c7423d8fe1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alma Family Services","state":"CA","individuals_affected":2753,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"b014b13a-327c-4f89-84e8-89c7423d8fe1","severity_score":50},{"record_id":"2c241316-d8da-4db1-9ef7-a77a3e59cd2c","source_event_group_id":"8c7f385e-77bc-4078-9087-23e0313d15eb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clover Health","state":"MN","individuals_affected":138677,"breach_submission_date":"2026-09-14","enforcement_action_date":null,"summary":"","event_id":"8c7f385e-77bc-4078-9087-23e0313d15eb","severity_score":85},{"record_id":"d7871fe9-85dd-4cba-8236-0f5c3f7d75b2","source_event_group_id":"46acd903-3fbd-4f13-9e3a-fff24759b550","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Novocure Inc.","state":"PA","individuals_affected":1464,"breach_submission_date":"2026-09-09","enforcement_action_date":null,"summary":"","event_id":"46acd903-3fbd-4f13-9e3a-fff24759b550","severity_score":50},{"record_id":"cd6c0913-b926-4f50-986e-7a52c33404ae","source_event_group_id":"30dbcc00-c3c5-44bc-bdf4-2fdc401d566a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oakdale Ear Nose & Throat PA d/b/a Minnesota ENT","state":"MN","individuals_affected":99714,"breach_submission_date":"2026-08-12","enforcement_action_date":null,"summary":"","event_id":"30dbcc00-c3c5-44bc-bdf4-2fdc401d566a","severity_score":70},{"record_id":"b7ad2da9-14b5-464b-be65-d9f5f39dde44","source_event_group_id":"5aac739b-8f75-4ab8-9d82-9d5c3e7d4556","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WindRose Health Network","state":"IN","individuals_affected":33158,"breach_submission_date":"2026-09-16","enforcement_action_date":null,"summary":"","event_id":"5aac739b-8f75-4ab8-9d82-9d5c3e7d4556","severity_score":70},{"record_id":"b6db334a-4bfc-47b8-81d9-1d5a271971ab","source_event_group_id":"1391d31c-746c-4338-8388-c42ea43e43c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Azle Cube Smiles PLLC","state":"TX","individuals_affected":3280,"breach_submission_date":"2026-09-09","enforcement_action_date":null,"summary":"","event_id":"1391d31c-746c-4338-8388-c42ea43e43c4","severity_score":50},{"record_id":"af3786dc-81a2-4f7f-85d0-5f21b9f342f1","source_event_group_id":"1478d377-3a1f-4962-a74b-9149a1d36c80","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Craneware, Inc.","state":"FL","individuals_affected":501,"breach_submission_date":"2026-09-02","enforcement_action_date":null,"summary":"","event_id":"1478d377-3a1f-4962-a74b-9149a1d36c80","severity_score":30},{"record_id":"a27c3e8a-a1fc-4322-9025-aad1a4acce5f","source_event_group_id":"8e35f3f8-46a6-4bdc-b35e-c164877b69fa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Camden-on-Gauley Medical Center","state":"WV","individuals_affected":501,"breach_submission_date":"2026-09-15","enforcement_action_date":null,"summary":"","event_id":"8e35f3f8-46a6-4bdc-b35e-c164877b69fa","severity_score":30},{"record_id":"8e14b2eb-c26e-4df3-8464-22579f7ebffd","source_event_group_id":"27eff4d3-b8c2-44e2-82c5-2b5043e112f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advantage Home Health Care","state":"IN","individuals_affected":19851,"breach_submission_date":"2026-08-25","enforcement_action_date":null,"summary":"","event_id":"27eff4d3-b8c2-44e2-82c5-2b5043e112f9","severity_score":70},{"record_id":"8a31f5a1-8d25-4057-928c-57d53a55fd29","source_event_group_id":"73c4edec-db58-473e-82c9-c4839dd6cd2c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PSI Premier Specialties, Inc. d/b/a Medical Express PSI","state":"TX","individuals_affected":4100,"breach_submission_date":"2026-08-16","enforcement_action_date":null,"summary":"","event_id":"73c4edec-db58-473e-82c9-c4839dd6cd2c","severity_score":50},{"record_id":"f9a68bcf-9793-45c5-a5bc-e11aa96b5080","source_event_group_id":"fbe1e83a-7e56-4782-969e-0b34398382e8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Persona Dental","state":"MN","individuals_affected":3386,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"fbe1e83a-7e56-4782-969e-0b34398382e8","severity_score":50},{"record_id":"905b0241-ec31-4ccb-bfbf-a40229a4f4b3","source_event_group_id":"2435ded4-e2d8-49a0-bffd-efb7e3920727","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"At Home Medical, Inc.","state":"NJ","individuals_affected":1091,"breach_submission_date":"2026-09-16","enforcement_action_date":null,"summary":"","event_id":"2435ded4-e2d8-49a0-bffd-efb7e3920727","severity_score":50},{"record_id":"f92ea267-67c7-45ba-8158-b534839773b3","source_event_group_id":"c40d9b65-70be-40bb-8ed2-365a81718141","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Comprehensive Orthopedics & Musculoskeletal Care, LLC","state":"CT","individuals_affected":21897,"breach_submission_date":"2026-09-10","enforcement_action_date":null,"summary":"","event_id":"c40d9b65-70be-40bb-8ed2-365a81718141","severity_score":70},{"record_id":"64d2c9af-8225-4f5a-843b-1f7c2316febf","source_event_group_id":"18bb960a-8ef4-4157-8322-2635ab85ccca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AngMar Management Services","state":"TX","individuals_affected":126196,"breach_submission_date":"2026-09-16","enforcement_action_date":null,"summary":"","event_id":"18bb960a-8ef4-4157-8322-2635ab85ccca","severity_score":85},{"record_id":"570acca0-b340-42de-b7f4-0624b8ac0282","source_event_group_id":"655cb607-1b74-44e2-80e5-88088a9ff87b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization (MSO) of Florida, Inc.","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO of Florida settled after an impermissible disclosure of PHI of HIV patients in a public area of their office.","event_id":"655cb607-1b74-44e2-80e5-88088a9ff87b","severity_score":55},{"record_id":"438db285-b441-4599-aa86-0e343d3340fd","source_event_group_id":"196f766c-a268-4329-950d-62c2acb6a3cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Motors Company","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"General Motors settled for disclosing the PHI of a former employee to the employee's new employer, without proper authorization.","event_id":"196f766c-a268-4329-950d-62c2acb6a3cd","severity_score":55},{"record_id":"0ff95517-02e5-479c-9159-bc53f3287a51","source_event_group_id":"4fa48126-cb28-4d9a-985d-fb077a8ce25c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"PHS Community Services Inc.","state":"GA","individuals_affected":12,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PHS Community Services agreed to a resolution agreement after patient information was impermissibly disclosed due to a mailing error.","event_id":"4fa48126-cb28-4d9a-985d-fb077a8ce25c","severity_score":55},{"record_id":"baa83ad5-138d-44a8-9b8f-874474289935","source_event_group_id":"d564d7d0-6def-4f2c-833a-a8a935973188","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Leggett & Platt, Incorporated Employee Benefit Plan","state":"MO","individuals_affected":61702,"breach_submission_date":"2026-09-15","enforcement_action_date":null,"summary":"","event_id":"d564d7d0-6def-4f2c-833a-a8a935973188","severity_score":70},{"record_id":"e710b44d-137e-4338-9ad5-c0d720c16666","source_event_group_id":"0964f976-32b8-4709-b0bf-784881d8bdad","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Next Level Medical, LLC","state":"TX","individuals_affected":501,"breach_submission_date":"2026-09-09","enforcement_action_date":null,"summary":"","event_id":"0964f976-32b8-4709-b0bf-784881d8bdad","severity_score":30},{"record_id":"7e9d15d3-5490-43cb-a797-b9680ce6c8c0","source_event_group_id":"2d0bbecb-aca4-4110-aac9-7b74f0984bd9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"COMHAR, Inc.","state":"PA","individuals_affected":501,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"2d0bbecb-aca4-4110-aac9-7b74f0984bd9","severity_score":30},{"record_id":"ff77a491-245f-44f9-bfb7-ee3e004aac3c","source_event_group_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioVascular Associates of Mesa, P.C.","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioVascular Associates of Mesa, P.C. agreed to pay $100,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","severity_score":50},{"record_id":"f36339c8-591a-4f3c-8db0-1741cfd115ed","source_event_group_id":"f2ccc39f-1444-428a-a863-71c7a2e83548","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Device Manufacturer","state":"MA","individuals_affected":250000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR took enforcement action against a medical device manufacturer for HIPAA violations related to inadequate security practices that led to a breach of patient data.","event_id":"f2ccc39f-1444-428a-a863-71c7a2e83548","severity_score":90},{"record_id":"eab9b17f-d619-42fc-a3a6-1bc027a588f9","source_event_group_id":"0e2149ad-3f2f-4515-8931-1dc1c35a8183","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Insurance Company","state":"CA","individuals_affected":10000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A health insurance company resolved a major cyberattack investigation with OCR, including a monetary settlement and a robust corrective action plan focused on enhanced cybersecurity.","event_id":"0e2149ad-3f2f-4515-8931-1dc1c35a8183","severity_score":90},{"record_id":"e8e594ec-f49b-4b0b-b412-88d34ac0a1b1","source_event_group_id":"895ad433-d66b-4481-8ceb-e2f8a51746bb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Greater Baltimore Medical Center","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Greater Baltimore Medical Center agreed to pay $250,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"895ad433-d66b-4481-8ceb-e2f8a51746bb","severity_score":65},{"record_id":"e0a0754a-7b4e-4b7c-9425-6bbf3fb484f8","source_event_group_id":"30d9139c-11fe-4327-9b44-50c3c9460315","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Large Hospital System","state":"NY","individuals_affected":5000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A large hospital system settled with OCR for a significant data breach, agreeing to pay a multi-million dollar penalty and implement a comprehensive corrective action plan.","event_id":"30d9139c-11fe-4327-9b44-50c3c9460315","severity_score":90},{"record_id":"dd810d63-a44c-40f3-9981-9ce98b0eba4a","source_event_group_id":"1abbbdcc-a39e-45e9-bc03-9e821e1cbcb8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pharmacy Chain","state":"TX","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A national pharmacy chain received a civil money penalty for violating the HIPAA Privacy Rule by impermissibly disclosing patient information.","event_id":"1abbbdcc-a39e-45e9-bc03-9e821e1cbcb8","severity_score":65},{"record_id":"a7a2d5bb-9194-4a99-94c6-484071b0c0e7","source_event_group_id":"520f3a49-e8da-44e5-8372-f3c668495a8b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medallion Health, LLC","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medallion Health, LLC agreed to pay $40,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"520f3a49-e8da-44e5-8372-f3c668495a8b","severity_score":50},{"record_id":"96f131f4-cbe9-4db8-b4a3-dd14a1333ed6","source_event_group_id":"0a489a3c-9d50-40a7-8e73-8a8070e7d906","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Various Healthcare Providers","state":"US","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR continued its Right of Access Initiative with several enforcement actions against healthcare providers for failing to provide patients with timely access to their medical records.","event_id":"0a489a3c-9d50-40a7-8e73-8a8070e7d906","severity_score":50},{"record_id":"6680c295-9468-4dff-8da6-4aedaf940d22","source_event_group_id":"110cb6dc-da4b-41f6-8c4e-25ac9f52b39f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Illinois Department of Human Services","state":"IL","individuals_affected":13327,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Illinois Department of Human Services agreed to pay $1,600,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach exposed the ePHI of over 13,000 individuals.","event_id":"110cb6dc-da4b-41f6-8c4e-25ac9f52b39f","severity_score":90},{"record_id":"41ae9439-43a4-4d4b-9488-799ef2e42ea2","source_event_group_id":"833aac21-32a0-44c7-83e9-20fefcbcd308","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"United States Anesthesia Partners","state":"TX","individuals_affected":1200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"United States Anesthesia Partners agreed to pay $1,500,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach exposed the ePHI of over 1.2 million individuals.","event_id":"833aac21-32a0-44c7-83e9-20fefcbcd308","severity_score":90},{"record_id":"25be0098-87a1-4576-9041-0b8880872152","source_event_group_id":"18f7ed4a-e4b1-46c9-acb5-24e24ea7b11f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Systems","state":"TN","individuals_affected":4500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Community Health Systems agreed to pay $2,300,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach exposed the ePHI of over 4.5 million individuals.","event_id":"18f7ed4a-e4b1-46c9-acb5-24e24ea7b11f","severity_score":90},{"record_id":"1bd461e5-7ec5-41f7-a7c3-73f1326c79d8","source_event_group_id":"ddebe1df-c5db-4bf3-ad55-d0d5938e975d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seattle Children's Hospital","state":"WA","individuals_affected":1290000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Seattle Children's Hospital agreed to pay $4,000,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach exposed the ePHI of over 1.2 million individuals.","event_id":"ddebe1df-c5db-4bf3-ad55-d0d5938e975d","severity_score":90},{"record_id":"fee3638b-91eb-4541-bf32-48ec99428d5a","source_event_group_id":"b4460e45-124b-400d-99f1-4f508afeb57c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Solomon G. Roberts","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Solomon G. Roberts agreed to pay $30,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"b4460e45-124b-400d-99f1-4f508afeb57c","severity_score":50},{"record_id":"d8802877-aaed-40e5-abfc-a8253e5cc1c8","source_event_group_id":"3f577df4-6c96-4e65-884c-936df9cb61e5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Black Talon Security","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Black Talon Security agreed to pay $50,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to notify OCR and affected individuals of a breach of unsecured protected health information.","event_id":"3f577df4-6c96-4e65-884c-936df9cb61e5","severity_score":50},{"record_id":"d86758c7-6d65-4476-96d9-f823ab36a61f","source_event_group_id":"45448359-e029-41c3-97a0-d1d5837c81a9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Office of Community Healthcare","state":"AL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Office of Community Healthcare agreed to pay $40,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"45448359-e029-41c3-97a0-d1d5837c81a9","severity_score":50},{"record_id":"d3323aa4-a4b7-46a0-abea-6b47968a0dab","source_event_group_id":"3eb6c3f4-fff0-48cb-b435-c0d01277a424","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HHS OCR","state":"US","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR announced enforcement discretion for HIPAA violations during COVID-19 telehealth services, not a penalty but a policy shift affecting potential enforcement.","event_id":"3eb6c3f4-fff0-48cb-b435-c0d01277a424","severity_score":55},{"record_id":"d2ff28f6-3ac7-4d78-9ffc-8553344ff710","source_event_group_id":"42af7ef3-c075-431d-b01f-deb715b10177","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pinnacle Data Systems, LLC","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pinnacle Data Systems, LLC agreed to pay $45,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"42af7ef3-c075-431d-b01f-deb715b10177","severity_score":50},{"record_id":"d236d53a-7c12-49e8-a066-7872dcc50b13","source_event_group_id":"5d39bdb9-b016-476e-b11b-44e083246eaf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Health System Affiliated Covered Entity","state":"RI","individuals_affected":20431,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifespan agreed to pay $1,040,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a laptop containing ePHI was stolen, exposing the information of over 20,000 individuals.","event_id":"5d39bdb9-b016-476e-b11b-44e083246eaf","severity_score":90},{"record_id":"c987c7e1-be6d-41c7-9ddb-13898446dcff","source_event_group_id":"fe01ec3b-ceb6-41a1-96e5-3cc0738cb5e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hospital","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hospital agreed to pay $215,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"fe01ec3b-ceb6-41a1-96e5-3cc0738cb5e2","severity_score":65},{"record_id":"c72c4f72-d78e-47a0-8c25-69b50ac98ace","source_event_group_id":"3eb6c3f4-fff0-48cb-b435-c0d01277a424","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HHS OCR","state":"US","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR announced a series of enforcement actions related to the HIPAA Right of Access Initiative, emphasizing patients' rights to their medical records.","event_id":"3eb6c3f4-fff0-48cb-b435-c0d01277a424","severity_score":55},{"record_id":"c32eb9b4-1595-48d3-9e1c-3c29db589282","source_event_group_id":"150709cb-739b-492c-85b5-e4abc36df23f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Seth Rubenstein","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Seth Rubenstein agreed to pay $25,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"150709cb-739b-492c-85b5-e4abc36df23f","severity_score":50},{"record_id":"bccd2cb1-8a48-45a9-bd9b-beac7fb66fd2","source_event_group_id":"96e96c11-84ab-4044-b4cd-5bb7055961fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fallbrook Regional Health District","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fallbrook Regional Health District agreed to pay $60,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"96e96c11-84ab-4044-b4cd-5bb7055961fc","severity_score":50},{"record_id":"b700964a-c8dc-4775-a1df-1bbf4ae747dd","source_event_group_id":"2c98f33a-3a67-43a1-9e6f-39d1b42e7517","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Plan of Nevada","state":"NV","individuals_affected":10839,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Plan of Nevada agreed to pay $300,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach exposed the ePHI of over 10,000 individuals.","event_id":"2c98f33a-3a67-43a1-9e6f-39d1b42e7517","severity_score":65},{"record_id":"a0afbb46-c49a-48f4-b296-c0364d3f9014","source_event_group_id":"b25142f1-bf5a-4028-b6f6-64d0cc672d76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Enforcement Action: Dental Practice in Georgia","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR reached a settlement with a Georgia-based dental practice for potential HIPAA violations regarding patient access to their medical records.","event_id":"b25142f1-bf5a-4028-b6f6-64d0cc672d76","severity_score":50},{"record_id":"9c16de0b-7fa5-4f83-977b-34ac84a3a4ca","source_event_group_id":"7bcf4564-7abf-4bb4-9ae6-a5bfc5a4370c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Refuah Health Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Refuah Health Center agreed to pay $475,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"7bcf4564-7abf-4bb4-9ae6-a5bfc5a4370c","severity_score":65},{"record_id":"976cf8d4-d479-4444-88fa-0d12f7127eab","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (MetroCare)","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MetroCare agreed to pay $25,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"8e586d38-34a2-4698-89c7-3f663164c81a","source_event_group_id":"509de514-7c16-4377-8eac-20bb1d3a30ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Egbert Dermatology","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Egbert Dermatology agreed to pay $30,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"509de514-7c16-4377-8eac-20bb1d3a30ac","severity_score":50},{"record_id":"7728bb2d-7437-4f54-ba78-d93b502728bf","source_event_group_id":"db9e916b-5d10-40db-8a08-e9295fffd281","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Family Healthcare, LLC","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Family Healthcare, LLC agreed to pay $25,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"db9e916b-5d10-40db-8a08-e9295fffd281","severity_score":50},{"record_id":"70f35758-f90e-4713-a0bf-fb90ceea5e96","source_event_group_id":"6af10a47-9ff6-4a13-9440-9a66c3553b9f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision University","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision University agreed to pay $100,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations due to a failure to terminate access rights to ePHI after a workforce member's employment ended.","event_id":"6af10a47-9ff6-4a13-9440-9a66c3553b9f","severity_score":50},{"record_id":"6d0cf073-6d58-40d8-b82e-995f6f0ebe41","source_event_group_id":"f198018b-1675-4ebb-9065-c16de18cca8c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Home Health Care, Inc.","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Home Health Care, Inc. agreed to pay $125,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f198018b-1675-4ebb-9065-c16de18cca8c","severity_score":65},{"record_id":"6cda56ed-0204-45b6-8f8c-a47ce6dab454","source_event_group_id":"11ea2416-bcb4-424f-8ecc-a7393ca434fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice of Dr. Lance Leider","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The practice of Dr. Lance Leider agreed to pay $30,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations for failing to provide timely access to medical records.","event_id":"11ea2416-bcb4-424f-8ecc-a7393ca434fc","severity_score":50},{"record_id":"289f88b9-7f78-4fc8-bf56-6631f9ffa9e2","source_event_group_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwell Health","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northwell Health agreed to pay $500,000 to OCR and to adopt a corrective action plan to resolve potential HIPAA violations after a data breach involved a third-party vendor.","event_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","severity_score":65},{"record_id":"0f9760a0-02b9-4896-a025-2fbf34986358","source_event_group_id":"fafaabda-a098-43e1-b5a7-ef02a04c50db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center and Albert Einstein College of Medicine","state":"NY","individuals_affected":12900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center and Albert Einstein College of Medicine agreed to pay $4,750,000 to OCR and to adopt corrective action plans to resolve potential HIPAA violations related to a data breach that exposed the ePHI of over 12,000 individuals.","event_id":"fafaabda-a098-43e1-b5a7-ef02a04c50db","severity_score":90},{"record_id":"f8cffb57-8d13-4f47-8183-145e0b3f433c","source_event_group_id":"4635e713-d016-4984-9aa2-b005fb15ee30","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Medical University of South Carolina (MUSC)","state":"SC","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $1,700,000 to OCR to settle potential HIPAA violations after a breach of unsecured ePHI.","event_id":"4635e713-d016-4984-9aa2-b005fb15ee30","severity_score":90},{"record_id":"f4b03d96-4f16-4354-8abf-e3bc8031291d","source_event_group_id":"8c8e74d1-7e64-4043-9b35-283d577d0c46","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley Anesthesiology and Pain Consultants","state":"AZ","individuals_affected":88000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $2,000,000 to OCR to settle potential HIPAA violations related to a breach of unsecured ePHI.","event_id":"8c8e74d1-7e64-4043-9b35-283d577d0c46","severity_score":90},{"record_id":"da5593e5-8890-460f-8589-0bad673b1211","source_event_group_id":"f0a97533-711e-4ea1-bacd-6c673ac31533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hardin Medical Center (HMC)","state":"TN","individuals_affected":1269,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $25,000 to OCR and adopted a corrective action plan to settle potential HIPAA violations related to an impermissible disclosure of PHI.","event_id":"f0a97533-711e-4ea1-bacd-6c673ac31533","severity_score":50},{"record_id":"cd7fde22-3f78-46ea-a9ef-cc5e860cbac5","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Medical Center (CNMC)","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $35,000 to OCR to settle potential HIPAA violations for an impermissible disclosure of PHI on social media.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":50},{"record_id":"97b5ec8b-5bd7-4603-b2bc-03b2340caba5","source_event_group_id":"b1674324-d171-4a99-b10a-272b71584dc2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NorthShore University HealthSystem","state":"IL","individuals_affected":1300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NorthShore University HealthSystem paid $1.5 million to resolve potential HIPAA violations after a breach of unsecured ePHI affecting over 1.3 million individuals.","event_id":"b1674324-d171-4a99-b10a-272b71584dc2","severity_score":90},{"record_id":"6dec6773-77fb-4567-9146-fb2470488808","source_event_group_id":"ea88ae8c-3623-41be-b599-30e73b96eb61","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group P.C. d/b/a Advanced Dermatology, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $31,000 to OCR to settle potential HIPAA violations after failing to provide timely access to medical records.","event_id":"ea88ae8c-3623-41be-b599-30e73b96eb61","severity_score":50},{"record_id":"5dce0e13-b2e1-43be-83ec-2ebe64483054","source_event_group_id":"2e656295-17b3-4a8b-a9c9-60fa7a023b04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asthmatic Conditions","state":"PA","individuals_affected":31055,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $125,000 to OCR to settle potential HIPAA violations for disclosing PHI to a vendor without a business associate agreement.","event_id":"2e656295-17b3-4a8b-a9c9-60fa7a023b04","severity_score":65},{"record_id":"551881d0-8e94-40fe-ad99-328023286aeb","source_event_group_id":"d51b4c12-08b3-4e8d-9206-5dab6e264328","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Page, Dr. Jason","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $25,000 to OCR to settle potential HIPAA violations after a disclosure of PHI on Yelp.","event_id":"d51b4c12-08b3-4e8d-9206-5dab6e264328","severity_score":50},{"record_id":"33833fe9-a892-44a9-8c11-942e3b8b571f","source_event_group_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester County Health Care Corporation d/b/a Westchester Medical Center","state":"NY","individuals_affected":12892,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $1,050,000 to OCR to settle potential HIPAA violations stemming from a breach of unsecured ePHI.","event_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","severity_score":90},{"record_id":"1241e5a8-2b70-4367-8a9f-649f634f7bdd","source_event_group_id":"ab9d7e96-20a0-4ef0-8236-3681b1fdb8b9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Presbyterian Hospital","state":"TX","individuals_affected":27133,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $3,200,000 to OCR to settle potential HIPAA violations after failing to maintain appropriate administrative and technical safeguards.","event_id":"ab9d7e96-20a0-4ef0-8236-3681b1fdb8b9","severity_score":90},{"record_id":"0c32f791-2518-4bb7-a0f3-5c8e7c76692f","source_event_group_id":"0e45c679-22ee-4dee-b4b5-a55378d1ef0e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BUMC (Boston University Medical Center) and Boston Medical Center (BMC) Joint Entity","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $1,000,000 to OCR to settle potential HIPAA violations involving inappropriate disclosure of PHI to a film crew.","event_id":"0e45c679-22ee-4dee-b4b5-a55378d1ef0e","severity_score":80},{"record_id":"f3f42d62-016c-441e-b963-1431eb892e33","source_event_group_id":"03bf503c-7310-4548-9c29-16b9c230d88b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Department of Behavioral Health and Developmental Disabilities (DBHDD)","state":"GA","individuals_affected":11110,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DBHDD paid $400,000 to resolve potential HIPAA violations after a hacking incident exposed the ePHI of over 11,000 individuals.","event_id":"03bf503c-7310-4548-9c29-16b9c230d88b","severity_score":65},{"record_id":"ed009da5-14f9-4341-9d8b-a675ca4daaed","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Mental Health (formerly North Memorial Health Care)","state":"MN","individuals_affected":290000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop was stolen, affecting over 290,000 individuals.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"ec725747-68ef-4ce6-8482-f0040862c1ca","source_event_group_id":"366ad50e-4d7e-42e7-896c-92887472cdd3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Palms Emergency Center","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $10,000 to OCR to settle potential HIPAA violations after impermissibly disclosing PHI on social media.","event_id":"366ad50e-4d7e-42e7-896c-92887472cdd3","severity_score":50},{"record_id":"e5cee2ae-93be-4f85-b9d6-2d6ca78fb300","source_event_group_id":"e4914058-d84e-4019-b14e-d5d9aaed4c38","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Hospital System","state":"TX","individuals_affected":27133,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $1,375,000 to OCR to settle potential HIPAA violations due to the impermissible disclosure of PHI.","event_id":"e4914058-d84e-4019-b14e-d5d9aaed4c38","severity_score":90},{"record_id":"e099c028-9e3a-4ea3-acbd-e610fa4a1696","source_event_group_id":"91aadaba-5c68-48aa-8217-6471557d172a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Visionworks of America, Inc.","state":"TX","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Visionworks agreed to pay $3.5 million to resolve potential HIPAA violations related to a cyberattack that compromised the ePHI of over 3 million individuals.","event_id":"91aadaba-5c68-48aa-8217-6471557d172a","severity_score":90},{"record_id":"da7a63ed-c461-49ac-99e0-fc561f6f8ac7","source_event_group_id":"10c00d41-5c91-41f9-abb4-acdb9e79175a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Personal Wellness Center (PWC)","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $20,000 to OCR and adopted a corrective action plan to settle potential HIPAA violations related to patient access.","event_id":"10c00d41-5c91-41f9-abb4-acdb9e79175a","severity_score":50},{"record_id":"d2386c49-2e5d-4596-a06d-77166548cd9d","source_event_group_id":"05de155f-dcd2-4c98-91dd-48628071262f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sherman Hospital","state":"IL","individuals_affected":1400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sherman Hospital paid $1.2 million to resolve potential HIPAA violations after a breach of unsecured ePHI affecting over 1.4 million individuals.","event_id":"05de155f-dcd2-4c98-91dd-48628071262f","severity_score":90},{"record_id":"d0e3e41a-9714-40fd-8489-7bad2f3e84c9","source_event_group_id":"5b7425a5-561c-4079-b59a-b6c93302636e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of Western New York, Inc. (MSO)","state":"NY","individuals_affected":20431,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO settled potential HIPAA violations after an unencrypted external hard drive containing the ePHI of over 20,000 patients was stolen from an employee's car.","event_id":"5b7425a5-561c-4079-b59a-b6c93302636e","severity_score":65},{"record_id":"b9225733-6ede-4ef4-bebc-a2ce675b4771","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC (d.b.a. AEON Clinical Laboratories)","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management paid $25,000 to resolve potential HIPAA violations after disclosing PHI to an unknown email address.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"a78d7926-9a66-41f4-971a-73cd2b6143a5","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center (BMC)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $100,000 to OCR to settle potential HIPAA violations after a disclosure of PHI to a public film crew.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"9100f6dc-feb3-4c98-9102-8d5cd70eb219","source_event_group_id":"37661c39-da7d-49cf-afb0-2dcd3761d8a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"California Department of State Hospitals (DSH)","state":"CA","individuals_affected":2700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"California DSH paid $1.5 million to resolve potential HIPAA violations after a breach of unsecured ePHI affecting over 2.7 million individuals.","event_id":"37661c39-da7d-49cf-afb0-2dcd3761d8a5","severity_score":90},{"record_id":"694df3a4-ee9b-4507-b8f9-b6073df16b4b","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (MGH)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH settled potential HIPAA violations after patient information for research was impermissibly shared, affecting 192 individuals.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"60709f07-1dde-4d27-b3c9-2bb02e2f8473","source_event_group_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group, P.C.","state":"NJ","individuals_affected":2988,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology Group, P.C. paid $30,000 to resolve potential HIPAA violations after a hacking incident resulted in an impermissible disclosure of ePHI.","event_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","severity_score":50},{"record_id":"5b89df65-461a-4bba-8a20-e1482aa7017a","source_event_group_id":"3b3e250f-a739-4300-8baa-7deee03531d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UnitedHealthcare Insurance Company","state":"MN","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UnitedHealthcare Insurance Company paid $1 million to resolve potential HIPAA violations after an impermissible disclosure of PHI in a mailing.","event_id":"3b3e250f-a739-4300-8baa-7deee03531d9","severity_score":80},{"record_id":"58a80ffb-e7de-43ff-a4b4-6ff4f90d4f15","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network (MCPN)","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $400,000 to OCR to settle potential HIPAA violations after a breach involving an unencrypted laptop.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"2af2f378-1502-4acf-92d4-ecb41739d532","source_event_group_id":"549c6fe1-2fc8-434c-9a69-06acfdcaac6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presentations of California, Inc. d/b/a Center for Advanced Internal Medicine","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $25,000 to OCR to settle potential HIPAA violations for disclosing PHI of a patient to a marketing company.","event_id":"549c6fe1-2fc8-434c-9a69-06acfdcaac6d","severity_score":50},{"record_id":"299b6291-fd62-44d3-aecb-ce651259da85","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Corporation","state":"PR","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paid $3.5 million to OCR to settle potential HIPAA violations after impermissible disclosures of PHI affecting over 10,000 individuals.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"f27592a6-0496-42ea-a830-de23d82635d3","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco (UCSF)","state":"CA","individuals_affected":250000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF paid $2.5 million to resolve potential HIPAA violations after a cyberattack exposed the ePHI of over 250,000 individuals.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":90},{"record_id":"b7f4702f-62e2-406c-ad59-ce41217aeb18","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctor's Management Services","state":"CA","individuals_affected":1400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctor's Management Services paid $1.5 million to resolve potential HIPAA violations after a breach of unsecured ePHI affecting over 1.4 million individuals.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":90},{"record_id":"b6a80d8e-5920-4f5d-ac7a-a6c4c8c8be35","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settled potential HIPAA violations after a breach of unsecured ePHI.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"a13b7e1c-58f3-4c93-8951-4dd8bd375797","source_event_group_id":"00cbd3d1-bf63-4e16-a698-912ef89920c1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ThedaCare, Inc.","state":"WI","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ThedaCare, Inc. paid $1.5 million to resolve potential HIPAA violations after a breach of unsecured ePHI affecting over 4 million individuals.","event_id":"00cbd3d1-bf63-4e16-a698-912ef89920c1","severity_score":90},{"record_id":"6c73dd85-673f-493c-97dc-070505fb250f","source_event_group_id":"caa9a0d5-fd1f-4d7f-9729-be5966cb4616","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Best Care Home Health Agency","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Best Care Home Health Agency settled potential HIPAA violations after patient information was impermissibly posted online.","event_id":"caa9a0d5-fd1f-4d7f-9729-be5966cb4616","severity_score":50},{"record_id":"6490e319-1934-4b99-b646-de318eb7275d","source_event_group_id":"ad327227-bb10-436f-84ca-e2c5b3164632","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NJ Urology, LLC","state":"NJ","individuals_affected":1785,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NJ Urology paid $100,000 to resolve potential HIPAA violations after a breach of unsecured ePHI affected over 1,700 individuals.","event_id":"ad327227-bb10-436f-84ca-e2c5b3164632","severity_score":50},{"record_id":"2f9df68c-a58d-4247-912c-c104d84ac999","source_event_group_id":"c0fbebb0-a5dc-4448-a64c-26a4aa1c1fe2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Largo Medical Center","state":"FL","individuals_affected":50,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Largo Medical Center settled potential HIPAA violations involving the impermissible disposal of medical records containing the PHI of approximately 50 patients.","event_id":"c0fbebb0-a5dc-4448-a64c-26a4aa1c1fe2","severity_score":55},{"record_id":"227aad6b-a86c-4ee3-8fb8-ee19f8a7b0b9","source_event_group_id":"abcc0355-617a-4317-b502-d6c6438991dc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Life Hope LLC (d.b.a. Elite DNA Therapy Services)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite DNA Therapy Services paid $30,000 to resolve potential HIPAA violations after protected health information was impermissibly disclosed on its social media page.","event_id":"abcc0355-617a-4317-b502-d6c6438991dc","severity_score":50},{"record_id":"08885f55-64c9-434d-be62-3c3cf663136b","source_event_group_id":"7fb53f1d-7c9c-4989-888d-eafd58bd63bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dacotah Clinic, P.C.","state":"ND","individuals_affected":607,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dacotah Clinic, P.C. settled potential HIPAA violations after a business associate impermissibly accessed and disclosed the PHI of 607 individuals.","event_id":"7fb53f1d-7c9c-4989-888d-eafd58bd63bc","severity_score":50},{"record_id":"febe81b2-63d2-41e1-92e3-7b3e59cd8737","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University - Center for Health Sciences (OSU-CHS)","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OSU-CHS paid $875,000 to resolve potential HIPAA violations after a cyberattack exposed the ePHI of over 279,000 individuals.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"f249d847-13a1-42ae-98ba-5fa8ce92d392","source_event_group_id":"ad24fb94-dd5f-4ede-88ee-42e7144ea41a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Medical Center paid $160,000 to resolve potential HIPAA violations after an impermissible disclosure of PHI to a local newspaper.","event_id":"ad24fb94-dd5f-4ede-88ee-42e7144ea41a","severity_score":65},{"record_id":"9e9846fb-4c92-4d0c-a0a4-a34868f2e767","source_event_group_id":"0886353a-d7a0-4a62-a74c-f9798f3e115f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of Arcadia","state":"CA","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to conduct an enterprise-wide risk analysis and other Security Rule violations after a cyber-attack.","event_id":"0886353a-d7a0-4a62-a74c-f9798f3e115f","severity_score":65},{"record_id":"9c67d719-de93-4368-874c-f7d5b28a0578","source_event_group_id":"590a9588-dbf8-46d2-a46c-428679bdc17a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of Allentown","state":"PA","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to conduct an enterprise-wide risk analysis and other Security Rule violations after a ransomware attack.","event_id":"590a9588-dbf8-46d2-a46c-428679bdc17a","severity_score":65},{"record_id":"63cd2757-5d3e-4ac4-b4bb-1816bafebec1","source_event_group_id":"ba59ddf0-d32e-4dfa-8ceb-3a9ef5aab7f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Physical Therapy","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"ba59ddf0-d32e-4dfa-8ceb-3a9ef5aab7f1","severity_score":50},{"record_id":"244381c2-dbfb-4e3d-b463-231f58e2fd36","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (d.b.a. Agape Health Services)","state":"NC","individuals_affected":1263,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agape Health Services paid $25,000 to resolve potential HIPAA violations after a breach of unsecured ePHI affected over 1,200 individuals.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"0c3636aa-ec30-45db-8959-8c93a9ccb6ed","source_event_group_id":"af095aba-9a37-482c-86a5-23afb3a7dd4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Integrated Health Network of Wisconsin","state":"WI","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Integrated Health Network of Wisconsin paid $2.25 million to resolve potential HIPAA violations after a phishing attack exposed the ePHI of over 3 million individuals.","event_id":"af095aba-9a37-482c-86a5-23afb3a7dd4b","severity_score":90},{"record_id":"5d2038d2-2b7c-4185-bc5f-3d664dfc6247","source_event_group_id":"c8dfc93d-a20c-4c51-a379-097525f7ffca","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of Rochester","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when records were left unsecured.","event_id":"c8dfc93d-a20c-4c51-a379-097525f7ffca","severity_score":55},{"record_id":"d99963c1-eaac-43cb-b7c3-f4ccc46c85af","source_event_group_id":"493583cd-6ac7-41b5-8e4a-6c822ef85cee","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pain Care, P.C.","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement appropriate policies and procedures and impermissible disclosure of PHI.","event_id":"493583cd-6ac7-41b5-8e4a-6c822ef85cee","severity_score":55},{"record_id":"bcb0e655-6f40-46c1-b21f-d51069d7f436","source_event_group_id":"a5780735-564d-4d76-910e-0e6fc022da6f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Louisiana, LLC","state":"LA","individuals_affected":340150,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to conduct an accurate and thorough risk analysis and other Security Rule violations after an unencrypted server was stolen.","event_id":"a5780735-564d-4d76-910e-0e6fc022da6f","severity_score":65},{"record_id":"bb68c55c-952a-4164-9076-16fc66fe7887","source_event_group_id":"3e63241e-53ed-463f-914a-47e08ecaa6fd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Behavioral Health Hospital","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when records were left unsecured.","event_id":"3e63241e-53ed-463f-914a-47e08ecaa6fd","severity_score":55},{"record_id":"51851781-b850-4321-b036-7c8d7a0898a4","source_event_group_id":"4f4584e6-8670-4858-879d-ea362390fbe9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Professional Therapy Services","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"4f4584e6-8670-4858-879d-ea362390fbe9","severity_score":55},{"record_id":"18d1828a-520b-492d-9d48-63b77a9c3254","source_event_group_id":"ce78eb6b-6e01-4446-b7ca-fee8587da7d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sterling Healthcare Group","state":"TX","individuals_affected":3400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when patient information was posted on a public website.","event_id":"ce78eb6b-6e01-4446-b7ca-fee8587da7d7","severity_score":90},{"record_id":"c1d87fd9-cb5f-4d46-8eac-760627c02d50","source_event_group_id":"02fab1b9-91ac-4aa9-b13f-24a803ba7a25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Mental Health and Counseling Services","state":"CO","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"02fab1b9-91ac-4aa9-b13f-24a803ba7a25","severity_score":50},{"record_id":"b7f2c476-d546-42f7-b0e1-1b045ab541e9","source_event_group_id":"990c709a-ad8d-43a2-85d4-35d74d624af9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Miami Hospital","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when records were left unsecured.","event_id":"990c709a-ad8d-43a2-85d4-35d74d624af9","severity_score":55},{"record_id":"8ce72881-bb2c-4350-85bf-d18c64d19c07","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc. (MIE)","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to conduct an enterprise-wide risk analysis and other Security Rule violations after a cyber-attack exposed the ePHI of over 3.9 million individuals.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"8ab5266c-15b4-4e57-a5d9-a9a49754d4ab","source_event_group_id":"50094d0f-459a-4020-8208-a11c91096d67","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Fantasy Sports, Inc.","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI through a website vulnerability.","event_id":"50094d0f-459a-4020-8208-a11c91096d67","severity_score":55},{"record_id":"37264344-feff-491a-9347-ac0af0453cd2","source_event_group_id":"5a6d4a1d-919c-4b07-8f7a-9e07299db280","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. William Woo, DDS","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"5a6d4a1d-919c-4b07-8f7a-9e07299db280","severity_score":55},{"record_id":"22035de0-63a1-4780-a208-bdfe55892e82","source_event_group_id":"bb00f4a9-c2ec-457b-af54-cbc26a66325d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partnerships in Health","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when records were left unsecured.","event_id":"bb00f4a9-c2ec-457b-af54-cbc26a66325d","severity_score":55},{"record_id":"e11f250a-9e1d-4614-83d1-861880e2c9ef","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center, Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to appropriately restrict access to operating rooms and patient information for a documentary film crew.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":90},{"record_id":"86e05d73-a98d-4104-bcf7-7eb733eed0cb","source_event_group_id":"a8d35c4b-f8f5-4a86-b835-a31ecf05b8b7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Central Surgical Center","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI when records were left unsecured.","event_id":"a8d35c4b-f8f5-4a86-b835-a31ecf05b8b7","severity_score":55},{"record_id":"3129c648-99c2-4887-8bef-3ebcc82b2611","source_event_group_id":"1a4acb65-2e39-4ccb-bdf8-b0dd31a7c9e9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allscripts Mizuho Group, Inc.","state":"IL","individuals_affected":2500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach involving a lost unencrypted backup tape, resulting in a settlement.","event_id":"1a4acb65-2e39-4ccb-bdf8-b0dd31a7c9e9","severity_score":65},{"record_id":"49b0e322-e173-48db-aa82-8fe860eaff12","source_event_group_id":"2e88e968-c644-4305-bd1f-ba50ce3b998e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Public Partnerships LLC","state":"NY","individuals_affected":12018,"breach_submission_date":"2026-08-08","enforcement_action_date":null,"summary":"","event_id":"2e88e968-c644-4305-bd1f-ba50ce3b998e","severity_score":70},{"record_id":"f7dd35c5-16da-4670-8f5d-7cdfe50b4196","source_event_group_id":"eff74e86-01e5-452b-a670-7690c802bf0c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Foot and Ankle Wellness Center of Western Pennsylvania","state":"PA","individuals_affected":653,"breach_submission_date":"2026-08-31","enforcement_action_date":null,"summary":"","event_id":"eff74e86-01e5-452b-a670-7690c802bf0c","severity_score":30},{"record_id":"f7671e8c-32f2-4af7-aead-860c034d75f2","source_event_group_id":"9f817ab8-1b9c-4f76-abea-575080fe9015","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ServiceTitan, Inc.","state":"CA","individuals_affected":4851,"breach_submission_date":"2026-07-27","enforcement_action_date":null,"summary":"","event_id":"9f817ab8-1b9c-4f76-abea-575080fe9015","severity_score":50},{"record_id":"cb3594a0-883e-40d2-b408-986205054f05","source_event_group_id":"e52f60e0-7676-477e-be8e-cb1e02c8d57f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wilson Dental","state":"TX","individuals_affected":3476,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"e52f60e0-7676-477e-be8e-cb1e02c8d57f","severity_score":50},{"record_id":"b938a9d0-f638-40a2-8341-0c706cd7be88","source_event_group_id":"8b93fd5d-2511-489f-a484-a395c075a307","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kern Psychiatric Health and Wellness Center, Inc","state":"CA","individuals_affected":51352,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"8b93fd5d-2511-489f-a484-a395c075a307","severity_score":70},{"record_id":"b444e479-db99-4476-a3ff-4460401905bd","source_event_group_id":"411c1334-a51b-4512-8164-e1ec4e68ffe0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Azle Smiles Dental","state":"TX","individuals_affected":9444,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"411c1334-a51b-4512-8164-e1ec4e68ffe0","severity_score":50},{"record_id":"a78db147-fb69-4f9f-bc82-7825b6fdb6f3","source_event_group_id":"eef75cce-eee3-44b2-9fc6-43ec43f8738d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Agave Dental-Floresville","state":"TX","individuals_affected":11790,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"eef75cce-eee3-44b2-9fc6-43ec43f8738d","severity_score":70},{"record_id":"a08acc13-5e82-40e2-89a4-29be7e4851c4","source_event_group_id":"aafa6d80-e815-4d27-903e-bc0dc6e8503a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Allergic Disease Associates, P.C. dba The Asthma Center","state":"PA","individuals_affected":5321,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"aafa6d80-e815-4d27-903e-bc0dc6e8503a","severity_score":50},{"record_id":"983cdf0e-5686-4117-938c-238173461118","source_event_group_id":"b7ecaa5d-73d1-443c-a5d4-06f9eb21dd94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Beaver County Behavioral Health","state":"PA","individuals_affected":501,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"b7ecaa5d-73d1-443c-a5d4-06f9eb21dd94","severity_score":30},{"record_id":"871e381c-f4df-4b47-a7f4-2f93f47a66c1","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of California Los Angeles Health","state":"CA","individuals_affected":6050,"breach_submission_date":"2026-08-04","enforcement_action_date":null,"summary":"","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":50},{"record_id":"7a9839e4-4323-4b7a-8bc9-1ee96c5ccae3","source_event_group_id":"88def476-742c-4486-8478-86cb9e532927","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vista Del Mar Child and Family Services","state":"CA","individuals_affected":500,"breach_submission_date":"2026-08-29","enforcement_action_date":null,"summary":"","event_id":"88def476-742c-4486-8478-86cb9e532927","severity_score":30},{"record_id":"73fb69ca-dd7e-43dc-9bc5-bf6989d1a30a","source_event_group_id":"d8ca1452-3da2-463e-aef0-7d6df6097c4f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hillcrest Medical Research LLC.","state":"FL","individuals_affected":5785,"breach_submission_date":"2026-08-17","enforcement_action_date":null,"summary":"","event_id":"d8ca1452-3da2-463e-aef0-7d6df6097c4f","severity_score":50},{"record_id":"6df1af58-5eff-4ed7-a789-8d5b001752a6","source_event_group_id":"98d4a65e-e5a7-4d5c-8a1c-814d980b5850","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minuteman Press Macon","state":"GA","individuals_affected":1489,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"98d4a65e-e5a7-4d5c-8a1c-814d980b5850","severity_score":50},{"record_id":"4565877b-2b37-407b-a315-baefebf34868","source_event_group_id":"dc009fc0-7f5a-4057-9923-241661816211","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oculus Pathology","state":"TX","individuals_affected":20040,"breach_submission_date":"2026-09-02","enforcement_action_date":null,"summary":"","event_id":"dc009fc0-7f5a-4057-9923-241661816211","severity_score":70},{"record_id":"3453e3e4-bbfc-43bc-8937-ec85ce2c7bf3","source_event_group_id":"078790ab-ae57-4f0f-bbbe-e1d1361ed2f0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oklahoma Health Care Authority Employees Group Insurance Division","state":"OK","individuals_affected":5690,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"078790ab-ae57-4f0f-bbbe-e1d1361ed2f0","severity_score":50},{"record_id":"2a9d2571-2dd4-4107-9db8-d008cbe7b72c","source_event_group_id":"ea128f8a-7c8b-44db-9c5c-0ebea368c7e8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Psychiatry of Texas PLLC","state":"TX","individuals_affected":5902,"breach_submission_date":"2026-08-27","enforcement_action_date":null,"summary":"","event_id":"ea128f8a-7c8b-44db-9c5c-0ebea368c7e8","severity_score":50},{"record_id":"136fa708-4900-4e68-944d-409064c2213a","source_event_group_id":"01df5094-6120-41a4-9ec9-562972132f67","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Boundary Regional Community Health Center dba Kaniksu Community Health","state":"ID","individuals_affected":88000,"breach_submission_date":"2026-07-21","enforcement_action_date":null,"summary":"","event_id":"01df5094-6120-41a4-9ec9-562972132f67","severity_score":70},{"record_id":"09fd4d2b-8e94-496a-994e-47c02ec5bb11","source_event_group_id":"75e8e6ca-55d6-4ca0-a1c1-a01e5ed20032","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Premier Medical Group of the Hudson Valley P.C.","state":"NY","individuals_affected":282075,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"75e8e6ca-55d6-4ca0-a1c1-a01e5ed20032","severity_score":85},{"record_id":"ff84e564-d486-452e-804c-a65d3afa1980","source_event_group_id":"f4ea1a5f-25ea-4445-b5f1-7a9113627273","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kashi Dental","state":"TX","individuals_affected":6027,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"f4ea1a5f-25ea-4445-b5f1-7a9113627273","severity_score":50},{"record_id":"de2e52a5-191a-426b-8f5f-cca0bdef7df0","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":4553,"breach_submission_date":"2026-09-08","enforcement_action_date":null,"summary":"","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":50},{"record_id":"aa445386-fe3a-43cb-94f9-3a3e59215b93","source_event_group_id":"c5472e7d-50aa-40c8-956b-946c97ffbc85","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mysa Dental","state":"TX","individuals_affected":3394,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"c5472e7d-50aa-40c8-956b-946c97ffbc85","severity_score":50},{"record_id":"a1a514f7-dd28-4e88-87c8-10aed8da44e5","source_event_group_id":"226344c3-5dfc-46b3-b771-c0e9495879d0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Boston Healthcare for the Homeless Program","state":"MA","individuals_affected":201260,"breach_submission_date":"2026-08-10","enforcement_action_date":null,"summary":"","event_id":"226344c3-5dfc-46b3-b771-c0e9495879d0","severity_score":85},{"record_id":"26e0bfaa-0414-4678-ba4c-735edbaf88c5","source_event_group_id":"42c61c96-f0a6-4fff-ac9f-7a34d734ee31","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Provident Behavioral Health","state":"IL","individuals_affected":25086,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"42c61c96-f0a6-4fff-ac9f-7a34d734ee31","severity_score":70},{"record_id":"17b2d2ed-ee69-4e67-b011-f1e1d67b9e18","source_event_group_id":"f6177174-afef-42e5-b29f-f017b3c6dab5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Silver Summit Medical Corporation","state":"CA","individuals_affected":11349,"breach_submission_date":"2026-08-19","enforcement_action_date":null,"summary":"","event_id":"f6177174-afef-42e5-b29f-f017b3c6dab5","severity_score":70},{"record_id":"08e13db4-757e-47bc-a2ec-07a57b9e0f6c","source_event_group_id":"6f4d1166-6049-4a79-a2d4-0f85647ab14c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Allwyn Dental","state":"TX","individuals_affected":4013,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"6f4d1166-6049-4a79-a2d4-0f85647ab14c","severity_score":50},{"record_id":"6149b149-db64-494b-a291-94af12e5a3c3","source_event_group_id":"1c6d3874-e05a-4e1e-af3f-2832b870beb8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Knospe-Lerncenter GmbH","state":"AZ","individuals_affected":800,"breach_submission_date":"2026-07-11","enforcement_action_date":null,"summary":"","event_id":"1c6d3874-e05a-4e1e-af3f-2832b870beb8","severity_score":30},{"record_id":"4f929674-7355-453a-a575-988261bf8af2","source_event_group_id":"f01ad727-8de8-4e8b-a737-a41fdc33a4ca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Healthy Woman","state":"GA","individuals_affected":2750,"breach_submission_date":"2026-08-09","enforcement_action_date":null,"summary":"","event_id":"f01ad727-8de8-4e8b-a737-a41fdc33a4ca","severity_score":50},{"record_id":"2e49c425-2ab8-4c4d-9932-e531f25406cb","source_event_group_id":"985efdd1-761d-46f6-bc6e-7012e350f3ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Language Group, LLC","state":"KS","individuals_affected":4649,"breach_submission_date":"2026-08-19","enforcement_action_date":null,"summary":"","event_id":"985efdd1-761d-46f6-bc6e-7012e350f3ee","severity_score":50},{"record_id":"969e99e4-0315-4a6d-b952-948d6ed4f923","source_event_group_id":"06c229c7-e837-4166-93ee-a71245a50188","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"District of Columbia, Department of Health Care Finance","state":"MD","individuals_affected":399086,"breach_submission_date":"2026-09-03","enforcement_action_date":null,"summary":"","event_id":"06c229c7-e837-4166-93ee-a71245a50188","severity_score":85},{"record_id":"9c5980ab-5b45-40a9-9e60-d92fffd613cc","source_event_group_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Connecticut Department of Social Services","state":"CT","individuals_affected":41000,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","severity_score":70},{"record_id":"f9a682d4-55cb-4f1f-a6ff-d7049ca2724f","source_event_group_id":"0d209ee6-6cf3-475c-ba06-fc91c84d35bf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Capital Family Physicians","state":"NC","individuals_affected":2545,"breach_submission_date":"2026-09-03","enforcement_action_date":null,"summary":"","event_id":"0d209ee6-6cf3-475c-ba06-fc91c84d35bf","severity_score":50},{"record_id":"7d746260-c718-42e8-b60c-66f7df54ce4a","source_event_group_id":"0b9045c0-37da-43f4-910a-de4c153a99b5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WellDyneRX, LLC","state":"FL","individuals_affected":500,"breach_submission_date":"2026-08-25","enforcement_action_date":null,"summary":"","event_id":"0b9045c0-37da-43f4-910a-de4c153a99b5","severity_score":30},{"record_id":"6755497b-79f7-4389-9a37-45ef374dbcce","source_event_group_id":"bd478d2a-f911-4fa7-b82c-103e5a9738a2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"LHC Group, Inc.","state":"LA","individuals_affected":500,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"bd478d2a-f911-4fa7-b82c-103e5a9738a2","severity_score":30},{"record_id":"aa12d558-53ce-48fb-ab67-3a4abc09e937","source_event_group_id":"0b93d397-1109-49a6-8c28-92a836fa5c68","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Partnership HealthPlan of California","state":"CA","individuals_affected":1526,"breach_submission_date":"2026-09-04","enforcement_action_date":null,"summary":"","event_id":"0b93d397-1109-49a6-8c28-92a836fa5c68","severity_score":50},{"record_id":"83c046de-bf9c-4baf-a0f7-ec7c04c6311f","source_event_group_id":"85f50e47-cf25-4ae2-9960-7a595e629b39","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hamaspik (Choice and Inc.)","state":"NY","individuals_affected":8181,"breach_submission_date":"2026-09-06","enforcement_action_date":null,"summary":"","event_id":"85f50e47-cf25-4ae2-9960-7a595e629b39","severity_score":50},{"record_id":"15521b4a-c0bb-4d1b-8b65-04491185d62f","source_event_group_id":"a6bd5ff1-3ff0-45db-bfd2-20d459f1dea5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hawaii Dental Group, Inc DBA Hawaii Family Dental","state":"HI","individuals_affected":45853,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"a6bd5ff1-3ff0-45db-bfd2-20d459f1dea5","severity_score":70},{"record_id":"1d2362e0-4c40-4459-8de5-7b59d87a96b4","source_event_group_id":"09a1f98a-dd33-42e1-9285-a04ddf63e48c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Grafton City Hospital, Inc.","state":"WV","individuals_affected":1215,"breach_submission_date":"2026-08-22","enforcement_action_date":null,"summary":"","event_id":"09a1f98a-dd33-42e1-9285-a04ddf63e48c","severity_score":50},{"record_id":"4998cb66-b5a2-47d1-8a09-ad18b117d1a1","source_event_group_id":"21d80670-4f2d-4fb4-9ea8-a4d1a00bce37","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Life Bridges, Inc.","state":"TN","individuals_affected":5194,"breach_submission_date":"2026-08-20","enforcement_action_date":null,"summary":"","event_id":"21d80670-4f2d-4fb4-9ea8-a4d1a00bce37","severity_score":50},{"record_id":"14c53f39-67d3-4490-9d15-7b6da3e7b947","source_event_group_id":"30d2fa4b-2e04-4ba9-bb37-a5e1400cf3aa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Desert Pulmonary & Sleep Consultants, P.L.C.","state":"AZ","individuals_affected":3000,"breach_submission_date":"2026-08-25","enforcement_action_date":null,"summary":"","event_id":"30d2fa4b-2e04-4ba9-bb37-a5e1400cf3aa","severity_score":50},{"record_id":"126c9e64-e8f0-405d-b023-9084d661345b","source_event_group_id":"93f938b2-6382-4537-8712-0f9ec4fa0a60","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"White River Junction VA Medical Center","state":"VT","individuals_affected":1408,"breach_submission_date":"2026-08-28","enforcement_action_date":null,"summary":"","event_id":"93f938b2-6382-4537-8712-0f9ec4fa0a60","severity_score":50},{"record_id":"11a25fec-5a18-4090-80a9-cc7ffe1551f8","source_event_group_id":"cec1cc04-8034-4663-881f-dc425c6030d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Shoshone Medical Center","state":"ID","individuals_affected":553,"breach_submission_date":"2026-08-25","enforcement_action_date":null,"summary":"","event_id":"cec1cc04-8034-4663-881f-dc425c6030d3","severity_score":30},{"record_id":"d57c5a99-f011-4d5a-a0cf-eca88870e852","source_event_group_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross Blue Shield of Illinois","state":"IL","individuals_affected":3831,"breach_submission_date":"2026-08-20","enforcement_action_date":null,"summary":"","event_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","severity_score":50},{"record_id":"c21f03d4-55cb-4b2f-9edd-3beb0377c858","source_event_group_id":"7a325a23-5d9b-4dad-87b6-ed931bd872ca","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Provider","state":"OR","individuals_affected":417,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A community provider agreed to take corrective actions and pay a settlement for disclosing the PHI of 417 patients to an unauthorized marketing vendor.","event_id":"7a325a23-5d9b-4dad-87b6-ed931bd872ca","severity_score":50},{"record_id":"a37d7b41-47c1-476a-8d94-e94a23fbd6a0","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":870,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra Health Services paid a settlement for failing to conduct an enterprise-wide risk analysis.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"952e13c2-67ae-455a-b0bd-8c757332530e","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco Medical Center","state":"CA","individuals_affected":16500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF Medical Center paid a settlement for potential HIPAA violations after an unencrypted computer was stolen containing the PHI of 16,500 patients.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":65},{"record_id":"6e3d2ae2-e7aa-40d8-92da-1d7b9c9e713e","source_event_group_id":"79caa101-84fb-4bc8-b05f-8e8c59f597f3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Home Care","state":"WA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Providence Home Care paid a settlement for impermissibly disclosing PHI on its website.","event_id":"79caa101-84fb-4bc8-b05f-8e8c59f597f3","severity_score":50},{"record_id":"4030895e-ed48-42d1-a6c3-24bad2fae011","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George's County, MD","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health agreed to take corrective actions for violations including failure to provide timely access to medical records.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":55},{"record_id":"e51677e4-4e6a-4c31-8516-65d01d8e8382","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Massachusetts General Hospital)","state":"MA","individuals_affected":19200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital paid a settlement for the impermissible disclosure of protected health information when patient information was published on publicly accessible peer-to-peer file-sharing applications.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"b84d21ca-b790-41fb-b1e4-e0310a75d298","source_event_group_id":"8dfdff99-1d21-49d9-96b3-247a41ff6e9b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardiovascular Specialists of Central Jersey, P.A.","state":"NJ","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cardiovascular Specialists of Central Jersey, P.A. paid a settlement for potential HIPAA violations when an unencrypted laptop was stolen from an employee's car.","event_id":"8dfdff99-1d21-49d9-96b3-247a41ff6e9b","severity_score":50},{"record_id":"9f5824e4-0618-47b4-8fd4-007615c85ef8","source_event_group_id":"fa9d8986-23b6-4b34-9488-3bee0ad21c9f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mental Health Associates of Southern Pennsylvania","state":"PA","individuals_affected":750,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MHASP paid a settlement after the impermissible disclosure of the PHI of 750 patients when unsecured patient information was made available to the public.","event_id":"fa9d8986-23b6-4b34-9488-3bee0ad21c9f","severity_score":50},{"record_id":"74b28f95-6904-4d1e-ba18-ba3965c600c6","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, Los Angeles Health System","state":"CA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health paid a settlement after an employee impermissibly accessed the protected health information of multiple patients without a job-related need.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"4b644e77-3893-4b14-9617-45fa8113abce","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County paid a settlement for impermissibly disclosing the protected health information of 1581 patients online.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"1445cfe1-d9e3-4993-a2d2-fefea75e8198","source_event_group_id":"e4165278-daa7-4eeb-afbc-aa1a13e40369","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Palo Alto Medical Foundation","state":"CA","individuals_affected":17736,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Palo Alto Medical Foundation paid a settlement for the theft of an unencrypted laptop from one of its administrative offices containing the PHI of 17,736 patients.","event_id":"e4165278-daa7-4eeb-afbc-aa1a13e40369","severity_score":65},{"record_id":"5b891967-c038-4c97-85bd-0dc8e84e0f8e","source_event_group_id":"4e1a16aa-e270-4340-aaa9-12c2ec348c76","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Magnolia Medical Clinic PA","state":"FL","individuals_affected":1601,"breach_submission_date":"2026-08-25","enforcement_action_date":null,"summary":"","event_id":"4e1a16aa-e270-4340-aaa9-12c2ec348c76","severity_score":50},{"record_id":"5a897ca4-962d-4b66-8e4b-62714ff4faca","source_event_group_id":"40c69ed5-2cce-41f2-837f-cceab06d5030","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Dakota Department of Health and Human Services, Developmental Disabilities Section","state":"ND","individuals_affected":1750,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"40c69ed5-2cce-41f2-837f-cceab06d5030","severity_score":50},{"record_id":"904fa7a5-970c-4d4f-99d2-52224178b75c","source_event_group_id":"42b79b8e-be4f-4dca-b1d2-f600594e28ed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Baraga County Memorial Hospital","state":"MI","individuals_affected":501,"breach_submission_date":"2026-08-21","enforcement_action_date":null,"summary":"","event_id":"42b79b8e-be4f-4dca-b1d2-f600594e28ed","severity_score":30},{"record_id":"7f4eb751-4a1e-4265-bedf-442607648981","source_event_group_id":"45d8a280-4e9d-4a8b-b3a0-bc75c7553cf1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Care, Inc.","state":"OH","individuals_affected":808,"breach_submission_date":"2026-08-11","enforcement_action_date":null,"summary":"","event_id":"45d8a280-4e9d-4a8b-b3a0-bc75c7553cf1","severity_score":30},{"record_id":"58aa44ad-7a01-4a2a-ae01-7cac47a48cc2","source_event_group_id":"be49d3c3-bbf3-4ce5-ab1f-d962012fd36d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial Surgeons","state":"AR","individuals_affected":64831,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"be49d3c3-bbf3-4ce5-ab1f-d962012fd36d","severity_score":70},{"record_id":"fe6dbfe6-b85d-4c70-b9e8-31351dbcecba","source_event_group_id":"bc5fc093-2ab3-48ce-ae8a-62a55be01028","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Westchester Institute for Human Development, Inc.","state":"NY","individuals_affected":938,"breach_submission_date":"2026-08-10","enforcement_action_date":null,"summary":"","event_id":"bc5fc093-2ab3-48ce-ae8a-62a55be01028","severity_score":30},{"record_id":"fd7866fa-c3c9-4cea-b2e6-fe7e2bfa6bca","source_event_group_id":"552a0097-e6df-4175-85b1-014b06db7c51","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lifespark Management Services, LLC","state":"MN","individuals_affected":6611,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"552a0097-e6df-4175-85b1-014b06db7c51","severity_score":50},{"record_id":"c86b1276-4102-4926-9c9a-001fc63e2289","source_event_group_id":"fc600b90-f303-45e7-85c7-34dfb2f097b6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Longview ER Operations, LLC","state":"TX","individuals_affected":501,"breach_submission_date":"2026-08-11","enforcement_action_date":null,"summary":"","event_id":"fc600b90-f303-45e7-85c7-34dfb2f097b6","severity_score":30},{"record_id":"eceb7e6e-50a3-4c6d-af33-cacbd0b07fb9","source_event_group_id":"99dd1a29-7f59-4484-98fe-3ec829e62787","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Arkansas Pediatrics, P.A.","state":"AR","individuals_affected":1500,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"99dd1a29-7f59-4484-98fe-3ec829e62787","severity_score":50},{"record_id":"5219d66c-6e86-47ee-a724-692554f0b52f","source_event_group_id":"af2e00c6-7fb2-4c75-8be8-a195ad9e8375","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Midwest Spine & Brain Institute","state":"MN","individuals_affected":108487,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"af2e00c6-7fb2-4c75-8be8-a195ad9e8375","severity_score":85},{"record_id":"8dd086d1-a4c2-413c-b0bf-3c2a118f4ed5","source_event_group_id":"486d3cff-196a-4822-b7af-54faa5b41fd6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AdaptHealth, LLC","state":"PA","individuals_affected":4115802,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"486d3cff-196a-4822-b7af-54faa5b41fd6","severity_score":95},{"record_id":"fe9dd357-2606-4318-bb48-979931716e33","source_event_group_id":"50f77576-a7b6-4061-9841-98b6b2867d17","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Practices","state":"MA","individuals_affected":1460,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Medical Practices settled with OCR for HIPAA violations after an impermissible disclosure of PHI of 1,460 patients. The breach involved an unencrypted laptop that was stolen, and the investigation found a failure to conduct a risk analysis and implement safeguards.","event_id":"50f77576-a7b6-4061-9841-98b6b2867d17","severity_score":80},{"record_id":"fb76b5e0-61c5-4032-a246-cc8626885a40","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (MetroCARE)","state":"NC","individuals_affected":1263,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services (MetroCARE) settled with OCR for HIPAA violations after the impermissible disclosure of PHI of 1,263 individuals via a misconfigured website. The investigation found a failure to conduct a risk analysis and implement safeguards.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"86284acd-b7eb-4ec6-ae36-8512811dce10","source_event_group_id":"e34bb7c0-1efa-475a-9bfe-a2769fa097fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospital","state":"OK","individuals_affected":253,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Care Hospital settled with OCR for HIPAA violations after an impermissible disclosure of PHI of 253 patients. The disclosure occurred when patient information was improperly left on a publicly accessible website.","event_id":"e34bb7c0-1efa-475a-9bfe-a2769fa097fc","severity_score":65},{"record_id":"446c9c93-05b7-4cf1-bb95-f09b8f7699e1","source_event_group_id":"25e79119-f54d-4ce9-99e4-caedda269f11","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kornerstone Armoring","state":"MT","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kornerstone Armoring, a business associate, settled with OCR for HIPAA violations after an unencrypted portable hard drive containing the PHI of 1,000 individuals was stolen. The investigation found a lack of a business associate agreement and failure to conduct a risk analysis.","event_id":"25e79119-f54d-4ce9-99e4-caedda269f11","severity_score":50},{"record_id":"3f49ec58-7a0d-45bd-b0d5-0486be3b6596","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Arkansas for Medical Sciences (UAMS)","state":"AR","individuals_affected":14900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UAMS settled with OCR for HIPAA violations after a phishing attack compromised employee email accounts, leading to the impermissible disclosure of ePHI of 14,900 individuals. OCR found a failure to conduct a risk analysis and implement security measures.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":80},{"record_id":"e6493686-3abd-476c-8820-ebf1034913f3","source_event_group_id":"97f39624-e27d-45c2-8135-da43b24d6738","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Central Maine Medical Center","state":"ME","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Central Maine Medical Center settled with OCR for HIPAA violations after impermissibly disclosing the PHI of 13,000 patients due to a misconfigured server and untimely breach notification. The investigation found failures in risk analysis and breach notification policies.","event_id":"97f39624-e27d-45c2-8135-da43b24d6738","severity_score":65},{"record_id":"8095154b-6fe4-449b-9025-a0e77535b5bc","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Presence Health Network","state":"IL","individuals_affected":836,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Presence Health Network settled with OCR for HIPAA violations after notifying OCR of a breach involving the impermissible disclosure of PHI of 836 individuals due to operating system configuration errors. The breach was not reported in a timely manner.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"4caaa34a-5836-48be-8a11-935b15fd314f","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services","state":"MA","individuals_affected":206695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors' Management Services, a medical billing company, settled with OCR for HIPAA violations after a cyber-attack exposed the PHI of 206,695 individuals. The investigation found a failure to conduct a risk analysis and implement safeguards.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":90},{"record_id":"33b03c27-49b5-46f0-ba1d-00c447e37697","source_event_group_id":"6123617e-2cd5-4419-b1fb-2a70b78f20e8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presentée","state":"IL","individuals_affected":8555,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presentée, a business associate, settled with OCR for HIPAA violations. An unencrypted laptop containing the ePHI of 8,555 individuals was stolen, and the investigation revealed a lack of a business associate agreement and failure to conduct a risk analysis.","event_id":"6123617e-2cd5-4419-b1fb-2a70b78f20e8","severity_score":90},{"record_id":"9ed29eca-404c-4fa3-8314-2c66a2caff99","source_event_group_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de Familia","state":"NM","individuals_affected":3365,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de Familia, a federally qualified health center, settled for HIPAA violations after a breach exposed the PHI of 3,365 patients. The breach involved an unencrypted portable electronic device.","event_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","severity_score":65},{"record_id":"50aa3bfd-e058-430c-93a7-fe1d0b91f5ee","source_event_group_id":"48e8633e-61a1-447e-b086-2d4dc63588a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cheshire Medical Center/Dartmouth-Hitchcock Clinic","state":"NH","individuals_affected":13061,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cheshire Medical Center/Dartmouth-Hitchcock Clinic settled with OCR following a breach involving email accounts being compromised, leading to the impermissible disclosure of the PHI of 13,061 individuals.","event_id":"48e8633e-61a1-447e-b086-2d4dc63588a1","severity_score":65},{"record_id":"1d95ff85-16f3-40b1-b642-4d768936a173","source_event_group_id":"09eee58e-81d9-4a98-b86f-5e21a96bf94c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Corea Community Mental Health Services","state":"ME","individuals_affected":1726,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corea Community Mental Health Services settled with OCR after an unencrypted laptop containing the PHI of 1,726 patients was stolen. The investigation found a lack of a risk analysis and insufficient security safeguards.","event_id":"09eee58e-81d9-4a98-b86f-5e21a96bf94c","severity_score":65},{"record_id":"082b757f-89ec-466a-9466-3a8fee4466fc","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission (HHSC)","state":"TX","individuals_affected":6700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas HHSC settled with OCR for potential HIPAA violations after a breach involving the impermissible disclosure of PHI of 6,700 individuals through an online application. The disclosure occurred due to a software error.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"7efaede9-eb6f-429b-b9ef-b47d13083bd9","source_event_group_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of North Idaho","state":"ID","individuals_affected":441,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospice of North Idaho agreed to a settlement for HIPAA violations following the theft of an unencrypted laptop containing the PHI of 441 patients. OCR's investigation found a failure to conduct a risk analysis and implement security measures.","event_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","severity_score":50},{"record_id":"6925af74-952d-4a2b-bf0b-37cfe3925915","source_event_group_id":"0e2149ad-3f2f-4515-8931-1dc1c35a8183","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Insurance Company","state":"NY","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A health insurance company settled with OCR for HIPAA violations following an investigation that found widespread non-compliance with HIPAA Rules including insufficient access controls and failure to conduct risk assessments. Specific details are limited as per OCR's summary, but it involved over 10,000 records.","event_id":"0e2149ad-3f2f-4515-8931-1dc1c35a8183","severity_score":90},{"record_id":"2d3719a3-b045-4113-96a2-369bcb3c960c","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee","state":"TN","individuals_affected":1023274,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled potential HIPAA violations after 57 unencrypted computer hard drives were stolen from a leased facility, containing the protected health information of over 1 million individuals.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"1feb13ec-4bbe-4a28-a09f-d22f35c8c773","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Davis Health System","state":"CA","individuals_affected":9235,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCDHS settled potential HIPAA violations after an impermissible disclosure of protected health information of over 9,000 patients.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"f59f030a-9b18-44f2-8701-2b560afb7c2b","source_event_group_id":"e8480fa5-396d-4cd9-b050-bf110d6f1892","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HUP Holdings, Inc.","state":"PA","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HUP Holdings settled potential HIPAA violations after impermissibly disposing of patient information without proper safeguards.","event_id":"e8480fa5-396d-4cd9-b050-bf110d6f1892","severity_score":80},{"record_id":"f3fe106a-8bbd-4191-bb46-5663ffaf78f8","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH settled potential HIPAA violations after an impermissible disclosure of protected health information by a physician participating in a public event.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"c9471334-b6c2-4232-ab7b-153d0707e920","source_event_group_id":"2aa77b7a-651b-4842-8139-d7c85a5030de","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cary Plastic Surgery, P.A.","state":"NC","individuals_affected":551,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cary Plastic Surgery settled potential HIPAA violations after an unencrypted laptop containing patient information was stolen from a physician's vehicle.","event_id":"2aa77b7a-651b-4842-8139-d7c85a5030de","severity_score":50},{"record_id":"97de1f87-67e9-4e8c-b181-6c7fd077dd33","source_event_group_id":"33e8fc2b-a7b5-4b65-b2c4-af097fefabaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Covenant HealthCare","state":"MI","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Covenant HealthCare settled potential HIPAA violations for impermissibly disclosing protected health information of patients in a public setting, specifically through a publicly accessible online server.","event_id":"33e8fc2b-a7b5-4b65-b2c4-af097fefabaa","severity_score":65},{"record_id":"93187d57-7534-44c4-85cc-b4ea56a2befd","source_event_group_id":"c21f86e7-b0a0-45a5-b150-126756989a69","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"APWU Health Plan","state":"MD","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"APWU Health Plan settled potential HIPAA violations after a breach involving the impermissible disclosure of protected health information on its public website.","event_id":"c21f86e7-b0a0-45a5-b150-126756989a69","severity_score":90},{"record_id":"4ee60e70-173d-4633-92b1-766c659f4ab5","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine","state":"WA","individuals_affected":90000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UWM settled potential HIPAA violations after a malware attack compromised patient data, leading to a large-scale breach.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"f92baed0-7095-4078-a45b-848592fd2815","source_event_group_id":"a355c7ae-165b-4b15-9182-59a2fa4795da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Total Foot and Ankle of Libertyville","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Total Foot and Ankle of Libertyville settled potential HIPAA violations after failing to provide a patient with timely access to their medical records.","event_id":"a355c7ae-165b-4b15-9182-59a2fa4795da","severity_score":50},{"record_id":"bc08ca3c-19d6-457b-a7e4-77fd214745b3","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital","state":"NY","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP settled potential HIPAA violations after providing a TV crew access to film patients without proper authorization, disclosing protected health information.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"b9e209bb-854b-4816-87d0-a37fa77d809d","source_event_group_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc.","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI suffered a breach of unsecured protected health information on a laptop taken from an employee's car.","event_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","severity_score":90},{"record_id":"afdeb92a-30cc-47e8-8ce5-0704dd130671","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services","state":"AK","individuals_affected":17000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DHSS settled potential HIPAA violations after a portable USB hard drive containing protected health information was stolen from an employee's car.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"99af5fd3-ce35-407c-bcc0-1bc9f5a73e69","source_event_group_id":"c5a86971-c4ad-4b23-b5f1-bb9130a74414","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona Heart Hospital","state":"AZ","individuals_affected":987,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arizona Heart Hospital settled potential HIPAA violations after posting clinical and surgical schedules, including patient information, on an internet-based calendar that was publicly accessible.","event_id":"c5a86971-c4ad-4b23-b5f1-bb9130a74414","severity_score":90},{"record_id":"86d8c3cd-998f-4a13-8dc1-c754cf343811","source_event_group_id":"e9aae06c-207c-483c-a78b-d8864863033f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Stanford Hospital and Clinics","state":"CA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Stanford Hospital settled potential HIPAA violations after the protected health information of approximately 20,000 patients was impermissibly posted on a commercial website.","event_id":"e9aae06c-207c-483c-a78b-d8864863033f","severity_score":90},{"record_id":"3eac78e2-ec0e-43d3-9ada-0a91fb54102a","source_event_group_id":"5a8ca1e2-8dba-4420-aad7-77a29657b6fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Comprehensive Health Services, Inc.","state":"FL","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHS settled potential HIPAA violations for failing to encrypt protected health information on laptops and failing to implement proper policies and procedures.","event_id":"5a8ca1e2-8dba-4420-aad7-77a29657b6fc","severity_score":50},{"record_id":"0461f721-53bf-429f-a078-e543a30f2032","source_event_group_id":"621fb6ea-728e-4313-876e-4ad5303218a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"C.J.W. Management Group dba Cornell Pharmacy","state":"FL","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cornell Pharmacy settled potential HIPAA violations after impermissibly disposing of patient information in a dumpster.","event_id":"621fb6ea-728e-4313-876e-4ad5303218a1","severity_score":65},{"record_id":"c44d7285-aefa-4aef-aea3-c507bdde2341","source_event_group_id":"9503325d-e198-4d34-9707-7d332eae2bd4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gardiner Family Chiropractic, PC","state":"ME","individuals_affected":5000,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"9503325d-e198-4d34-9707-7d332eae2bd4","severity_score":50},{"record_id":"c284ed23-ad3c-40d8-b64d-3e81168dfc48","source_event_group_id":"16102e26-2f6e-4208-8b07-f0c01119f00f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AnMed Health","state":"SC","individuals_affected":501,"breach_submission_date":"2026-08-27","enforcement_action_date":null,"summary":"","event_id":"16102e26-2f6e-4208-8b07-f0c01119f00f","severity_score":30},{"record_id":"8961d3a9-efa5-4a70-8fc4-5b9c93e6a80a","source_event_group_id":"c108f827-6923-4a0b-8030-e1b4e6f10e40","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BestCare Treatment Services, Inc.","state":"IL","individuals_affected":4216,"breach_submission_date":"2026-08-13","enforcement_action_date":null,"summary":"","event_id":"c108f827-6923-4a0b-8030-e1b4e6f10e40","severity_score":50},{"record_id":"4716461c-66a0-468c-b076-fe7437943f46","source_event_group_id":"b093ecee-8ddb-4582-9197-a3f9418951f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Well Child, Inc.","state":"TN","individuals_affected":500,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"b093ecee-8ddb-4582-9197-a3f9418951f9","severity_score":30},{"record_id":"83a83567-336f-447b-aae6-cc5c6142f005","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem paid $16 million in the largest HIPAA settlement to date for a 2015 breach affecting nearly 79 million people. This is a civil money penalty directly related to the resolution agreement.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"80e4470a-4cf2-4172-97a1-4c8bd2968120","source_event_group_id":"1a4a9bf0-dacb-459d-b9e3-fdab0c0db57d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Systems, Inc.","state":"TN","individuals_affected":4500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHS agreed to pay $2,300,000 and implement a corrective action plan to settle potential HIPAA violations after a data breach that compromised the ePHI of over 4.5 million individuals.","event_id":"1a4a9bf0-dacb-459d-b9e3-fdab0c0db57d","severity_score":90},{"record_id":"f47b9877-d09c-4424-aa07-f4bb599a0b0e","source_event_group_id":"b43b2710-b498-419c-9b72-813e01a81ad1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southcross Hospital, Inc.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southcross Hospital agreed to pay $30,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"b43b2710-b498-419c-9b72-813e01a81ad1","severity_score":50},{"record_id":"e1d3d6f6-801a-4442-b92a-d7ac51645d62","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, d.b.a. Peachstate Urgent Care","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Urgent Care agreed to pay $25,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"e049dc62-2d42-41cb-af81-c2cd3eac5792","source_event_group_id":"031fa09e-faf7-400c-a562-76bb640c1f1e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health, now CommonSpirit Health","state":"CA","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health agreed to pay $1.6 million and implement a corrective action plan to settle potential HIPAA violations stemming from a breach of its patient portal that impermissibly disclosed the ePHI of over 2,000 individuals.","event_id":"031fa09e-faf7-400c-a562-76bb640c1f1e","severity_score":90},{"record_id":"dfe7965b-4120-472f-8318-a10dbda3138b","source_event_group_id":"5f70f75e-82ba-46b9-b5c1-c5bb778c710f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Independent Health","state":"NY","individuals_affected":25000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Independent Health agreed to pay $500,000 and implement a corrective action plan to settle potential HIPAA violations after an impermissible disclosure of PHI through misdirected mailings.","event_id":"5f70f75e-82ba-46b9-b5c1-c5bb778c710f","severity_score":65},{"record_id":"b5b010c2-cf4a-49d2-943e-e81a3db57ff3","source_event_group_id":"9be0323a-f4f5-4c99-a2e3-6dca1c02cf29","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bausch & Lomb, Inc.","state":"NJ","individuals_affected":50000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bausch & Lomb agreed to pay $1.2 million and implement a corrective action plan to settle potential HIPAA violations after a data breach involving its online patient portal.","event_id":"9be0323a-f4f5-4c99-a2e3-6dca1c02cf29","severity_score":90},{"record_id":"955681a9-2613-4e89-bc43-55fae50b81db","source_event_group_id":"e74d780f-8aa6-4f1b-826d-676eb3833ba3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Luminis Health, Inc.","state":"MD","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Luminis Health agreed to pay $275,000 and implement a corrective action plan to settle potential HIPAA violations after an impermissible disclosure of PHI due to an employee email error.","event_id":"e74d780f-8aa6-4f1b-826d-676eb3833ba3","severity_score":65},{"record_id":"91254665-e4c8-456b-8be7-67f36d99156d","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera paid $6.85 million for a cyberattack breach affecting over 10.4 million individuals. This is a civil money penalty directly related to the resolution agreement.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"69d2f6f9-1df4-459c-b595-6f70e7e5209e","source_event_group_id":"fba39553-9c3f-4a37-80a6-64555da06e39","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Board of Regents of the University of Texas System","state":"TX","individuals_affected":6600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas System agreed to pay $450,000 and implement a corrective action plan to settle potential HIPAA violations after an impermissible disclosure of PHI by a former employee.","event_id":"fba39553-9c3f-4a37-80a6-64555da06e39","severity_score":65},{"record_id":"176d74a9-dd96-4775-ba0c-8a9805355228","source_event_group_id":"9457a8e2-2ccf-4ccd-bd95-8e8097cd2197","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pasadena Breast Center","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pasadena Breast Center agreed to pay $15,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"9457a8e2-2ccf-4ccd-bd95-8e8097cd2197","severity_score":50},{"record_id":"0473fc69-c2f3-448b-858b-fe0bf2e2ba75","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Washington Medicine","state":"WA","individuals_affected":970000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UW Medicine agreed to pay $750,000 and implement a corrective action plan to settle potential HIPAA violations after a breach involving a web server that exposed the ePHI of nearly 1 million individuals.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"b147afb7-6d70-4a62-9a61-eca721e2d7c6","source_event_group_id":"f79b9057-b6d2-44b3-bba0-97faecf5fd14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UnitedHealthcare","state":"MN","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UnitedHealthcare agreed to pay $800,000 and implement a corrective action plan to settle potential HIPAA violations after an impermissible disclosure of PHI in a mailing.","event_id":"f79b9057-b6d2-44b3-bba0-97faecf5fd14","severity_score":80},{"record_id":"ab58b763-d00c-40ad-8256-da7709cad3f4","source_event_group_id":"e195655c-59a5-4813-b08c-d23dce4a410f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CMN Hospital Inc. dba Cancer & Blood Institute of Miami-Dade","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CMN Hospital agreed to pay $25,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"e195655c-59a5-4813-b08c-d23dce4a410f","severity_score":50},{"record_id":"a6462542-b5b0-4a37-910f-3b94c115dcfc","source_event_group_id":"396a6865-8b47-4d40-8a13-61adcdc59160","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2017-0000000216","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. A provider disclosed a patient's PHI to their employer without authorization.","event_id":"396a6865-8b47-4d40-8a13-61adcdc59160","severity_score":50},{"record_id":"975bee46-0222-4e37-83eb-bcbfaa73beab","source_event_group_id":"d7f47a50-8153-4a72-93e1-54ed133e618f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Visionworks","state":"TX","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Visionworks agreed to pay $3,500,000 and implement a corrective action plan to settle potential HIPAA violations after a data breach affecting over 3 million individuals.","event_id":"d7f47a50-8153-4a72-93e1-54ed133e618f","severity_score":90},{"record_id":"786ca8bf-8a1d-4acb-af9c-1baac626b103","source_event_group_id":"70c4bc83-aac5-4e13-9054-0edc14f3ca1a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Priority Health","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Priority Health agreed to pay $150,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"70c4bc83-aac5-4e13-9054-0edc14f3ca1a","severity_score":65},{"record_id":"75197bc6-e23b-4c48-853e-ce19abd2600c","source_event_group_id":"a0d0b18e-f243-4b74-b8cc-14edf5144068","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optical dba New Vision Custom Eyes","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Optical agreed to pay $100,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations after failing to provide a patient with their medical records.","event_id":"a0d0b18e-f243-4b74-b8cc-14edf5144068","severity_score":50},{"record_id":"682ac8ca-9bff-493d-b246-c470c2d08210","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates agreed to pay $10,000 and adopt a corrective action plan to settle potential HIPAA Privacy Rule violations after posting patient information on a public social media website in response to a negative online review.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"5788d7c6-18ee-4a5e-aee3-b139b45861a8","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Children’s Hospital of Philadelphia","state":"PA","individuals_affected":150000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHOP paid $3 million and entered a CAP for an employee taking a hospital-issued laptop home without authorization.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":90},{"record_id":"4da39b5d-c698-4101-86ac-7ab96b0352ae","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":4000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro Community Health agreed to pay $25,000 and enter into a corrective action plan to settle potential HIPAA violations after a data breach involving unauthorized access to its email system.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"4ca1cafc-27ad-4013-926e-dedaa4087c6b","source_event_group_id":"be15e14e-a097-401d-995a-c7b5b9f272a6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice of Dr. H. Robert Stender","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Stender agreed to pay $80,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"be15e14e-a097-401d-995a-c7b5b9f272a6","severity_score":50},{"record_id":"43ec41b1-9dc4-4c43-8c24-e29a122b2f01","source_event_group_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Psychiatric Medical Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Riverside Psychiatric Medical Group failed to provide a patient with access to their medical records. The patient waited over seven months to receive their records.","event_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","severity_score":50},{"record_id":"27ab5567-102f-406a-88c5-441d1bd30005","source_event_group_id":"d1cdcd1b-bd30-4909-83bb-50a6b1eede88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Expresso Fitness","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Expresso Fitness agreed to pay $50,000 and implement a corrective action plan to settle potential HIPAA Right of Access violations for failing to provide a patient with their medical records.","event_id":"d1cdcd1b-bd30-4909-83bb-50a6b1eede88","severity_score":50},{"record_id":"1d9bede6-ec9e-497d-8c88-a47c05d8a510","source_event_group_id":"d1cdcd1b-bd30-4909-83bb-50a6b1eede88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Expresso Fitness","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Expresso Fitness paid $50,000 and entered a CAP for failing to provide a patient with their medical records.","event_id":"d1cdcd1b-bd30-4909-83bb-50a6b1eede88","severity_score":50},{"record_id":"0f0de435-7cb8-4431-b3ec-7a19e08535a2","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health Foundation","state":"AZ","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health Foundation agreed to pay $200,000 and implement a corrective action plan to settle potential HIPAA violations after an impermissible disclosure of PHI by a former employee.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"0dbae28d-4f83-4c84-8c03-2da64a7ada24","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning an impermissible disclosure of patient information. A hospital employee accessed and disclosed the PHI of a patient to a third party without authorization.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"01919d19-e46f-44d9-ad17-d7b49c226926","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Children's Hospital of Philadelphia","state":"PA","individuals_affected":150000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHOP agreed to pay $3,000,000 and enter into a corrective action plan to settle potential HIPAA violations after an employee took a hospital-issued laptop home without authorization.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":90},{"record_id":"dd2474e6-d1ab-4ff4-a8f7-55dd471bb607","source_event_group_id":"e26ee27b-d6f1-4985-88f6-ddf0c84bf7e9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Respiratory Care of America","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Respiratory Care of America failed to provide a patient with access to their medical records. The patient waited over six months to receive their records.","event_id":"e26ee27b-d6f1-4985-88f6-ddf0c84bf7e9","severity_score":50},{"record_id":"cc0a9449-4bd6-4e90-ae7a-cafa36610a2f","source_event_group_id":"f2be8213-33af-4b4f-bc74-ddc2d5815a80","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2017-0000000305","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. A provider disclosed a patient's PHI to their employer without authorization.","event_id":"f2be8213-33af-4b4f-bc74-ddc2d5815a80","severity_score":50},{"record_id":"8facbc51-30a3-4563-a6d7-b2e5b694fe10","source_event_group_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated three breach reports involving the loss of an unencrypted USB drive, the theft of an unencrypted laptop, and an unencrypted hard drive being exposed. These incidents affected 1,000 individuals.","event_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","severity_score":90},{"record_id":"846cea26-3859-488d-a177-433334427e1f","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a series of cyberattacks on Anthem's IT systems, which resulted in the exposure of the ePHI of nearly 79 million individuals. This was the largest healthcare breach in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"71807c31-9fc9-468d-8872-0ed2ae00ecde","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America","state":"MA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated five breach reports at different FMCNA locations, which involved unsecured patient records and unencrypted devices. These incidents affected approximately 10,000 individuals.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"63172d84-c279-46c0-a089-511eecacb921","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Elite Dental Associates failed to provide a patient with access to her medical records. The patient waited over a year to receive her records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"5f17c31c-d0e9-4793-ab42-d20e30dac9d3","source_event_group_id":"2c6b24df-612f-4269-bc43-dff710af1611","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2017-0000001007","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. A provider disclosed a patient's PHI to their employer without authorization.","event_id":"2c6b24df-612f-4269-bc43-dff710af1611","severity_score":50},{"record_id":"4619eb3b-77d7-4acd-a185-1dbb520bb212","source_event_group_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diocese of Providence","state":"RI","individuals_affected":137,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning the impermissible disclosure of PHI of 137 individuals. An employee of a covered entity inadvertently sent a mass email with patient information in the 'To' field.","event_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","severity_score":65},{"record_id":"34d78d4e-6bf4-4073-959e-d5d4e5a7e38f","source_event_group_id":"930d093a-9e17-44f7-b68d-444af30173cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Idaho Correctional Institution","state":"ID","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging North Idaho Correctional Institution failed to provide a patient with access to their medical records. The patient waited over nine months to receive their records.","event_id":"930d093a-9e17-44f7-b68d-444af30173cf","severity_score":50},{"record_id":"28d947bc-b9f8-419a-82ce-0414e4c28394","source_event_group_id":"a2ba3ffa-e110-4953-925d-48e515117480","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2017-0000000808","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. A provider disclosed a patient's PHI to their employer without authorization.","event_id":"a2ba3ffa-e110-4953-925d-48e515117480","severity_score":50},{"record_id":"13dedf2c-9b98-4074-be29-3d0b909cfb54","source_event_group_id":"fdc7b478-4241-48b0-8da6-10d977e6fa36","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2017-0000000021","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. A provider disclosed a patient's PHI to their employer without authorization.","event_id":"fdc7b478-4241-48b0-8da6-10d977e6fa36","severity_score":50},{"record_id":"f63d0982-da72-4043-b1c1-89d74e6dd098","source_event_group_id":"e62b04a8-2db4-45e7-9256-69ffb9186082","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Verity Health System","state":"CA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning the impermissible disclosure of the ePHI of 10,000 individuals. Verity Health System failed to provide timely breach notifications.","event_id":"e62b04a8-2db4-45e7-9256-69ffb9186082","severity_score":90},{"record_id":"e974b05a-c92c-4d36-a0cc-802cc32e5219","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":6617,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning an impermissible disclosure of the ePHI of 6,617 individuals. An application configuration error allowed sensitive data to be viewed by unauthorized users.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"97ca316c-be2f-43a8-b32f-6f98ae83b6f8","source_event_group_id":"8c84de97-6faf-48df-8864-fc23126849e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Vision Services, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging General Vision Services failed to provide a patient with access to their medical records. The patient waited over a year to receive their records.","event_id":"8c84de97-6faf-48df-8864-fc23126849e0","severity_score":50},{"record_id":"9081bdb1-5f4a-4839-b9bd-394ac64493ac","source_event_group_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Inc.","state":"CT","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated three breach reports concerning the impermissible disclosure of PHI. Aetna impermissibly revealed HIV status to 12,000 members through a window envelope.","event_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","severity_score":80},{"record_id":"8b502da9-2d40-442d-ad61-a4c9f1dab73a","source_event_group_id":"a2ba3ffa-e110-4953-925d-48e515117480","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR HIPAA Enforcement Case 2016-0000001809","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging impermissible disclosure of protected health information (PHI) to a health plan. An individual's PHI was disclosed in an email without proper authorization.","event_id":"a2ba3ffa-e110-4953-925d-48e515117480","severity_score":50},{"record_id":"82a2f9b9-f8cf-47f0-862c-4b9c08f3482a","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report alleging an impermissible disclosure of a patient's protected health information (PHI) when a hospital employee, without authorization, accessed a patient's medical record and shared the PHI with a third party.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"16638156-ee6e-426b-ae27-382fe2af49ad","source_event_group_id":"d6f0159e-62d8-4c5b-973d-43157320da04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of New Orleans","state":"LA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning an impermissible disclosure of patient information due to unauthorized access to a protected server.","event_id":"d6f0159e-62d8-4c5b-973d-43157320da04","severity_score":90},{"record_id":"e8ad32d2-704c-47ba-bb07-d1e9a6094e48","source_event_group_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated multiple breach reports involving the loss of an unencrypted USB drive, the theft of an unencrypted laptop, and an unencrypted hard drive being exposed. These incidents affected approximately 1,000 individuals.","event_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","severity_score":90},{"record_id":"df869484-ffaa-476d-837f-91bff810d675","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Denver Health and Hospital Authority failed to provide a patient with access to her medical records. The patient waited over six months to receive her records.","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":50},{"record_id":"dbe03c82-0022-46d0-b736-25856bd3f507","source_event_group_id":"14163eab-2a15-4380-b4dc-d256f814aa23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seven Hills Pediatric Center, P.C.","state":"MA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report regarding an impermissible disclosure of the ePHI of 15,000 individuals due to an unencrypted server being accessed by unauthorized individuals. The investigation revealed a failure to conduct an accurate and thorough risk analysis.","event_id":"14163eab-2a15-4380-b4dc-d256f814aa23","severity_score":65},{"record_id":"dbd5e21c-24c8-41d8-a190-514407fad660","source_event_group_id":"145495f4-2670-45db-96c0-72b7e397fb6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Miracle Mile Community Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that Miracle Mile failed to provide a patient with a copy of her medical records within the 30-day timeframe required by HIPAA.","event_id":"145495f4-2670-45db-96c0-72b7e397fb6e","severity_score":50},{"record_id":"aacf94e1-46f2-4874-8628-9379dbf21b9c","source_event_group_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospital of Montana","state":"MT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that a patient's PHI was disclosed to a family member without authorization. The patient had explicitly requested no disclosures to this individual.","event_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","severity_score":50},{"record_id":"7d3b9a9c-6d17-475d-be56-be28a14382da","source_event_group_id":"e12e3a5d-9f2c-408b-8896-d75b93031b57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"WellCare Health Plans, Inc.","state":"FL","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning the impermissible disclosure of PHI of 500 individuals. Mailing labels were produced incorrectly, resulting in PHI being visible through window envelopes.","event_id":"e12e3a5d-9f2c-408b-8896-d75b93031b57","severity_score":90},{"record_id":"6fa8e987-5476-4f36-81ae-e38276e97e2a","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Korunda Medical failed to provide a patient with access to his medical records. The patient waited over five months to receive his records.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"1714416c-c38b-4dc2-a97f-540e41e197fb","source_event_group_id":"5185e91b-9fd2-4b63-93eb-17a84847121d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Crossroads of the South, Inc.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Crossroads of the South failed to provide a patient with access to their medical records. The patient waited over six months to receive their records.","event_id":"5185e91b-9fd2-4b63-93eb-17a84847121d","severity_score":50},{"record_id":"0f4c3e0c-5551-4860-b0c0-06baeae5c5c3","source_event_group_id":"1fcb3046-1096-4847-9a19-f34b39c455fb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memphis Dermatology Clinic","state":"TN","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning a hacker's unauthorized access to the ePHI of 10,000 individuals through an unsecure server. The investigation found a lack of risk analysis.","event_id":"1fcb3046-1096-4847-9a19-f34b39c455fb","severity_score":50},{"record_id":"0b4ae85f-7c2d-49c4-946f-69e21003e8f7","source_event_group_id":"274249d6-f463-4032-a4f0-6561d8802400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King MD","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging King MD failed to provide a patient with access to their medical records. The patient waited over seven months to receive their records.","event_id":"274249d6-f463-4032-a4f0-6561d8802400","severity_score":50},{"record_id":"08f74ff7-8af8-44ea-baeb-97337217b22e","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning an impermissible disclosure of the ePHI of 300,000 individuals. A misconfigured server allowed public access to patient information.","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"fca20b4d-13aa-421e-8a90-578d36dc024c","source_event_group_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Erie County Medical Center (ECMC)","state":"NY","individuals_affected":6540,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ECMC paid a monetary settlement for impermissible disclosures of PHI due to an unencrypted laptop.","event_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","severity_score":80},{"record_id":"faa137d9-a385-4ba4-88c0-ad037b6fb8a9","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":4100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health received a CMP for violating individuals' right of access to their medical records and for failing to cooperate with OCR's investigation.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"d3b03722-0479-4693-acc0-f480096d210f","source_event_group_id":"45bb248d-d1c2-413d-86b5-c2aa08bccf79","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cynthia B. Fisher, M.D.","state":"GA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Cynthia Fisher's medical practice agreed to a resolution agreement and paid a monetary settlement for failing to safeguard patient information on a peer-to-peer file-sharing application.","event_id":"45bb248d-d1c2-413d-86b5-c2aa08bccf79","severity_score":50},{"record_id":"d264dff3-025b-4973-8bd8-aed9924e7a2d","source_event_group_id":"ec720041-fde3-48e8-b892-0903352f472f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University and NYP paid significant settlements for a data breach that exposed the ePHI of thousands of patients.","event_id":"ec720041-fde3-48e8-b892-0903352f472f","severity_score":90},{"record_id":"c59e4e57-091a-4f4f-b2f4-4e916ae9780e","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Shore Hospital and Medical Center","state":"MA","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Shore Hospital paid a monetary settlement for impermissible disclosure of patient information to a vendor without a business associate agreement.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":90},{"record_id":"b593b3af-cb7d-4308-abec-cac2a69322d8","source_event_group_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partners Healthcare System, Inc.","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report involving impermissible disclosure of PHI due to an employee accessing patient records without authorization. The investigation found a failure to implement proper access controls.","event_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","severity_score":90},{"record_id":"b38140a4-34ec-494b-a12e-f2c561f2b4af","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and Columbia University paid significant settlements for a data breach that exposed the ePHI of thousands of patients.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"a026a053-9746-42cd-8f41-30df0f8c0344","source_event_group_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Dermatology","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Texas Dermatology failed to provide a patient with access to their medical records. The patient waited over a year to receive their records.","event_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","severity_score":50},{"record_id":"92f8bb1d-0c18-4f8d-bedb-cbe62b7d0059","source_event_group_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete P.T., Pool & Land Physical Therapy, Inc.","state":"CA","individuals_affected":300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete P.T. paid a monetary settlement after posting patient information on its website.","event_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","severity_score":50},{"record_id":"900ca569-492c-449e-9163-c1823959c4dd","source_event_group_id":"b875390e-2a0c-4527-ac11-89247b22185c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hartford Hospital","state":"CT","individuals_affected":8883,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hartford Hospital settled for impermissible disclosure of PHI when it sent PHI of 8,883 patients to a mailing vendor without an appropriate business associate agreement.","event_id":"b875390e-2a0c-4527-ac11-89247b22185c","severity_score":80},{"record_id":"3711aae4-a1ed-4793-9ac8-636668e09a25","source_event_group_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hospice of North Idaho (HONI)","state":"ID","individuals_affected":4419,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HONI paid a monetary settlement and entered a resolution agreement for a breach involving an unencrypted laptop.","event_id":"d54a1597-faa8-44f5-82e9-f8dd61a2be78","severity_score":50},{"record_id":"1ac2402b-c8d7-4153-841b-a743f9924adb","source_event_group_id":"e79b175c-e804-44f7-a6fe-0485120c9848","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Practice, Dr. U.S. Phani Radiology","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging Dr. U.S. Phani Radiology failed to provide a patient with access to her medical records. The patient waited over six months to receive her records.","event_id":"e79b175c-e804-44f7-a6fe-0485120c9848","severity_score":50},{"record_id":"05796c0d-1495-49f9-b0f0-133a443023f1","source_event_group_id":"2922dc32-2956-4b66-8e20-e0aaab596793","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocare LLC","state":"NJ","individuals_affected":57733,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report concerning a phishing incident that compromised the email accounts of 57,733 individuals. The investigation found a lack of risk analysis.","event_id":"2922dc32-2956-4b66-8e20-e0aaab596793","severity_score":65},{"record_id":"fd17d5c1-e084-454d-ac8e-2f5b395e828a","source_event_group_id":"d9490b1a-264d-483a-aa58-ba1c2eb23129","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MPS Enterprises, Inc.","state":"TX","individuals_affected":675,"breach_submission_date":"2026-07-30","enforcement_action_date":null,"summary":"","event_id":"d9490b1a-264d-483a-aa58-ba1c2eb23129","severity_score":30},{"record_id":"af1b30ab-c92b-4155-9aac-4af1f30c00c2","source_event_group_id":"8e72970e-4661-4921-a7a9-fd52ed271b6a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Interim HealthCare of Oklahoma City, Inc.","state":"OK","individuals_affected":500,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"8e72970e-4661-4921-a7a9-fd52ed271b6a","severity_score":30},{"record_id":"99b4177e-1f3d-47c0-b540-c399d8727875","source_event_group_id":"d3313efb-7327-44b2-8064-ff0782de927f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mountain Rheumatology Professional, LLC","state":"CO","individuals_affected":5378,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"d3313efb-7327-44b2-8064-ff0782de927f","severity_score":50},{"record_id":"96d5c29f-4a17-47c5-9bb4-3fdda076652d","source_event_group_id":"47d46af1-62e3-41aa-905f-efc13ed44523","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Integrative Emergency Services, LLC","state":"TX","individuals_affected":2009,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"47d46af1-62e3-41aa-905f-efc13ed44523","severity_score":50},{"record_id":"260f7967-588a-4479-a24d-86a5b64a1f4d","source_event_group_id":"7985a4e2-2776-4941-898b-0b4e1cfd045e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Baylor Genetics","state":"TX","individuals_affected":2810878,"breach_submission_date":"2026-08-14","enforcement_action_date":null,"summary":"","event_id":"7985a4e2-2776-4941-898b-0b4e1cfd045e","severity_score":95},{"record_id":"1bca3900-304e-42dd-bdef-34274fe1d4ea","source_event_group_id":"c00782d6-eb52-48bd-ac4c-8afbcba5fa27","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Texas Oral Health","state":"TX","individuals_affected":1389,"breach_submission_date":"2026-07-29","enforcement_action_date":null,"summary":"","event_id":"c00782d6-eb52-48bd-ac4c-8afbcba5fa27","severity_score":50},{"record_id":"0e6311e3-2dcd-4188-b7ff-7ff976d9689f","source_event_group_id":"e10ed9f8-c628-40f2-afcc-f66d420ab08c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Suvida Healthcare, LLC","state":"TX","individuals_affected":1421,"breach_submission_date":"2026-07-23","enforcement_action_date":null,"summary":"","event_id":"e10ed9f8-c628-40f2-afcc-f66d420ab08c","severity_score":50},{"record_id":"9eea503a-b6a7-43c6-a993-6d1d303ad393","source_event_group_id":"ae15bfa1-eae5-4759-ab95-d1e8bc2030ba","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regional Center of Orange County","state":"CA","individuals_affected":16545,"breach_submission_date":"2026-07-27","enforcement_action_date":null,"summary":"","event_id":"ae15bfa1-eae5-4759-ab95-d1e8bc2030ba","severity_score":70},{"record_id":"94934966-f127-49f7-8eaa-fa98e71c8959","source_event_group_id":"50526f5f-84d5-4521-bc4a-d2ea0bf5b061","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Indico Data Solutions, Inc.","state":"MA","individuals_affected":4840,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"50526f5f-84d5-4521-bc4a-d2ea0bf5b061","severity_score":50},{"record_id":"742406cc-3c44-4b9e-9b93-c9eebd3452c2","source_event_group_id":"315a2762-6a4e-4f54-b942-9360b8e20782","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chicago Family Health Center","state":"IL","individuals_affected":90000,"breach_submission_date":"2026-06-22","enforcement_action_date":null,"summary":"","event_id":"315a2762-6a4e-4f54-b942-9360b8e20782","severity_score":70},{"record_id":"c6d076d1-5b80-413e-8783-230ce984a283","source_event_group_id":"3042e18f-3dfa-4e5f-9c9e-30198b427274","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jeffrey David Reuben, M.D.","state":"TX","individuals_affected":17017,"breach_submission_date":"2026-07-27","enforcement_action_date":null,"summary":"","event_id":"3042e18f-3dfa-4e5f-9c9e-30198b427274","severity_score":70},{"record_id":"06d46c67-567c-4d7e-95d2-5e4ef7915a93","source_event_group_id":"0cbc82c1-bdc1-4d8f-b548-051fa842dcaa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PAMCAH-UA Local 675 Health and Welfare Fund","state":"HI","individuals_affected":8319,"breach_submission_date":"2026-08-03","enforcement_action_date":null,"summary":"","event_id":"0cbc82c1-bdc1-4d8f-b548-051fa842dcaa","severity_score":50},{"record_id":"1e2bbfd1-d7cc-4c1c-9bad-af08f357d25d","source_event_group_id":"9fa2892c-d96c-45a7-a94f-6347786db448","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NFI North, Inc.","state":"NH","individuals_affected":49540,"breach_submission_date":"2026-08-05","enforcement_action_date":null,"summary":"","event_id":"9fa2892c-d96c-45a7-a94f-6347786db448","severity_score":70},{"record_id":"b10bb61d-2cbe-48f2-aeaf-e2d34d29ad89","source_event_group_id":"64dd67fd-19f6-4169-ad8d-3d059c355e34","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Horizon Eye Care Laser & Eye Surgery Center","state":"NJ","individuals_affected":501,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"64dd67fd-19f6-4169-ad8d-3d059c355e34","severity_score":30},{"record_id":"8aa8f073-daa1-43c5-898f-49cd40d74b7c","source_event_group_id":"7b24c8aa-034c-441e-851c-b541fd747421","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Manning Regional Healthcare Center","state":"IA","individuals_affected":746,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"7b24c8aa-034c-441e-851c-b541fd747421","severity_score":30},{"record_id":"fd7203c6-8969-4320-b97e-cab335e20ae7","source_event_group_id":"cf4598cb-ff6a-42a8-ab43-c7337a7cb715","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nephrology Associates, M.D., P.A.","state":"KS","individuals_affected":24088,"breach_submission_date":"2026-07-29","enforcement_action_date":null,"summary":"","event_id":"cf4598cb-ff6a-42a8-ab43-c7337a7cb715","severity_score":70},{"record_id":"c122cb0b-325d-411b-a03e-8fcdac951443","source_event_group_id":"dd1d33ba-a84c-4e01-980b-452f6986541a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bridgeway Benefit Technologies LLC","state":"FL","individuals_affected":9268,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"dd1d33ba-a84c-4e01-980b-452f6986541a","severity_score":50},{"record_id":"5f8467e6-eb5d-46e0-b67a-249138404c9d","source_event_group_id":"04d76ff2-7aa1-4522-a645-ce758eb94f16","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cornerstone Behavioral Healthcare","state":"ME","individuals_affected":14830,"breach_submission_date":"2026-07-27","enforcement_action_date":null,"summary":"","event_id":"04d76ff2-7aa1-4522-a645-ce758eb94f16","severity_score":70},{"record_id":"14fbc9ca-acdf-4ca7-b858-e612efab7f64","source_event_group_id":"047c5da9-a771-4d73-8bcc-e26f8e72b822","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aesto, LLC","state":"AL","individuals_affected":9540683,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"047c5da9-a771-4d73-8bcc-e26f8e72b822","severity_score":95},{"record_id":"5fd743a2-2e24-4a20-b02d-8a9b4919aceb","source_event_group_id":"319bc653-ba4e-4985-b7fa-354618c2c689","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Deseye, PLLC d/b/a Princeton Family Eye Care","state":"TX","individuals_affected":1050,"breach_submission_date":"2026-08-07","enforcement_action_date":null,"summary":"","event_id":"319bc653-ba4e-4985-b7fa-354618c2c689","severity_score":50},{"record_id":"d9db7a41-e7ea-4418-b251-b9f7364407c9","source_event_group_id":"0c310606-3b91-4910-8d1d-b5448df882a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Associates (MRA)","state":"MA","individuals_affected":3800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that the ePHI of 3,800 individuals was impermissibly disclosed due to a ransomware attack, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"0c310606-3b91-4910-8d1d-b5448df882a1","severity_score":80},{"record_id":"9ffa2ebb-d51c-43bd-adbb-d256d7165594","source_event_group_id":"01e9f2ef-f3ec-42a2-b0ba-ff283035ad20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Physicians, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that Elite Emergency Physicians failed to provide a patient with access to their medical records, leading to a finding of noncompliance with the HIPAA Privacy Rule.","event_id":"01e9f2ef-f3ec-42a2-b0ba-ff283035ad20","severity_score":50},{"record_id":"8d5b28ff-b01a-4173-9c5a-7a6f9e2485c7","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California at Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an employee impermissibly accessed the ePHI of 10,000 individuals, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"6d2807f9-d7cb-48ed-a0cb-8f294efac8e8","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance (DCA)","state":"FL","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that a server containing the ePHI of 1 million individuals was compromised by a hacker, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":90},{"record_id":"4dc03d52-0557-4b71-acfb-15620727a126","source_event_group_id":"75d46f5f-b632-4ef8-b019-d74bb36f08b5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Tennessee Medical Group","state":"TN","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that a ransomware attack led to the impermissible disclosure of the ePHI of 16,000 individuals, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"75d46f5f-b632-4ef8-b019-d74bb36f08b5","severity_score":90},{"record_id":"461f9b3e-66e7-4ad8-adcf-92d2badbc0ae","source_event_group_id":"7bad5537-16d8-41a3-be79-07a1891d1879","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic and Sports Medicine Center","state":"CO","individuals_affected":17680,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an unencrypted laptop containing the ePHI of 17,680 individuals was stolen, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"7bad5537-16d8-41a3-be79-07a1891d1879","severity_score":50},{"record_id":"2110d2ac-95f2-4828-b8f5-3b9db0e50e44","source_event_group_id":"157863c6-5084-4854-b2be-2401b47cc39a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Stanford Health Care","state":"CA","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an impermissible disclosure of PHI occurred when a web-based calendar application was used to schedule patient appointments, impacting 1,300 patients.","event_id":"157863c6-5084-4854-b2be-2401b47cc39a","severity_score":90},{"record_id":"fd753f4b-7ed4-43d4-8060-378632ccbace","source_event_group_id":"fc6ca2d7-1735-4cea-ba55-b66e88adea40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Hanover Regional Medical Center","state":"NC","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an employee impermissibly accessed the ePHI of 1,000 individuals, leading to findings of widespread noncompliance with the HIPAA Privacy Rule.","event_id":"fc6ca2d7-1735-4cea-ba55-b66e88adea40","severity_score":65},{"record_id":"dfbc8b83-6d9f-4d3c-bf74-ecfb8dbde9b5","source_event_group_id":"dc69e692-4091-4500-950b-b46ae091e3d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southeastern Retina Associates, P.C.","state":"TN","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an unencrypted laptop containing the ePHI of 13,000 individuals was stolen, leading to findings of widespread noncompliance with the HIPAA Security Rule.","event_id":"dc69e692-4091-4500-950b-b46ae091e3d0","severity_score":65},{"record_id":"c1229d85-d954-4278-99e8-a733107bbad0","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":2209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that a computer server containing the ePHI of 2,209 individuals was hacked, leading to findings of noncompliance with the HIPAA Security Rule.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"9d116b77-d396-446c-9871-4338fd61c432","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians, P.C.","state":"CA","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that Rodeo Family Physicians impermissibly disclosed the PHI of 2,000 individuals, leading to findings of noncompliance with the HIPAA Privacy Rule.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"7797520c-f333-4564-8914-2bb53ab3f320","source_event_group_id":"cc911ca2-02f6-4df9-9ea9-bd4d2851f763","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group Resources, Inc. (MGR)","state":"FL","individuals_affected":1600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an employee impermissibly disclosed the ePHI of 1,600 individuals, leading to findings of noncompliance with the HIPAA Privacy Rule.","event_id":"cc911ca2-02f6-4df9-9ea9-bd4d2851f763","severity_score":50},{"record_id":"6fe44bbf-67e3-46ed-9609-af8efbcd2d7e","source_event_group_id":"73400fd1-de50-4936-a39d-478129a4fc01","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Newark Dermatology, P.A.","state":"DE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that Newark Dermatology failed to provide a patient with access to their medical records, leading to a finding of noncompliance with the HIPAA Privacy Rule.","event_id":"73400fd1-de50-4936-a39d-478129a4fc01","severity_score":50},{"record_id":"2c5b7f0a-e726-4181-b1da-8eb697da2f95","source_event_group_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partners HealthCare System","state":"MA","individuals_affected":4300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a breach report that an unencrypted laptop containing the ePHI of 4,300 individuals was stolen, leading to findings of widespread noncompliance.","event_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","severity_score":90},{"record_id":"fa7b293b-0b66-439c-afc9-57708613de95","source_event_group_id":"6cb3e5aa-c217-4a1c-b521-5b0efe5ff422","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Agape Health Care Agency","state":"SC","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agape Health Care Agency settled with OCR after an unencrypted laptop containing PHI was stolen, revealing a lack of proper security measures.","event_id":"6cb3e5aa-c217-4a1c-b521-5b0efe5ff422","severity_score":50},{"record_id":"e80be03d-3ff9-486f-bd13-e9d7ef8d379e","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra settled after a laptop containing the unencrypted ePHI of over 20,000 individuals was stolen, revealing a failure in safeguarding patient data.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"d2d8af2e-258b-4ee2-8574-ee4b562a4790","source_event_group_id":"4506f1a4-6e6b-4e85-8495-045aeef709a4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Best Practice Partners, Inc.","state":"CO","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BPP, a business associate, settled after an unencrypted server containing ePHI was stolen from its facility, highlighting a lack of risk management.","event_id":"4506f1a4-6e6b-4e85-8495-045aeef709a4","severity_score":65},{"record_id":"bb7a4f1e-2b34-4984-aabf-870da0836928","source_event_group_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"QCA Health Plan, Inc.","state":"AR","individuals_affected":148863,"breach_submission_date":null,"enforcement_action_date":null,"summary":"QCA Health Plan settled after a server containing the unencrypted ePHI of 148,863 individuals was stolen, indicating insufficient security measures.","event_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","severity_score":65},{"record_id":"af058679-11b8-40b0-814d-017a2b4fa05b","source_event_group_id":"f21fd787-76b5-463a-a00f-df371728db3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Imaging","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Imaging settled with OCR after it published patient ePHI on its website as part of a demonstration of its product, without patient authorization.","event_id":"f21fd787-76b5-463a-a00f-df371728db3c","severity_score":50},{"record_id":"50e26033-e41d-4f5b-b803-f8850661a9d7","source_event_group_id":"74030c55-8da2-4fa2-b1c1-2eee5654667e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fidelity National Information Services, Inc.","state":"FL","individuals_affected":2752,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint that an FIS employee impermissibly disclosed the ePHI of 2,752 individuals, resulting in a finding that FIS failed to maintain appropriate administrative, technical, and physical safeguards.","event_id":"74030c55-8da2-4fa2-b1c1-2eee5654667e","severity_score":80},{"record_id":"10dd0e6f-5af0-4307-9deb-f4d2b6e2bf95","source_event_group_id":"265a569f-8e61-4c0e-aa40-50d919e4ab60","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona Department of Health Services","state":"AZ","individuals_affected":7000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ADHS settled with OCR after ePHI of over 7 million individuals was exposed on a publicly accessible website. This was a result of inadequate security configurations.","event_id":"265a569f-8e61-4c0e-aa40-50d919e4ab60","severity_score":80},{"record_id":"f131cd63-8977-407b-a454-32f238bb05f1","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":940000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health paid $3,000,000 to OCR and agreed to implement a corrective action plan for multiple HIPAA violations, including failure to conduct a risk analysis and impermissible disclosures of PHI.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":90},{"record_id":"e0f85909-a0d7-47ef-96ab-1c72a5128dd5","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services (ACMHS)","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anchorage Community Mental Health Services (ACMHS) paid $150,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to a malware attack.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"d74c5881-2446-4f5c-913a-9e42e83d8850","source_event_group_id":"891a3bc9-807e-456b-a26d-b552926b51e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical","state":"FL","individuals_affected":5600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical agreed to pay $160,000 and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"891a3bc9-807e-456b-a26d-b552926b51e0","severity_score":65},{"record_id":"bf315560-75d5-428f-aa3f-2e2ac07383e7","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering (MIE)","state":"IN","individuals_affected":39082,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering (MIE) agreed to pay $100,000 to OCR and implement a corrective action plan to settle potential HIPAA violations related to a large data breach.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":50},{"record_id":"ba8f9063-95e4-4d28-b4de-88b5914535ab","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":57792,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals paid $2.175 million to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":90},{"record_id":"a8c831ba-0dce-47d8-9582-abaaba914a95","source_event_group_id":"57126242-0d22-43d0-9ff5-bd99e1959a86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connolly Care Network d/b/a Care New England","state":"RI","individuals_affected":13955,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connolly Care Network d/b/a Care New England agreed to pay $1.6 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"57126242-0d22-43d0-9ff5-bd99e1959a86","severity_score":90},{"record_id":"9f2dd1e7-12de-4f0c-ace3-4160c67bda99","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":4900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to a data breach involving a laptop containing ePHI.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":80},{"record_id":"9ca74bcc-0972-4d4b-be5a-61b18b846e12","source_event_group_id":"d70cc426-79ba-4216-9f6e-f019dc54cea4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana Department of Mental Health and Addiction Services (DMHA)","state":"IN","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana Department of Mental Health and Addiction Services (DMHA) paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to an impermissible disclosure of PHI.","event_id":"d70cc426-79ba-4216-9f6e-f019dc54cea4","severity_score":80},{"record_id":"9a6850d5-2ab3-4532-aa13-ffdf28d99023","source_event_group_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Rochester Medical Center (URMC)","state":"NY","individuals_affected":10100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Rochester Medical Center (URMC) agreed to pay $3 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","severity_score":90},{"record_id":"953917d2-bc9a-4c0e-8b1a-3e29cfd521d5","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":3000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center paid $387,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"8e80655b-7287-4140-a178-f262d37669d1","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health","state":"IN","individuals_affected":5900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health paid $800,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"8e4dda95-a754-47c3-85c2-cd90422c6e62","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":6900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center paid $160,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"8df14fa8-e948-4086-bf71-07d1e35b279a","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":2697,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg paid $85,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"89b00baf-216d-46bb-bd85-ff5822d50ce6","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC paid $85,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"78e294bf-0961-43a7-8430-e224b3f6ffb1","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates agreed to pay $100,000 to OCR and implement a corrective action plan to settle potential HIPAA violations related to social media disclosures.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"7121a282-c3d7-4ea0-ad0f-46ba1a8f1efd","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":4900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to a data breach involving a laptop containing ePHI.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":80},{"record_id":"63505e5e-83e8-417d-916e-b9ccc143bc08","source_event_group_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CoPilot Provider Support Services","state":"NY","individuals_affected":3000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CoPilot Provider Support Services agreed to pay $130,000 and implement a corrective action plan to settle potential HIPAA violations involving the right of access.","event_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","severity_score":65},{"record_id":"567c5520-ac25-444f-879f-49e6fcda601c","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. agreed to pay $50,000 and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"5119e6b1-992f-4ed1-8b06-3bf305de66db","source_event_group_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Georgia Ambulance, Inc.","state":"GA","individuals_affected":16900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Georgia Ambulance, Inc. agreed to pay $65,000 to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","severity_score":50},{"record_id":"4dd36a88-6cfc-4d00-9b95-41a4ff9fd3c3","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences (UAMS)","state":"AR","individuals_affected":14940,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Arkansas for Medical Sciences (UAMS) agreed to pay $2.8 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":90},{"record_id":"2e049653-79fc-43f4-ba8b-7193cb9cd8c6","source_event_group_id":"d70cc426-79ba-4216-9f6e-f019dc54cea4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana Department of Mental Health and Addiction Services (DMHA)","state":"IN","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana Department of Mental Health and Addiction Services (DMHA) paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to an impermissible disclosure of PHI.","event_id":"d70cc426-79ba-4216-9f6e-f019dc54cea4","severity_score":80},{"record_id":"2d3c9cfc-02b3-4119-9d51-41270846ddff","source_event_group_id":"78d13366-6f86-4c30-bd9e-c0c045bfaccc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"KingMD","state":"MD","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"KingMD agreed to pay $35,000 and implement a corrective action plan to settle potential HIPAA violations involving the right of access.","event_id":"78d13366-6f86-4c30-bd9e-c0c045bfaccc","severity_score":50},{"record_id":"1f91b3d6-dba0-4419-9554-ad9d4588f6a1","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Services","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Services paid $5.55 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations stemming from three separate data breaches.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"1e647fb6-6afe-44f2-b483-87a6daf0f018","source_event_group_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete P.T. Pool & Land Physical Therapy, Inc.","state":"CA","individuals_affected":3600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete P.T. Pool & Land Physical Therapy, Inc. paid $25,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to impermissible disclosures of PHI on social media.","event_id":"c37213c9-bc57-4a62-bd3f-d536e517e181","severity_score":50},{"record_id":"1479e28c-d772-4738-95c9-ed2d50780317","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":289000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care paid $2.15 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to an unencrypted laptop and other security failures.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"0683f04e-dc94-40dc-ab26-86c62fd192c1","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Hospital and Medical Center","state":"MA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lahey Hospital and Medical Center paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to a breach involving unencrypted devices.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":80},{"record_id":"04c46df9-30f2-4515-97ef-e24a38f0347b","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (d.b.a. Agape Health Services)","state":"NC","individuals_affected":12638,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services (d.b.a. Agape Health Services) agreed to pay $3 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":90},{"record_id":"fa6c4114-cae2-4645-a94b-64ce34e136bd","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Corporation","state":"PR","individuals_affected":398214,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Triple-S Management Corporation paid $3.5 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to multiple breaches of unsecured PHI.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"e4f4b403-abd8-48ca-9434-94e7d3fcd318","source_event_group_id":"57126242-0d22-43d0-9ff5-bd99e1959a86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connolly Care Network d/b/a Care New England","state":"RI","individuals_affected":13955,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connolly Care Network d/b/a Care New England agreed to pay $1.6 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"57126242-0d22-43d0-9ff5-bd99e1959a86","severity_score":90},{"record_id":"bfce9107-0be0-48aa-b5f8-f099ada6459c","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":3000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center paid $387,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"bd0cd6b6-5662-4dbc-af73-2b349547ca66","source_event_group_id":"51d89c69-0478-4e96-9f31-420392672bd2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Treatment Center","state":"CA","individuals_affected":2600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Treatment Center paid $25,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"51d89c69-0478-4e96-9f31-420392672bd2","severity_score":50},{"record_id":"bcfb438c-c64b-4c7f-9bfa-18643d83911a","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Touchstone Medical Imaging agreed to pay $3 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"b22f78b7-92f6-4b50-a0df-1a0f2f2d5517","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Services","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Services paid $5.55 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations stemming from three separate data breaches.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"a88a2874-ab2b-4b00-aa33-e567c30752d6","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":550000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"L.A. Care Health Plan paid $1.7 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":90},{"record_id":"a7d8c287-f611-4560-bc74-e37867d20985","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":289000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care paid $2.15 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to an unencrypted laptop and other security failures.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"a6813b2b-7ba5-4fca-a8b4-35d3a49b8bdd","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Feinstein Institute for Medical Research","state":"NY","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Feinstein Institute for Medical Research paid $3.9 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":90},{"record_id":"90d741ba-0822-407b-9eb8-dfc763d0cf92","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS) paid $650,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"90722a86-f887-455e-83ef-089808493dfc","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Massachusetts Amherst (UMass Amherst) paid $650,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"6a263d32-a1c2-4c2d-8678-cbe6f1070ff2","source_event_group_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":10100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Rochester Medical Center agreed to pay $3,000,000 and implement a corrective action plan to settle potential HIPAA violations related to its failure to provide timely access to PHI.","event_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","severity_score":90},{"record_id":"4d90cd7e-384c-41d1-a182-4845c6c42597","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Mississippi Medical Center (UMMC) paid $2.75 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations following a data breach.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"32cfea1f-6b80-4b28-893e-3979a2cd0530","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":940000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health paid $3,000,000 to OCR and agreed to implement a corrective action plan for multiple HIPAA violations, including failure to conduct a risk analysis and impermissible disclosures of PHI.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":90},{"record_id":"3120873d-91b3-4eec-b8a7-4b267ef46945","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Hospital and Medical Center","state":"MA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lahey Hospital and Medical Center paid $750,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to a breach involving unencrypted devices.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":80},{"record_id":"193498b3-ac3a-47df-9641-06bc3175d2c1","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS) paid $650,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"165a7523-19c8-4543-a7cb-0fcd5d7e9a85","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital (NYP)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York-Presbyterian Hospital (NYP) paid $2.2 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA Privacy Rule violations.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"150095d7-6b2e-4739-b7a2-91852ae6c418","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Mississippi Medical Center (UMMC) paid $2.75 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations following a data breach.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"07f52413-b575-4599-8e0d-b2ef6f15a298","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care paid $4.8 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations related to inadequate risk analysis and management.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"ea28c954-46fd-4c45-b31a-a412fef8cdb4","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (d.b.a. Agape Health Services)","state":"NC","individuals_affected":12638,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services (d.b.a. Agape Health Services) agreed to pay $3 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":90},{"record_id":"ddc5531a-e715-4f7d-9dcc-33cb5c538c61","source_event_group_id":"c6057aff-9ba7-488c-9bbc-8e31339da743","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Practice Center, P.C.","state":"PA","individuals_affected":3400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Practice Center, P.C. paid $50,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"c6057aff-9ba7-488c-9bbc-8e31339da743","severity_score":50},{"record_id":"d878c0db-e6cf-4ac6-b868-4ef0fac9377f","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering (MIE)","state":"IN","individuals_affected":39082,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering (MIE) agreed to pay $100,000 to OCR and implement a corrective action plan to settle potential HIPAA violations related to a large data breach.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":50},{"record_id":"cffa8269-6e9a-4956-b234-774f552bd6ca","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":6900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center paid $160,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"c2c67a56-d2a2-4d9c-9a14-5d6dba931cff","source_event_group_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Georgia Ambulance, Inc.","state":"GA","individuals_affected":16900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Georgia Ambulance, Inc. agreed to pay $65,000 to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","severity_score":50},{"record_id":"b2eab9d1-cfda-4a67-865b-b9f9b989635d","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cancer Care Group, P.C. agreed to pay $750,000 to OCR and to implement a corrective action plan to settle potential HIPAA violations.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"82490d72-2a71-425f-a20d-630abe9e7b4c","source_event_group_id":"dd81e832-8ce0-4d50-858c-89f489818643","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Med inadvertently exposed 10,000 individuals' PHI","state":"GA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR settled with a business associate and its subcontractor for HIPAA violations involving the impermissible disclosure of protected health information (PHI) of approximately 10,000 individuals.","event_id":"dd81e832-8ce0-4d50-858c-89f489818643","severity_score":50},{"record_id":"7513790d-79be-4b10-9bfc-59031b388c62","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University (OHSU)","state":"OR","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Oregon Health & Science University (OHSU) paid $2.7 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations following two data breaches.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"5c3ab0b8-4903-4193-b5f9-b0d7fd7fd941","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences (UAMS)","state":"AR","individuals_affected":14940,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Arkansas for Medical Sciences (UAMS) agreed to pay $2.8 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":90},{"record_id":"56aa17f7-c7a2-4bb4-8a7e-1605ffc4214f","source_event_group_id":"0727cd4a-def3-4310-b4e3-e4287ea16916","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospitalists PLC","state":"MI","individuals_affected":819,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Care Hospitalists PLC (ACH) agreed to pay $125,000 to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"0727cd4a-def3-4310-b4e3-e4287ea16916","severity_score":65},{"record_id":"3ed78cbb-e834-4fd5-a3f7-d65f428fbf3d","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas (CMCD)","state":"TX","individuals_affected":6200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Medical Center of Dallas (CMCD) paid $3.2 million to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"32a1ee29-395c-4791-b4da-d97bdb3e897a","source_event_group_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Rochester Medical Center (URMC)","state":"NY","individuals_affected":10100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Rochester Medical Center (URMC) agreed to pay $3 million to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"6b6704ea-4a79-4f77-add8-ce3d2865b0a0","severity_score":90},{"record_id":"154a67f7-66fe-4a14-b2ea-f846160b3219","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health","state":"IN","individuals_affected":5900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health paid $800,000 to OCR and agreed to implement a corrective action plan for failing to provide timely access to patient health information.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"0a86dd0b-7fc4-4edc-8fe6-77fc5c6eb341","source_event_group_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CoPilot Provider Support Services","state":"NY","individuals_affected":3000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CoPilot Provider Support Services agreed to pay $130,000 and implement a corrective action plan to settle potential HIPAA violations involving the right of access.","event_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","severity_score":65},{"record_id":"080e4926-ee6e-474b-866e-c96067c8ccd8","source_event_group_id":"78d13366-6f86-4c30-bd9e-c0c045bfaccc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"KingMD","state":"MD","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"KingMD agreed to pay $35,000 and implement a corrective action plan to settle potential HIPAA violations involving the right of access.","event_id":"78d13366-6f86-4c30-bd9e-c0c045bfaccc","severity_score":50},{"record_id":"fdc2b51c-2c7a-4699-a716-2c6298096810","source_event_group_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Inc.","state":"CT","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna Inc. agreed to pay $1,000,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy and Security Rules.","event_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","severity_score":80},{"record_id":"f7e437c9-4718-4ff4-8e8e-2fcd6798b4b4","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital of Philadelphia (CHOP)","state":"PA","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital of Philadelphia (CHOP) agreed to pay $500,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy Rule.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":65},{"record_id":"f7311b09-65e7-4428-b1be-001336d16faa","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England Health System paid $400,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations following a breach of unsecured protected health information.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":65},{"record_id":"f28dab1a-6816-44a6-a188-87ac13ba0634","source_event_group_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Tech University Health Sciences Center (TTUHSC)","state":"TX","individuals_affected":12900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Tech University Health Sciences Center (TTUHSC) agreed to pay $215,000 to OCR and implement a corrective action plan to settle potential HIPAA violations.","event_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","severity_score":65},{"record_id":"ea58ada8-fe54-4d46-b3ba-dd1066b91249","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera Blue Cross paid $6.85 million to settle potential violations of the HIPAA Rules related to a cyberattack that exposed the protected health information (PHI) of over 10.4 million people.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"e7649aff-5b15-4287-9433-f563da56c015","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":2697,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg agreed to pay $85,000 to OCR and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"e61f7651-bbd0-47fe-8fce-d7bae50790cc","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Health","state":"IL","individuals_affected":8318,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presence Health agreed to pay $475,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Breach Notification Rule.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"e4ac2d90-a9cb-4f85-9a47-83916e018619","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, now BioTelemetry, Inc.","state":"PA","individuals_affected":1650,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, now BioTelemetry, Inc., agreed to pay $2,500,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Security Rule.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"dad4d504-44b9-4373-a9a8-e04c16ef5226","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates agreed to pay $100,000 to OCR and implement a corrective action plan to settle potential HIPAA violations related to social media disclosures.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"c6c1b1c8-2a35-4e0a-813f-26cbee5084dd","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem, Inc. paid $16 million to settle potential violations of HIPAA Rules after a series of cyberattacks led to the largest health data breach in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"be1e2aff-70a5-43d5-acca-347083c580c7","source_event_group_id":"b12cc1e8-b62d-4ae3-9177-d4b9ae7e686f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"PHS Community Care","state":"CA","individuals_affected":1621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PHS Community Care impermissibly disclosed the PHI of 1,621 patients by leaving unencrypted backup tapes in the back of an unattended van. OCR found PHS Community Care failed to implement security measures.","event_id":"b12cc1e8-b62d-4ae3-9177-d4b9ae7e686f","severity_score":65},{"record_id":"ba4b0785-7906-42fe-8be2-32b3f941974d","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":22063,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPFRE Life Insurance Company of Puerto Rico agreed to pay $2,200,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Rules.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"b547ca2a-377e-4f57-b04d-c64dd60d7c59","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":34883,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson Cancer Center paid $4.3 million in civil money penalties for HIPAA violations related to three separate data breaches involving the loss of unencrypted devices.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"ac972bb8-f05e-44c8-9d29-56da113c37f3","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children's Digestive Health (CCDH)","state":"IL","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Center for Children's Digestive Health (CCDH) agreed to pay $31,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy Rule.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"9c15bfde-f893-4765-b7cc-a38f7d856210","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America (FMCNA)","state":"MA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresenius Medical Care North America (FMCNA) agreed to pay $3,500,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Security Rule.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"99a00c30-e6a3-4c54-9749-67b1d6aa817d","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FileFax Inc.","state":"GA","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FileFax Inc. agreed to pay $195,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy, Security, and Breach Notification Rules.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":65},{"record_id":"7b9e4a3b-50ee-4d37-829f-989c6ea00238","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management (ASPM)","state":"MD","individuals_affected":2600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management (ASPM) agreed to pay $310,000 to settle potential violations of the HIPAA Rules for a breach of protected health information (PHI) caused by its business associate.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":65},{"record_id":"77368828-4ce9-446c-808a-b525e33af243","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"State of Alaska, Department of Health and Social Services","state":"AK","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The ePHI of 500 individuals was impermissibly disclosed when an unencrypted portable USB hard drive was stolen. OCR found the department failed to conduct a risk analysis and implement security measures.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"6e6c6e9f-e7e7-424e-afb0-0163a5a54e76","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC agreed to pay $85,000 to OCR and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"6d53e2d1-dbc9-46ab-b65f-59c0ad51c4b7","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a third resolution agreement with CVS Pharmacy related to separate violations. More details are available in the specific enforcement action record.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"565a8967-e4ea-46d1-8698-aadd927e327a","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BUMC, Inc. (Boston Medical Center)","state":"MA","individuals_affected":1800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BUMC, Inc. (Boston Medical Center) agreed to pay $100,000 and to implement a corrective action plan to settle potential violations of the HIPAA Privacy Rule.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"45e9ba9d-c78f-47c6-92aa-ad8180259e11","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":57792,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals agreed to pay $2.175 million to OCR and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":90},{"record_id":"40a8b260-b942-458d-ba2a-54e6a1f3a0be","source_event_group_id":"8db9621f-89b0-4611-907f-24c84713efff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagosa Springs Medical Center","state":"CO","individuals_affected":5570,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pagosa Springs Medical Center (PSMC) agreed to pay $111,400 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy, Security, and Breach Notification Rules.","event_id":"8db9621f-89b0-4611-907f-24c84713efff","severity_score":65},{"record_id":"3f77a818-bf05-4d10-b305-a720d4990e4c","source_event_group_id":"891a3bc9-807e-456b-a26d-b552926b51e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical","state":"FL","individuals_affected":5600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical agreed to pay $160,000 to OCR and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"891a3bc9-807e-456b-a26d-b552926b51e0","severity_score":65},{"record_id":"1eaeafe9-a46d-4b57-a7f9-5c00c56b4e83","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":4800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System (MHHS) agreed to pay $2,400,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Privacy Rule.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"11d8bc0c-4b63-460c-bf7c-82df4524bf2d","source_event_group_id":"92612061-2601-4266-ae7c-22c1fb8d6138","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York State Department of Health (NYSDOH)","state":"NY","individuals_affected":248000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The New York State Department of Health (NYSDOH) agreed to pay $3,200,000 to OCR and to adopt a corrective action plan to settle potential violations of the HIPAA Rules.","event_id":"92612061-2601-4266-ae7c-22c1fb8d6138","severity_score":90},{"record_id":"0cb3105e-b97f-4082-b78e-e85291d762fa","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. agreed to pay $50,000 to OCR and implement a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"0626e8cd-62d7-4bff-8712-2c0027cc66b3","source_event_group_id":"e113f80c-9167-4023-ae7b-f4034cb9933e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona Medical Oncology, P.C.","state":"AZ","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The ePHI of 7,000 patients was impermissibly disclosed when a USB drive containing PHI was stolen. OCR found that Arizona Medical Oncology failed to conduct an accurate and thorough risk analysis.","event_id":"e113f80c-9167-4023-ae7b-f4034cb9933e","severity_score":80},{"record_id":"a10d2688-92af-4c79-af32-268bd4e4f695","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a second resolution agreement with CVS Pharmacy related to separate violations. More details are available in the specific enforcement action record.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"67a39966-bac1-4fd3-8bca-b52e9123999c","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Massachusetts General Hospital)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that an MGH employee removed medical records, including paper PHI of 192 patients, from MGH for an unapproved purpose and then lost the records on a subway train.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"6345db5d-e1fe-47fc-a362-f40877d109eb","source_event_group_id":"d6477565-a21f-4cff-a167-6366e3923ec7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Emergency Department Physicians (EDP)","state":"CO","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"EDP impermissibly disclosed the PHI of 30,000 patients to a third-party billing company without a Business Associate Agreement. OCR found EDP failed to implement policies and procedures.","event_id":"d6477565-a21f-4cff-a167-6366e3923ec7","severity_score":80},{"record_id":"2414b71e-076e-4c8c-93ed-182cca0c5d4d","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Massachusetts General Hospital)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging that an MGH employee removed medical records, including paper PHI of 192 patients, from MGH for an unapproved purpose and then lost the records on a subway train. This is a repeat of a previous entry to ensure all possible interpretations are covered.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"22a5e0d5-652b-4b17-9ee5-bdf8930fc274","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital (MGH)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH impermissibly disclosed the PHI of 192 patients when patient information was left on a subway. OCR found MGH failed to implement appropriate safeguards and policies and procedures.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"10c141fe-b3b2-4bd2-9309-d8e7434c2cd4","source_event_group_id":"4f1db2c7-3c8f-4add-aeb5-b98fa20b67ff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hancock Regional Hospital","state":"IN","individuals_affected":1530,"breach_submission_date":"2026-07-06","enforcement_action_date":null,"summary":"","event_id":"4f1db2c7-3c8f-4add-aeb5-b98fa20b67ff","severity_score":50},{"record_id":"9d2aa539-d0a5-4810-8ddc-1b91b99aa8b0","source_event_group_id":"58e3d9ab-e14d-4e7b-9052-ac8a3ded9d7c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TennCare","state":"TN","individuals_affected":2300,"breach_submission_date":"2026-07-27","enforcement_action_date":null,"summary":"","event_id":"58e3d9ab-e14d-4e7b-9052-ac8a3ded9d7c","severity_score":50},{"record_id":"83cee0ca-6905-477c-aa20-474bc1824700","source_event_group_id":"e1969d57-9479-4977-80ff-002304950842","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Parkhurst Chiropractic Life Center PLC","state":"MI","individuals_affected":728,"breach_submission_date":"2026-07-14","enforcement_action_date":null,"summary":"","event_id":"e1969d57-9479-4977-80ff-002304950842","severity_score":30},{"record_id":"1b1769bb-4b99-447c-ad27-d3f117f08c26","source_event_group_id":"8af7a806-ac7a-4484-a5de-1c9819cc7108","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hollister Family Dental & Implant Center","state":"CA","individuals_affected":3809,"breach_submission_date":"2026-07-07","enforcement_action_date":null,"summary":"","event_id":"8af7a806-ac7a-4484-a5de-1c9819cc7108","severity_score":50},{"record_id":"136126b9-4e42-438e-875e-abcc817c7b57","source_event_group_id":"01fe4007-edd6-4d3f-a5b4-159b4fbe2c1f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TELUS Health (US) LTD.","state":"MA","individuals_affected":2641,"breach_submission_date":"2026-07-14","enforcement_action_date":null,"summary":"","event_id":"01fe4007-edd6-4d3f-a5b4-159b4fbe2c1f","severity_score":50},{"record_id":"f94cf588-4d6f-4095-8450-fecbf3d03103","source_event_group_id":"274709e9-d3af-4c1f-869c-0340e0084acc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ALL Medical LLC","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ALL Medical LLC settled potential HIPAA violations for impermissibly disclosing the ePHI of 1000 individuals due to a lack of appropriate safeguards.","event_id":"274709e9-d3af-4c1f-869c-0340e0084acc","severity_score":65},{"record_id":"bf0af972-c231-4d9c-ba0b-d12f7c8cf43d","source_event_group_id":"f24f95c1-774c-4312-bd69-6125b5338bca","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Data Storage Corporation (doing business as InSync)","state":"FL","individuals_affected":480000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"InSync settled potential HIPAA violations after a breach exposed the ePHI of 480,000 individuals due to ransomware.","event_id":"f24f95c1-774c-4312-bd69-6125b5338bca","severity_score":55},{"record_id":"be6a2466-bb7d-4248-9d07-f59e4c4cca52","source_event_group_id":"8991da2f-1e45-44a0-9360-482a9e6ee4bb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Philadelphia Department of Behavioral Health and Intellectual Disability Services","state":"PA","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Philadelphia Department of Behavioral Health and Intellectual Disability Services settled potential HIPAA violations for impermissibly disclosing the ePHI of 100 individuals.","event_id":"8991da2f-1e45-44a0-9360-482a9e6ee4bb","severity_score":65},{"record_id":"a128e67c-fe00-4478-a383-3afabbc379c9","source_event_group_id":"a8431a47-a518-4418-b7cf-74aaf303da94","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresno Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresno Medical Center settled potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"a8431a47-a518-4418-b7cf-74aaf303da94","severity_score":55},{"record_id":"592f7010-7833-4a4a-8494-5490a10bd5b4","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc.","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering settled potential HIPAA violations for a breach that exposed the ePHI of 3.9 million individuals.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"56869e42-30ba-4aaf-ad2f-5b11a42b783d","source_event_group_id":"717aec09-f031-4adf-a62f-17666fe9ba9d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (doing business as My Health, My Resources of Tarrant County)","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MHMR of Tarrant County settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"717aec09-f031-4adf-a62f-17666fe9ba9d","severity_score":55},{"record_id":"42c41229-33a7-4f1f-bfad-d7c067edde9b","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Care Alliance settled potential HIPAA violations for impermissibly disclosing patient ePHI due to a lack of proper safeguards.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":65},{"record_id":"3c53bb70-a62d-425e-a8d4-59f16ee2879f","source_event_group_id":"0d302952-d641-4f9f-827c-5641c80ea13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross and Blue Shield of North Carolina","state":"NC","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSNC settled potential HIPAA violations for impermissibly disclosing the ePHI of 100 individuals due to a lack of proper safeguards.","event_id":"0d302952-d641-4f9f-827c-5641c80ea13c","severity_score":90},{"record_id":"3357e390-7a0a-47f1-a637-ea81259f7edd","source_event_group_id":"e6eb4cef-362c-4811-8143-2b802df92cc4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dana-Farber Cancer Institute, Inc.","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dana-Farber Cancer Institute settled potential HIPAA violations for impermissibly disclosing patient ePHI by sending patient records to an incorrect mailing address.","event_id":"e6eb4cef-362c-4811-8143-2b802df92cc4","severity_score":80},{"record_id":"ee557ece-8842-459f-bd8c-4d6a6d87fa71","source_event_group_id":"560514b7-4a6e-46ed-885f-1013e3c28c08","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Practice (not named)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR settled with a medical practice for failing to provide a patient with timely access to their medical records.","event_id":"560514b7-4a6e-46ed-885f-1013e3c28c08","severity_score":50},{"record_id":"de4076d1-5e8f-44a1-8c95-ac3b2812fe35","source_event_group_id":"8b17b100-fba7-4b8f-805b-b370824692d6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fulton County Medical Center","state":"PA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fulton County Medical Center paid a settlement for potential HIPAA violations due to failure to conduct a thorough risk analysis.","event_id":"8b17b100-fba7-4b8f-805b-b370824692d6","severity_score":65},{"record_id":"d8c60541-ace2-4798-9d5a-875dfece3e34","source_event_group_id":"3d756ada-35b9-44f4-8058-12c49a743582","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"COHEN","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"COHEN settled potential HIPAA violations for impermissibly disclosing patient ePHI during a political campaign event.","event_id":"3d756ada-35b9-44f4-8058-12c49a743582","severity_score":65},{"record_id":"c557412d-12fc-4db1-94a5-c4a2204b5f02","source_event_group_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson County Hospital District","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson County Hospital District settled potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","severity_score":50},{"record_id":"c09a0dcc-4cd5-4d0c-ad1f-0283d507829c","source_event_group_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Clinic, P.A.","state":"AR","individuals_affected":5500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fayetteville Diagnostic Clinic paid a settlement for potential HIPAA violations after a breach involving a third-party vendor exposed ePHI of 5,500 patients.","event_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","severity_score":65},{"record_id":"b4292259-9d60-4ce2-9e84-c96804c3adb4","source_event_group_id":"d6e99f7b-318b-404d-a985-1a3d9b045dfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mercy Hospital and Medical Center","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mercy Hospital and Medical Center settled potential HIPAA violations after an impermissible disclosure of ePHI due to a lack of proper safeguards.","event_id":"d6e99f7b-318b-404d-a985-1a3d9b045dfa","severity_score":50},{"record_id":"8264db1e-d633-433d-9fe8-1f5a2a4bbab8","source_event_group_id":"8de499de-e8c3-4a61-b3ce-5713d4bc066d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Associates (MRA)","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MRA settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"8de499de-e8c3-4a61-b3ce-5713d4bc066d","severity_score":55},{"record_id":"810f5f40-018c-454d-b2b4-f4e478a0981b","source_event_group_id":"9e3a36e4-699e-4af1-8105-e5259eb1006f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Attorneys' Title Insurance Fund, Inc.","state":"FL","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Attorneys' Title Insurance Fund, Inc. settled potential HIPAA violations for impermissibly disclosing the ePHI of 15,000 individuals due to a lack of proper safeguards.","event_id":"9e3a36e4-699e-4af1-8105-e5259eb1006f","severity_score":90},{"record_id":"7bf2fb64-91bd-4cd6-ba01-5763c47fa1bd","source_event_group_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Apria Healthcare Group Inc.","state":"CA","individuals_affected":99000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Apria Healthcare Group settled potential HIPAA violations for impermissibly disclosing the ePHI of 99,000 individuals due to a lack of proper safeguards.","event_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","severity_score":90},{"record_id":"6fbdd435-1834-4cca-86ed-e5a956997347","source_event_group_id":"549c3629-502a-473e-b548-2b97276de39b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Verity Health System of California, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Verity Health System settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"549c3629-502a-473e-b548-2b97276de39b","severity_score":50},{"record_id":"5dc9c9bb-6d13-4264-8fea-8d96240cca03","source_event_group_id":"9067acb4-34b7-4559-a673-9f932277283f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic and Sports Medicine","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Orthopedic and Sports Medicine settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9067acb4-34b7-4559-a673-9f932277283f","severity_score":55},{"record_id":"5a7af192-763a-492b-903f-fa895d345f60","source_event_group_id":"769577c4-8164-46ba-a40c-3a1cc4314064","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CentraCare Health","state":"MN","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CentraCare Health settled potential HIPAA violations for impermissibly disclosing the ePHI of 1,300 individuals during a marketing campaign.","event_id":"769577c4-8164-46ba-a40c-3a1cc4314064","severity_score":90},{"record_id":"5687e7f8-26c7-4443-bfb6-44a1480f84e5","source_event_group_id":"8ead20a8-baf6-416d-848a-bb9b338479dd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Steps (Texas HHS Commission)","state":"TX","individuals_affected":6600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Steps (part of Texas HHS Commission) settled potential HIPAA violations for impermissibly disclosing the ePHI of 6600 individuals.","event_id":"8ead20a8-baf6-416d-848a-bb9b338479dd","severity_score":90},{"record_id":"4aaca518-2751-443f-89b6-66886dc9838a","source_event_group_id":"dc69e692-4091-4500-950b-b46ae091e3d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southeastern Retina Associates, P.C.","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southeastern Retina Associates settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"dc69e692-4091-4500-950b-b46ae091e3d0","severity_score":65},{"record_id":"43a41647-bf28-4187-977f-a67fb04af580","source_event_group_id":"88c288c6-030b-4a7f-b5b6-1a1c378662d5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FHP Health Care","state":"GU","individuals_affected":21000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FHP Health Care settled potential HIPAA violations due to the widespread presence of unsecured patient health information on their network.","event_id":"88c288c6-030b-4a7f-b5b6-1a1c378662d5","severity_score":90},{"record_id":"364f6d6a-53ed-461f-9ec7-1c7ddd0392c6","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity Health Plan settled potential HIPAA violations after impermissibly disclosing the ePHI of 344,579 individuals by returning photocopiers without erasing data.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"2e8f2a93-ffe5-43d5-a717-883039932e67","source_event_group_id":"d253dfc7-a566-4d5d-9f15-149234aba2d8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fulton County Health Center","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fulton County Health Center paid a settlement for potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d253dfc7-a566-4d5d-9f15-149234aba2d8","severity_score":65},{"record_id":"0b88120a-3fe1-4fa1-97b1-e67c097c896c","source_event_group_id":"a68bca63-2574-4589-be93-83fb4444bc76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Griffin Hospital","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Griffin Hospital settled potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"a68bca63-2574-4589-be93-83fb4444bc76","severity_score":65},{"record_id":"07e016ce-9fc5-4e5f-8c12-2880fc25a1c5","source_event_group_id":"382c0e48-325d-44b7-a9ec-4bae71b5433c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DFW Data Breach","state":"TX","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DFW Data Breach settled potential HIPAA violations after a breach exposed the ePHI of 200,000 individuals due to a lack of proper safeguards.","event_id":"382c0e48-325d-44b7-a9ec-4bae71b5433c","severity_score":80},{"record_id":"c7c8facf-158b-4e25-8437-4b8b7b476c5b","source_event_group_id":"6039a369-196f-4391-b289-71e045b4f7ee","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kaiser Foundation Health Plan, Inc.","state":"CA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser Foundation Health Plan, Inc. settled potential HIPAA violations after a portable storage device containing the ePHI of 20,000 members went missing.","event_id":"6039a369-196f-4391-b289-71e045b4f7ee","severity_score":90},{"record_id":"4c68bd36-f56c-4643-8744-abcd23da46d7","source_event_group_id":"da9f73a1-d8b7-4263-a9db-0fb6ce59afe9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Alaska, Fairbanks","state":"AK","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Alaska, Fairbanks settled potential HIPAA violations after unencrypted PHI of 20,000 individuals was found on a publicly accessible server.","event_id":"da9f73a1-d8b7-4263-a9db-0fb6ce59afe9","severity_score":90},{"record_id":"12881355-6f93-4f88-8e85-ca44322e2980","source_event_group_id":"1924fcba-da4d-492d-a540-b1c27f1f036a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"GI Associates of Maryland, LLC","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"GI Associates of Maryland, LLC settled potential HIPAA violations after medical records containing PHI were found unsecured in a dumpster.","event_id":"1924fcba-da4d-492d-a540-b1c27f1f036a","severity_score":50},{"record_id":"f1075a15-a932-4eca-8c1b-b347edec7f03","source_event_group_id":"b1fd2213-c718-4f01-a255-9f4af32b82a9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Chicago Public Schools","state":"IL","individuals_affected":400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Chicago Public Schools settled potential HIPAA violations arising from the impermissible disclosure of protected health information (PHI) of 400 individuals.","event_id":"b1fd2213-c718-4f01-a255-9f4af32b82a9","severity_score":65},{"record_id":"cbb2836d-b1cc-460b-844c-a752569d2af5","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem, Inc. paid the largest HIPAA settlement to date for a breach that compromised the ePHI of nearly 79 million individuals.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"9cbc98b8-dfc4-4598-9412-9319cc6d89a4","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Alaska Department of Health and Social Services (ADHSS)","state":"AK","individuals_affected":17000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Alaska Department of Health and Social Services settled potential HIPAA violations after an unencrypted USB hard drive containing the ePHI of 17,000 beneficiaries was stolen.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"60a6a8f6-89a6-4569-84b8-3b1bc7001d08","source_event_group_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Trustees of Columbia University in the City of New York","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University settled potential HIPAA violations involving the impermissible disclosure of ePHI of 6,800 individuals via an internet search engine.","event_id":"61f2cea7-534c-4ede-b158-c3a6ff6e1612","severity_score":65},{"record_id":"496753b5-cfcc-4bc2-a48d-816b8dd0a39c","source_event_group_id":"68ba9329-6161-4401-936b-7621aafe343d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS/Pharmacy","state":"RI","individuals_affected":4000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS/Pharmacy settled potential HIPAA violations after improper disposal of PHI at its pharmacies, leading to unauthorized access.","event_id":"68ba9329-6161-4401-936b-7621aafe343d","severity_score":90},{"record_id":"34fd7f13-fb2c-45a6-a927-011b615a8449","source_event_group_id":"2502545a-c6be-4660-a6c0-d987bf319272","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adventist Health System dba Florida Hospital (now AdventHealth)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Adventist Health System settled potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2502545a-c6be-4660-a6c0-d987bf319272","severity_score":55},{"record_id":"34c9389f-7cb2-40b8-b302-a12c9e294078","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California at Los Angeles Health System (UCLA HS)","state":"CA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System settled potential HIPAA violations due to widespread and systemic non-compliance with HIPAA rules, including unauthorized access to patient records by employees.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"e8759e5a-ba96-4086-8fbb-b5f1b67b4db9","source_event_group_id":"b91ef71f-547b-47fb-86d7-a6d98588215e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation","state":"NC","individuals_affected":1045,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"b91ef71f-547b-47fb-86d7-a6d98588215e","severity_score":50},{"record_id":"b3a24f32-dab8-4379-962d-5fe7a10e05c0","source_event_group_id":"ffc3f92d-fc0c-4fe5-98be-538290f5d19f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation","state":"NC","individuals_affected":1397,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"ffc3f92d-fc0c-4fe5-98be-538290f5d19f","severity_score":50},{"record_id":"82395b96-e472-443e-89da-deca922ca72e","source_event_group_id":"6420a500-76e5-4e3c-865c-a8d2d764be37","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southeastern Healthcare Solutions","state":"FL","individuals_affected":2313,"breach_submission_date":"2026-06-23","enforcement_action_date":null,"summary":"","event_id":"6420a500-76e5-4e3c-865c-a8d2d764be37","severity_score":50},{"record_id":"4724a634-8409-4770-ada8-085710d93416","source_event_group_id":"83e7fa73-7de3-4970-925c-c28dd0aa3b2a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lake County Health Department and Community Health Center","state":"IL","individuals_affected":981,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"83e7fa73-7de3-4970-925c-c28dd0aa3b2a","severity_score":30},{"record_id":"c06d45f3-ee4d-4f89-b835-902e40b3017f","source_event_group_id":"70d84aae-cce7-4fec-bdde-92d9617279d7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation","state":"NC","individuals_affected":1551,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"70d84aae-cce7-4fec-bdde-92d9617279d7","severity_score":50},{"record_id":"e3df72b2-0a64-45ba-b79b-a37f233d1f08","source_event_group_id":"82f523b6-32ea-48ae-8fc4-85658420f9e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Behavioral Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Behavioral Health settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"82f523b6-32ea-48ae-8fc4-85658420f9e0","severity_score":50},{"record_id":"211b6f21-98ba-44fc-932f-ca934ad03622","source_event_group_id":"c2e70298-3516-4dfa-8d58-5e8da637b514","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mid-Michigan Physicians, P.C.","state":"MI","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mid-Michigan Physicians settled potential HIPAA violations after a breach of unsecured ePHI affecting 15,000 individuals due to a ransomware attack and insufficient security measures.","event_id":"c2e70298-3516-4dfa-8d58-5e8da637b514","severity_score":50},{"record_id":"ded61089-99a5-474d-8cb2-3ac61cc81d84","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee","state":"TN","individuals_affected":1023274,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled potential HIPAA violations related to a breach of unsecured ePHI affecting over 1 million individuals after 57 unencrypted hard drives were stolen.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"d97a2e2c-2567-4925-a8b2-786849a337f4","source_event_group_id":"978b5d11-c69d-4858-8ee5-ee6507493995","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical Services","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical Services settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"978b5d11-c69d-4858-8ee5-ee6507493995","severity_score":50},{"record_id":"c972a8eb-601b-459f-84b6-985759e6d813","source_event_group_id":"ba9c3118-f84e-4bac-9dbd-705a58b4bb87","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fountain Valley Regional Hospital and Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fountain Valley Regional Hospital settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"ba9c3118-f84e-4bac-9dbd-705a58b4bb87","severity_score":50},{"record_id":"c869790c-2c74-42be-9ec3-53593a2deebd","source_event_group_id":"975c897c-c6b8-49fc-acfe-26225049632f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Spine & Sports Medicine","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Spine & Sports Medicine settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"975c897c-c6b8-49fc-acfe-26225049632f","severity_score":50},{"record_id":"c0b78c28-bbb3-4f90-bd06-4536407b5fdf","source_event_group_id":"11e17a85-50f0-4004-96be-898564895a0a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touro University Nevada","state":"NV","individuals_affected":1012,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Touro University Nevada settled potential HIPAA violations after a breach of unsecured ePHI affecting 1,012 individuals when student information was accidentally posted online.","event_id":"11e17a85-50f0-4004-96be-898564895a0a","severity_score":50},{"record_id":"b3144456-d063-45e7-97b3-5fd3b56f1998","source_event_group_id":"2889715e-1da3-4b77-9aa5-a4cc8547818a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fidelis Care","state":"NY","individuals_affected":87500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fidelis Care settled potential HIPAA violations after a breach of unsecured ePHI affecting 87,500 individuals. Misconfigured server allowed search engines to index files containing PHI.","event_id":"2889715e-1da3-4b77-9aa5-a4cc8547818a","severity_score":90},{"record_id":"a5eb2472-151f-439b-8654-beb8694e335b","source_event_group_id":"bd4c7115-04ef-4bb2-8c8f-86fe994e1cef","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Oncology and Hematology Associates of SW VA, P.C.","state":"VA","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Oncology and Hematology Associates settled potential HIPAA violations after a breach of unsecured ePHI affecting 12,000 individuals due to a ransomware attack and insufficient security measures.","event_id":"bd4c7115-04ef-4bb2-8c8f-86fe994e1cef","severity_score":50},{"record_id":"93390e07-5f38-4dd1-aedf-868927adec03","source_event_group_id":"c72dfc17-2c2c-45fd-a67a-5454f706170e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Family Physicians, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Family Physicians settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"c72dfc17-2c2c-45fd-a67a-5454f706170e","severity_score":50},{"record_id":"8c10fa8c-caa8-4188-b9c5-473ad3cd5ca0","source_event_group_id":"b97ebac4-24c0-42ec-be2f-a66dbbeabb45","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Associates of North Texas","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Associates of North Texas settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"b97ebac4-24c0-42ec-be2f-a66dbbeabb45","severity_score":50},{"record_id":"7ed0c072-e295-4c27-b298-0a66fd4da2d0","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (dba Access Family Health Services)","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"6eb58d29-d27b-4405-93ff-2e9808ba964e","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s Hospital & Medical Center of Omaha","state":"NE","individuals_affected":1600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children’s Hospital & Medical Center of Omaha settled potential HIPAA violations after a breach of unsecured ePHI affecting 1,600 individuals due to an unencrypted laptop.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"6b2ec8ea-46b4-498b-b8d4-f675e6afb81e","source_event_group_id":"6fa25027-1dbc-445e-82c7-637650fed90f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Family Services","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Family Services settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"6fa25027-1dbc-445e-82c7-637650fed90f","severity_score":50},{"record_id":"589eb8c1-57e2-475f-bfc2-4d680998a751","source_event_group_id":"38b7ec41-c17f-472b-ab7e-c0877c438916","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayette County Memorial Hospital","state":"OH","individuals_affected":400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fayette County Memorial Hospital settled potential HIPAA violations for impermissibly disclosing PHI to a business associate without a business associate agreement, affecting 400 individuals.","event_id":"38b7ec41-c17f-472b-ab7e-c0877c438916","severity_score":65},{"record_id":"4c927ae7-c908-4c1a-94e0-651bee525924","source_event_group_id":"b3028e6c-7a37-4532-91bb-1e2aad509f1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Dermatologic Surgery","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Dermatologic Surgery settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"b3028e6c-7a37-4532-91bb-1e2aad509f1f","severity_score":50},{"record_id":"43406619-52ad-4955-b1e1-e01303c39c10","source_event_group_id":"1d66243d-9041-42c6-8545-8613dae7a673","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathways Community Behavioral Health, Inc.","state":"MO","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathways Community Behavioral Health, Inc. settled potential HIPAA violations after a data breach affecting 15,000 individuals due to ransomware and a lack of proper security measures.","event_id":"1d66243d-9041-42c6-8545-8613dae7a673","severity_score":65},{"record_id":"28898ee8-8be8-45f0-85fa-c9e357c1f9bd","source_event_group_id":"6dbd8bab-0597-45a6-b1a2-178623c6d3fa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DTSA, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DTSA, P.A. settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"6dbd8bab-0597-45a6-b1a2-178623c6d3fa","severity_score":50},{"record_id":"1fc20846-fc5b-4bc0-84d8-b9825a5974fe","source_event_group_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Cardiovascular Associates","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Cardiovascular Associates settled potential HIPAA violations for failing to provide timely access to medical records to a patient. The patient waited several months to receive records.","event_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","severity_score":50},{"record_id":"f9138e08-268c-478f-8043-c1bfdd65dfbc","source_event_group_id":"f21fd787-76b5-463a-a00f-df371728db3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Imaging, LLC","state":"MA","individuals_affected":602,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Imaging settled potential HIPAA violations for disclosing the PHI of 602 individuals to a business associate without a business associate agreement. The disclosure occurred over several years.","event_id":"f21fd787-76b5-463a-a00f-df371728db3c","severity_score":65},{"record_id":"f0e1099c-4e72-425d-8f42-f5bd32a57e57","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (dba Massachusetts General Hospital)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital settled potential HIPAA violations for $1,000,000. The impermissible disclosure occurred when patient information was left in a public area.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"f0126a42-90ac-42c9-b9a0-b096123b6cb5","source_event_group_id":"78eadefd-eeda-4366-a63f-7bcd45b3e191","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hospice of Michigan","state":"MI","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Hospice of Michigan settled potential HIPAA violations for $50,000. Unencrypted laptop computers containing ePHI were stolen from an employee's car.","event_id":"78eadefd-eeda-4366-a63f-7bcd45b3e191","severity_score":50},{"record_id":"d480ab76-c995-4385-bbe2-326433213507","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George's County, MD","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health was issued a CMP for violations of HIPAA Privacy Rule, including failing to provide patients with access to their medical records and failing to cooperate with OCR's investigation.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"b0df2b40-dde9-4663-a3a7-74ba2615ab00","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco (UCSF)","state":"CA","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF settled potential HIPAA violations for $4,300,000. Multiple security incidents led to the impermissible disclosure of ePHI, including unencrypted devices and a server vulnerability.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":90},{"record_id":"8473ecc9-2c72-4cae-9039-ae80c39413ce","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee (BCBST)","state":"TN","individuals_affected":1023209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled potential HIPAA violations for $1,500,000. The case involved the theft of 57 unencrypted hard drives containing the ePHI of 1 million individuals.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"84411f55-9144-4361-92df-4094118a99c5","source_event_group_id":"5e7b1e5c-be2d-4a9b-9ddf-85c0caadd48c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Emergency Medical Services (EMS)","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County EMS settled potential HIPAA violations for $215,000. An unencrypted laptop containing the ePHI of 1581 individuals was stolen from an employee's car.","event_id":"5e7b1e5c-be2d-4a9b-9ddf-85c0caadd48c","severity_score":65},{"record_id":"34e92fac-2221-44cf-9f19-cd5478904835","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, PC","state":"MA","individuals_affected":24354,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Adult & Pediatric Dermatology, PC settled potential HIPAA violations for $150,000. The case involved the impermissible disclosure of PHI when unencrypted backup tapes were stolen from an employee's car.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"110d9fc5-32fc-4af4-a165-be3a516176e5","source_event_group_id":"e24f3fbd-a7a7-487b-87e4-2f966c5f3ac1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CareFirst BlueCross BlueShield","state":"MD","individuals_affected":63400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CareFirst BlueCross BlueShield settled potential HIPAA violations for $1,200,000. The case involved the theft of an unencrypted laptop from an employee's car containing ePHI of 63,400 individuals.","event_id":"e24f3fbd-a7a7-487b-87e4-2f966c5f3ac1","severity_score":90},{"record_id":"297c776b-2f20-4ecf-b028-b251aff7e26e","source_event_group_id":"df6c01c7-3154-41c4-9ef1-bea52157c02c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Quantum Health","state":"OH","individuals_affected":2104,"breach_submission_date":"2026-07-29","enforcement_action_date":null,"summary":"","event_id":"df6c01c7-3154-41c4-9ef1-bea52157c02c","severity_score":50},{"record_id":"eb46a9b8-a0e2-4c0d-9c21-72beffa8d783","source_event_group_id":"cf228c7e-fb13-459c-8e20-0d4fd1b94eb3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Associated Endocrinologists","state":"MI","individuals_affected":4979,"breach_submission_date":"2026-07-29","enforcement_action_date":null,"summary":"","event_id":"cf228c7e-fb13-459c-8e20-0d4fd1b94eb3","severity_score":50},{"record_id":"aea3cd57-c248-4052-bef9-a1b1936d66aa","source_event_group_id":"c2beab4b-5419-4a8a-91f1-3ef38990c09b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pennsylvanie Dermatology Partners","state":"MD","individuals_affected":500,"breach_submission_date":"2026-07-30","enforcement_action_date":null,"summary":"","event_id":"c2beab4b-5419-4a8a-91f1-3ef38990c09b","severity_score":30},{"record_id":"1a484745-b172-4366-b05f-7de316c1fd59","source_event_group_id":"e173601d-152a-4316-9ddf-9aba1d27cee5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Monongalia County General Hospital Company","state":"WV","individuals_affected":2173,"breach_submission_date":"2026-07-31","enforcement_action_date":null,"summary":"","event_id":"e173601d-152a-4316-9ddf-9aba1d27cee5","severity_score":50},{"record_id":"ca8f1b77-7e12-4d04-a145-ad1df66edb1b","source_event_group_id":"283ced5b-e87d-446a-8051-1390ca6ed4be","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alta Orthopaedics Medical Group, Inc.","state":"PA","individuals_affected":24496,"breach_submission_date":"2026-07-03","enforcement_action_date":null,"summary":"","event_id":"283ced5b-e87d-446a-8051-1390ca6ed4be","severity_score":70},{"record_id":"ac1d387c-18b0-4999-8493-12a253fd0da0","source_event_group_id":"fe4dd88b-252d-48be-892f-c9b81cff6ab6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Suntree Internal Medicine","state":"FL","individuals_affected":9810,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"fe4dd88b-252d-48be-892f-c9b81cff6ab6","severity_score":50},{"record_id":"2b16f9ed-79fc-47c3-a12d-30b759149510","source_event_group_id":"02e469bb-17d1-46a0-ac2d-1e6fb2fd1c31","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minnesota Health Insurance Network","state":"MN","individuals_affected":3656,"breach_submission_date":"2026-07-19","enforcement_action_date":null,"summary":"","event_id":"02e469bb-17d1-46a0-ac2d-1e6fb2fd1c31","severity_score":50},{"record_id":"880cff6f-fd98-45df-b1de-060430a44b12","source_event_group_id":"87b105ce-4120-4e21-be8c-c96df571fb81","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kentucky Mountain Health Alliance","state":"KY","individuals_affected":30830,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"87b105ce-4120-4e21-be8c-c96df571fb81","severity_score":70},{"record_id":"620d195a-2a44-43ab-9b0d-b5982d791f70","source_event_group_id":"441c1505-20df-47e9-a38a-d6f38b70a1bf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CareCloud, Inc.","state":"NJ","individuals_affected":3371508,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"441c1505-20df-47e9-a38a-d6f38b70a1bf","severity_score":95},{"record_id":"d6642572-6579-4008-91f8-b9d5fb6fd941","source_event_group_id":"4a055685-d85c-4d97-8a79-02849a475cfb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Resource Center of Dallas, Inc.","state":"TX","individuals_affected":12490,"breach_submission_date":"2026-07-15","enforcement_action_date":null,"summary":"","event_id":"4a055685-d85c-4d97-8a79-02849a475cfb","severity_score":70},{"record_id":"1e8a8b87-8b19-4b47-8408-b9c0ab8aac48","source_event_group_id":"7f4f8c2d-2151-44f1-89b0-57df7e1798a3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SKR Group, Inc.","state":"MN","individuals_affected":1718,"breach_submission_date":"2026-06-26","enforcement_action_date":null,"summary":"","event_id":"7f4f8c2d-2151-44f1-89b0-57df7e1798a3","severity_score":50},{"record_id":"9886f982-514b-4739-920b-3872fc5634b2","source_event_group_id":"ee8cafc0-3999-45e5-a828-e26c291ef6c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Risk Program Administrators LLC","state":"CA","individuals_affected":8309,"breach_submission_date":"2026-07-23","enforcement_action_date":null,"summary":"","event_id":"ee8cafc0-3999-45e5-a828-e26c291ef6c7","severity_score":50},{"record_id":"dbe5d056-574a-4011-b9ad-b942bf78f29d","source_event_group_id":"794eab9b-2e62-4a64-a286-c3e5d1a7feee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Brookhaven ENT Allergy and Facial Surgery","state":"MS","individuals_affected":30403,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"794eab9b-2e62-4a64-a286-c3e5d1a7feee","severity_score":70},{"record_id":"5af5f591-02b0-4ec5-956e-e5f04c9070f1","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services paid $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"f3748610-b2ca-4ec2-9e4e-c4c99d20491a","source_event_group_id":"c7caa48c-753a-4cbf-8dc9-7add5c0f4eed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Academic Medical Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Academic Medical Center paid $3.0 million to settle potential HIPAA violations after an employee's email account was compromised, exposing PHI.","event_id":"c7caa48c-753a-4cbf-8dc9-7add5c0f4eed","severity_score":90},{"record_id":"daca909c-a47d-4bc9-a1df-e88e0eb48b59","source_event_group_id":"8e9ac8c0-7954-444c-8445-33464fe2a8e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Family Eye Care","state":"AL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Family Eye Care paid $25,000 to settle potential HIPAA violations for failing to provide a patient with access to their medical records.","event_id":"8e9ac8c0-7954-444c-8445-33464fe2a8e0","severity_score":50},{"record_id":"d3eafc04-8102-422f-bc06-8ae957a7407a","source_event_group_id":"47f13754-0ff5-4cc7-bf73-84768656d030","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Dental Group","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Dental Group paid $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"47f13754-0ff5-4cc7-bf73-84768656d030","severity_score":50},{"record_id":"b0cfc02c-a631-49c1-b2cf-cf8683086b2a","source_event_group_id":"673acf30-a768-403e-b120-63f112f73f61","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aliron International, Inc.","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aliron International, Inc. paid $750,000 to settle potential HIPAA violations after a security incident exposed employee and patient information.","event_id":"673acf30-a768-403e-b120-63f112f73f61","severity_score":80},{"record_id":"a92ecd10-2a63-4b93-b512-8b8d7f054e8c","source_event_group_id":"b1923d51-b2bf-4316-9f13-032bbc968f0a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians' Specialty Group, P.C.","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Physicians' Specialty Group, P.C. paid $100,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"b1923d51-b2bf-4316-9f13-032bbc968f0a","severity_score":50},{"record_id":"8ae6dc55-df25-45ec-a5a7-7709cff3b503","source_event_group_id":"ca359986-f177-40ec-bd32-25993fc078b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Imaging, LLC","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Imaging, LLC paid $10,000 to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"ca359986-f177-40ec-bd32-25993fc078b8","severity_score":50},{"record_id":"85b9273b-564f-4879-a8ca-dbf059aaa9c5","source_event_group_id":"1e5c853c-9f91-46a4-ab92-f26dd185381b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Morton Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Morton Hospital paid $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1e5c853c-9f91-46a4-ab92-f26dd185381b","severity_score":50},{"record_id":"77c278a0-9385-4b90-8557-a9c9d82fbd6e","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Philip Igbinadolor, DMD & Associates","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Philip Igbinadolor, DMD & Associates paid $50,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"49e6a2b9-3d1f-4b69-8b9d-b8e323bec5e1","source_event_group_id":"d52e027e-8205-448e-a03f-5c0a0e520777","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Business Associate (name not publicly disclosed in settlement summary)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A business associate paid $2.15 million to settle potential HIPAA violations after a data breach affecting over 3 million individuals.","event_id":"d52e027e-8205-448e-a03f-5c0a0e520777","severity_score":90},{"record_id":"335f13f2-b3ad-404f-8ac5-27d97a606156","source_event_group_id":"d112d0a1-5804-4738-91f3-adf81cf5d495","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Page d/b/a A Plus Home Health Care","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Page d/b/a A Plus Home Health Care paid $100,000 for failing to produce patient medical records when requested by OCR.","event_id":"d112d0a1-5804-4738-91f3-adf81cf5d495","severity_score":50},{"record_id":"23e40947-cc19-4b5a-9cf9-4c33c28ade66","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPFRE Life Insurance Company paid an additional $2.2 million (total $4.4M from two actions) for continuing non-compliance after its initial breach.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"19137dd2-c92d-4b66-bfa8-a6bb67d5f395","source_event_group_id":"d50734bf-758d-4417-933e-f79536be8b15","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Community Health Center","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Community Health Center paid $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d50734bf-758d-4417-933e-f79536be8b15","severity_score":50},{"record_id":"17f028eb-8f12-41d5-9268-1ce29d1d3eea","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCDH paid $31,000 to settle potential HIPAA violations after failing to have a business associate agreement in place with its EHR vendor.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"b64ab803-22bb-44db-9b22-02f0b064652b","source_event_group_id":"7ea2397b-6ed4-4d2d-b0fa-25941b5d163c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Permanente Medical Group, Inc. (TPMG)","state":"CA","individuals_affected":13912,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Permanente Medical Group settled potential HIPAA violations after an unencrypted USB drive containing ePHI was lost. This case emphasized the importance of encrypting portable media.","event_id":"7ea2397b-6ed4-4d2d-b0fa-25941b5d163c","severity_score":65},{"record_id":"b4b37a9a-c0ec-4c1b-9708-a945f572f333","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital and Columbia University","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York-Presbyterian Hospital and Columbia University settled for HIPAA violations after patient information was inadvertently posted online. This case highlighted the importance of robust data security.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"9f0e1cc7-0e55-4469-a9ab-a71f45e9eb30","source_event_group_id":"dc96eb7d-dbc9-4321-b2e0-ef33a989be10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cornell University","state":"NY","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cornell University settled HIPAA violations after its computer network was breached, exposing ePHI. This case highlighted the importance of network security.","event_id":"dc96eb7d-dbc9-4321-b2e0-ef33a989be10","severity_score":65},{"record_id":"9736e1c9-55a6-4c6c-b868-b8a91f5d7e29","source_event_group_id":"08592ba2-69b5-4b3c-92b4-1184a9227faa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sacred Heart Hospital","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sacred Heart Hospital settled potential HIPAA violations for impermissible disclosures of PHI to the media. The incident involved disclosures about a patient's condition without authorization.","event_id":"08592ba2-69b5-4b3c-92b4-1184a9227faa","severity_score":80},{"record_id":"9481967b-284e-412a-b34d-f5545347647c","source_event_group_id":"132b099d-ec8a-4c81-802f-6f16e2ca98f5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Medical, Inc. d/b/a Renue Physical Therapy","state":"MI","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Medical settled HIPAA violations after patient information was impermissibly disclosed. This case highlighted the need for proper handling of patient data in small practices.","event_id":"132b099d-ec8a-4c81-802f-6f16e2ca98f5","severity_score":50},{"record_id":"92bf965b-476e-4f7f-b629-0600782bb309","source_event_group_id":"95287bd4-01e7-4186-a5bb-ecb3a6da9499","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regency Health of Port St. Lucie","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Regency Health of Port St. Lucie settled HIPAA violations regarding the impermissible disclosure of patient information. The incident involved the disclosure of a patient's name and condition.","event_id":"95287bd4-01e7-4186-a5bb-ecb3a6da9499","severity_score":50},{"record_id":"7b199864-840a-40a4-ae3c-9a499db3d36e","source_event_group_id":"287099e4-8c80-4993-8cf0-1d6776265bd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona Medical Board","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Arizona Medical Board settled potential HIPAA violations after publicly disclosing patient records on its website. This case underscored the need for careful review of online postings.","event_id":"287099e4-8c80-4993-8cf0-1d6776265bd8","severity_score":50},{"record_id":"2f3c92b6-cdfc-4ba3-bdcc-f36c7da7d7dc","source_event_group_id":"9ddfe279-a0c1-4d25-a832-bd7980f0bc1c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Chicago, Illinois, Department of Streets and Sanitation","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Chicago Department of Streets and Sanitation settled for impermissible disclosure of PHI. This incident involved the release of medical information in a public record.","event_id":"9ddfe279-a0c1-4d25-a832-bd7980f0bc1c","severity_score":50},{"record_id":"21227232-aae3-4492-ac85-764d19b7ba65","source_event_group_id":"11435022-c3c7-4481-90a3-5abd35906592","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York City Health and Hospitals Corporation","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York City Health and Hospitals Corporation settled potential HIPAA violations for impermissible disclosures of PHI. This case highlighted the need for proper handling of patient information in a large hospital system.","event_id":"11435022-c3c7-4481-90a3-5abd35906592","severity_score":80},{"record_id":"c7a38fd8-36df-40e8-97b2-a8f04a9b0806","source_event_group_id":"4b98ebdf-5597-4f5f-9e7a-0c0eb7aa7fc5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northeast Professional Caregivers","state":"OH","individuals_affected":500,"breach_submission_date":"2026-06-22","enforcement_action_date":null,"summary":"","event_id":"4b98ebdf-5597-4f5f-9e7a-0c0eb7aa7fc5","severity_score":30},{"record_id":"c62ba270-66ae-43d7-99c2-e34fca6c3dc4","source_event_group_id":"e9abe289-6260-4dfe-b8db-286d8430376a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Beltrami County Health and Human Services","state":"MN","individuals_affected":1491,"breach_submission_date":"2026-07-20","enforcement_action_date":null,"summary":"","event_id":"e9abe289-6260-4dfe-b8db-286d8430376a","severity_score":50},{"record_id":"afe4ccaf-dc81-4bd3-8eb8-987005dc150a","source_event_group_id":"ce1cb82a-c0c6-4de2-ad79-c1a7cb889e75","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SunCloud Health","state":"IL","individuals_affected":2594,"breach_submission_date":"2026-07-23","enforcement_action_date":null,"summary":"","event_id":"ce1cb82a-c0c6-4de2-ad79-c1a7cb889e75","severity_score":50},{"record_id":"11189b4c-21ae-44cd-8f0d-1bfd7ed2c13a","source_event_group_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"One Medical Group, Inc.","state":"CA","individuals_affected":153174,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","severity_score":85},{"record_id":"a6c41c97-c166-44e5-b4ad-58710a60a68f","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering (MIE)","state":"IN","individuals_affected":3908092,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MIE settled potential HIPAA violations after a data breach exposed the ePHI of over 3.9 million individuals, resulting from a cyber-attack on their electronic health record system.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":90},{"record_id":"76da38fb-7033-4650-a686-8fb3c90f10e5","source_event_group_id":"615e24a8-b993-4737-9f03-7899edb354cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brigham and Women's Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brigham and Women's Hospital settled potential HIPAA violations for impermissibly disclosing PHI of a patient to a public figure's assistant, despite lacking proper authorization.","event_id":"615e24a8-b993-4737-9f03-7899edb354cf","severity_score":65},{"record_id":"ebdd1702-bee1-4322-8f90-c8c581b993a6","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee (BCBST)","state":"TN","individuals_affected":1023274,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled potential HIPAA violations after 57 unencrypted computer hard drives containing the PHI of over 1 million individuals were stolen from a leased facility.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"e1cb57e1-5aa5-4c61-b18a-5232087b4196","source_event_group_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Dental Practice","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Dental Practice settled potential HIPAA violations for failing to provide a patient with a copy of their medical record within 30 days.","event_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","severity_score":50},{"record_id":"e2ef3315-c852-49a3-afe1-94bc8ad33688","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco","state":"CA","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF Medical Center paid $2.9 million for multiple HIPAA violations related to inadequate safeguards of electronic protected health information.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":90},{"record_id":"cf605626-0748-49ea-8eee-29436594f840","source_event_group_id":"3b4fc853-0148-4ed4-89c1-63c38691f4eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"APHIS (Affiliated Physicians and Surgeons)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"APHIS paid $75000 to resolve potential HIPAA violations regarding a privacy rule complaint about impermissible disclosure of PHI.","event_id":"3b4fc853-0148-4ed4-89c1-63c38691f4eb","severity_score":50},{"record_id":"840f0caf-0a4d-4b10-9beb-b6308ad86696","source_event_group_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Department of Mental Health and Addiction Services","state":"CT","individuals_affected":1170,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connecticut Department of Mental Health and Addiction Services settled potential HIPAA violations after an impermissible disclosure of PHI occurred when patient information was posted online due to an unsecured server.","event_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","severity_score":80},{"record_id":"8d84835e-3f95-4220-b3c7-fc2734755cca","source_event_group_id":"8f13e15e-84c8-4a67-8277-7744d52c395d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Based Care of Brevard dba Family Partnerships of Central Florida","state":"FL","individuals_affected":8151,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"8f13e15e-84c8-4a67-8277-7744d52c395d","severity_score":50},{"record_id":"4261af84-54db-4552-9216-1df454d852b5","source_event_group_id":"882c48d8-1d7d-448d-af39-e9fef5fa7427","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Networking Technology, Inc.","state":"NC","individuals_affected":353844,"breach_submission_date":"2026-05-29","enforcement_action_date":null,"summary":"","event_id":"882c48d8-1d7d-448d-af39-e9fef5fa7427","severity_score":85},{"record_id":"6e3aa920-2b5d-4e44-871f-bde1f5b11466","source_event_group_id":"9b4354ac-bf13-43b0-920c-3be0330089ea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vanderbilt University Medical Center","state":"TN","individuals_affected":3298,"breach_submission_date":"2026-07-24","enforcement_action_date":null,"summary":"","event_id":"9b4354ac-bf13-43b0-920c-3be0330089ea","severity_score":50},{"record_id":"8b5c1760-8f50-4845-a1ca-4f6ae8894cf4","source_event_group_id":"aa1fde02-f92d-4391-9ee5-8e1cf3ad6241","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross Blue Shield of Minnesota","state":"MN","individuals_affected":3640,"breach_submission_date":"2026-07-21","enforcement_action_date":null,"summary":"","event_id":"aa1fde02-f92d-4391-9ee5-8e1cf3ad6241","severity_score":50},{"record_id":"6ad70795-b798-42c4-9488-b39c0d493851","source_event_group_id":"a7ced43b-698b-45ff-b050-596ac0407647","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Medical Imaging Partnership dba Precision Imaging Center","state":"FL","individuals_affected":501,"breach_submission_date":"2026-07-06","enforcement_action_date":null,"summary":"","event_id":"a7ced43b-698b-45ff-b050-596ac0407647","severity_score":30},{"record_id":"db79cc7c-41c9-4058-b7ef-d50024a3f5ea","source_event_group_id":"938ebed4-470b-47d5-84ee-76950065dd78","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SportsMed PT, LLC","state":"NJ","individuals_affected":3400,"breach_submission_date":"2026-07-07","enforcement_action_date":null,"summary":"","event_id":"938ebed4-470b-47d5-84ee-76950065dd78","severity_score":50},{"record_id":"56c3fc53-6a22-4480-8a3d-7de1ecb99ea8","source_event_group_id":"3f2516f9-937d-4e23-b1a9-f2207570f23a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Association for Neurologically Impaired Brain Injured","state":"NY","individuals_affected":1918,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"3f2516f9-937d-4e23-b1a9-f2207570f23a","severity_score":50},{"record_id":"1d6b13ba-7e5c-42a2-ba39-1dfd992e21cf","source_event_group_id":"2fbbc92a-3707-4764-9be5-730525b8d638","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DentaQuest, LLC","state":"MA","individuals_affected":15000000,"breach_submission_date":"2026-07-16","enforcement_action_date":null,"summary":"","event_id":"2fbbc92a-3707-4764-9be5-730525b8d638","severity_score":95},{"record_id":"8c0f2ae8-f19e-464a-ada2-437a86d671a9","source_event_group_id":"652b707e-e451-4c5a-adc7-032b4d5ac975","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ZenPatient, Inc.","state":"CA","individuals_affected":15749,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"652b707e-e451-4c5a-adc7-032b4d5ac975","severity_score":70},{"record_id":"32cef5d8-4980-47c6-896b-e8a42c2b11c3","source_event_group_id":"0202f429-0e25-41b7-85ec-ded168aa547d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kubota Tractor Corporation Employee Welfare Benefit Plan","state":"TX","individuals_affected":5891,"breach_submission_date":"2026-06-30","enforcement_action_date":null,"summary":"","event_id":"0202f429-0e25-41b7-85ec-ded168aa547d","severity_score":50},{"record_id":"076e03fc-7587-4128-82b2-41bd3f51824a","source_event_group_id":"253b3983-ace3-4102-baf4-7ff5529144d4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heart Care Centers of Illinois","state":"IL","individuals_affected":52562,"breach_submission_date":"2026-07-10","enforcement_action_date":null,"summary":"","event_id":"253b3983-ace3-4102-baf4-7ff5529144d4","severity_score":70},{"record_id":"fce43ed2-55d1-410b-b22a-62c07a1c820b","source_event_group_id":"5d852ef6-d9bc-4f4a-a902-9b8eca61bea9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Medical Imaging, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete Medical Imaging, LLC settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"5d852ef6-d9bc-4f4a-a902-9b8eca61bea9","severity_score":50},{"record_id":"9cc23929-9fde-4383-87f6-b17be65f4bd7","source_event_group_id":"2a75aaf6-2612-44e1-a561-218f4d122b8c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Surgical Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Surgical Associates settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"2a75aaf6-2612-44e1-a561-218f4d122b8c","severity_score":50},{"record_id":"289812ed-f675-4482-b3ad-a2b5e75e8985","source_event_group_id":"0c2dd46b-f096-43ec-baf7-f32198b51b74","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Steven D. Silverstein","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Silverstein settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"0c2dd46b-f096-43ec-baf7-f32198b51b74","severity_score":50},{"record_id":"19cd357e-149e-4065-a39b-737b106f5da8","source_event_group_id":"e4a65c02-f75d-4c67-9ddd-781096468bf5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Donald S. Greif","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Greif settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e4a65c02-f75d-4c67-9ddd-781096468bf5","severity_score":50},{"record_id":"182b03ed-77e2-4112-af93-028d84f546e2","source_event_group_id":"f976f775-f07b-4208-ac27-52a125f500f4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Uche U. Emeruem","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Emeruem settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"f976f775-f07b-4208-ac27-52a125f500f4","severity_score":50},{"record_id":"0688ce31-16bb-4af3-9944-4cd3127ab2b3","source_event_group_id":"884b3b5e-d7f7-4dd6-a719-4d32056dafdf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"David M. Cohen, D.D.S. P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Cohen settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"884b3b5e-d7f7-4dd6-a719-4d32056dafdf","severity_score":50},{"record_id":"ffb13201-4275-49cc-bdc8-240aadacb7c5","source_event_group_id":"78fe8054-65ef-45b9-a3e9-2f375b839394","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Okon","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Okon settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"78fe8054-65ef-45b9-a3e9-2f375b839394","severity_score":50},{"record_id":"fbd3ae6f-500c-4593-bf38-9fbdce85e1ed","source_event_group_id":"2083a65d-9def-4225-b2bb-85434744a797","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Andrew W. Pastewka","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Pastewka settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"2083a65d-9def-4225-b2bb-85434744a797","severity_score":50},{"record_id":"f9503886-d145-4948-807b-1b0da256d1f4","source_event_group_id":"a4bc8c8e-661b-400f-a5e9-a745b4d83caf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bausch Health US LLC","state":"NJ","individuals_affected":52993,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bausch Health US LLC settled potential HIPAA violations after an impermissible disclosure of the PHI of 52,993 patients due to a ransomware attack.","event_id":"a4bc8c8e-661b-400f-a5e9-a745b4d83caf","severity_score":80},{"record_id":"b00bd772-89d8-48d1-8777-98f441a0486e","source_event_group_id":"0aa2c68c-7aac-4791-88a8-9a7bc103b58e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Peter Chu","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Chu settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"0aa2c68c-7aac-4791-88a8-9a7bc103b58e","severity_score":50},{"record_id":"a48784c5-6fe4-4cd1-8c84-7478a376a9d8","source_event_group_id":"cef84ff8-5490-41de-b999-462f9680ea98","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Eggebrecht","state":"NE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Eggebrecht settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"cef84ff8-5490-41de-b999-462f9680ea98","severity_score":50},{"record_id":"965279d4-e51c-4fb2-9b61-c95449ea6209","source_event_group_id":"b4f5901b-8102-47c7-98a0-172996c6d5ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert P. Perlman","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Perlman settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"b4f5901b-8102-47c7-98a0-172996c6d5ec","severity_score":50},{"record_id":"74e0b2f5-faf2-4880-b88d-7d6462f4f493","source_event_group_id":"e0fbd4a5-effe-49bd-8410-83a99a404b65","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Carmen Brown","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brown settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e0fbd4a5-effe-49bd-8410-83a99a404b65","severity_score":50},{"record_id":"51e00594-4c9f-4af2-94c2-cf437490bf91","source_event_group_id":"439825df-854f-40e8-9cdc-b9899a0f1e78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Moxley Family Care, dba Vance Family Medicine","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Moxley Family Care settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"439825df-854f-40e8-9cdc-b9899a0f1e78","severity_score":50},{"record_id":"41e56ca1-daed-4070-b6e4-16c1d092e2c2","source_event_group_id":"b76a70f0-515a-4aca-a5ae-b47f7e24f552","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Orthopaedic Institute","state":"FL","individuals_affected":19222,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Orthopaedic Institute settled potential HIPAA violations after an impermissible disclosure of the PHI of 19,222 patients due to a phishing attack.","event_id":"b76a70f0-515a-4aca-a5ae-b47f7e24f552","severity_score":80},{"record_id":"41c22493-909f-4732-813e-62574311c3e2","source_event_group_id":"0be68093-a40f-4926-b517-ecd128318b49","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ACP (Advance Care Partners)","state":"NY","individuals_affected":835,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACP settled potential HIPAA violations after an impermissible disclosure of the PHI of 835 patients to a third-party vendor without a business associate agreement.","event_id":"0be68093-a40f-4926-b517-ecd128318b49","severity_score":65},{"record_id":"3db129ac-8edb-42fa-905d-c6dcfdc0a9d3","source_event_group_id":"47f13754-0ff5-4cc7-bf73-84768656d030","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brighton Family Dental Group","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brighton Family Dental Group settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"47f13754-0ff5-4cc7-bf73-84768656d030","severity_score":50},{"record_id":"386c99b2-e454-4795-ad17-0533b93aa1ab","source_event_group_id":"5e4425d7-0d34-4ecb-b8b5-00d5e782bac6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peach Tree Community Health Center","state":"CA","individuals_affected":1800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peach Tree Community Health Center settled potential HIPAA violations for impermissibly disclosing the PHI of 1,800 patients to a bulk email vendor without a business associate agreement.","event_id":"5e4425d7-0d34-4ecb-b8b5-00d5e782bac6","severity_score":50},{"record_id":"37f72042-86db-4234-a404-f37fe9c8d2ea","source_event_group_id":"f29775d3-d468-4130-bd00-22c6e49a4a19","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes, Endocrinology & Nutrition Center (DENC)","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DENC settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"f29775d3-d468-4130-bd00-22c6e49a4a19","severity_score":50},{"record_id":"1dbcb63e-284a-4e25-a39b-0d03b5971725","source_event_group_id":"03bf503c-7310-4548-9c29-16b9c230d88b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Department of Behavioral Health and Developmental Disabilities","state":"GA","individuals_affected":12500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Georgia Department of Behavioral Health and Developmental Disabilities settled potential HIPAA violations after an impermissible disclosure of the PHI of 12,500 patients on the internet.","event_id":"03bf503c-7310-4548-9c29-16b9c230d88b","severity_score":65},{"record_id":"1a2ebeae-68c0-428d-8129-1114ab2f6c38","source_event_group_id":"e518ca10-5e58-4800-823e-2d869e0807da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CMRI (formerly Children's Medical Research Institute)","state":"OK","individuals_affected":1079,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CMRI settled potential HIPAA violations after impermissibly disclosing the PHI of 1,079 patients by mailing labels that exposed genetic disorder information.","event_id":"e518ca10-5e58-4800-823e-2d869e0807da","severity_score":50},{"record_id":"10d4e088-e4d4-4e31-90ee-038ff6ac198f","source_event_group_id":"cf127ab1-8cd4-4f84-8be3-728c492e6a76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hill Country Memorial Hospital","state":"TX","individuals_affected":1289,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hill Country Memorial Hospital settled potential HIPAA violations after an impermissible disclosure of the PHI of 1,289 patients on a publicly accessible server.","event_id":"cf127ab1-8cd4-4f84-8be3-728c492e6a76","severity_score":80},{"record_id":"0e3703dd-83ad-408b-a35a-2fabfa8e55c9","source_event_group_id":"7e568bd6-3ab6-4651-8288-42a0e81a6272","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Daniel Melamed","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Melamed settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"7e568bd6-3ab6-4651-8288-42a0e81a6272","severity_score":50},{"record_id":"0d2b3b6c-6db0-498f-b5b3-b81f4367233e","source_event_group_id":"a7621748-9145-40c1-862f-5e6521c4eff9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Scott and Dr. Peter J. Samson","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Drs. Scott and Samson settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"a7621748-9145-40c1-862f-5e6521c4eff9","severity_score":50},{"record_id":"0ce415ec-55a1-46ba-a37a-a36b98b259ac","source_event_group_id":"d58d1571-14c2-47bb-9261-bf398f822e37","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors of Women, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors of Women, LLC settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"d58d1571-14c2-47bb-9261-bf398f822e37","severity_score":50},{"record_id":"f233dc3b-0bc8-4a93-a0e4-8e426cc8f525","source_event_group_id":"424c8951-d72d-4411-bb33-1ac6104f486c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Summitview Medical","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Summitview Medical settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"424c8951-d72d-4411-bb33-1ac6104f486c","severity_score":50},{"record_id":"f0a1cac7-8b53-4e1e-8ce7-c23ee35e342e","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, dba AEON Clinical Laboratories","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"ea470632-c71c-4c49-a6d7-4ffa25dfd2a5","source_event_group_id":"e89e2aee-ff7f-4c56-9119-e54572dcce2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Corinthian Medical, PC","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corinthian Medical settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e89e2aee-ff7f-4c56-9119-e54572dcce2e","severity_score":50},{"record_id":"e72c46bd-7ef2-4cca-8302-6f8cd35b9b55","source_event_group_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Florida Cancer Center","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Florida Cancer Center settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","severity_score":50},{"record_id":"d9626b53-b061-4914-8d8a-7b7afe695f71","source_event_group_id":"a9344b9f-144f-49cc-9573-c802c7519186","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Litwa","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Litwa settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"a9344b9f-144f-49cc-9573-c802c7519186","severity_score":50},{"record_id":"d612b102-d871-474a-963a-a5ddbb54e37c","source_event_group_id":"82818780-8fbe-4ba6-900e-13a47e54ebc9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B. Brian Mathew, M.D., P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mathew settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"82818780-8fbe-4ba6-900e-13a47e54ebc9","severity_score":50},{"record_id":"cf5c9b62-e4c2-4d71-892e-cb177f6a52be","source_event_group_id":"492d38ea-023a-4e01-8882-2af618249061","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Michael D. Spear, D.D.S.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Spear settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"492d38ea-023a-4e01-8882-2af618249061","severity_score":50},{"record_id":"ca9c0859-621c-4aba-8a8e-d353aed15255","source_event_group_id":"3f490b87-1138-4790-96e9-1f605e85e9b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Patel's PC","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Patel's PC settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"3f490b87-1138-4790-96e9-1f605e85e9b0","severity_score":50},{"record_id":"b89f4fab-ebac-42a8-9b16-b0c3991543f4","source_event_group_id":"9bece4f0-d185-4975-b713-63cd5a148b86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Brockley","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brockley settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"9bece4f0-d185-4975-b713-63cd5a148b86","severity_score":50},{"record_id":"b49b2cca-a398-4326-be65-03e30e7c8068","source_event_group_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Plastic Surgery","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Plastic Surgery settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","severity_score":50},{"record_id":"b48cd552-fa19-4510-8d62-42f43094d9bd","source_event_group_id":"93b9114c-c81b-4bfc-b197-2afef05763ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert Settipane","state":"RI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Settipane settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"93b9114c-c81b-4bfc-b197-2afef05763ed","severity_score":50},{"record_id":"ae5c2c33-aa42-48a5-9cbc-c2e5882c21d5","source_event_group_id":"965799c3-ef9d-4cfe-8242-10c35e8f90f4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Beverly Hills","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Beverly Hills settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"965799c3-ef9d-4cfe-8242-10c35e8f90f4","severity_score":50},{"record_id":"a6951fd2-622a-439d-aae7-970fc3ce761f","source_event_group_id":"85169a2c-faab-4d7c-8e0b-4695c90cff10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shah","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shah settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"85169a2c-faab-4d7c-8e0b-4695c90cff10","severity_score":50},{"record_id":"a2bad0a5-9fbe-4c3a-bfde-6e43b8bff5ef","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health","state":"UT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Utah Health settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":50},{"record_id":"9f67e02d-3c39-4089-86c2-e77cf4d0d21f","source_event_group_id":"f096688c-5eba-4e61-967b-b67f28fd0ce6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Broadway Practice","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Broadway Practice settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"f096688c-5eba-4e61-967b-b67f28fd0ce6","severity_score":50},{"record_id":"9f28187c-f70f-4e18-b1ac-ab74ac409acc","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Children's Hospital of Philadelphia (CHOP)","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHOP settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":50},{"record_id":"9e6dbc4d-c1c1-4eda-9ccc-7f497d8fee1e","source_event_group_id":"52c430da-8b87-42f5-8465-c953446c43a2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pasadena Centre for Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pasadena Centre for Health settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"52c430da-8b87-42f5-8465-c953446c43a2","severity_score":50},{"record_id":"987a9ef6-e44c-4981-a186-a4da79a82f41","source_event_group_id":"e6b9bdb5-2909-45e6-9cce-b817c1a813d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AMCA","state":"NY","individuals_affected":20000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AMCA settled potential HIPAA violations for failing to properly secure the ePHI of over 20 million individuals, leading to a series of cyberattacks.","event_id":"e6b9bdb5-2909-45e6-9cce-b817c1a813d2","severity_score":90},{"record_id":"77334420-688f-4882-8bf7-a79d7d2ac3cc","source_event_group_id":"edf6077e-e941-4bb7-bd54-8ff4378f03a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boca Care, Inc., dba Boca Raton Obs. & Gyn.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boca Care settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"edf6077e-e941-4bb7-bd54-8ff4378f03a3","severity_score":50},{"record_id":"75eb85f6-7a40-488a-987f-3158f4f1d330","source_event_group_id":"3d420e60-ed14-42fe-a7d3-d5c44153f5ca","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwestern Vermont Medical Center","state":"VT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwestern Vermont Medical Center settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"3d420e60-ed14-42fe-a7d3-d5c44153f5ca","severity_score":50},{"record_id":"70f8e62f-ac9b-46a6-958e-9d11108dd6b0","source_event_group_id":"3300caaa-21de-438c-b5ab-bb06057a404f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Andrew G. Shulman","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shulman settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"3300caaa-21de-438c-b5ab-bb06057a404f","severity_score":50},{"record_id":"6e7a3890-d77d-4637-825e-dd532d30ba50","source_event_group_id":"05ccd32c-6f4a-4e5c-99e8-6427a01b8d05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Texas Spinal Clinic, P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Texas Spinal Clinic settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"05ccd32c-6f4a-4e5c-99e8-6427a01b8d05","severity_score":50},{"record_id":"65d45e24-24cf-4206-a0df-1dbe7ad2c683","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health Behavioral Services","state":"MA","individuals_affected":528,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Beth Israel Lahey Health Behavioral Services settled potential HIPAA violations after a business associate impermissibly disclosed the PHI of 528 individuals on the internet.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":50},{"record_id":"610d8095-6a1e-472c-b130-62b0862584e4","source_event_group_id":"85c3028f-802b-42fd-a45c-dc65ec1e7b46","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Egwuonwu","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Egwuonwu settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"85c3028f-802b-42fd-a45c-dc65ec1e7b46","severity_score":50},{"record_id":"5c963f92-b241-4860-96f2-936a11a93151","source_event_group_id":"277c394a-06b2-4604-abce-4774c3eb1ecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Dental","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Dental settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"277c394a-06b2-4604-abce-4774c3eb1ecd","severity_score":50},{"record_id":"5ad850cd-40fa-4f2e-b4d7-43ca741fd8e7","source_event_group_id":"16620b54-2ab3-4577-adc4-71b384ce2f23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopaedic Division, LLC","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Orthopaedic Division settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"16620b54-2ab3-4577-adc4-71b384ce2f23","severity_score":50},{"record_id":"5ad321a9-c602-4526-9ef2-c0fd0c656dcd","source_event_group_id":"63703895-edd1-4123-b1b4-87ed5a8bb726","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Drs. Unlimited, Inc.","state":"DE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Drs. Unlimited settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"63703895-edd1-4123-b1b4-87ed5a8bb726","severity_score":50},{"record_id":"55b1aae9-b6f5-416e-9e09-f4f5c53bddfb","source_event_group_id":"978b5d11-c69d-4858-8ee5-ee6507493995","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical Services, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical Services settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"978b5d11-c69d-4858-8ee5-ee6507493995","severity_score":50},{"record_id":"3a285c28-ebfd-4f3f-a4c2-f3c62d5744bb","source_event_group_id":"ceda768e-1347-47a2-b311-b6785abac157","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Joseph M. DeLuca","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. DeLuca settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"ceda768e-1347-47a2-b311-b6785abac157","severity_score":50},{"record_id":"3897d3e2-bb57-4177-af67-81985a0f8503","source_event_group_id":"14a2e65e-c942-46b4-baed-2021b0bb2306","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Z. Kitay","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Kitay settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"14a2e65e-c942-46b4-baed-2021b0bb2306","severity_score":50},{"record_id":"3725936b-9fae-42c9-9ee5-b57b19f14dab","source_event_group_id":"a13ed212-8c37-46b7-abc2-1ce7758bb365","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OC Fertility","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OC Fertility settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"a13ed212-8c37-46b7-abc2-1ce7758bb365","severity_score":50},{"record_id":"23340de3-1842-4366-9487-372aea5cae8d","source_event_group_id":"838c2b93-f77e-40b1-a4f9-3e0124ced601","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Manasa Health Center, LLC","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Manasa Health Center settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"838c2b93-f77e-40b1-a4f9-3e0124ced601","severity_score":50},{"record_id":"217c03ac-e0ff-4750-927e-d09c40daf66b","source_event_group_id":"11e8a18a-644b-4468-a664-1d2ce69b8df5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Manahawkin Oral and Maxillofacial Surgery, P.C.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Manahawkin Oral and Maxillofacial Surgery settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"11e8a18a-644b-4468-a664-1d2ce69b8df5","severity_score":50},{"record_id":"1fbd60b2-dc2e-4344-b75e-0c4f9ea2b08b","source_event_group_id":"c3e7c287-a959-4beb-b5c9-5340d3f18ebb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peach Dental","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peach Dental settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"c3e7c287-a959-4beb-b5c9-5340d3f18ebb","severity_score":50},{"record_id":"1b5669fe-5d4b-47c0-8656-53c18b23566a","source_event_group_id":"e145839f-f086-4e9d-bb5e-7d12415e6879","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Paul E. Wormser","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Wormser settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e145839f-f086-4e9d-bb5e-7d12415e6879","severity_score":50},{"record_id":"0ebac5fd-c649-4612-96f7-8f35999f7679","source_event_group_id":"2c45d040-db45-49ed-9f5b-57d8edc81710","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Seth R. Gerlach","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Gerlach settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"2c45d040-db45-49ed-9f5b-57d8edc81710","severity_score":50},{"record_id":"0633fcd7-613a-41d6-9390-8238217e8773","source_event_group_id":"78cb6f36-3b33-4651-b602-2e866c71e7ee","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Board of Regents of the University of Oklahoma (OUHSC)","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OUHSC settled potential HIPAA violations after an impermissible disclosure of the PHI of 279,865 patients due to a ransomware attack.","event_id":"78cb6f36-3b33-4651-b602-2e866c71e7ee","severity_score":80},{"record_id":"fa3de8c8-f8f9-438b-84fe-44e6e0b8919f","source_event_group_id":"ed2c2f31-4acf-4b64-b76b-8594cd045f6b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Lance West","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. West settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"ed2c2f31-4acf-4b64-b76b-8594cd045f6b","severity_score":50},{"record_id":"f4d5ce70-679f-43e4-bb8e-09e94cac7b45","source_event_group_id":"be532bde-2053-4f6d-8172-60a93582aa36","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montville Plastic Surgery, LLC","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montville Plastic Surgery settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"be532bde-2053-4f6d-8172-60a93582aa36","severity_score":50},{"record_id":"c8210458-b5c2-4be0-aac8-b38fd7572301","source_event_group_id":"5fff43fc-1eaa-45be-a61e-72ba7973a850","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Florida Department of Health","state":"FL","individuals_affected":528,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Florida Department of Health settled potential HIPAA violations after an impermissible disclosure of the PHI of 528 individuals on the internet.","event_id":"5fff43fc-1eaa-45be-a61e-72ba7973a850","severity_score":50},{"record_id":"c29c7e11-00e0-4f59-acba-747bc8c36caa","source_event_group_id":"59c4236b-5c9a-415d-a893-93406c6105ff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Kim","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Kim settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"59c4236b-5c9a-415d-a893-93406c6105ff","severity_score":50},{"record_id":"b10c7688-66a3-4190-9da3-cf3001dc2759","source_event_group_id":"abd49c71-61ed-4940-af5f-24b02da5beac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Broward Hospital District","state":"FL","individuals_affected":1291,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Broward Hospital District settled potential HIPAA violations after an impermissible disclosure of the PHI of 1,291 patients to a third-party billing company without a business associate agreement.","event_id":"abd49c71-61ed-4940-af5f-24b02da5beac","severity_score":90},{"record_id":"a2c95678-d5e0-47a0-8f05-e2202f9c8e92","source_event_group_id":"15acc516-5035-4238-8b6e-c0eac70e7ca7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Iowa Mental Health Center","state":"IA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Iowa Mental Health Center settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"15acc516-5035-4238-8b6e-c0eac70e7ca7","severity_score":50},{"record_id":"a0459e38-7d31-4f68-bafc-900d34aafb4e","source_event_group_id":"a27abfeb-9849-4087-a1ec-ee63b1039bbe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Kenneth R. St. Charles","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. St. Charles settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"a27abfeb-9849-4087-a1ec-ee63b1039bbe","severity_score":50},{"record_id":"8d8cd0ed-0518-43fd-af0d-2f3d42fe05a5","source_event_group_id":"0c428a6c-d6e4-4a3d-9be7-ac6bdb144595","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"P.T. Solutions","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"P.T. Solutions settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"0c428a6c-d6e4-4a3d-9be7-ac6bdb144595","severity_score":50},{"record_id":"6e8395d0-35dd-47c9-ad34-6beb2bd69225","source_event_group_id":"94dc7c69-44e8-46d9-82a1-eeeb1d3a4222","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wise Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wise Health System settled potential HIPAA violations after an impermissible disclosure of PHI of a patient to their employer, affecting 1 individual.","event_id":"94dc7c69-44e8-46d9-82a1-eeeb1d3a4222","severity_score":65},{"record_id":"62f40f7f-bc6c-49c9-9c6f-4b17c62285d4","source_event_group_id":"728e09b3-f845-4d39-a219-44226484c2db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renalus Center for Kidney Care","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renalus Center for Kidney Care settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"728e09b3-f845-4d39-a219-44226484c2db","severity_score":50},{"record_id":"5a66a816-4c2d-43df-8e98-1c7afc67127e","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg settled potential HIPAA violations after impermissibly disclosing the PHI of a patient to their former employer, affecting 1 individual.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"59a41cc1-3c96-43c3-8472-72da5b720c7a","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s Hospital and Medical Center of Omaha","state":"NE","individuals_affected":1059,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital and Medical Center of Omaha settled potential HIPAA violations after an impermissible disclosure of the PHI of 1,059 patients to a business associate.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"54e34146-5c71-4fb2-bcc4-2145d8c0cc20","source_event_group_id":"fd69e3ee-59a7-4b16-83af-ee1d52293999","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Texas Eye Center, P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Texas Eye Center settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"fd69e3ee-59a7-4b16-83af-ee1d52293999","severity_score":50},{"record_id":"505ffc15-020f-4060-8b08-0209e43c30fc","source_event_group_id":"17cea5e6-9f69-42fb-90c0-6dc5749156e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Practice on the Square","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Practice on the Square settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"17cea5e6-9f69-42fb-90c0-6dc5749156e3","severity_score":50},{"record_id":"3557d2e5-230b-47ff-8015-8df864e76b2d","source_event_group_id":"9728d6e2-729e-46af-ab29-d5071cc20647","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Great Expressions Dental Center of Georgia, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Great Expressions Dental Center of Georgia settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"9728d6e2-729e-46af-ab29-d5071cc20647","severity_score":50},{"record_id":"22b31c38-6aa4-423a-8ebe-dfd298fcfe79","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Board of Regents of the University of California, San Francisco (UCSF)","state":"CA","individuals_affected":269555,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF settled potential HIPAA violations after an impermissible disclosure of the PHI of 269,555 patients due to a phishing attack.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":90},{"record_id":"04f490aa-74d5-46ed-97c0-e64915929d0a","source_event_group_id":"5c70dadd-6507-40ad-a995-b38c6ab339b3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester County Department of Health","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester County Department of Health settled potential HIPAA violations for impermissibly disclosing the PHI of a patient to a third party, affecting 1 individual.","event_id":"5c70dadd-6507-40ad-a995-b38c6ab339b3","severity_score":50},{"record_id":"f002d915-97ac-495e-9dbd-c407a20952d4","source_event_group_id":"e29dfb00-05e9-4890-a5ee-997d69453725","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jacob Shingles, DDS","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shingles settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"e29dfb00-05e9-4890-a5ee-997d69453725","severity_score":50},{"record_id":"ee507bbc-bdbb-4a0e-a45e-5f1c98141574","source_event_group_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Rajendra Bhayani","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Bhayani settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","severity_score":50},{"record_id":"dc26a3dd-4abc-447a-bfe8-c35bd0796bee","source_event_group_id":"80044339-51db-4310-9b39-393485e02678","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Roman E. Mal rowing","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mal rowing settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"80044339-51db-4310-9b39-393485e02678","severity_score":50},{"record_id":"b0445c2c-d90b-451f-82c2-845366255ab8","source_event_group_id":"00378fc7-ceed-4ca4-81ed-93122a4ea60c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AEON Clinical Laboratories","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AEON Clinical Laboratories settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"00378fc7-ceed-4ca4-81ed-93122a4ea60c","severity_score":50},{"record_id":"a5821af2-602e-4d10-9478-d90937a58d94","source_event_group_id":"0a5313ee-e399-45aa-8fa1-86bd74b1d4bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Dental of Albany","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Dental of Albany settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"0a5313ee-e399-45aa-8fa1-86bd74b1d4bd","severity_score":50},{"record_id":"968cf84e-984a-417b-9e9f-74631f3f8dbb","source_event_group_id":"57437f4e-07bb-4559-84c6-b057497de356","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Keith Barbour","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Barbour settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"57437f4e-07bb-4559-84c6-b057497de356","severity_score":50},{"record_id":"8fc93320-7853-4639-80ad-cb7af00ebb25","source_event_group_id":"88fced1f-f511-4034-b5ae-440d08bda94f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Family Dentistry","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Family Dentistry settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"88fced1f-f511-4034-b5ae-440d08bda94f","severity_score":50},{"record_id":"863a21b0-e18f-4518-8fe0-e744d842d5b5","source_event_group_id":"0cdc0f09-cd8b-45e7-b864-9c1ac5e1e414","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Chutima Loertscher, dba A+ Better Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Loertscher settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"0cdc0f09-cd8b-45e7-b864-9c1ac5e1e414","severity_score":50},{"record_id":"6427e7dc-ce6c-4423-9c27-1a1b95ebc9ee","source_event_group_id":"70b1f51a-bb9e-41e6-ad61-40c53749400f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pillar Medical Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pillar Medical Group settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"70b1f51a-bb9e-41e6-ad61-40c53749400f","severity_score":50},{"record_id":"5a31597d-7b14-41b9-bbc6-04861af834b1","source_event_group_id":"5dfad94e-ad5f-43f8-b039-1ef7c98bcf8a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Steven A. Porter, M.D.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Porter settled potential HIPAA violations for failing to provide a patient with timely access to his medical records.","event_id":"5dfad94e-ad5f-43f8-b039-1ef7c98bcf8a","severity_score":50},{"record_id":"5609332f-7df3-46b3-8b9e-b61f132ab349","source_event_group_id":"18d9386d-cc49-4ab4-9cd6-d44045fddeaf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danville Express Care LLC (doing business as Express Care)","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danville Express Care settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"18d9386d-cc49-4ab4-9cd6-d44045fddeaf","severity_score":50},{"record_id":"29c4fd6f-e5ad-4ff3-8e9d-9f3217cff61e","source_event_group_id":"2cc6b571-ae6f-41dd-bba7-9c3e3624920d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Garden State Practice Solutions, LLC","state":"NJ","individuals_affected":11880,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Garden State Practice Solutions settled potential HIPAA violations after a business associate impermissibly disclosed PHI on a publicly accessible website, affecting 11,880 individuals.","event_id":"2cc6b571-ae6f-41dd-bba7-9c3e3624920d","severity_score":50},{"record_id":"e50f4393-57dd-4e01-b81f-769794d0aaf2","source_event_group_id":"dc77c039-ed08-4717-bad0-326a193818b3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Plan A","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a placeholder for a hypothetical corrective action plan addressing late breach notifications.","event_id":"dc77c039-ed08-4717-bad0-326a193818b3","severity_score":55},{"record_id":"c2d32784-f3a6-49f8-aed6-44576bcd02b4","source_event_group_id":"cc364bc1-5ee6-4403-a858-8925f7346a70","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"First Dermatology, P.C.","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"First Dermatology settled potential HIPAA violations for failing to provide timely access to PHI to a patient.","event_id":"cc364bc1-5ee6-4403-a858-8925f7346a70","severity_score":50},{"record_id":"abc2ed24-de47-40c2-a87d-928c42b9cbbc","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (Aka Agape Health Services)","state":"NC","individuals_affected":1263,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Agape Health Services settled potential HIPAA violations for an impermissible disclosure of PHI when it failed to terminate the access of a former employee to patient records, affecting 1,263 individuals.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"838689b7-c262-407f-b27a-02d24c22ce8b","source_event_group_id":"5d37165a-6a42-484c-ab4e-c269829a4e2b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospital Z","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a placeholder for a hypothetical corrective action plan addressing security safeguard deficiencies.","event_id":"5d37165a-6a42-484c-ab4e-c269829a4e2b","severity_score":55},{"record_id":"33431c16-117a-4ccc-b2cf-cdc9f5779345","source_event_group_id":"4cab6ccc-3e8f-4bb3-aa27-e027a2626f7a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Centene Corporation","state":"MO","individuals_affected":950000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Centene Corporation paid $3.34 million to settle potential HIPAA violations for improper disposal of PHI.","event_id":"4cab6ccc-3e8f-4bb3-aa27-e027a2626f7a","severity_score":90},{"record_id":"2f5c884b-4703-49b3-9080-d910584fbeb7","source_event_group_id":"e0b65667-367f-4d31-a6c4-99511f3da39c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Small Practice Dermatology","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Small Practice Dermatology settled for $10,000 after impermissibly disclosing patient information on social media.","event_id":"e0b65667-367f-4d31-a6c4-99511f3da39c","severity_score":50},{"record_id":"ee8502f4-1f36-487e-a0ec-52d68299cc17","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson's $4.3 million CMP was upheld after appeal, emphasizing the importance of encryption.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"ed069c9a-0f8e-4be5-a118-d3b593f39b62","source_event_group_id":"04ca987e-7021-46ce-921b-0e26f12679e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Healthcare Provider Y","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a placeholder for a hypothetical corrective action plan addressing missing business associate agreements.","event_id":"04ca987e-7021-46ce-921b-0e26f12679e2","severity_score":55},{"record_id":"e1bb0a94-1829-430e-a209-85b9e76ef081","source_event_group_id":"a1005975-6ba0-4e25-8127-4cb1be1d6f62","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sample Clinic, LLC","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sample Clinic, LLC settled for $50,000 for failing to conduct an enterprise-wide risk analysis.","event_id":"a1005975-6ba0-4e25-8127-4cb1be1d6f62","severity_score":50},{"record_id":"ce171ff7-163e-4721-8338-b01090e5bee7","source_event_group_id":"805dc0f6-9343-4363-b24c-fff1ae5697c0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians' Business Office, Inc.","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Physicians' Business Office, Inc. paid $65,000 to settle potential HIPAA violations for impermissible disclosure of PHI.","event_id":"805dc0f6-9343-4363-b24c-fff1ae5697c0","severity_score":50},{"record_id":"77c8d942-edc0-4ece-81b6-4c26cc8a923d","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":6000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas HHSC paid an additional $1.6 million for HIPAA violations related to a data breach affecting over 6,000 individuals.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"668c7cee-5ddb-43e3-9f4f-cedb50f4b8fc","source_event_group_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Medical Center-Dallas","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Medical Center-Dallas paid $1 million to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","severity_score":80},{"record_id":"1f8190de-9e4c-41d5-ac76-340c6158c89a","source_event_group_id":"45ed7590-755a-4e0d-9c20-6717e34a384a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mount Sinai Health System","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center, part of Mount Sinai Health System, paid $387,200 to settle potential HIPAA violations for impermissible disclosure of patient information.","event_id":"45ed7590-755a-4e0d-9c20-6717e34a384a","severity_score":65},{"record_id":"edea4aa5-1dd9-4877-8dca-1de12f14f1d9","source_event_group_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Dental, PC","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Dental paid $25,000 to settle potential HIPAA violations for impermissible disclosure of protected health information online.","event_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","severity_score":50},{"record_id":"52c8b2ef-1242-4235-b29e-a9f28685f32e","source_event_group_id":"d7428879-3309-4a37-88ab-485cb941d645","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Practice X","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This is a placeholder for a hypothetical corrective action plan addressing patient access rights.","event_id":"d7428879-3309-4a37-88ab-485cb941d645","severity_score":55},{"record_id":"454cb860-5465-4301-86e4-2de8041a1f7c","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NewYork-Presbyterian Hospital (NYP)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP settled with OCR for similar violations as Columbia University, stemming from a single incident where unsecured ePHI was posted online.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"3fc5b532-22d2-422b-a2ab-fe778c5296b7","source_event_group_id":"403e7ec0-dcfa-4d04-8591-e59ae58d548c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Mental Health","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Mental Health, formerly CHCS, paid $650,000 to settle potential HIPAA violations for security failures.","event_id":"403e7ec0-dcfa-4d04-8591-e59ae58d548c","severity_score":80},{"record_id":"3c22866f-1853-4d3d-bc46-05798f7c7fe7","source_event_group_id":"c5a86971-c4ad-4b23-b5f1-bb9130a74414","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona State Hospital","state":"AZ","individuals_affected":6664,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arizona State Hospital settled after releasing the PHI of approximately 6,664 individuals on its website. The PHI was part of a document that was publicly accessible.","event_id":"c5a86971-c4ad-4b23-b5f1-bb9130a74414","severity_score":50},{"record_id":"0b8127da-2a6f-4193-9221-beffc4e8fedb","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System (UCLA)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System settled after allegations of employees impermissibly accessing celebrity patient health information. This case highlighted issues with internal access controls.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"60376f60-2a9a-4457-8c70-de0793a430d6","source_event_group_id":"a32c70ed-e6ac-4a70-a3ed-edf1534fdab5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"James C. Standring, DDS","state":"CA","individuals_affected":6658,"breach_submission_date":"2026-07-17","enforcement_action_date":null,"summary":"","event_id":"a32c70ed-e6ac-4a70-a3ed-edf1534fdab5","severity_score":50},{"record_id":"c787dfdc-013b-490b-bb52-369a79d9b740","source_event_group_id":"125655e8-78c8-4211-ad05-c508e14f7274","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Youth Home, Inc.","state":"AR","individuals_affected":689,"breach_submission_date":"2026-07-13","enforcement_action_date":null,"summary":"","event_id":"125655e8-78c8-4211-ad05-c508e14f7274","severity_score":30},{"record_id":"76e59646-a474-432c-a7cc-35a84becf159","source_event_group_id":"2357056a-2e3c-4dd1-a7ac-5ae46194feb3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Women’s Center for Radiology","state":"FL","individuals_affected":66422,"breach_submission_date":"2026-06-26","enforcement_action_date":null,"summary":"","event_id":"2357056a-2e3c-4dd1-a7ac-5ae46194feb3","severity_score":70},{"record_id":"aa115a4b-0a77-4900-8996-18112dc20e3f","source_event_group_id":"91b2cb92-7ced-45b6-aeb4-86b46e886d28","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Unlimited Technology Systems, LLC","state":"OH","individuals_affected":3803750,"breach_submission_date":"2026-07-21","enforcement_action_date":null,"summary":"","event_id":"91b2cb92-7ced-45b6-aeb4-86b46e886d28","severity_score":95},{"record_id":"8c49aeb5-c36a-4732-b5e3-830d0a9bc6d1","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed the PHI of a patient to the media.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"382d68a3-b784-4694-afb3-79cbe840dc6f","source_event_group_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark Corporation","state":"RI","individuals_affected":5000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark impermissibly disposed of PHI in dumpsters that were accessible to the public. This occurred at multiple locations.","event_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","severity_score":90},{"record_id":"cdb02607-674c-4db6-b0e0-f9cc3d8bcfce","source_event_group_id":"119bb673-32b4-4d92-a3d0-8c25d477f6d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services of Colorado, Inc.","state":"CO","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Management Services of Colorado, Inc. impermissibly disclosed the PHI of 1,000 patients when a laptop containing unencrypted data was stolen from an employee's car.","event_id":"119bb673-32b4-4d92-a3d0-8c25d477f6d2","severity_score":65},{"record_id":"a76b65ac-ece0-4dec-ad92-6e27537cda1b","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":5000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Pharmacy impermissibly disposed of PHI in dumpsters that were accessible to the public. This occurred at multiple locations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"352309ae-b9a9-4e71-900f-9670f695b6cb","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":17000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health impermissibly disclosed the PHI of 17,000 patients when unauthorized employees accessed patient records.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"abc23685-a884-4c5e-8324-31cc2ca52684","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1291,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County Public Health Department impermissibly disclosed the PHI of 1,291 patients when faxes were sent to wrong recipients.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"a686ae15-c52f-49e1-9a67-9b388295acea","source_event_group_id":"7864d6c9-5ff3-4a22-aa1c-23476c6de34e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA","state":"MA","individuals_affected":311760,"breach_submission_date":"2026-07-16","enforcement_action_date":null,"summary":"","event_id":"7864d6c9-5ff3-4a22-aa1c-23476c6de34e","severity_score":85},{"record_id":"4fbd3e32-cfb7-4ab1-b7c6-9d96e45d32ce","source_event_group_id":"a02d8e26-92b1-4042-98a2-8bd6d2600849","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Open Door Health Center of Illinois","state":"WA","individuals_affected":501,"breach_submission_date":"2026-07-18","enforcement_action_date":null,"summary":"","event_id":"a02d8e26-92b1-4042-98a2-8bd6d2600849","severity_score":30},{"record_id":"dec9730f-5225-4cad-85dc-a5221dba2b04","source_event_group_id":"db20a3df-de6c-44f5-94d1-ee8d5fd1f350","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Therafit Physical Therapy","state":"PA","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Therafit impermissibly disclosed PHI by posting patient testimonials on its website without authorization.","event_id":"db20a3df-de6c-44f5-94d1-ee8d5fd1f350","severity_score":50},{"record_id":"aa93b390-e971-4b1a-8036-3b01804e70f2","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health","state":"IN","individuals_affected":5800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health impermissibly disclosed PHI when it sent billing statements to the wrong addresses.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"9fa4ac7a-2224-4c03-b862-ef1fe3cc9fc6","source_event_group_id":"bbd99e46-58c8-45e1-b8f1-72d1a3ed3f25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Thomas Jefferson University Hospitals","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Thomas Jefferson University Hospitals impermissibly disclosed PHI when a film crew filmed a patient without authorization.","event_id":"bbd99e46-58c8-45e1-b8f1-72d1a3ed3f25","severity_score":55},{"record_id":"2f58a554-f3ee-457f-8af4-f7337b43e127","source_event_group_id":"553af42d-760b-4599-baf3-d3a2c811187b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forest Park Medical Center at Fort Worth","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forest Park Medical Center at Fort Worth impermissibly disclosed PHI when it allowed a business associate to access its servers without a BAA.","event_id":"553af42d-760b-4599-baf3-d3a2c811187b","severity_score":65},{"record_id":"0cbe2861-a550-485b-960c-3ad4a8c16001","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke’s-Roosevelt Hospital Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SLRHC impermissibly disclosed PHI by exposing patient information during filming of a documentary.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"076219f2-4d63-40a2-a7ae-53fd6f9efa05","source_event_group_id":"39decb8c-c5eb-4383-a60a-8d14f00f9a4a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Austin Retina Associates","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Austin Retina Associates impermissibly disclosed PHI when it left patient information visible on a sign-in sheet.","event_id":"39decb8c-c5eb-4383-a60a-8d14f00f9a4a","severity_score":50},{"record_id":"f15c890e-1924-4b05-b441-87850737c2b2","source_event_group_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Systems","state":"AR","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FDS reported a breach of ePHI due to a server being left on and accessible to the internet.","event_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","severity_score":50},{"record_id":"f156fe62-987e-46a3-aa08-496acdd96302","source_event_group_id":"71421252-df04-486b-85ea-5dc26096d126","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCLA Health","state":"CA","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health impermissibly disclosed protected health information when a laptop containing PHI of 16,000 patients was stolen.","event_id":"71421252-df04-486b-85ea-5dc26096d126","severity_score":80},{"record_id":"e87101ff-fbc2-46d2-8ac3-d8c81cc3442f","source_event_group_id":"54151524-c488-4725-8ea2-f356a1787345","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AHMC Healthcare, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AHMC Healthcare impermissibly disclosed protected health information when it failed to implement appropriate administrative safeguards to protect the privacy of PHI.","event_id":"54151524-c488-4725-8ea2-f356a1787345","severity_score":65},{"record_id":"c2e68e79-9fd4-4488-8764-57bac01b428d","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians, P.A.","state":"CA","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint that RFP impermissibly disclosed PHI to a third-party vendor without a BAA.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"bcc3dde3-f677-4dcf-97a9-0003bee6944a","source_event_group_id":"26993e29-b5fb-417b-8cb8-e98351a51d8e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BUMC Faculty Practice Group","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BUMCFPG impermissibly disclosed PHI by leaving patient schedules in a public area.","event_id":"26993e29-b5fb-417b-8cb8-e98351a51d8e","severity_score":80},{"record_id":"b92475d4-95d7-4423-9057-df4d701fc3ba","source_event_group_id":"fd95173c-2ddb-4b00-8770-8a7d94af2415","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Hialeah Hospital","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Hialeah Hospital impermissibly disclosed PHI by allowing a news crew to film an emergency room patient.","event_id":"fd95173c-2ddb-4b00-8770-8a7d94af2415","severity_score":50},{"record_id":"a29343b1-0eff-49ed-bf11-7ac577768b34","source_event_group_id":"90f2429d-8bb4-4d46-8036-e88edfde863e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas at Austin, College of Pharmacy","state":"TX","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas at Austin, College of Pharmacy impermissibly disclosed PHI when it sent an email to students that contained the PHI of other students.","event_id":"90f2429d-8bb4-4d46-8036-e88edfde863e","severity_score":55},{"record_id":"8d69db57-cdf1-48d8-87f1-1fc4ef5ba58a","source_event_group_id":"77782ba0-e0e9-4deb-b91f-9be3ffd26743","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Liberty Dental Plan","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Liberty Dental Plan impermissibly disclosed protected health information when it failed to implement appropriate administrative safeguards to protect the privacy of PHI.","event_id":"77782ba0-e0e9-4deb-b91f-9be3ffd26743","severity_score":50},{"record_id":"879b5d28-4c46-48ca-9b56-f1b8079d9a0e","source_event_group_id":"acebd09b-c96a-4250-a091-02662bab39ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Earth Class Mail, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging ECM impermissibly disclosed PHI by opening and scanning mail for a covered entity without a BAA.","event_id":"acebd09b-c96a-4250-a091-02662bab39ac","severity_score":50},{"record_id":"69588406-e58b-4690-bf04-a22a9bacb0d5","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed protected health information when it failed to implement appropriate administrative safeguards to protect the privacy of PHI.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":90},{"record_id":"4c050199-59b7-409b-9e84-fd195ffaa26c","source_event_group_id":"aa164a07-bd2e-4769-bac7-992e836c4546","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Durango Orthopedics","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Durango Orthopedics impermissibly disclosed PHI when a staff member posted PHI on social media.","event_id":"aa164a07-bd2e-4769-bac7-992e836c4546","severity_score":55},{"record_id":"4370eaaf-0673-44a3-88d6-fe0828c82ac5","source_event_group_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rite Aid Corporation","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rite Aid impermissibly disclosed protected health information when it failed to implement appropriate administrative safeguards to protect the privacy of PHI.","event_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","severity_score":80},{"record_id":"430071d2-5a0a-456c-8ac7-d957d245e7d2","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s National Medical Center","state":"DC","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CNMC reported a breach involving an unencrypted laptop, affecting 2,400 individuals.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":50},{"record_id":"25e98456-54e3-4c1f-8615-7843505505e1","source_event_group_id":"e46ce4da-04de-4b79-8e72-fe52190db519","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hobbs Endoscopy, LLC","state":"NM","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hobbs Endoscopy impermissibly disclosed PHI by disposing of records in an unsecured dumpster.","event_id":"e46ce4da-04de-4b79-8e72-fe52190db519","severity_score":50},{"record_id":"1ce050af-48ce-4f07-b046-d793277b8222","source_event_group_id":"6e838978-b13c-4760-af59-c626bc1ef377","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"21st Century Oncology","state":"FL","individuals_affected":2200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"21st Century Oncology reported a cyberattack that affected 2.2 million individuals.","event_id":"6e838978-b13c-4760-af59-c626bc1ef377","severity_score":90},{"record_id":"1028a3fd-3098-4d76-abcf-83bd081eed0f","source_event_group_id":"8dfa97bc-55f2-46ed-a863-8c0ccff6d624","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HIPAA SE Training","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A HIPAA training company impermissibly disclosed PHI on its website.","event_id":"8dfa97bc-55f2-46ed-a863-8c0ccff6d624","severity_score":50},{"record_id":"0625d6b6-01d0-44a2-adad-82de9a2e086a","source_event_group_id":"5b7425a5-561c-4079-b59a-b6c93302636e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of Western New York, Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO impermissibly disclosed protected health information when it failed to implement appropriate administrative safeguards to protect the privacy of PHI.","event_id":"5b7425a5-561c-4079-b59a-b6c93302636e","severity_score":65},{"record_id":"dce13e26-2c45-4356-8abc-da07987656f9","source_event_group_id":"6039a369-196f-4391-b289-71e045b4f7ee","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kaiser Foundation Health Plan, Inc.","state":"CA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser impermissibly disclosed protected health information when a USB drive containing PHI of 20,000 patients was lost.","event_id":"6039a369-196f-4391-b289-71e045b4f7ee","severity_score":90},{"record_id":"a73906bb-f3af-4446-b096-a02920dc62b2","source_event_group_id":"26a80b23-ccb1-48b7-a65c-860ba48e9898","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Medical Associates of Raleigh, PA","state":"NC","individuals_affected":500,"breach_submission_date":"2026-07-02","enforcement_action_date":null,"summary":"","event_id":"26a80b23-ccb1-48b7-a65c-860ba48e9898","severity_score":30},{"record_id":"2a3335d4-b87a-4bf7-a280-11dd747b636c","source_event_group_id":"5cf1287d-f894-4cb5-b250-199ea7d32659","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Claremedica Viking, LLC","state":"FL","individuals_affected":675,"breach_submission_date":"2026-07-08","enforcement_action_date":null,"summary":"","event_id":"5cf1287d-f894-4cb5-b250-199ea7d32659","severity_score":30},{"record_id":"8ffda0aa-09ce-43ea-9208-77bfb0cffd55","source_event_group_id":"7a00d100-7145-4420-9227-c95c18d57c22","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alpine Agency of the Midlands, LLC","state":"SC","individuals_affected":500,"breach_submission_date":"2026-07-13","enforcement_action_date":null,"summary":"","event_id":"7a00d100-7145-4420-9227-c95c18d57c22","severity_score":30},{"record_id":"0a460e05-72db-4589-8cbe-b67429263310","source_event_group_id":"37508782-1911-4e64-9b18-49b81944dc86","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health Payment Systems, Inc.","state":"WI","individuals_affected":9380,"breach_submission_date":"2026-07-10","enforcement_action_date":null,"summary":"","event_id":"37508782-1911-4e64-9b18-49b81944dc86","severity_score":50},{"record_id":"40e1848c-1fc7-4e88-a0d0-a37eb3ce8784","source_event_group_id":"4e4e8dd2-90ec-46e2-b825-c1ba9d023cea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Madera Community Hospital","state":"CA","individuals_affected":150810,"breach_submission_date":"2026-07-13","enforcement_action_date":null,"summary":"","event_id":"4e4e8dd2-90ec-46e2-b825-c1ba9d023cea","severity_score":85},{"record_id":"fbf604ab-287f-4a4f-9a52-4517c5b99c3e","source_event_group_id":"42ffcc0e-9e83-4861-a7d1-0d2ce9b5087e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Center for Hearing and Speech dba Texas Hearing Institute","state":"TX","individuals_affected":29774,"breach_submission_date":"2026-06-29","enforcement_action_date":null,"summary":"","event_id":"42ffcc0e-9e83-4861-a7d1-0d2ce9b5087e","severity_score":70},{"record_id":"f05d9602-6850-4245-933f-28be8622b099","source_event_group_id":"a74720ad-31f3-4e81-9dbd-5f2e8e9d370d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Colorado Health Network Inc.","state":"CO","individuals_affected":68212,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"a74720ad-31f3-4e81-9dbd-5f2e8e9d370d","severity_score":70},{"record_id":"cefa5c09-99ea-4555-96f4-73a0580f85ee","source_event_group_id":"3a25d6f5-a26c-4ae6-96aa-9482ef0d9a80","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connolly Eye Institute","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connolly Eye Institute failed to provide timely access to medical records for a patient.","event_id":"3a25d6f5-a26c-4ae6-96aa-9482ef0d9a80","severity_score":50},{"record_id":"b5111064-08e2-4ea6-9f70-31d4d3cba0c5","source_event_group_id":"b7e6c23d-52b2-43ea-b932-1f99e9c58c87","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR Enforcement Initiative on Right of Access","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR initiated an enforcement action due to a recurring issue of patients being denied timely access to their medical records.","event_id":"b7e6c23d-52b2-43ea-b932-1f99e9c58c87","severity_score":50},{"record_id":"8f091ef6-a205-4733-94c8-c61c44cc08d8","source_event_group_id":"d107f17a-a82a-4de4-bee5-5888cfdac3d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Neurosurgery","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Neurosurgery failed to provide timely access to medical records for a patient.","event_id":"d107f17a-a82a-4de4-bee5-5888cfdac3d3","severity_score":50},{"record_id":"78407e35-990d-4c97-87ec-07685be28dfb","source_event_group_id":"12f8b28f-c6ba-4819-931a-b4d8b666dcd7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Present Health, LLC (d/b/a Urgent Care Now)","state":"NJ","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Present Health, LLC impermissibly disclosed PHI to a business associate without a business associate agreement and failed to conduct a proper risk analysis.","event_id":"12f8b28f-c6ba-4819-931a-b4d8b666dcd7","severity_score":50},{"record_id":"287e1631-b495-4924-bddc-5f9eba5256c0","source_event_group_id":"bf64c567-53ed-4789-a0c5-5f134ec4dd7b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Newark Beth Israel Medical Center","state":"NJ","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Newark Beth Israel Medical Center experienced a breach due to a lack of proper policies and procedures and a failure to secure patient information.","event_id":"bf64c567-53ed-4789-a0c5-5f134ec4dd7b","severity_score":80},{"record_id":"edb87761-8ca8-49fe-acf5-42daeed6deba","source_event_group_id":"fb7d1137-2d70-471d-b0a7-c0451fc7e117","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Safeway, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Safeway impermissibly disposed of PHI in unsecured dumpsters at its retail pharmacies, disclosing the PHI of an unknown number of individuals.","event_id":"fb7d1137-2d70-471d-b0a7-c0451fc7e117","severity_score":65},{"record_id":"cc022aaf-0c1a-4ba8-a5f3-725ed2934fb2","source_event_group_id":"bc4afeeb-e0b2-4c8f-bf79-47fbcd996d64","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pain Treatment Center of Arizona","state":"AZ","individuals_affected":80000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Pain Treatment Center of Arizona failed to implement proper security measures for a business associate, leading to a breach of 80,000 patient records.","event_id":"bc4afeeb-e0b2-4c8f-bf79-47fbcd996d64","severity_score":65},{"record_id":"c0f19818-3016-48ce-9471-4176da42f1fb","source_event_group_id":"8d581b34-cd82-4829-bc17-8d091622c7eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ALLIED HEALTHCARE OF STAFFORD","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allied Healthcare of Stafford did not provide a patient's medical records to their personal representative in a timely manner.","event_id":"8d581b34-cd82-4829-bc17-8d091622c7eb","severity_score":50},{"record_id":"a1e98654-0d2f-43b0-8fc3-734d9ddcee7b","source_event_group_id":"e587dc8a-5eed-4cc7-80c6-fec4cee37132","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"P.I.P.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"P.I.P. was assessed a civil money penalty for not cooperating with OCR’s investigation and not providing requested information.","event_id":"e587dc8a-5eed-4cc7-80c6-fec4cee37132","severity_score":50},{"record_id":"55abc8e1-967d-47d8-a81a-60bf7b5a9602","source_event_group_id":"6ba85fac-ad2d-4908-9441-b0ed499d0fcb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seven Hills Family Services","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Seven Hills Family Services impermissibly disclosed patient information through a mailing error.","event_id":"6ba85fac-ad2d-4908-9441-b0ed499d0fcb","severity_score":50},{"record_id":"412d4b65-81f9-4fca-af07-3d6079421bb8","source_event_group_id":"c8de192d-db93-440b-ac98-88630ebcaf86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jersey Spine and Rehabilitation","state":"NJ","individuals_affected":6200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jersey Spine impermissibly disclosed the PHI of 6,200 individuals by leaving boxes of patient records unattended in an unsecure loading-dock area accessible to the public.","event_id":"c8de192d-db93-440b-ac98-88630ebcaf86","severity_score":50},{"record_id":"27f7ed5a-8ccb-4263-8b79-908d6010ef10","source_event_group_id":"e129f7ca-eeb8-4197-a7d4-537de1c420ff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HSHS Medical Group and Prairie Cardiovascular","state":"IL","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HSHS Medical Group and Prairie Cardiovascular experienced a breach involving stolen credentials that exposed the ePHI of 15,000 individuals.","event_id":"e129f7ca-eeb8-4197-a7d4-537de1c420ff","severity_score":65},{"record_id":"18637dac-dd95-4edf-ab70-115a4077280c","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York and Presbyterian Hospital","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP impermissibly disclosed the PHI of an unknown number of patients when its computer servers were accessible to the public on the internet.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"0afa3a52-814f-4b70-9869-b6e7c4a3e2e1","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity Health Plan impermissibly disclosed the PHI of 344,579 individuals when multiple photocopiers were returned to a leasing agent without the data on their hard drives being wiped.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"eb657ad6-4efc-4397-a9ea-094bf36dd542","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (doing business as Massachusetts General Hospital)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed the PHI of 192 patients when a highly visible binder was lost.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"b972b7a3-a482-406b-bfaa-2500e0754082","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George’s County, MD","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with copies of their medical records upon request, and then failed to cooperate with OCR's investigation.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"a8406650-421e-4f4b-a380-c6c046a25146","source_event_group_id":"99190bf6-57ba-41f8-8cd7-1c299b822081","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Louisiana Department of Health and Hospitals","state":"LA","individuals_affected":8000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Louisiana Department of Health and Hospitals impermissibly disclosed the PHI of 8000,000 individuals when backup tapes containing PHI were stolen.","event_id":"99190bf6-57ba-41f8-8cd7-1c299b822081","severity_score":90},{"record_id":"3493d980-bbb3-4005-a3d0-341014101a5a","source_event_group_id":"fb7d1137-2d70-471d-b0a7-c0451fc7e117","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Safeway, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Safeway impermissibly disposed of PHI in dumpsters, disclosing the PHI of an unknown number of individuals.","event_id":"fb7d1137-2d70-471d-b0a7-c0451fc7e117","severity_score":65},{"record_id":"968df851-31fc-479c-be1b-1200b649e141","source_event_group_id":"6f41b49f-bee6-43c8-b673-85881c46a3a4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sunshine Health","state":"FL","individuals_affected":41569,"breach_submission_date":"2026-07-10","enforcement_action_date":null,"summary":"","event_id":"6f41b49f-bee6-43c8-b673-85881c46a3a4","severity_score":70},{"record_id":"e367830f-733b-4f9a-aaba-48f2d5c1d18d","source_event_group_id":"8e8fef30-1ec5-4274-9575-bf9c7efe5a43","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Connecticut Institute for the Blind Inc. d/b/a Oak Hill","state":"CT","individuals_affected":1556,"breach_submission_date":"2026-07-01","enforcement_action_date":null,"summary":"","event_id":"8e8fef30-1ec5-4274-9575-bf9c7efe5a43","severity_score":50},{"record_id":"ff80b311-413e-4b3d-8107-052d7acac45f","source_event_group_id":"4f16dbf9-df1c-40b9-97c2-a8641558140e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Champaign-Urbana Public Health District","state":"IL","individuals_affected":501,"breach_submission_date":"2026-07-06","enforcement_action_date":null,"summary":"","event_id":"4f16dbf9-df1c-40b9-97c2-a8641558140e","severity_score":30},{"record_id":"97de827c-c756-4ef3-86ff-ee355d417a8b","source_event_group_id":"64acd430-4666-44b6-8f45-a460f30f8949","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Optalis Management Solutions","state":"MI","individuals_affected":13723,"breach_submission_date":"2026-06-29","enforcement_action_date":null,"summary":"","event_id":"64acd430-4666-44b6-8f45-a460f30f8949","severity_score":70},{"record_id":"f8e2a9f2-8c40-4cf4-bc5f-a09f825e483c","source_event_group_id":"ce63482f-a266-45c7-972e-76eb4967615e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AEON Clinical Laboratories, LLC","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AEON Clinical Laboratories, LLC paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI to a debt collector.","event_id":"ce63482f-a266-45c7-972e-76eb4967615e","severity_score":50},{"record_id":"f8515fbf-64b1-4c34-9559-caf7e33a8f2a","source_event_group_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sharp HealthCare","state":"CA","individuals_affected":2600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sharp HealthCare paid $2.2 million to OCR to settle potential HIPAA violations. The case involved the impermissible disclosure of PHI due to a lost unencrypted laptop.","event_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","severity_score":90},{"record_id":"f4305148-836e-40fa-8ed4-a540e872c6c9","source_event_group_id":"7a005624-45bd-4942-aa77-a1437c9ef608","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"American Medical Collection Agency","state":"NY","individuals_affected":20000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AMCA paid $25 million to resolve potential HIPAA violations after a cyberattack exposed the PHI of over 20 million individuals.","event_id":"7a005624-45bd-4942-aa77-a1437c9ef608","severity_score":90},{"record_id":"ec5e6bee-e18e-4d9e-a008-b846262d789b","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":33500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas MD Anderson Cancer Center paid $4.3 million to resolve potential HIPAA violations after the PHI of over 33,500 patients was impermissibly disclosed due to the theft of an unencrypted laptop and two unencrypted research USB drives.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"ead5fedd-aae9-4926-86e0-693df0656735","source_event_group_id":"ee2352f4-245b-47a5-9894-e583210f935b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dormitory Authority of the State of New York","state":"NY","individuals_affected":639017,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DASNY paid $475,000 to resolve potential HIPAA violations related to a breach of unsecured electronic protected health information (ePHI).","event_id":"ee2352f4-245b-47a5-9894-e583210f935b","severity_score":65},{"record_id":"e95dd638-09d7-4047-bd95-161e7652865a","source_event_group_id":"46e81aba-04ce-4da6-a061-039f748523f4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Dental Associates, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Dental Associates, P.C. paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Facebook.","event_id":"46e81aba-04ce-4da6-a061-039f748523f4","severity_score":50},{"record_id":"e9374b41-8ea6-495f-959f-5ab199b3dc14","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan, Inc.","state":"NY","individuals_affected":9300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excellus Health Plan, Inc. paid $5.1 million to resolve potential HIPAA violations after a cyberattack exposed the PHI of over 9.3 million individuals.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":90},{"record_id":"e667c1c6-c369-4108-acd8-c6d3c16e2ce1","source_event_group_id":"1af7350c-740b-4e92-abd9-4ac61b4c9aa0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aspire Indiana Health","state":"IN","individuals_affected":126000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aspire Indiana Health paid $1.5 million and agreed to a corrective action plan to settle potential HIPAA violations related to a phishing incident that exposed the PHI of over 126,000 individuals.","event_id":"1af7350c-740b-4e92-abd9-4ac61b4c9aa0","severity_score":90},{"record_id":"df505c96-0c63-4c2e-9a58-6bee8becf1c4","source_event_group_id":"dc3d5245-274c-476e-b785-9af9fd30fb57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peach Tree Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peach Tree Health paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI in response to a negative online review.","event_id":"dc3d5245-274c-476e-b785-9af9fd30fb57","severity_score":50},{"record_id":"c32c7200-2027-4f42-8ba6-df4b018f1334","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":3700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health paid $1.25 million to resolve potential HIPAA violations stemming from a cyberattack that exposed the PHI of over 3.7 million individuals.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"c28b4b4d-c8b4-4498-82da-da6fc331b575","source_event_group_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forefront Dermatology, S.C.","state":"WI","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forefront Dermatology, S.C. paid $300,000 to resolve potential HIPAA violations after a business associate impermissibly disclosed the ePHI of over 20,000 patients.","event_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","severity_score":65},{"record_id":"babd8faa-40df-4f9d-8890-693f46cec5dc","source_event_group_id":"5f70f75e-82ba-46b9-b5c1-c5bb778c710f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Independent Health","state":"NY","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Independent Health paid $250,000 to resolve potential HIPAA violations after a mailing error impermissibly disclosed the PHI of over 1,700 individuals.","event_id":"5f70f75e-82ba-46b9-b5c1-c5bb778c710f","severity_score":65},{"record_id":"b775ef1f-71e4-43e6-85e2-f819093eae0a","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System paid $2.4 million to resolve potential HIPAA violations after a former employee impermissibly accessed the PHI of over 300,000 patients.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"b6f799dc-49bb-43a9-87a6-4b50171390ee","source_event_group_id":"64177a99-aa0a-4e99-8a8b-58e1972c1c49","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Practice of Dr. David May and Dr. Candice May","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Dental Practice of Dr. David May and Dr. Candice May paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Google.","event_id":"64177a99-aa0a-4e99-8a8b-58e1972c1c49","severity_score":50},{"record_id":"9f2a09b8-2769-451e-8178-d079662a60b2","source_event_group_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group, P.C.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology Group, P.C., paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI to a patient's employer.","event_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","severity_score":50},{"record_id":"9d4dc89d-2b5c-4021-abc2-5938671d0dfb","source_event_group_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Orthopedic Clinic","state":"GA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Orthopedic Clinic paid $1.5 million to resolve potential HIPAA violations after a hacker stole the ePHI of 200,000 patients.","event_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","severity_score":90},{"record_id":"909b1d1c-51fe-43a7-9025-3905d0e0e79f","source_event_group_id":"46e81aba-04ce-4da6-a061-039f748523f4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Dental Associates, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Dental Associates, P.C. paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Facebook.","event_id":"46e81aba-04ce-4da6-a061-039f748523f4","severity_score":50},{"record_id":"900bb309-ce67-4365-b35c-934920a5adf8","source_event_group_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health","state":"CA","individuals_affected":6000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health paid $1.6 million to resolve potential HIPAA violations after the PHI of over 6,000 patients was impermissibly disclosed due to a misconfigured server.","event_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","severity_score":90},{"record_id":"8e9370cb-0bdf-41fc-8145-248089ce612c","source_event_group_id":"b134f779-3d61-4c34-ae9d-cada9ec633b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Rosenberg","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Rosenberg paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Yelp.","event_id":"b134f779-3d61-4c34-ae9d-cada9ec633b0","severity_score":50},{"record_id":"86ea0850-3de5-46bd-b94f-3c8de9918988","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center paid $4.75 million to resolve potential HIPAA violations after a misconfigured server impermissibly disclosed the PHI of over 12,000 patients.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":90},{"record_id":"7bf19583-9eaf-46de-840a-98acf0e16ad8","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":33000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health paid $300,000 to resolve potential HIPAA violations after impermissibly disclosing the PHI of over 33,000 individuals due to a misconfigured server.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":65},{"record_id":"738bcd5b-364e-4d0f-b7d7-527c3561df55","source_event_group_id":"ce63482f-a266-45c7-972e-76eb4967615e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AEON Clinical Laboratories, LLC","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AEON Clinical Laboratories, LLC paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI to a debt collector.","event_id":"ce63482f-a266-45c7-972e-76eb4967615e","severity_score":50},{"record_id":"630cfcc6-c94d-4e3e-a102-5547f0322eac","source_event_group_id":"94d4700b-e42c-4589-97e7-266312413dfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Medical Group","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Medical Group paid $3.5 million to resolve potential HIPAA violations related to a series of breaches that exposed the PHI of over 4 million individuals.","event_id":"94d4700b-e42c-4589-97e7-266312413dfa","severity_score":90},{"record_id":"625a0219-e428-4c03-91c0-74efa06fcba3","source_event_group_id":"5bbe4b61-54c0-4d3c-b072-7cc1efff62be","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peter Swann, M.D.","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peter Swann, M.D., paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Yelp.","event_id":"5bbe4b61-54c0-4d3c-b072-7cc1efff62be","severity_score":50},{"record_id":"5490cf71-b809-4a0a-b607-c3d0a02750dc","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care paid $1.55 million to resolve potential HIPAA violations after a business associate impermissibly disclosed the ePHI of over 200,000 patients.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"4f049d79-a986-4959-9414-54be747f03df","source_event_group_id":"fd69e3ee-59a7-4b16-83af-ee1d52293999","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Texas P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Texas P.A. paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Google.","event_id":"fd69e3ee-59a7-4b16-83af-ee1d52293999","severity_score":50},{"record_id":"47adc380-f1f0-4180-baa4-d98f822964d9","source_event_group_id":"e3a8ee99-ef3a-4f7e-b977-b08dbd3255d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Atain Specialty Insurance Company","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Atain Specialty Insurance Company paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI to a law firm.","event_id":"e3a8ee99-ef3a-4f7e-b977-b08dbd3255d2","severity_score":50},{"record_id":"42e2805f-de10-4d9c-9939-3031ca09581a","source_event_group_id":"b1674324-d171-4a99-b10a-272b71584dc2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northshore University HealthSystem","state":"IL","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northshore University HealthSystem paid $100,000 to OCR to settle potential HIPAA violations. The case involved an impermissible disclosure of protected health information (PHI) to a third-party vendor without a business associate agreement in place.","event_id":"b1674324-d171-4a99-b10a-272b71584dc2","severity_score":50},{"record_id":"309675ab-6760-417f-b517-59cfa6942c73","source_event_group_id":"8701d76a-81e4-412b-b8e6-cd66d57b8f5d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Community Care","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Community Care paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Facebook.","event_id":"8701d76a-81e4-412b-b8e6-cd66d57b8f5d","severity_score":50},{"record_id":"254cefd9-27a1-408e-a763-559681d3fbd7","source_event_group_id":"dc3d5245-274c-476e-b785-9af9fd30fb57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peach Tree Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peach Tree Health paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI in response to a negative online review.","event_id":"dc3d5245-274c-476e-b785-9af9fd30fb57","severity_score":50},{"record_id":"22903106-e9ed-45b1-b226-a62a59ec3b11","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management, LLC paid $25,000 to OCR to settle potential HIPAA violations. The case involved the impermissible disclosure of PHI in response to a negative online review.","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"14ae3b96-e101-4384-8c1a-f621da94bd38","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":4500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health paid $850,000 to resolve potential HIPAA violations stemming from a breach of ePHI affecting over 4.5 million individuals.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"13f9e415-3c59-4307-b4ec-5352de5597d3","source_event_group_id":"53c93be3-02d6-429c-8c1a-b4909fff1127","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Medical","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Medical paid $50,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on social media.","event_id":"53c93be3-02d6-429c-8c1a-b4909fff1127","severity_score":50},{"record_id":"fc3e0820-ca5b-48c5-b78f-6b6ae544b0d8","source_event_group_id":"7bb2826f-3255-4686-b3a3-19fffec7aff1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Comprehensive Breast Care","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Comprehensive Breast Care paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Facebook.","event_id":"7bb2826f-3255-4686-b3a3-19fffec7aff1","severity_score":50},{"record_id":"f11f383b-b774-41eb-8e25-41dc5c145530","source_event_group_id":"9f221cfd-d79d-4c63-a45d-9f570c7077f2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kornerstone Health, LLC (doing business as Kornerstone Medical)","state":"TX","individuals_affected":17204,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kornerstone Health, LLC (dba Kornerstone Medical) agreed to pay $130,000 to settle potential HIPAA violations after a breach of unsecured electronic protected health information (ePHI) affecting 17,204 individuals due to a lack of administrative and technical safeguards.","event_id":"9f221cfd-d79d-4c63-a45d-9f570c7077f2","severity_score":65},{"record_id":"def8cace-140e-4278-91dd-696b05e1699e","source_event_group_id":"2817f18f-2ba6-4694-93e3-461301b2e133","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connected Care IPA (Managed Care of North America)","state":"CA","individuals_affected":26,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connected Care IPA (Managed Care of North America) agreed to pay $80,000 to settle potential HIPAA violations after emails containing protected health information (PHI) were misdirected to unintended recipients.","event_id":"2817f18f-2ba6-4694-93e3-461301b2e133","severity_score":50},{"record_id":"d10a1d7b-daa4-4415-9ff9-7b4f42d92327","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":36000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra Health Services paid $1.7 million to resolve potential HIPAA violations after a stolen laptop containing the ePHI of over 36,000 patients was not encrypted.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"c68e6091-c3d8-47f0-bd1f-2605176501dc","source_event_group_id":"59941114-2151-4727-9101-35dee4a78493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University Irving Medical Center","state":"NY","individuals_affected":6500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CUIMC paid $300,000 to settle potential HIPAA violations after a server containing the PHI of over 6,500 patients was left unsecured.","event_id":"59941114-2151-4727-9101-35dee4a78493","severity_score":65},{"record_id":"824c2e42-6160-4932-ae20-902679f7e1dc","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, d.b.a. Peachstate Urgent Care","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management, LLC, d.b.a. Peachstate Urgent Care, paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI in response to a negative online review.","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"64237231-3d67-4964-8a46-97d0abe05ab9","source_event_group_id":"1af7350c-740b-4e92-abd9-4ac61b4c9aa0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aspire Indiana Health","state":"IN","individuals_affected":126000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aspire Indiana Health paid $1.5 million to resolve potential HIPAA violations after a phishing incident exposed the PHI of over 126,000 individuals.","event_id":"1af7350c-740b-4e92-abd9-4ac61b4c9aa0","severity_score":90},{"record_id":"47fd20f2-52b2-47ae-9a26-58ecdbecd1c4","source_event_group_id":"64177a99-aa0a-4e99-8a8b-58e1972c1c49","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Practice of Dr. David May and Dr. Candice May","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Dental Practice of Dr. David May and Dr. Candice May paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Google.","event_id":"64177a99-aa0a-4e99-8a8b-58e1972c1c49","severity_score":50},{"record_id":"41e765ca-0833-46ff-ad93-12fa1ebfb4e5","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":1800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"TX HHSC paid $1.6 million to settle potential HIPAA violations after a breach exposed the PHI of over 1.8 million individuals.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"32aabdac-af5f-4972-8654-541825e50367","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront St. Petersburg","state":"FL","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront St. Petersburg agreed to pay $85,000 to settle potential HIPAA violations after a breach of unsecured protected health information (PHI) affecting 12,000 individuals due to a lack of administrative safeguards.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"2300257a-6269-4f67-bbce-db0db5ea80b4","source_event_group_id":"bdc722b7-3f4e-4a86-bb75-f86a8ba9e89f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advantage Dental Plan, Inc.","state":"OR","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advantage Dental Plan, Inc. paid $1.7 million to OCR to settle potential HIPAA violations. The case involved the impermissible disclosure of PHI due to a misconfigured server.","event_id":"bdc722b7-3f4e-4a86-bb75-f86a8ba9e89f","severity_score":90},{"record_id":"0cc1162a-e8dd-4f48-ba1e-6281c4ea6f7b","source_event_group_id":"bedbbd97-9485-4cb5-a07b-09f070faacfe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Haven Mental Health Care","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Haven Mental Health Care paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on Google.","event_id":"bedbbd97-9485-4cb5-a07b-09f070faacfe","severity_score":50},{"record_id":"be9641c7-6c87-4b45-9eda-9f9c411c1f60","source_event_group_id":"f0871c7f-6408-4ffc-9c70-731029c7767f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, San Francisco Medical Center (UCSF Medical Center) and UCSF Campus","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unsecured ePHI on a peer-to-peer network was accessible, leading to a breach and resolution agreement.","event_id":"f0871c7f-6408-4ffc-9c70-731029c7767f","severity_score":50},{"record_id":"b67ca64b-f5f8-4311-b40b-acc8eaa40bc6","source_event_group_id":"96cdb12f-668d-43e0-bd8a-4edcbe567f7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Medical Laboratories","state":"CA","individuals_affected":1280,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Medical Laboratories agreed to pay $10,000 to settle potential HIPAA violations after impermissibly disclosing protected health information (PHI) of 1,280 individuals through unencrypted emails and text messages.","event_id":"96cdb12f-668d-43e0-bd8a-4edcbe567f7f","severity_score":50},{"record_id":"b5bfddc2-5670-4002-adc9-40fd5bd30d3f","source_event_group_id":"c7044c4e-0305-4605-8076-948c6d07a64f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"TeamCME","state":"GA","individuals_affected":2406,"breach_submission_date":null,"enforcement_action_date":null,"summary":"TeamCME, a nationwide network of clinics providing medical exams for commercial drivers, agreed to pay $750,000 to settle potential HIPAA violations stemming from a breach of unsecured electronic protected health information (ePHI).","event_id":"c7044c4e-0305-4605-8076-948c6d07a64f","severity_score":80},{"record_id":"ad36eafa-a058-40d5-a690-477289ad25a4","source_event_group_id":"8c4190f1-82d7-495e-88df-df03d390bd57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Atrium Health","state":"NC","individuals_affected":2650000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Atrium Health agreed to pay $1 million to settle potential HIPAA violations following a breach of unsecured protected health information (PHI) of 2.65 million individuals due to a third-party vendor's data security incident.","event_id":"8c4190f1-82d7-495e-88df-df03d390bd57","severity_score":80},{"record_id":"9650be84-f3d1-496b-b2fd-7ea588d60f8f","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California at Los Angeles Health System","state":"CA","individuals_affected":6000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of California at Los Angeles Health System (UCLA Health) agreed to pay $2,000,000 to settle potential HIPAA violations after a breach of unsecured electronic protected health information (ePHI) affecting 6,000 individuals due to unauthorized access.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":90},{"record_id":"9215e541-403e-40e3-b742-cd93bce62909","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health and Science University","state":"OR","individuals_affected":3462,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Oregon Health and Science University (OHSU) agreed to pay $2.7 million to settle potential HIPAA violations after a breach of unsecured electronic protected health information (ePHI) affecting nearly 3,500 individuals.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"7c5425cc-60b0-43ac-93b6-1d476e08ed30","source_event_group_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Psychiatric Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Riverside Psychiatric Group agreed to pay $25,000 to settle potential HIPAA violations after impermissibly disclosing protected health information (PHI) on online Yelp reviews.","event_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","severity_score":50},{"record_id":"3b9eca64-61b6-4bc9-8a53-19063d5d9a0c","source_event_group_id":"740d185f-1d5c-471f-8bd1-c9691c8a5d48","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allegheny Health Education and Research Institute (AHERI)","state":"PA","individuals_affected":80000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allegheny Health Education and Research Institute (AHERI) agreed to pay $1,150,000 to settle potential HIPAA violations after a breach of unsecured electronic protected health information (ePHI) affecting 80,000 individuals due to a lack of administrative and technical safeguards.","event_id":"740d185f-1d5c-471f-8bd1-c9691c8a5d48","severity_score":90},{"record_id":"39740c73-c606-453a-a194-fb44b847aee5","source_event_group_id":"6da3f9ac-4c4d-4855-a8f6-4ca2ee5721f0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":".MAP, P.C. (d.b.a. Family Health Care)","state":"AZ","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A medical practice in Arizona, .MAP, P.C. (doing business as Family Health Care), agreed to pay $100,000 to settle potential HIPAA violations related to the impermissible disclosure of protected health information (PHI) on a public website.","event_id":"6da3f9ac-4c4d-4855-a8f6-4ca2ee5721f0","severity_score":50},{"record_id":"fdedc4d4-f4c3-48e0-a3e1-16ed33b6fcfe","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery, P.C.","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A physician regularly posted PHI of patients on a publicly accessible online calendar, violating HIPAA.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"f4e15e77-1041-4f01-a349-c1cb42b3b2d4","source_event_group_id":"d7f47a50-8153-4a72-93e1-54ed133e618f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HVHC, Inc. (Visionworks)","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to supervise a business associate led to the unauthorized disclosure of patient information.","event_id":"d7f47a50-8153-4a72-93e1-54ed133e618f","severity_score":65},{"record_id":"e1c60061-ab85-4e1d-828c-c05b912ad98e","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee","state":"TN","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"57 unencrypted hard drives were stolen from a leased facility, resulting in a large data breach and settlement.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"ce507b3b-b0f9-4fbb-ba5e-614f8207f1d8","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation/Massachusetts General Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A surgeon impermissibly disclosed PHI in public, leading to an OCR investigation.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"ba65433b-3380-4280-a8ab-89e825641016","source_event_group_id":"c0294eaa-7060-499b-a8f9-2376a69e9c7e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"TERC","state":"MA","individuals_affected":1678,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unsecured ePHI on a laptop was stolen, leading to a breach and OCR resolution agreement.","event_id":"c0294eaa-7060-499b-a8f9-2376a69e9c7e","severity_score":50},{"record_id":"061ce86a-a645-46db-b785-7b06d7a01918","source_event_group_id":"c8d665b0-3b57-4e54-8986-e88d8a93b2ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Howard T. Stambor, MD and Michael C. Stambor, MD, P.A.","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Two physicians impermissibly disclosed PHI to a third-party vendor without a business associate agreement in place.","event_id":"c8d665b0-3b57-4e54-8986-e88d8a93b2ac","severity_score":50},{"record_id":"ab3b88dc-2706-40c1-bd36-697e34086cf6","source_event_group_id":"27e8f030-befa-43b5-84d6-6282097b3f9e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Operation PAR, Inc.","state":"FL","individuals_affected":145714,"breach_submission_date":"2026-06-25","enforcement_action_date":null,"summary":"","event_id":"27e8f030-befa-43b5-84d6-6282097b3f9e","severity_score":85},{"record_id":"60811041-6ad0-4563-885e-261547a2539c","source_event_group_id":"67c50763-73aa-4acf-9b56-39e710ec519d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cure Dental","state":"TX","individuals_affected":878,"breach_submission_date":"2026-06-23","enforcement_action_date":null,"summary":"","event_id":"67c50763-73aa-4acf-9b56-39e710ec519d","severity_score":30},{"record_id":"19235986-e369-48f9-a869-41fc7b36a3a3","source_event_group_id":"98f2a4ce-f74f-40d0-9e3b-4b10b3885f03","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MCBS, LLC","state":"GA","individuals_affected":1261464,"breach_submission_date":"2026-06-26","enforcement_action_date":null,"summary":"","event_id":"98f2a4ce-f74f-40d0-9e3b-4b10b3885f03","severity_score":95},{"record_id":"f8fee119-b1c0-44a0-ac3c-96959f228fe3","source_event_group_id":"b83705db-9238-475c-992f-e6f880ab7406","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Averhealth Holdings","state":"VA","individuals_affected":9909,"breach_submission_date":"2026-07-02","enforcement_action_date":null,"summary":"","event_id":"b83705db-9238-475c-992f-e6f880ab7406","severity_score":50},{"record_id":"4c4467fa-1012-4d44-99cd-1d13c4d6e953","source_event_group_id":"4f1240f2-577d-47c7-87d0-62ecb5d400ad","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HP Dental","state":"NY","individuals_affected":548,"breach_submission_date":"2026-07-06","enforcement_action_date":null,"summary":"","event_id":"4f1240f2-577d-47c7-87d0-62ecb5d400ad","severity_score":30},{"record_id":"3f24a130-c37e-44d3-b635-f8caf9293107","source_event_group_id":"e17ce0fb-204a-4e7f-9627-0b565d0e0e57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cherry Street Services, Inc.","state":"MI","individuals_affected":501,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"e17ce0fb-204a-4e7f-9627-0b565d0e0e57","severity_score":30},{"record_id":"27ec3b6a-723e-47b1-b2ce-fc32dd867b00","source_event_group_id":"551d3571-adc8-4944-9253-438f1157bc3a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hudson Valley Medical Billing & Credentialing, LLC","state":"NY","individuals_affected":5459,"breach_submission_date":"2026-07-07","enforcement_action_date":null,"summary":"","event_id":"551d3571-adc8-4944-9253-438f1157bc3a","severity_score":50},{"record_id":"0deb0491-2192-47fd-a7bf-9307ef68429b","source_event_group_id":"90c3a48c-60bd-4bfe-92ea-103dccda2e06","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sierra Management Group","state":"CA","individuals_affected":1279,"breach_submission_date":"2026-06-07","enforcement_action_date":null,"summary":"","event_id":"90c3a48c-60bd-4bfe-92ea-103dccda2e06","severity_score":50},{"record_id":"9ff96baa-860a-4ae3-88d7-abdc72f2f957","source_event_group_id":"c6fddac3-a95d-4ea6-9c97-bbd065464926","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advocate Warriors LLC","state":"ID","individuals_affected":750,"breach_submission_date":"2026-06-23","enforcement_action_date":null,"summary":"","event_id":"c6fddac3-a95d-4ea6-9c97-bbd065464926","severity_score":30},{"record_id":"57d96c1f-04b5-48cd-becc-47ed7d0c60f2","source_event_group_id":"e24644fd-0008-48cf-aa4d-47c908656aeb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Elara Caring","state":"TX","individuals_affected":22172,"breach_submission_date":"2026-06-23","enforcement_action_date":null,"summary":"","event_id":"e24644fd-0008-48cf-aa4d-47c908656aeb","severity_score":70},{"record_id":"510429e9-d946-4dfc-84c7-8f3637d93dd5","source_event_group_id":"3b035e62-c76a-439d-bfc5-4e2ae3e41b94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Washington Department of Social and Health Services","state":"WA","individuals_affected":8600,"breach_submission_date":"2026-06-30","enforcement_action_date":null,"summary":"","event_id":"3b035e62-c76a-439d-bfc5-4e2ae3e41b94","severity_score":50},{"record_id":"889bf330-18d7-4d32-a205-e2238eef943f","source_event_group_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Health (BSWH)","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Health (BSWH) agreed to pay $1,000,000 to settle potential HIPAA violations. The settlement addressed allegations of impermissible disclosure of protected health information (PHI) on social media, inadequate policies regarding social media, and a failure to properly train employees.","event_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","severity_score":80},{"record_id":"f55ca1d8-bfa5-43e0-8b49-254e156f459f","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, now BioTelemetry, Inc.","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, now BioTelemetry, Inc., agreed to pay $2.5 million to settle potential HIPAA violations. The settlement involved a stolen unencrypted laptop containing the PHI of 1,391 individuals.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"ef94469e-41d9-42fd-a0ca-a1daa3462cb2","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center (MD Anderson)","state":"TX","individuals_affected":34978,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas MD Anderson Cancer Center (MD Anderson) was issued a Civil Money Penalty (CMP) of $4,348,000 for HIPAA violations related to the loss of three unencrypted devices.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"de249dc3-383c-48da-8ee2-02ff2a52d43c","source_event_group_id":"6fb97c2a-249d-4522-9071-359cdec6bd6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Health Care (FHC)","state":"MI","individuals_affected":40300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Health Care (FHC) agreed to pay $106,950 to settle potential HIPAA violations. The settlement involved impermissible disclosures of PHI on a publicly accessible peer-to-peer file-sharing application.","event_id":"6fb97c2a-249d-4522-9071-359cdec6bd6e","severity_score":65},{"record_id":"bf72291f-d389-4658-a532-83ae7b62f135","source_event_group_id":"8db9621f-89b0-4611-907f-24c84713efff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagosa Springs Medical Center (PSMC)","state":"CO","individuals_affected":5570,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pagosa Springs Medical Center (PSMC) agreed to pay $111,400 to settle potential HIPAA violations. The settlement addressed impermissible disclosure of PHI when an unsecured server was accessible to the public on the internet.","event_id":"8db9621f-89b0-4611-907f-24c84713efff","severity_score":65},{"record_id":"912105a3-cc5b-4af3-86e2-e86760236078","source_event_group_id":"62addc6f-abfd-4b9a-a35d-a8a1751d05b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MCG Health, Inc.","state":"GA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCG Health, Inc. agreed to pay $1.5 million to settle potential HIPAA violations. The incident involved the impermissible PHI disclosure from a third-party vendor.","event_id":"62addc6f-abfd-4b9a-a35d-a8a1751d05b6","severity_score":90},{"record_id":"8d54d25f-391f-467c-a5dd-f48df0e0266e","source_event_group_id":"e06a27a5-1f87-4afb-8949-a25875aae192","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dekalb Medical Center","state":"GA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dekalb Medical Center agreed to pay $2.175 million to settle potential HIPAA violations. The settlement addressed impermissible disclosures of PHI due to mishandling of patient information by a business associate and a lack of proper oversight.","event_id":"e06a27a5-1f87-4afb-8949-a25875aae192","severity_score":90},{"record_id":"771e442f-a6bb-40b5-903e-71a0fa12f9f3","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst (UMass Amherst)","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Massachusetts Amherst (UMass Amherst) agreed to pay $650,000 and enter into a corrective action plan to settle potential HIPAA violations. The settlement addressed a breach of unsecured protected health information (PHI) due to a downloaded malware.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"75ed33fe-638d-45fe-9139-e42b88f1989b","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. (IGBINADOLOR)","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR announced its first civil money penalty (CMP) solely for a Right of Access violation against Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. (IGBINADOLOR). The provider failed to provide a patient with a copy of her protected health information (PHI) despite multiple requests.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"67387b5c-f28f-4161-b3d4-24ad55b537ca","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center (BMC)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boston Medical Center (BMC) agreed to pay $100,000 to settle potential HIPAA violations. The settlement addressed the impermissible disclosure of protected health information (PHI) concerning a patient being filmed by a local news crew without authorization.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"566d6a24-2b75-4527-bcf2-7cbb02ccce7d","source_event_group_id":"c6583cda-6d62-4530-91a4-b12416f4b1f5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Dental, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Dental, LLC agreed to pay $10,000 to settle potential HIPAA violations. The settlement addressed a failure to provide a patient with access to her protected health information (PHI) upon request. This marked the second enforcement action under OCR's Right of Access Initiative.","event_id":"c6583cda-6d62-4530-91a4-b12416f4b1f5","severity_score":50},{"record_id":"324b7fc2-e218-4037-b5ad-a40ca64d4e3d","source_event_group_id":"a21a4e80-4e12-4366-bb1d-a18da8b1f47c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metroplex Hospital","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metroplex Hospital agreed to pay $160,000 to settle potential HIPAA violations. The settlement involved impermissible disclosure of PHI due to the mailing of billing statements with sensitive information to incorrect addresses.","event_id":"a21a4e80-4e12-4366-bb1d-a18da8b1f47c","severity_score":65},{"record_id":"1a4ec69c-da30-475e-b9b7-94dd3541c698","source_event_group_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de Familia, Inc. (LCF)","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de Familia, Inc. (LCF) agreed to pay $75,000 to settle potential HIPAA violations. The settlement addressed impermissible disclosures of PHI related to a patient medical record request.","event_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","severity_score":50},{"record_id":"13828a57-2e9e-4b06-9dbb-91de1c408f2e","source_event_group_id":"badad353-f740-40cb-b0af-557d878f4d5f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Services of Long Island (CHS)","state":"NY","individuals_affected":398000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Services of Long Island (CHS) agreed to pay $2.33 million to settle potential HIPAA violations. The settlement addressed a breach involving stolen unencrypted backup tapes.","event_id":"badad353-f740-40cb-b0af-557d878f4d5f","severity_score":90},{"record_id":"11fd5447-c609-493d-842e-aee2056c4b0c","source_event_group_id":"f9bd3900-19ee-40f8-9edf-5aea48d8a944","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Chicago Lakeshore Hospital","state":"IL","individuals_affected":692,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Chicago Lakeshore Hospital agreed to pay $48,000 to settle potential HIPAA violations. The settlement involved impermissible disclosures of PHI due to a lost unencrypted laptop and issues with their business associate agreement.","event_id":"f9bd3900-19ee-40f8-9edf-5aea48d8a944","severity_score":50},{"record_id":"6eebbb6a-3184-47f5-9f06-4c3ee4b9b2f1","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1598,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County in Washington State settled potential HIPAA violations for impermissible disclosure of PHI when protected health information was inadvertently available on the internet.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"9daafe9e-b1ef-405f-976e-f4365cd7bd97","source_event_group_id":"8b03c8c4-b2bc-42ce-8e21-5ffd0c71de41","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anatomic and Clinical Laboratory Associates, P.C.","state":"TN","individuals_affected":169626,"breach_submission_date":"2026-06-23","enforcement_action_date":null,"summary":"","event_id":"8b03c8c4-b2bc-42ce-8e21-5ffd0c71de41","severity_score":85},{"record_id":"5366119e-c567-4313-a9fe-080818387425","source_event_group_id":"baa6b413-892d-4e40-a694-f5c3d80ce20f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NAS Recovery Solutions","state":"CO","individuals_affected":7000,"breach_submission_date":"2026-06-22","enforcement_action_date":null,"summary":"","event_id":"baa6b413-892d-4e40-a694-f5c3d80ce20f","severity_score":50},{"record_id":"f0b87bb4-1c21-48eb-8e4e-506aa0eea6cc","source_event_group_id":"18f7ed4a-e4b1-46c9-acb5-24e24ea7b11f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Systems","state":"TN","individuals_affected":6100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Community Health Systems (CHS) after receiving a breach report regarding the impermissible disclosure of the PHI of 6.1 million individuals.","event_id":"18f7ed4a-e4b1-46c9-acb5-24e24ea7b11f","severity_score":90},{"record_id":"ec1b54cd-4ef5-48c9-b5f7-928410152489","source_event_group_id":"5917fc29-f9e3-43e6-849e-aba78431e4b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagebreakers Medical Alliance","state":"TX","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Pagebreakers Medical Alliance after receiving a breach report regarding the impermissible disclosure of the PHI of 1,500 individuals.","event_id":"5917fc29-f9e3-43e6-849e-aba78431e4b0","severity_score":65},{"record_id":"38134419-7810-4cee-a1d3-7e75dc14b7b9","source_event_group_id":"9b28af4d-8d7e-410e-be8e-4144eec3a724","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diocese of Little Rock","state":"AR","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Diocese of Little Rock after receiving a breach report regarding the impermissible disclosure of the PHI of 1,000 individuals.","event_id":"9b28af4d-8d7e-410e-be8e-4144eec3a724","severity_score":50},{"record_id":"fbf6dd59-0a4f-474c-b52a-4acb3b56cec3","source_event_group_id":"cdebaeb2-2b4d-4c84-b3a9-d235782ed96f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Dental Associates","state":"CT","individuals_affected":3750,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Connecticut Dental Associates after receiving a breach report regarding impermissible disclosure of the PHI of 3,750 individuals.","event_id":"cdebaeb2-2b4d-4c84-b3a9-d235782ed96f","severity_score":65},{"record_id":"f9f3cb00-3774-49ec-b069-af3e00c59b21","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children’s Digestive Health","state":"IL","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CCDH after receiving a breach report regarding the impermissible disclosure of the PHI of 10,000 individuals.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"d5ce7d9f-062c-48c6-b8fc-dddbd1189fe3","source_event_group_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Children’s Hospital","state":"AR","individuals_affected":50000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Arkansas Children’s Hospital after receiving a breach report regarding the impermissible disclosure of the PHI of 50,000 individuals.","event_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","severity_score":90},{"record_id":"c69655e7-a592-4bf8-ba01-ba89b4f826f8","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Medical Center","state":"DC","individuals_affected":11000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Children's National Medical Center after receiving a breach report regarding the impermissible disclosure of the PHI of 11,000 individuals.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":80},{"record_id":"6edb569b-e639-4c70-ac90-5b465c9367ef","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, Los Angeles Health","state":"CA","individuals_affected":5500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Regents of the University of California, Los Angeles Health after receiving a breach report regarding the impermissible disclosure of the PHI of 5.5 million individuals.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":90},{"record_id":"5e357924-f68f-4345-b930-a757fff48789","source_event_group_id":"40e9e953-dd29-413c-a2b9-7c182ed2b1ae","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeon Community Health, Inc.","state":"TX","individuals_affected":19000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Paeon Community Health, Inc. after receiving a breach report regarding impermissible disclosure of the PHI of 19,000 individuals.","event_id":"40e9e953-dd29-413c-a2b9-7c182ed2b1ae","severity_score":65},{"record_id":"1ee3048d-a020-424f-a657-a98eed35a2f7","source_event_group_id":"312aa44a-22fc-42c6-8ed1-d063087d184c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group P.C.","state":"NJ","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medical Group P.C. after receiving a breach report regarding impermissible disclosure of 2,100 patients' PHI.","event_id":"312aa44a-22fc-42c6-8ed1-d063087d184c","severity_score":50},{"record_id":"f667526a-dadf-4e46-814e-7ec69568e02f","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital (NYP)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP settled for $3,300,000 after potential HIPAA violations, including the impermissible disclosure of ePHI to a film crew and the failure to conduct an adequate risk analysis. This case highlighted the importance of media policies and robust privacy protections.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"df1f276e-0669-4f24-9950-25185abeefc5","source_event_group_id":"3d5fe2b3-0350-47f8-abe1-83279b95ab26","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Public Hospital District d/b/a Skagit Valley Hospital","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County Public Hospital District settled for $215,000 after a breach involving an impermissible disclosure of ePHI to a business associate that lacked a business associate agreement. The organization also failed to conduct proper risk analyses.","event_id":"3d5fe2b3-0350-47f8-abe1-83279b95ab26","severity_score":65},{"record_id":"3b2892c2-a0e4-4944-bf92-4a0e062d8148","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System (UCLA HS)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA HS settled for $865,500 due to impermissible access to electronic protected health information by an employee. The case emphasized the importance of robust access controls and auditing mechanisms.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"33238f6b-458a-4836-a29e-19a82665e66b","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences","state":"AR","individuals_affected":750,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UAMS after receiving a breach report regarding the impermissible disclosure of the PHI of 750 individuals.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":80},{"record_id":"d3acf85b-d837-4c9f-82cb-e291242e7a7d","source_event_group_id":"40e9e953-dd29-413c-a2b9-7c182ed2b1ae","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community First Health Plans, Inc.","state":"TX","individuals_affected":1549,"breach_submission_date":"2026-06-29","enforcement_action_date":null,"summary":"","event_id":"40e9e953-dd29-413c-a2b9-7c182ed2b1ae","severity_score":50},{"record_id":"fddafb13-ad54-4bb4-bd7a-ee7c18c0e8ea","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services (ACMHS)","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACMHS settled after a malware infection compromised the ePHI of 2700 individuals, revealing a lack of timely and thorough risk analysis and proper security controls.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"e931a836-c03b-4f3f-a5ba-96513e1b0409","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Igbinadolor settled after impermissibly disclosing a patient's PHI in response to a negative online review, demonstrating a failure to protect patient privacy.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"8514ae22-d5fc-46e0-980d-ef2769d2e324","source_event_group_id":"ed76b26e-31ff-489b-a942-e3603041073c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allentown Psychiatric Associates","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allentown Psychiatric Associates settled after impermissibly disclosing a patient's PHI in response to a negative online review, revealing a lack of proper policies.","event_id":"ed76b26e-31ff-489b-a942-e3603041073c","severity_score":50},{"record_id":"77ed3c3a-c1ad-4f1c-86c3-edf237816531","source_event_group_id":"2b1f2130-f48f-45ef-bd6e-be8947dac169","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Harris Methodist Hospital Fort Worth","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health settled after failing to provide a patient with access to their medical records within the HIPAA-mandated timeframe, highlighting a right of access violation.","event_id":"2b1f2130-f48f-45ef-bd6e-be8947dac169","severity_score":50},{"record_id":"e37825db-16e0-444c-9d20-6b396d468be1","source_event_group_id":"c2b67b5e-d703-49cd-a8d0-ef00059a7cab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kmart Corporation","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kmart impermissibly disposed of protected health information (PHI) in dumpsters accessible to the public at various retail locations. This included PHI from pharmacies it acquired from other companies.","event_id":"c2b67b5e-d703-49cd-a8d0-ef00059a7cab","severity_score":65},{"record_id":"d69cabf1-b19c-4f50-8e37-7450fafe2f9d","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care of Minnesota","state":"MN","individuals_affected":28929,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care settled after an impermissible disclosure of PHI to a business associate, as well as a failure to have a business associate agreement in place.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"c722aff4-1cd3-4d56-b89d-56a0990742d9","source_event_group_id":"09eee58e-81d9-4a98-b86f-5e21a96bf94c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"âchea Community Health Services (CCHS)","state":"ME","individuals_affected":305,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCHS, a small community health services provider, settled with OCR after a breach involving a business associate who failed to dispose of medical records properly.","event_id":"09eee58e-81d9-4a98-b86f-5e21a96bf94c","severity_score":65},{"record_id":"7cf15524-d8ad-4357-a92c-3f07b75c706e","source_event_group_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de Familia, Inc.","state":"NM","individuals_affected":900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de Familia, a federally qualified health center, settled after multiple breaches, including a stolen unencrypted laptop and a misdirected fax, exposing PHI of hundreds of individuals.","event_id":"5c52ea4a-9f32-4596-b77b-d5c4284c6421","severity_score":65},{"record_id":"3a7ed410-d7f8-4067-82d8-b15c7c91a439","source_event_group_id":"1ba0eb7c-0563-480d-84e4-75a971b874e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kingston Psychiatric P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kingston Psychiatric settled after failing to provide a patient's personal representative with timely access to medical records, violating the HIPAA Right of Access.","event_id":"1ba0eb7c-0563-480d-84e4-75a971b874e6","severity_score":50},{"record_id":"29789df3-da4e-4fb6-9893-a44be986b1e5","source_event_group_id":"33626d50-fdb9-4571-8e95-643dcbf51e2f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rechtman & Spevak","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rechtman & Spevak, a law firm, settled after failing to provide a former client with timely access to their medical records, violating the HIPAA Right of Access.","event_id":"33626d50-fdb9-4571-8e95-643dcbf51e2f","severity_score":50},{"record_id":"c5a15a32-aff4-4652-a7ee-8a789c04c207","source_event_group_id":"dd9433bd-78f2-45a4-8464-87b9dfe0b007","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Midland Care Connection, Inc","state":"KS","individuals_affected":4457,"breach_submission_date":"2026-05-06","enforcement_action_date":null,"summary":"","event_id":"dd9433bd-78f2-45a4-8464-87b9dfe0b007","severity_score":50},{"record_id":"86e183c8-c900-483f-a183-439dd95dffe3","source_event_group_id":"04df6d33-45ca-4c00-936a-0bb587b6ee5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carle Health","state":"IL","individuals_affected":1444,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"04df6d33-45ca-4c00-936a-0bb587b6ee5e","severity_score":50},{"record_id":"4e9f4747-bb46-4689-83c5-69fae994ea55","source_event_group_id":"5ee284ac-49cc-473b-b812-61c213fac2d9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Medicaid and Healthcare Partnership","state":"TX","individuals_affected":2045,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"5ee284ac-49cc-473b-b812-61c213fac2d9","severity_score":50},{"record_id":"d4fa6e38-5e58-471c-af17-527f18f32fd4","source_event_group_id":"5906a9a4-fa4b-404e-8a0a-fe5ce3e647d1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Meridian Health Plan of Illinois","state":"IL","individuals_affected":21027,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"5906a9a4-fa4b-404e-8a0a-fe5ce3e647d1","severity_score":70},{"record_id":"ce07cd59-8d74-4131-bab7-62013b2becbe","source_event_group_id":"acee651b-c70f-4dc8-a557-aa950a8f66e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UnitedHealth Care Services, Inc. Single Affiliated Covered Entity","state":"CT","individuals_affected":37384,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"acee651b-c70f-4dc8-a557-aa950a8f66e4","severity_score":70},{"record_id":"5277171e-c76b-416c-bd7d-117d4001a974","source_event_group_id":"ff7da6cf-364c-4b12-bfe4-2450928efe1f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Private National Mortgage Acceptance Company, LLC Group Health Plan","state":"CA","individuals_affected":3972,"breach_submission_date":"2026-06-09","enforcement_action_date":null,"summary":"","event_id":"ff7da6cf-364c-4b12-bfe4-2450928efe1f","severity_score":50},{"record_id":"5161056e-3837-4e67-8d59-1a322b7a495c","source_event_group_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NYC Health + Hospitals","state":"NY","individuals_affected":58778,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","severity_score":70},{"record_id":"31e4d3b1-0fa9-442f-b359-e24d224176a0","source_event_group_id":"6c9f2506-0210-4900-ad7e-d97881bdb54a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allina Health","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allina Health agreed to pay $85,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"6c9f2506-0210-4900-ad7e-d97881bdb54a","severity_score":50},{"record_id":"30eb58d3-a3f0-42ba-8479-50d8bf1114a7","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health was issued a $4.3 million Civil Money Penalty for HIPAA violations related to denying patients their right to access their medical records and for failing to cooperate with OCR's investigation.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"eb64c7f1-6740-4c25-81c7-c06ed6c7d9a5","source_event_group_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Georgia Ambulance","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Georgia Ambulance agreed to pay $65,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","severity_score":50},{"record_id":"e9f3a238-2f9f-4324-9708-397aa75f11be","source_event_group_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Eye Care","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Eye Care agreed to pay $25,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation regarding the patient right of access.","event_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","severity_score":50},{"record_id":"be6d0db7-e336-4f71-8503-06cb2387c402","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services d.b.a. Carolina Complete Health","state":"NC","individuals_affected":1400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services d.b.a. Carolina Complete Health agreed to pay $25,000 to OCR and adopt a corrective action plan to settle potential HIPAA violations related to the impermissible disclosure of PHI.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"a2b0222b-3aeb-4a5b-9427-6deb2e6740d9","source_event_group_id":"9ab7f413-9502-4f10-a2b8-fb944bca206a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Health Associates, LTD","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Health Associates, LTD agreed to pay $25,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"9ab7f413-9502-4f10-a2b8-fb944bca206a","severity_score":50},{"record_id":"9c7f7825-cc45-47cf-a913-fd4993216a27","source_event_group_id":"0c310606-3b91-4910-8d1d-b5448df882a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Associates","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Records Associates (MRA) agreed to pay $10,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"0c310606-3b91-4910-8d1d-b5448df882a1","severity_score":50},{"record_id":"72aca4c8-0255-428d-88cb-14877b540559","source_event_group_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's & Infants' Hospital of Rhode Island","state":"RI","individuals_affected":1419,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's & Infants' Hospital of Rhode Island agreed to pay $408,000 and implement a corrective action plan to settle potential HIPAA violations after an employee impermissibly disclosed PHI.","event_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","severity_score":65},{"record_id":"5dcfd022-a41e-4445-8f7c-5c9377fca4c6","source_event_group_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Works, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Housing Works, Inc. agreed to pay $38,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","severity_score":50},{"record_id":"4e745962-f08c-4573-a7d4-015b36d29044","source_event_group_id":"10860b3e-16c1-4cdc-9fc1-a7437bb080c3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCHIN, Inc","state":"OR","individuals_affected":1400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCHIN, Inc. agreed to a corrective action plan without a monetary settlement for failing to provide timely breach notifications after a cybersecurity incident.","event_id":"10860b3e-16c1-4cdc-9fc1-a7437bb080c3","severity_score":55},{"record_id":"20d697c7-5d0d-4c43-8e09-5e6c9aadb7af","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg agreed to pay $85,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"1c8a0b8c-ce79-47fe-887a-275db683fcea","source_event_group_id":"32005b20-72f9-4c9e-a3bd-0d00ec1fcd64","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Medical Specialists","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Emergency Medical Specialists agreed to pay $10,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"32005b20-72f9-4c9e-a3bd-0d00ec1fcd64","severity_score":50},{"record_id":"fb70a00e-c14b-4da2-be45-54ccf5b40767","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":null,"individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGH paid $1,000,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations related to the loss of unsecured protected health information.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"f0a36b8c-8720-4688-a603-771a56760a34","source_event_group_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospital of the University of Pennsylvania","state":"PA","individuals_affected":800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Hospital of the University of Pennsylvania paid $500,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissible disclosures of protected health information of 800 individuals.","event_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","severity_score":65},{"record_id":"c5ffaeac-9e0e-4629-892d-cf77dd6bb724","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":9500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care agreed to pay $1.55 million to OCR and adopt a corrective action plan to settle potential HIPAA violations arising from two breaches by a business associate.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"960b5713-ab00-4464-b0bd-f9bccb91422c","source_event_group_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark Corporation","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark Corporation paid $2.25 million to resolve potential HIPAA violations.","event_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","severity_score":90},{"record_id":"6dc4dbe9-9487-4f01-90e3-747b0300256d","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":36373,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson Cancer Center was issued a $4.3 million civil money penalty for HIPAA violations related to the theft of computing devices containing unencrypted ePHI.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"646b99a5-57e0-4508-90fa-d934858b0435","source_event_group_id":"5aed74b7-077a-402f-b24b-27bfaf0bde9c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Harvard Medical School Teaching Hospital Affiliate Program","state":"MA","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Harvard Medical School Teaching Hospital Affiliate Program agreed to pay $5.5 million to OCR and adopt a corrective action plan to settle potential HIPAA violations related to impermissible disclosure of PHI.","event_id":"5aed74b7-077a-402f-b24b-27bfaf0bde9c","severity_score":90},{"record_id":"5d882083-2e02-4c15-8441-ce85da60507f","source_event_group_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hospital of the University of Pennsylvania","state":"PA","individuals_affected":800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HUP paid $500,000 and adopted a corrective action plan to settle potential HIPAA violations after impermissible disclosures of protected health information of 800 individuals.","event_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","severity_score":65},{"record_id":"56a8769d-4853-4596-b381-5112b67af0c1","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC agreed to pay $85,000 to OCR and adopt a corrective action plan to settle a potential HIPAA violation of the patient right of access.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"4b2b1ad2-979e-4656-9790-624f4de2731f","source_event_group_id":"5b7425a5-561c-4079-b59a-b6c93302636e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of Greater New York, Inc. (MSO)","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO paid $70,000 and adopted a corrective action plan to settle potential HIPAA violations after a business associate impermissibly disclosed protected health information.","event_id":"5b7425a5-561c-4079-b59a-b6c93302636e","severity_score":50},{"record_id":"265a4278-9c5c-4db2-9d8a-16b5e2a8a118","source_event_group_id":"c5abb6f7-b00e-4271-a6a6-8014acbfa238","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Medical Group","state":"VA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Medical Group paid $25,000 for potential HIPAA violations after impermissibly disclosing protected health information.","event_id":"c5abb6f7-b00e-4271-a6a6-8014acbfa238","severity_score":50},{"record_id":"08b18a64-cbb1-46a2-a968-bb75ed4c3e97","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Pharmacy, Inc. paid $2.25 million to resolve potential HIPAA violations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"001b69e1-7900-4ca5-aef8-c1cd12601f3e","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FileFax, Inc.","state":"NC","individuals_affected":2150,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FileFax, Inc. agreed to pay $100,000 to OCR and adopt a corrective action plan to settle potential HIPAA violations after a court ordered the release of medical records.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":50},{"record_id":"be9be03f-b99e-42d2-b923-fa34f9665b23","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Pharmacy, Inc. paid $2.2 million to resolve potential HIPAA violations involving the improper disposal of protected health information.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"07c2b790-1792-4738-944f-de3522ddd0cb","source_event_group_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark Corporation","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark Corporation paid $2.25 million to resolve potential HIPAA violations involving the improper disposal of protected health information.","event_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","severity_score":90},{"record_id":"6b8cbfad-9ec0-4a7c-a8f4-7be3532fda6d","source_event_group_id":"632c51ad-4512-4a20-b9d6-60f4dd9c0ebf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Centers Lab NJ LLC","state":"NJ","individuals_affected":542377,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"632c51ad-4512-4a20-b9d6-60f4dd9c0ebf","severity_score":95},{"record_id":"1b7194de-414c-43c2-ae7a-604a224173b1","source_event_group_id":"7fb06f16-dc1a-4551-8e8f-e26a9fc4eb2a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Health Centers of Southern Indiana","state":"IL","individuals_affected":7117,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"7fb06f16-dc1a-4551-8e8f-e26a9fc4eb2a","severity_score":50},{"record_id":"53a7f8c9-c18f-4aa9-b088-d962fb68bc5d","source_event_group_id":"5c1600d1-5ee6-4427-8c9a-7305653b00d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Columbia Orthopaedic Group","state":"MO","individuals_affected":500,"breach_submission_date":"2026-06-18","enforcement_action_date":null,"summary":"","event_id":"5c1600d1-5ee6-4427-8c9a-7305653b00d8","severity_score":30},{"record_id":"b676bc81-0ce0-4457-9a65-daf85163498c","source_event_group_id":"faa25540-760d-45ce-930c-457a24718aaf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Open Arms Care Corporation","state":"TN","individuals_affected":893,"breach_submission_date":"2026-06-11","enforcement_action_date":null,"summary":"","event_id":"faa25540-760d-45ce-930c-457a24718aaf","severity_score":30},{"record_id":"fe1697cb-e98a-405a-b697-0d6a99a4aea6","source_event_group_id":"6dcebf66-8cf2-413a-992c-6596713ba1e0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clinical Registry Solutions","state":"NY","individuals_affected":8545,"breach_submission_date":"2026-06-12","enforcement_action_date":null,"summary":"","event_id":"6dcebf66-8cf2-413a-992c-6596713ba1e0","severity_score":50},{"record_id":"d4276997-897c-4bbd-ad90-415f8a504581","source_event_group_id":"7ef8f43e-0a66-4bd8-a23b-1023a20c5e4a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Waveny LifeCare Network, Inc.","state":"CT","individuals_affected":27113,"breach_submission_date":"2026-06-02","enforcement_action_date":null,"summary":"","event_id":"7ef8f43e-0a66-4bd8-a23b-1023a20c5e4a","severity_score":70},{"record_id":"845254e5-1222-490f-9f46-22843ca3016e","source_event_group_id":"137ac703-88ae-41ac-b3d8-3fa442421e50","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Decatur Diagnostic Laboratory Inc.","state":"AL","individuals_affected":500,"breach_submission_date":"2026-06-16","enforcement_action_date":null,"summary":"","event_id":"137ac703-88ae-41ac-b3d8-3fa442421e50","severity_score":30},{"record_id":"c82eb3bb-a452-4538-837c-35129659af23","source_event_group_id":"0b237051-55d8-4484-8de0-077ae3637ae5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sturdy Health, Inc.","state":"MA","individuals_affected":1006,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"0b237051-55d8-4484-8de0-077ae3637ae5","severity_score":50},{"record_id":"b3705725-73f1-490d-b504-8b4e2b738b8c","source_event_group_id":"e9abe289-6260-4dfe-b8db-286d8430376a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aitkin County Health and Human Services","state":"MN","individuals_affected":83114,"breach_submission_date":"2026-06-17","enforcement_action_date":null,"summary":"","event_id":"e9abe289-6260-4dfe-b8db-286d8430376a","severity_score":70},{"record_id":"73f4daa4-420f-4442-b9bf-f2df4cf284da","source_event_group_id":"35bc3b59-07f0-4f90-aa03-4b09fa15648f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Fish Pediatrics","state":"TX","individuals_affected":62150,"breach_submission_date":"2026-06-17","enforcement_action_date":null,"summary":"","event_id":"35bc3b59-07f0-4f90-aa03-4b09fa15648f","severity_score":70},{"record_id":"71674b76-0aa1-4358-9f74-3a0f27d63629","source_event_group_id":"0b92d8ec-bc0f-4d9f-88a0-a44666ca23df","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Center of Buffalo Inc.","state":"NY","individuals_affected":501,"breach_submission_date":"2026-06-19","enforcement_action_date":null,"summary":"","event_id":"0b92d8ec-bc0f-4d9f-88a0-a44666ca23df","severity_score":30},{"record_id":"fded11eb-cdd2-4c0e-ab56-485e1d0246d9","source_event_group_id":"a4cdc816-2963-4848-aa6b-4b7229009337","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wasatch Front Eye Consultants","state":"UT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wasatch Front Eye Consultants paid $25,000 to OCR to settle potential HIPAA violations related to impermissible disclosure of patient PHI.","event_id":"a4cdc816-2963-4848-aa6b-4b7229009337","severity_score":50},{"record_id":"ce0ac41d-468d-4abb-8c27-39d2eb829329","source_event_group_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Resources","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Resources paid $240,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","severity_score":65},{"record_id":"bb531bd2-01cf-4838-a4d7-f80a8d3f3e6b","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center (URMC)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"URMC paid $3 million to OCR to settle potential HIPAA violations related to impermissible disclosures of patient PHI.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"b29bf0c7-414a-4e3a-be2b-733faf7e643b","source_event_group_id":"24232216-a743-4d8a-b42b-d03ce9e3dcb3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Correctional Health Services","state":"PR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Correctional Health Services paid $98,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"24232216-a743-4d8a-b42b-d03ce9e3dcb3","severity_score":50},{"record_id":"9ba5df6c-9b79-4826-8b4f-9dd69cf22e8b","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals paid $2.175 million to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":90},{"record_id":"86c3fc1e-17e6-4f64-83f5-fe990b1b1b1f","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Shasta Regional Medical Center paid $275,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":65},{"record_id":"85993d70-f0ef-4442-bb4c-a02111be8127","source_event_group_id":"9c8f8758-9899-4cdd-b73c-b0dfd1edda6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Charlotte Radiology","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Charlotte Radiology paid $55,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"9c8f8758-9899-4cdd-b73c-b0dfd1edda6a","severity_score":50},{"record_id":"687d9acb-82c5-4c10-a6bf-5efe8c4ac392","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America (FMCNA)","state":"MA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FMCNA paid $3.5 million to OCR to settle potential HIPAA violations related to the impermissible disclosure of protected health information.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"549b68b6-6f0f-4509-96a5-6e72d485afe9","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center paid $160,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":65},{"record_id":"49e796a3-837d-4b8d-b106-986b2d28ecca","source_event_group_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson & Coker","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson & Coker paid $120,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","severity_score":65},{"record_id":"444e3f79-ddbc-42a8-960c-e44658a4a835","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Rochester Medical Center paid $3 million to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records and impermissible disclosure.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"2d1b1b43-a791-45ff-8dc3-229b2b6fa9a7","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS paid $650,000 to OCR to settle potential HIPAA violations related to a breach of unsecured electronic protected health information (ePHI).","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"249a2cef-a1a7-4eff-a6a5-4e080cb7c7b4","source_event_group_id":"274249d6-f463-4032-a4f0-6561d8802400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King MD","state":"MD","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"King MD paid $3,500 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"274249d6-f463-4032-a4f0-6561d8802400","severity_score":50},{"record_id":"23c80262-1bbd-405f-8cb0-b828a1726ba1","source_event_group_id":"e2b2dfe4-676d-478b-b7b3-71848ca8815b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kaiser Foundation Health Plan of Georgia","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser Foundation Health Plan of Georgia paid $240,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"e2b2dfe4-676d-478b-b7b3-71848ca8815b","severity_score":65},{"record_id":"f2ac5594-e419-4099-92f4-0a12a43561ea","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Care Alliance paid $250,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":65},{"record_id":"e303f484-53e3-401e-9694-67fcac52d87e","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMMC paid $2.75 million to OCR to settle potential HIPAA violations resulting from the loss of a laptop containing ePHI.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"c23d9eb4-5f0a-4467-8744-1f9715dfee67","source_event_group_id":"67f9e02e-b84c-45d3-97f5-3af32e6d7917","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A settlement was reached with an undisclosed entity for impermissible disclosure of protected health information due to a lack of administrative safeguards.","event_id":"67f9e02e-b84c-45d3-97f5-3af32e6d7917","severity_score":55},{"record_id":"bd420ebc-87a1-4203-9869-d49d826bb3e9","source_event_group_id":"dd19d1fe-7920-4900-ae0d-ad294d2cdc6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem PPO members","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem, Inc. paid $16 million to OCR to settle potential HIPAA violations related to a massive data breach affecting nearly 79 million individuals.","event_id":"dd19d1fe-7920-4900-ae0d-ad294d2cdc6d","severity_score":90},{"record_id":"b07cf7be-5496-4eb8-a6be-4fc0de9f176a","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC paid $85,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"ad1a9e79-f051-4b34-b64b-c19215b95e43","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians, P.A.","state":"CA","individuals_affected":2212,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Physicians, P.A. paid $95,000 to OCR and agreed to implement a corrective action plan to settle potential HIPAA violations, specifically related to impermissible disclosure of patients' protected health information.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"a8d9fa85-a362-40ff-a3b0-b227d0eb4739","source_event_group_id":"1bf334a1-ec6b-471d-8ed2-e280676b89e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excela Health","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excela Health paid $37,500 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"1bf334a1-ec6b-471d-8ed2-e280676b89e3","severity_score":50},{"record_id":"683b50e0-901a-4f6b-b937-7787d1b123d8","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Feinstein Institute for Medical Research","state":"NY","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Feinstein Institute for Medical Research paid $3.9 million to OCR to settle potential HIPAA violations resulting from the theft of a laptop containing PHI.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":90},{"record_id":"5ff7a620-b145-401e-b117-f7bc5957582b","source_event_group_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Eye Care","state":"MN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Eye Care paid $25,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","severity_score":50},{"record_id":"5f96a2d0-c776-4e73-a0f0-d7d4e435d770","source_event_group_id":"ddb8f98d-e3cc-43ad-9b12-144e476c6c7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Practice of San Antonio","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Practice of San Antonio paid $20,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"ddb8f98d-e3cc-43ad-9b12-144e476c6c7f","severity_score":50},{"record_id":"5575516c-4677-44ec-acb3-07ff1ba4cd56","source_event_group_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Works, Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Housing Works, Inc. paid $38,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","severity_score":50},{"record_id":"3fb7abe9-986c-4ea3-afad-8d2681fb9580","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas (MGC)","state":"SC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGC paid $33,000 to OCR to settle potential HIPAA violations related to impermissible disclosure of protected health information.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":50},{"record_id":"2a440aa2-85a6-4deb-99cf-a7a81a9e2080","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates paid $10,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"29fbdec6-d55d-45a7-8de2-d8094578bcbc","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst (UMASS)","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMASS paid $650,000 to OCR to settle potential HIPAA violations related to the impermissible disclosure of protected health information.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"1dbe03b3-01ca-4920-9556-e968026ce887","source_event_group_id":"57f168fd-54b6-4f84-83d9-0c5a81b27053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management (ASPM)","state":"OH","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ASPM paid $32,000 to OCR to settle potential HIPAA violations related to the impermissible disclosure of protected health information on Yelp.","event_id":"57f168fd-54b6-4f84-83d9-0c5a81b27053","severity_score":50},{"record_id":"11cbd7ca-1f64-4943-98dd-2f01b11439a2","source_event_group_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lincare, Inc.","state":"FL","individuals_affected":278,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lincare, Inc. paid $239,800 to OCR and agreed to a corrective action plan to settle potential HIPAA violations, specifically related to impermissible disclosure of patients' protected health information.","event_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","severity_score":65},{"record_id":"090f5bb6-8eee-4402-93ee-65339185255b","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Network paid $10,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":50},{"record_id":"f4841cc1-7ab9-48e9-bb7a-779188836f35","source_event_group_id":"057e3c79-6c20-478c-9ed0-42199bf1e9cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Medicaid","state":"AK","individuals_affected":170000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Alaska Medicaid experienced a breach involving a USB hard drive containing protected health information. This case is related to the State of Alaska, Department of Health and Social Services action.","event_id":"057e3c79-6c20-478c-9ed0-42199bf1e9cd","severity_score":55},{"record_id":"e78a0187-3b3d-486a-8766-02419877a4aa","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"State of Alaska, Department of Health and Social Services","state":"AK","individuals_affected":170000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The State of Alaska, Department of Health and Social Services, experienced a breach involving a USB hard drive containing protected health information.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"cb442353-c2ae-4056-af8d-91ac6f7c4220","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg paid $85,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"c5b85333-86da-4727-8c39-41709dadc51f","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center paid $160,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"c548eedc-79a8-411c-b2b9-d44538a848a2","source_event_group_id":"7374456f-cc89-4a7b-b455-22ea98368e1b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Healthcare, LLC","state":"TX","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Healthcare paid $25,000 to OCR to settle potential HIPAA violations related to the impermissible disclosure of protected health information.","event_id":"7374456f-cc89-4a7b-b455-22ea98368e1b","severity_score":50},{"record_id":"c1e42d99-3434-4a6d-b52d-170419d2ea73","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University (OHSU)","state":"OR","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OHSU paid $2.7 million to OCR to settle potential HIPAA violations resulting from breaches of unsecured electronic protected health information (ePHI).","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"b4ceeb15-13c2-4d40-8ff2-91318bae7b2c","source_event_group_id":"9ed740fe-e0e9-453e-aaa2-c8638084ecd1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Harmony Hospice, Inc.","state":"CO","individuals_affected":236,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Harmony Hospice paid $34,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations related to impermissible disclosure of patients' protected health information.","event_id":"9ed740fe-e0e9-453e-aaa2-c8638084ecd1","severity_score":50},{"record_id":"abd09409-f3b6-40f6-bf20-e26c812e8ef5","source_event_group_id":"0ffe922c-7255-44a8-8d4b-2ab71f3c8fc5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physiotherapy Associates","state":"TN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Physiotherapy Associates paid $25,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"0ffe922c-7255-44a8-8d4b-2ab71f3c8fc5","severity_score":50},{"record_id":"8bcd1849-a7c6-4a12-9896-53959d1295a3","source_event_group_id":"3158001e-c380-439b-b488-dc890d4038b5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Resurgens Orthopaedics","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Resurgens Orthopaedics paid $75,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"3158001e-c380-439b-b488-dc890d4038b5","severity_score":50},{"record_id":"77489297-44b9-4553-9542-8240daec6575","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center (SEMC)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SEMC agreed to pay $218,400 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"4ae6fe40-e032-4960-a526-e1ad97892c97","source_event_group_id":"7ffcdfcf-1a8f-4c0f-97d8-d652e2cd2eef","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MedRod, Inc.","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MedRod, Inc. paid $3,500 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"7ffcdfcf-1a8f-4c0f-97d8-d652e2cd2eef","severity_score":50},{"record_id":"1c2b2a16-fc9a-44ca-99e8-ef9d801f0e04","source_event_group_id":"5a54e1e2-81e5-4a26-baba-4032df68cecc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Atlanta Medical Center","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Atlanta Medical Center impermissibly disclosed the protected health information of a patient by leaving medical records in an unsecured area.","event_id":"5a54e1e2-81e5-4a26-baba-4032df68cecc","severity_score":55},{"record_id":"174cf768-6eb0-4f48-abe5-7cbff1f82cae","source_event_group_id":"77a75c52-d755-44a3-a9f3-6692ba70e73a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UnityPoint Health – Waterloo","state":"IA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UnityPoint Health – Waterloo paid $160,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"77a75c52-d755-44a3-a9f3-6692ba70e73a","severity_score":65},{"record_id":"16c94461-a005-4c57-9809-54e7e4475d82","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health, Inc.","state":"IN","individuals_affected":559000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health agreed to pay $5.1 million for potential HIPAA violations related to impermissible disclosures of protected health information.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":90},{"record_id":"13832e37-784b-477f-8d3a-763eca0bd512","source_event_group_id":"856dc7ce-ad72-44f2-9230-64429f5bbd80","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Genomics, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete Genomics, Inc. impermissibly disclosed protected health information on its public website.","event_id":"856dc7ce-ad72-44f2-9230-64429f5bbd80","severity_score":55},{"record_id":"0cbd931d-7300-448b-9f55-2e0583c43eda","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System","state":"IN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health System paid $800,000 to OCR to settle potential HIPAA violations related to delays in providing a patient access to their medical records.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"968b22bd-fba6-4938-873e-7a163c918894","source_event_group_id":"f46b4434-66ac-44f6-852d-d6a988bc1308","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carlyle Senior Care Management Company, Inc.","state":"SC","individuals_affected":4060,"breach_submission_date":"2026-05-27","enforcement_action_date":null,"summary":"","event_id":"f46b4434-66ac-44f6-852d-d6a988bc1308","severity_score":50},{"record_id":"1f5e6079-6bde-418d-865f-eb2a6ec1d1e9","source_event_group_id":"f8245841-8ff2-4c9f-bf52-745edbb19e05","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Monaco & Associates Incorporated","state":"KS","individuals_affected":534,"breach_submission_date":"2026-06-09","enforcement_action_date":null,"summary":"","event_id":"f8245841-8ff2-4c9f-bf52-745edbb19e05","severity_score":30},{"record_id":"b391666c-3474-4868-a416-d387c1693d84","source_event_group_id":"9762b3a4-298d-4651-897b-b79156c363cd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"All About Women's Care","state":"CO","individuals_affected":12000,"breach_submission_date":"2026-06-03","enforcement_action_date":null,"summary":"","event_id":"9762b3a4-298d-4651-897b-b79156c363cd","severity_score":70},{"record_id":"612f6d27-5396-4a45-be99-9a1240620ad6","source_event_group_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Erlanger Health","state":"TN","individuals_affected":4237,"breach_submission_date":"2026-07-01","enforcement_action_date":null,"summary":"","event_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","severity_score":50},{"record_id":"74503ee7-c8ac-48cf-9f5d-eb87a77037ed","source_event_group_id":"acee651b-c70f-4dc8-a557-aa950a8f66e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UnitedHealth Care Services, Inc. Single Affiliated Covered Entity","state":"CT","individuals_affected":34574,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"acee651b-c70f-4dc8-a557-aa950a8f66e4","severity_score":70},{"record_id":"420bb69e-f2b8-4820-8bbd-3fa85672994e","source_event_group_id":"c03f88ef-55f1-4bfe-baf2-1a467daa1406","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lutheran Home for the Aged","state":"MO","individuals_affected":2311,"breach_submission_date":"2026-06-08","enforcement_action_date":null,"summary":"","event_id":"c03f88ef-55f1-4bfe-baf2-1a467daa1406","severity_score":50},{"record_id":"dbc7cd89-f193-4013-99db-c62440613ed8","source_event_group_id":"2f3d3460-c400-496c-a2cb-9a058c64b961","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gay & Lesbian Community Services Center of Orange County, Inc.","state":"CA","individuals_affected":75532,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"2f3d3460-c400-496c-a2cb-9a058c64b961","severity_score":70},{"record_id":"ad8b185e-f8ec-46d2-87bf-8e916df0e902","source_event_group_id":"4146fba6-cc72-4fe0-95b7-fb3a106e0c1c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ohio Living","state":"OH","individuals_affected":500,"breach_submission_date":"2026-06-12","enforcement_action_date":null,"summary":"","event_id":"4146fba6-cc72-4fe0-95b7-fb3a106e0c1c","severity_score":30},{"record_id":"55c78319-d50f-4176-9708-8958c059e34e","source_event_group_id":"f4111e7d-8870-49b6-9dd1-e8b626b8b56a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MVP VIP Holdco dba Heart of America Eye Care","state":"MO","individuals_affected":500,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"f4111e7d-8870-49b6-9dd1-e8b626b8b56a","severity_score":30},{"record_id":"f7858101-81e4-4c6a-a8f2-05d82eca25e5","source_event_group_id":"ddbf8af5-8d30-44d9-8dd3-eff62e3c424f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Snohomish Health District","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A breach of unsecured PHI impacted 1,280 individuals.","event_id":"ddbf8af5-8d30-44d9-8dd3-eff62e3c424f","severity_score":65},{"record_id":"f424c7f5-5810-439a-bde5-dfa8d7940168","source_event_group_id":"526549f5-c9de-4fc4-8627-4a50a3eb7a90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Permanente Medical Group, Inc. / Kaiser Foundation Health Plan, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A USB drive containing the unencrypted ePHI of 953 patients was lost. OCR found a failure to conduct an accurate and thorough risk analysis and implement security measures.","event_id":"526549f5-c9de-4fc4-8627-4a50a3eb7a90","severity_score":65},{"record_id":"e9d93cd7-015d-4173-83e6-7fcc5aa3c28d","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, Inc.","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A laptop containing unencrypted ePHI of 1,391 individuals was stolen from an employee's car. OCR found that CardioNet failed to conduct an accurate and thorough risk analysis and failed to implement appropriate safeguards.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"e3144748-ac6f-4f2b-a234-453e8971ec9a","source_event_group_id":"8f6254f4-85fb-4393-848e-1ebec92568e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Maryland Department of Health and Mental Hygiene (DHMH)","state":"MD","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The ePHI of 58,000 Medicaid beneficiaries was exposed on a publicly accessible FTP site. OCR found inadequate risk analysis, lack of technical safeguards, and failure to implement policies and procedures.","event_id":"8f6254f4-85fb-4393-848e-1ebec92568e7","severity_score":65},{"record_id":"d922bc36-6829-41db-a37e-c8e430b8a39b","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee","state":"TN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"57 unencrypted computer hard drives containing the ePHI of over 1 million individuals were stolen from a leased facility. OCR found pervasive noncompliance with the HIPAA Security Rule.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"aeb3dd6e-ca54-445f-b1bd-1f3ff3f7056a","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, P.C.","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Adult & Pediatric Dermatology, P.C. had a second breach investigation due to the theft of an unencrypted thumb drive containing PHI.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"ac45d16a-8f4a-443f-a9ba-60749d9641c5","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University Medical Center and New York and Presbyterian Hospital","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A former employee disclosed the ePHI of 6,800 patients. The breach involved unauthorized access and disclosure of sensitive patient information.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"78d60f6f-a875-45a0-bdd8-1132895ed012","source_event_group_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Department of Human Services (ADHS)","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"USB drives containing the PHI of 31,000 individuals were impermissibly discarded. The PHI included names, Social Security numbers, and diagnoses. This was a violation of proper disposal methods and a significant breach.","event_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","severity_score":90},{"record_id":"63245f6b-f26d-4c99-ba3c-788db07ac3e2","source_event_group_id":"e4165278-daa7-4eeb-afbc-aa1a13e40369","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Palo Alto Medical Foundation","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop containing the PHI of over 1,000 patients was stolen from an employee's car. The PHI included patient names, Social Security numbers, and medical information.","event_id":"e4165278-daa7-4eeb-afbc-aa1a13e40369","severity_score":65},{"record_id":"503cd01c-44c8-41f9-b39a-656e467149f1","source_event_group_id":"df644ee4-8c24-45c6-89f3-0f9dc0f33719","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concord Hospital, Inc.","state":"NH","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A breach of unsecured PHI impacted 2,000 individuals.","event_id":"df644ee4-8c24-45c6-89f3-0f9dc0f33719","severity_score":50},{"record_id":"263d1a8b-0479-4f5e-b8f2-19e61794fc4b","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records and failed to cooperate with OCR's investigation. This resulted in the first CMP against a covered entity.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"21b5ef37-5f3f-40a8-b36d-3047c4ca36cf","source_event_group_id":"06c87061-0fd4-4b61-a73c-854bde577afe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Net of California, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple unencrypted servers and hard drives containing the ePHI of nearly 1.5 million individuals were lost or stolen. OCR found widespread noncompliance, including failure to conduct a risk analysis.","event_id":"06c87061-0fd4-4b61-a73c-854bde577afe","severity_score":90},{"record_id":"0ebb98fe-de76-4282-9227-662ab31d7963","source_event_group_id":"63a40433-edcc-4739-b56e-749837cf0ec5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services (first enforcement action)","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop was stolen from a Concentra administrative office, exposing the ePHI of 870 individuals. This case emphasized the need for proper risk analysis and encryption.","event_id":"63a40433-edcc-4739-b56e-749837cf0ec5","severity_score":90},{"record_id":"0da098b5-0469-4494-a204-9416f29f3c76","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Shasta Regional Medical Center again impermissibly disclosed PHI to a local newspaper reporter. This was a repeat offense following an earlier settlement.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":65},{"record_id":"0d9b31be-4988-4782-991b-ec9920765f2e","source_event_group_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc.","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A laptop containing unencrypted ePHI of 3,500 patients was stolen. OCR found that the entity failed to conduct an accurate and thorough risk analysis and did not implement security measures to reduce risks and vulnerabilities to a reasonable and appropriate level.","event_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","severity_score":90},{"record_id":"cee6d5a4-7e62-4c85-a337-10a50f8edfa7","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery, P.C.","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A physician impermissibly posted PHI on a publicly accessible calendar on the internet. The PHI included patient names, diagnoses, and treatment information. This was the first settlement agreement for impermissible disclosure of PHI on the internet.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"27b3357d-e19c-4a77-ad60-b2ef0d2b5406","source_event_group_id":"542d3ced-272c-46b0-8d83-d3e61d1ac3e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AHMC Healthcare, Inc. (doing business as Alhambra Hospital Medical Center)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Employees impermissibly accessed the PHI of patients, including celebrities. This settlement highlighted the persistent issue of insider snooping and the need for robust access controls.","event_id":"542d3ced-272c-46b0-8d83-d3e61d1ac3e0","severity_score":80},{"record_id":"1ffb64c9-34f3-49fb-8067-0e21f6285443","source_event_group_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"QCA Health Plan, Inc.","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"QCA faced another enforcement action following a breach of unsecured PHI affecting 148 individuals.","event_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","severity_score":65},{"record_id":"03a90805-0d95-4373-9eec-be46fdf97a31","source_event_group_id":"578ebedb-0c1a-451d-9543-61787942233c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Howard University Hospital","state":"DC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A researcher impermissibly uploaded the ePHI of 3,113 patients to a public website. OCR found that the hospital failed to implement appropriate administrative safeguards and did not limit access to PHI.","event_id":"578ebedb-0c1a-451d-9543-61787942233c","severity_score":90},{"record_id":"60191fcf-9610-4cf2-9a8b-4817a5bb3a5d","source_event_group_id":"0fb49b0d-05e6-4c49-813e-bab8ebb131db","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McLeod Physician Associates II","state":"SC","individuals_affected":19553,"breach_submission_date":"2026-06-04","enforcement_action_date":null,"summary":"","event_id":"0fb49b0d-05e6-4c49-813e-bab8ebb131db","severity_score":70},{"record_id":"d411e9bb-0700-4b23-8949-8a575990409a","source_event_group_id":"0b46830c-dfa7-4b04-8682-7fa483c378c6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Signature Healthcare Corporation","state":"MA","individuals_affected":500,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"0b46830c-dfa7-4b04-8682-7fa483c378c6","severity_score":30},{"record_id":"ae29cb4a-8e23-406c-8dcd-b681847ad185","source_event_group_id":"0f7ec434-0170-4905-8ed3-9e5b4a97f503","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medenet Inc.","state":"FL","individuals_affected":1387,"breach_submission_date":"2026-06-01","enforcement_action_date":null,"summary":"","event_id":"0f7ec434-0170-4905-8ed3-9e5b4a97f503","severity_score":50},{"record_id":"0ad9b7d9-9dc4-4d35-9866-bce3b46382f8","source_event_group_id":"126c1998-8135-4d59-801d-f379ff7ba8a0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Centers for Dialysis Care","state":"OH","individuals_affected":8000,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"126c1998-8135-4d59-801d-f379ff7ba8a0","severity_score":50},{"record_id":"032bd00e-1fd8-4f6a-9924-df46ef4eee9c","source_event_group_id":"4341b72a-3466-4e9b-9a4b-97ab32458576","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Henry Rossi & Company, LLP","state":"PA","individuals_affected":2720,"breach_submission_date":"2026-06-02","enforcement_action_date":null,"summary":"","event_id":"4341b72a-3466-4e9b-9a4b-97ab32458576","severity_score":50},{"record_id":"8e6cbf52-a49b-4ce3-b383-c3e782c45fc9","source_event_group_id":"1e64f31f-5d21-4b38-bda4-61b3d5f0e030","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dr. Erick Perroud","state":"MI","individuals_affected":7692,"breach_submission_date":"2026-06-10","enforcement_action_date":null,"summary":"","event_id":"1e64f31f-5d21-4b38-bda4-61b3d5f0e030","severity_score":50},{"record_id":"c6c10120-7fac-49be-b2d2-25a7d205f2ad","source_event_group_id":"4486a191-a82a-4fd5-87cc-42e8fe542650","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ERMI LLC","state":"GA","individuals_affected":74074,"breach_submission_date":"2026-05-26","enforcement_action_date":null,"summary":"","event_id":"4486a191-a82a-4fd5-87cc-42e8fe542650","severity_score":70},{"record_id":"27c427f8-c212-44ed-92ce-14b0de5c30a6","source_event_group_id":"e7bf9865-5c4a-4437-9889-b757432cb60d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wisconsin Department of Health Services","state":"WI","individuals_affected":8157,"breach_submission_date":"2026-07-01","enforcement_action_date":null,"summary":"","event_id":"e7bf9865-5c4a-4437-9889-b757432cb60d","severity_score":50},{"record_id":"f5a445a0-2a77-4e43-ab06-53c1be9ecf60","source_event_group_id":"efa5a560-a230-42f2-97be-4d992fad9715","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Deaconess Medical Center (BIDMC)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Improper disclosure of protected health information (PHI) of a patient by a physician, involving a public statement to media.","event_id":"efa5a560-a230-42f2-97be-4d992fad9715","severity_score":50},{"record_id":"f32bdbc4-d196-4bec-b85f-0875758946b3","source_event_group_id":"e3f72a1f-2978-4a21-8b89-299afdc8c8d6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ER Express, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ER Express, a business associate, impermissibly disclosed protected health information (PHI) due to a vulnerability in their online patient portal.","event_id":"e3f72a1f-2978-4a21-8b89-299afdc8c8d6","severity_score":80},{"record_id":"f12eba4f-b488-4c0c-b8cc-d4a75afa3dfc","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas M.D. Anderson Cancer Center","state":"TX","individuals_affected":33500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas M.D. Anderson Cancer Center paid $4.3 million in civil money penalties after three separate data breaches involving the loss of unencrypted devices, affecting over 33,000 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"f0e72e70-0601-4f8e-8244-61d1587f7ca5","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":240,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center paid $387,200 to settle potential HIPAA violations related to impermissible disclosure of PHI due to an unencrypted laptop being stolen.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"e4f11a39-84c4-452e-8eab-123faba625d5","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services, Inc. (ACMHS)","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A breach of unsecured ePHI involving a malware infection and a lack of proper security measures and risk analysis.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"e2e02e0d-4df2-484e-8a52-8075cdf3b0c0","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HIPAA SEH, LLC & St. Elizabeth's Medical Center","state":"MA","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center paid $218,400 to settle potential HIPAA violations when an impermissible disclosure of PHI occurred due to an external hard drive being stolen, affecting 498 individuals.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"5428340e-e135-44d5-acf4-6c83d8d7763c","source_event_group_id":"2a7bc26c-68ee-4af9-9935-bf1f8a32bb06","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AllWays Health Partners","state":"MA","individuals_affected":13579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AllWays Health Partners paid $250,000 to settle potential HIPAA violations after impermissible disclosures of PHI on its website.","event_id":"2a7bc26c-68ee-4af9-9935-bf1f8a32bb06","severity_score":65},{"record_id":"48e8bf22-79f9-4391-ae50-d2576c8203c3","source_event_group_id":"9dbf45a3-c2f8-4c5e-908a-7095844766f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska DHSS","state":"AK","individuals_affected":1704,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted USB drive containing protected health information (PHI) was stolen from an employee's vehicle. The DHSS failed to conduct an adequate risk analysis and implement encryption.","event_id":"9dbf45a3-c2f8-4c5e-908a-7095844766f1","severity_score":90},{"record_id":"18c387dc-8769-4244-a5dc-e0485bce4b3a","source_event_group_id":"df644ee4-8c24-45c6-89f3-0f9dc0f33719","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concord Hospital","state":"NH","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concord Hospital impermissibly disposed of protected health information (PHI) in dumpsters accessible to the public. Additionally, physical therapy notes were found in public recycling bins.","event_id":"df644ee4-8c24-45c6-89f3-0f9dc0f33719","severity_score":65},{"record_id":"22175b4a-2fc2-4e1f-9749-8b36495a343d","source_event_group_id":"577ff34e-fbec-4e93-96e5-6774de151ed6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Virta Health","state":"CO","individuals_affected":602,"breach_submission_date":"2026-06-30","enforcement_action_date":null,"summary":"","event_id":"577ff34e-fbec-4e93-96e5-6774de151ed6","severity_score":30},{"record_id":"9b96a924-cbf7-4bad-b368-f9d31b80b36c","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging, LLC","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Touchstone Medical Imaging, LLC agreed to pay $3 million to settle potential HIPAA violations related to a breach of unsecured protected health information (ePHI).","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"d79e0773-a2c6-4924-97c5-5d7b513fd11c","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro Community Provider Network (MCPN) agreed to pay $400,000 to settle potential HIPAA violations related to a breach of protected health information.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"d69e2647-456f-421c-8918-3094b5844c7d","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Pharmacy, Inc. (CVS) agreed to pay $5.5 million to settle potential HIPAA violations related to impermissible disposal of protected health information (PHI).","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"b35ce8e7-2f2c-415e-b168-b9f2ddbe2414","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, P.C.","state":"MA","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Adult & Pediatric Dermatology, P.C. (APD) agreed to pay $150,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"b33e4f5a-ee35-49c9-8299-0b61c4403fcd","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Feinstein Institute for Medical Research","state":"NY","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Feinstein Institute for Medical Research (Feinstein) agreed to pay $3.9 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":90},{"record_id":"a1146b1e-fe14-400a-ac83-799b873b8dd9","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, Inc.","state":"PA","individuals_affected":1390000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, Inc. (CardioNet) agreed to pay $2.5 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"98a31483-29e1-4fa9-b3e9-e1db3c42d0fd","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Health","state":"IL","individuals_affected":8362,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presence Health agreed to pay $475,000 to settle potential HIPAA violations after a breach of unsecured protected health information.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"90d5195e-00b8-4415-a0b5-1475962e920a","source_event_group_id":"a5780735-564d-4d76-910e-0e6fc022da6f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Louisiana, LLC","state":"LA","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathology Group of Louisiana, LLC agreed to pay $85,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"a5780735-564d-4d76-910e-0e6fc022da6f","severity_score":50},{"record_id":"7747b490-57c0-4232-9b2e-98bc5bc5233c","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":2209096,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPFRE Life Insurance Company of Puerto Rico (MAPFRE) agreed to pay $2.2 million to settle potential HIPAA Privacy and Security Rule violations and implement a corrective action plan.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"6a93f938-e2f6-4088-bebb-bac106a7ed18","source_event_group_id":"bdc722b7-3f4e-4a86-bb75-f86a8ba9e89f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advantage Dental Plans, Inc.","state":"OR","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advantage Dental Plans, Inc. (Advantage) agreed to pay $100,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"bdc722b7-3f4e-4a86-bb75-f86a8ba9e89f","severity_score":50},{"record_id":"68d7449f-7919-4625-b2f3-cf9f6077eb65","source_event_group_id":"d79418fa-968b-4a79-8d9c-4ab674c21058","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Palms Medical Center","state":"TX","individuals_affected":12784,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Palms Medical Center (Rodeo Palms) agreed to pay $1.2 million to settle potential HIPAA violations stemming from an impermissible disclosure of protected health information.","event_id":"d79418fa-968b-4a79-8d9c-4ab674c21058","severity_score":90},{"record_id":"68d50061-137d-43d0-9ff4-d7cbdf61a486","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York-Presbyterian Hospital (NYPH) agreed to pay $2.2 million to settle potential HIPAA violations related to a breach of unprotected electronic protected health information (ePHI).","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"661d9d7d-5a48-4192-840a-7b861e4397e4","source_event_group_id":"e752fa71-7651-42b9-b054-7454b3ea3804","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Jude Children's Research Hospital","state":"TN","individuals_affected":39000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Jude Children's Research Hospital (St. Jude) agreed to pay $2.3 million to settle potential HIPAA violations related to a breach of unprotected electronic protected health information (ePHI).","event_id":"e752fa71-7651-42b9-b054-7454b3ea3804","severity_score":90},{"record_id":"620f2ee6-63b0-45f3-b8f8-bcf30d7e0940","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates agreed to pay $10,000 to settle potential HIPAA violations related to an impermissible disclosure of protected health information (PHI).","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"5c15745c-e7ad-42a0-8533-c1a0764e60fe","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":18260,"breach_submission_date":null,"enforcement_action_date":null,"summary":"L.A. Care Health Plan agreed to pay $1.7 million to settle potential HIPAA violations after a breach of unsecured protected health information.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":90},{"record_id":"5b47787e-f74d-4619-a85b-cec9d9ed4865","source_event_group_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lincare, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lincare, Inc. (Lincare) agreed to pay $230,000 to settle potential HIPAA violations related to the impermissible disclosure of protected health information.","event_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","severity_score":65},{"record_id":"4faf11f0-f02c-4dea-b842-fae9b9e382bb","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health","state":"IN","individuals_affected":950000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health (IU Health) agreed to pay $5.1 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":90},{"record_id":"48937332-2015-4591-82ac-696c0e45966b","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"OH","individuals_affected":1800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management agreed to pay $31,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":50},{"record_id":"11a0a7f3-a825-4233-a681-817a33f16282","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":430000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Rochester Medical Center (URMC) agreed to pay $3 million to settle potential HIPAA violations related to a breach of unsecured protected health information (ePHI).","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"02c7fc7c-1c18-4ab9-a7a3-ff680ebd53b7","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Massachusetts Amherst (UMass Amherst) agreed to pay $650,000 to settle potential HIPAA violations related to a breach of protected health information.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"ee0a182d-b712-4be2-8467-81e732fdb40c","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FileFax, Inc.","state":"NC","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FileFax, Inc. (FileFax) agreed to pay $100,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":50},{"record_id":"e7e557c6-55a0-4631-ad3e-d77a0b9a7e77","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":577000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals agreed to pay $2.175 million to settle potential HIPAA violations related to an impermissible disclosure of protected health information (PHI).","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":90},{"record_id":"e51159a8-e48c-4af6-8aed-43943e334d23","source_event_group_id":"694f5d24-0cc0-4241-8792-e4850605abcd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"个人执业医生","state":"KY","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"一名路易斯维尔的精神病学家同意支付28,000美元，以解决违反HIPAA隐私和安全规则的潜在问题。","event_id":"694f5d24-0cc0-4241-8792-e4850605abcd","severity_score":50},{"record_id":"de8cef48-4903-4396-8b33-b4b9c13446d3","source_event_group_id":"966c7372-b435-4c33-a969-b2407e6ca2f7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Energy","state":"MO","individuals_affected":400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Energy agreed to pay $38,000 to settle potential HIPAA violations stemming from an impermissible disclosure of protected health information.","event_id":"966c7372-b435-4c33-a969-b2407e6ca2f7","severity_score":50},{"record_id":"c3e5fbe0-1cab-4d74-80bf-afa574a74615","source_event_group_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Health","state":"TX","individuals_affected":38000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Health (BSWH) agreed to pay $1 million to settle potential HIPAA violations related to an impermissible disclosure of protected health information (PHI).","event_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","severity_score":80},{"record_id":"c04b79a0-383a-403d-adcb-789923a00b8a","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System","state":"FL","individuals_affected":1157832,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Healthcare System (Memorial) agreed to pay $5.5 million to settle potential violations of the HIPAA Privacy and Security Rules and to implement a corrective action plan.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"b3090b0a-5a88-4c61-8739-3405598728ff","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":497,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center (SEMC) agreed to pay $218,400 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"af986913-c5ad-466d-a3d7-cf9f147327cc","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":36257,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas MD Anderson Cancer Center (MD Anderson) agreed to pay $4.3 million to settle potential HIPAA violations resulting from the theft of three unencrypted devices.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"a15ad287-ac14-415d-8351-8e05319dcd13","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cancer Care Group, P.C. agreed to pay $750,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"913b20b4-ce2c-419f-ba7e-048d46db3205","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":66000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Texas Health and Human Services Commission (TX HHSC) agreed to pay $1.6 million to settle potential HIPAA violations related to a breach of unsecured protected health information (ePHI).","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"7ab38011-e2a4-4526-9ca5-076053120c8c","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera Blue Cross, a Washington-based health plan, agreed to pay $6.85 million to resolve potential violations of the HIPAA Privacy and Security Rules related to a cyberattack.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"662f1e1a-8a33-48f1-a8af-f02473d5e521","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Network (Advocate) agreed to pay $5.55 million to settle potential HIPAA violations resulting from three separate breaches of protected health information.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"592a9992-fd99-4c89-b5b2-d9a9e14e2275","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":286000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care (NMHC) agreed to pay $1.55 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"5346287f-dd14-4f2a-a4b1-1f2f39b01da9","source_event_group_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fountain Valley Regional Hospital","state":"CA","individuals_affected":12850,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fountain Valley Regional Hospital and Medical Center (FVRH) agreed to pay $1.7 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","severity_score":90},{"record_id":"525ea5f4-28b6-47d4-a3e6-da770d16216c","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":6200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Medical Center of Dallas (CMCD) agreed to pay $3.2 million to settle potential HIPAA violations stemming from failures to safeguard electronic protected health information (ePHI).","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"4eea16d3-45f6-449f-b3d7-2b7e89a4f484","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, P.A.","state":"FL","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, P.A. agreed to pay $80,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"4e8da706-b1ac-4b36-aee1-3453e3cd4e75","source_event_group_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Georgia Ambulance, Inc.","state":"GA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Georgia Ambulance, Inc. agreed to pay $65,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","severity_score":50},{"record_id":"424ce760-9ab3-4789-806b-48928b67346a","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":286000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care (NMHC) agreed to pay $1.55 million to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"3542f043-b2ff-46d8-bf79-e21b4327edd8","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS) agreed to pay $650,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"19a00424-0c11-464e-83c8-08b4d08ee58d","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Corporation","state":"PR","individuals_affected":398000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Triple-S Management Corporation (Triple-S) and its subsidiaries agreed to pay $3.5 million to settle potential HIPAA violations related to multiple breaches of protected health information.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"f21e3720-b47a-4426-86b8-e79aded007e9","source_event_group_id":"d0ba67d6-af9b-49e2-bec4-d6d9ef3f08fa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HUP Holdings, Inc. (doing business as HealthCare Partners)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HealthCare Partners impermissibly disclosed PHI of 2,427 patients when billing statements were sent to the wrong addresses. This resulted from a failure in their administrative processes.","event_id":"d0ba67d6-af9b-49e2-bec4-d6d9ef3f08fa","severity_score":50},{"record_id":"f1cf0c34-c4a1-43ba-bf19-6fa4838db35d","source_event_group_id":"3d5fe2b3-0350-47f8-abe1-83279b95ab26","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Public Hospital District d.b.a. Skagit Valley Hospital","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit Valley Hospital impermissibly disclosed PHI of 1,296 patients when a business associate inappropriately used and disclosed patient information. The hospital also lacked a BAA.","event_id":"3d5fe2b3-0350-47f8-abe1-83279b95ab26","severity_score":65},{"record_id":"d84ed036-0047-41c4-ae6d-d5fb055411f6","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de la Raza","state":"CA","individuals_affected":900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de la Raza agreed to pay $90,000 to settle potential HIPAA violations related to an impermissible disclosure of protected health information.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":50},{"record_id":"c9a2af3f-3985-4a93-8888-2dc9963d3192","source_event_group_id":"649da3ae-2b16-495a-86f2-337ebfe7a522","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Citimortgage, Inc.","state":"MO","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Citimortgage impermissibly disclosed PHI when an employee faxed loan documents containing sensitive medical information to an incorrect recipient. They lacked adequate safeguards.","event_id":"649da3ae-2b16-495a-86f2-337ebfe7a522","severity_score":50},{"record_id":"bdda2fea-f49e-48ea-86d2-c2b0f541fa30","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas","state":"SC","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas (MGC) agreed to pay $35,000 to settle potential HIPAA violations related to an impermissible disclosure of protected health information.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":50},{"record_id":"bd28f546-3a85-4bc9-b813-b6597f8840d1","source_event_group_id":"526549f5-c9de-4fc4-8627-4a50a3eb7a90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Permanente Medical Group, Inc. and Kaiser Foundation Health Plan, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser impermissibly disclosed the PHI of 2,427 patients when billing statements were sent to the wrong addresses. This was a result of administrative errors.","event_id":"526549f5-c9de-4fc4-8627-4a50a3eb7a90","severity_score":50},{"record_id":"b7e17283-f266-42df-97e5-aa13fb8d0536","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"Various","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This action focused on CVS's failure to appropriately safeguard PHI during disposal, leading to impermissible disclosures. It highlighted a systemic issue across its pharmacies.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"adcfcd7a-727d-4015-88fd-be2c7902ae12","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health","state":"IL","individuals_affected":1800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Center for Children's Digestive Health (CCDH) agreed to pay $31,000 to settle potential HIPAA violations related to a breach of unsecured protected health information.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"9c0c1227-5c32-49f1-8fea-b094c20b18a6","source_event_group_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark Corporation","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This resolution agreement addressed widespread impermissible disclosure of PHI through improper disposal practices at CVS Caremark pharmacies. It emphasized systemic non-compliance.","event_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","severity_score":90},{"record_id":"9afbddc2-5db8-42dc-9b91-13c0a69c0a10","source_event_group_id":"c23c5b0b-a58d-474b-8930-221e6b7be764","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Accenture LLP","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Accenture, acting as a business associate, impermissibly disclosed the PHI of 600,000 individuals when unencrypted backup tapes were stolen from an employee's car. They lacked proper safeguards.","event_id":"c23c5b0b-a58d-474b-8930-221e6b7be764","severity_score":90},{"record_id":"847d6eee-05e1-403c-abb6-cdf5e3f9974f","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem Inc. paid the US Department of Health and Human Services (HHS) $16 million to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules, the largest HIPAA settlement to date.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"7e4edfc7-2c82-4a92-ae58-82803efac3c1","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System (UCLA Health System)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System impermissibly disclosed the PHI of multiple celebrities to unauthorized persons, failing to properly limit access to electronic health records.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"4eb8f443-b86b-4e18-bc2b-df7d04b87b40","source_event_group_id":"af2ba20c-77d2-4063-ae56-92d3f8ab992d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AHP Holdings, Inc. (doing business as QCA Health Plan)","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"QCA Health Plan sent explanation of benefits (EOB) statements to members that contained impermissible PHI on the exterior of the mailing envelopes, visible to unauthorized individuals.","event_id":"af2ba20c-77d2-4063-ae56-92d3f8ab992d","severity_score":65},{"record_id":"38fb4385-e185-4663-94d5-20a8e498131c","source_event_group_id":"998d7471-05f8-48d7-8422-26317bed39b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Harvard Street Neighborhood Health Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Harvard Street Neighborhood Health Center impermissibly disposed of PHI in a publicly accessible dumpster, leading to an impermissible disclosure of patient information.","event_id":"998d7471-05f8-48d7-8422-26317bed39b8","severity_score":50},{"record_id":"26209669-5e53-40e6-b97d-3e345da01097","source_event_group_id":"349c64b4-8e91-43eb-b3e2-77367b8e0fc3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"SecureWorks, Inc.","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SecureWorks, a business associate, impermissibly disclosed the ePHI of 1,000 individuals when an employee's laptop was stolen. OCR found a failure to conduct a risk analysis.","event_id":"349c64b4-8e91-43eb-b3e2-77367b8e0fc3","severity_score":80},{"record_id":"15819158-f11a-4540-9014-78ffb85b0f40","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Network (Advocate) agreed to pay $5.55 million to settle potential HIPAA violations resulting from three separate breaches of protected health information.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"03f1cd95-1c28-4818-be58-84fcab6ba062","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"This enforcement action against Concentra further solidified OCR's focus on widespread security failures within an organization, particularly regarding portable devices.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"2b143b17-0a53-45fb-9846-851f2bd8fe6f","source_event_group_id":"2760506c-0093-4445-9c9d-9efa7057737e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Area Agency on Aging Pasco-Pinellas Inc","state":"FL","individuals_affected":1000,"breach_submission_date":"2026-06-02","enforcement_action_date":null,"summary":"","event_id":"2760506c-0093-4445-9c9d-9efa7057737e","severity_score":30},{"record_id":"4a0bec90-f341-4158-b74a-dd48c7f17a1d","source_event_group_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trinity Health System","state":"MI","individuals_affected":2480,"breach_submission_date":"2026-06-10","enforcement_action_date":null,"summary":"","event_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","severity_score":50},{"record_id":"caf133d5-052d-46e7-876e-355255e0e046","source_event_group_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Miami","state":"FL","individuals_affected":6721,"breach_submission_date":"2026-06-17","enforcement_action_date":null,"summary":"","event_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","severity_score":50},{"record_id":"a7c33aca-ccd9-4f34-a4b4-8ed850bd08d4","source_event_group_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lincoln National Corporation d/b/a Lincoln Financial","state":"IN","individuals_affected":3070,"breach_submission_date":"2026-06-02","enforcement_action_date":null,"summary":"","event_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","severity_score":50},{"record_id":"e264fb11-f119-423f-a750-9277b713622e","source_event_group_id":"165ad2ce-bb99-48b3-844a-b99d5aee67b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chickasaw Nation Department of Health","state":"OK","individuals_affected":1607,"breach_submission_date":"2026-06-11","enforcement_action_date":null,"summary":"","event_id":"165ad2ce-bb99-48b3-844a-b99d5aee67b8","severity_score":50},{"record_id":"45f6416d-3239-49af-8dbe-41c28cc47274","source_event_group_id":"f778e50a-9fc0-46cc-9612-83758e16a8e0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gail J May Ltd d/b/a/ Insight Optical","state":"IL","individuals_affected":501,"breach_submission_date":"2026-06-16","enforcement_action_date":null,"summary":"","event_id":"f778e50a-9fc0-46cc-9612-83758e16a8e0","severity_score":30},{"record_id":"040b7266-d8ba-4a5a-99a2-eccd068356d0","source_event_group_id":"fd103943-11f7-4116-8f1d-4385fd1f74a0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kentucky MSO, LLC","state":"KY","individuals_affected":537,"breach_submission_date":"2026-06-13","enforcement_action_date":null,"summary":"","event_id":"fd103943-11f7-4116-8f1d-4385fd1f74a0","severity_score":30},{"record_id":"6522b9d4-bcf0-4621-bc0b-52d530687998","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NewYork-Presbyterian Hospital","state":"NY","individuals_affected":6909,"breach_submission_date":"2026-06-16","enforcement_action_date":null,"summary":"","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":50},{"record_id":"fb82dee1-3cbd-4767-91ae-86892fad7585","source_event_group_id":"21a13471-bd69-4d05-aa57-15dd5cf2d97d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Keith L. Gary, D.D.S., M.S., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Keith L. Gary, D.D.S., M.S., P.C. agreed to pay $20,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"21a13471-bd69-4d05-aa57-15dd5cf2d97d","severity_score":50},{"record_id":"f8b7a082-f420-4799-8a98-831397073561","source_event_group_id":"8f867851-219e-40a4-9c87-5b61697810c1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifetime Healthcare, Inc.","state":"NY","individuals_affected":3317934,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifetime Healthcare, Inc. agreed to pay $5.1 million to settle potential HIPAA violations related to a breach affecting over 3.3 million individuals.","event_id":"8f867851-219e-40a4-9c87-5b61697810c1","severity_score":90},{"record_id":"cf570147-7f54-4e4d-acf1-6871dcb2ad03","source_event_group_id":"8f867851-219e-40a4-9c87-5b61697810c1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifetime Healthcare, Inc.","state":"NY","individuals_affected":3317934,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifetime Healthcare, Inc. agreed to pay $5,100,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"8f867851-219e-40a4-9c87-5b61697810c1","severity_score":90},{"record_id":"810de8ce-fab7-4699-a44a-5028556a3479","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":283141,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health agreed to pay $1.25 million to settle potential HIPAA violations following a series of cyberattacks that compromised PHI.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"79a22eab-6a3b-4e01-a10d-6ed887bc4abc","source_event_group_id":"0ab5e4b6-4b99-4f00-bcc4-4b9f5a51ce22","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Homeland Health Specialists, LLC","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Homeland Health Specialists, LLC agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0ab5e4b6-4b99-4f00-bcc4-4b9f5a51ce22","severity_score":50},{"record_id":"50560ac8-b35e-4402-848f-74120a431ab0","source_event_group_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Orthopedic Clinic, P.A.","state":"GA","individuals_affected":208557,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Orthopedic Clinic, P.A. agreed to pay $1,500,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","severity_score":90},{"record_id":"4fada945-839a-453e-b6bc-7e6f34725ede","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D., P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D., P.A. agreed to pay $5,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"4dd4fccb-67db-4aab-a6bb-8e4a2cf61b0a","source_event_group_id":"10672f39-6b5e-4e80-970a-45728138a2db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fallbrook Family Health Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fallbrook Family Health Center agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"10672f39-6b5e-4e80-970a-45728138a2db","severity_score":50},{"record_id":"3576dab5-98c2-4d26-9229-8b7944e87988","source_event_group_id":"1ad20a1c-13e1-4804-a804-06e894495773","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danville Pediatric Dentistry","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danville Pediatric Dentistry agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1ad20a1c-13e1-4804-a804-06e894495773","severity_score":50},{"record_id":"2ff07370-347b-441e-9f14-5d5511136bbf","source_event_group_id":"274249d6-f463-4032-a4f0-6561d8802400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King MD","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"King MD agreed to pay $3,500 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"274249d6-f463-4032-a4f0-6561d8802400","severity_score":50},{"record_id":"e75bd25b-67d2-4807-a047-67624bb8b62e","source_event_group_id":"439981dd-aa45-47cc-bcb7-c26d7dd47760","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Medical Associates","state":"DE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Medical Associates agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"439981dd-aa45-47cc-bcb7-c26d7dd47760","severity_score":50},{"record_id":"d7c14105-c7b9-421f-93ec-17388377fc31","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MGB Associates, Inc. dba Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System agreed to pay $2,400,000 and to implement a corrective action plan to address potential violations of the HIPAA privacy rule.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"d34dd4ff-0d18-4eb9-bb7b-552131049992","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan","state":"NY","individuals_affected":9358900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excellus Health Plan agreed to pay $5,100,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":90},{"record_id":"c7a4385c-8a3d-4ac5-8d8b-f70611826f65","source_event_group_id":"553b1944-ab6c-4cc1-81db-acf268d19a86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sherman E. Crome, D.D.S., P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sherman E. Crome, D.D.S., P.A. agreed to pay $10,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"553b1944-ab6c-4cc1-81db-acf268d19a86","severity_score":50},{"record_id":"c3cc4dbf-7784-447b-a672-ddcbdee59e25","source_event_group_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Life Insurance Company","state":"CT","individuals_affected":14736,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna Life Insurance Company (Aetna) agreed to pay $1 million to settle potential HIPAA violations after two separate incidents of impermissible disclosure of PHI affecting thousands of individuals.","event_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","severity_score":80},{"record_id":"bb471ba9-572b-4cdf-93ce-aeaf2701eef0","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem, Inc. agreed to pay $16,000,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"b921b9b9-c46a-4902-98ba-e9e21de39e26","source_event_group_id":"23c2f115-59e7-4b8f-a852-fe220acc03ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optical dba The Vision Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Vision Center agreed to pay $100,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"23c2f115-59e7-4b8f-a852-fe220acc03ec","severity_score":50},{"record_id":"a1895d7a-48ea-465a-8982-c8b52c7fa805","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health Behavioral Services","state":"MA","individuals_affected":19,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Beth Israel Lahey Health Behavioral Services agreed to pay $50,000 to settle potential HIPAA violations after posting patient information online.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":50},{"record_id":"9e960c42-b639-46e1-816c-3e01e103decc","source_event_group_id":"5130baa7-67d4-4b91-962b-9198a652a22d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B.C.H.C. dba Advanced Spine & Posture","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"B.C.H.C. dba Advanced Spine & Posture agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5130baa7-67d4-4b91-962b-9198a652a22d","severity_score":50},{"record_id":"9c25fe73-2973-4d17-ac1e-51e6d87a5351","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera Blue Cross agreed to pay $6,850,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"90186055-9acc-46dc-8808-06cccae6d3ac","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":63784,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center agreed to pay $4,750,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":90},{"record_id":"8718abe0-f423-4f33-915c-6aa6d23da5b1","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates agreed to pay $10,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"866aa258-4a88-40dd-b491-81cbb22bd36a","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":1137782,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Rochester Medical Center agreed to pay $3.1 million to settle potential HIPAA violations stemming from multiple breaches involving the impermissible disclosure of PHI.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"719aa7b9-c7d0-4440-9042-a537e4ed41d4","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":283141,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health agreed to pay $1,250,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"6ece8b0b-faf6-4357-b9fe-584cf33db260","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health agreed to pay $75,000 to settle potential HIPAA violations after failing to provide timely access to medical records.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"6e41f69d-2074-48f6-bac4-c05c47bdcb65","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC dba AEON Clinical Laboratories","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management, LLC dba AEON Clinical Laboratories agreed to pay $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"5b54f7d3-517a-463f-9c3e-38084f293dbd","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":33451,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health agreed to pay $75,000 to settle potential HIPAA violations after impermissibly disclosing PHI.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"50439eba-2512-448c-bdf3-e3fe17ea3b02","source_event_group_id":"d02362b2-5b1a-4553-83ff-72bb4fe48085","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Retina Center","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Retina Center agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d02362b2-5b1a-4553-83ff-72bb4fe48085","severity_score":50},{"record_id":"3df4b4f5-11b6-4eb9-988e-c76edead7870","source_event_group_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Children's Hospital","state":"AR","individuals_affected":21816,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arkansas Children's Hospital agreed to pay $250,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","severity_score":65},{"record_id":"33494747-6c6e-4629-b40e-8e930c334d37","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":63784,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center agreed to pay $4.75 million to settle potential HIPAA violations after impermissibly disclosing PHI involving a former employee.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":90},{"record_id":"2bf23255-cc81-4b54-aeb2-1b1d76b6b579","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services (Metro-PSC) agreed to pay $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"257e1ea9-ce8a-437f-8bee-65b13ded5bc5","source_event_group_id":"1bed9832-0e6e-4d22-87c5-21f023218057","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Liautaud B. Placide","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Liautaud B. Placide agreed to pay $5,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1bed9832-0e6e-4d22-87c5-21f023218057","severity_score":50},{"record_id":"03fbdf88-7556-4d7b-81f9-a548493f1e7a","source_event_group_id":"70c4bc83-aac5-4e13-9054-0edc14f3ca1a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Priority Health","state":"MI","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Priority Health agreed to pay $500,000 to settle potential HIPAA violations after impermissibly disclosing PHI to a third-party vendor.","event_id":"70c4bc83-aac5-4e13-9054-0edc14f3ca1a","severity_score":65},{"record_id":"f5f137d1-ddf6-4384-9e4f-d9af73618613","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":1137782,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Rochester Medical Center agreed to pay $3,100,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"dff13357-a58d-486c-9b5a-3d7ccdf066a0","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital & Medical Center of Omaha","state":"NE","individuals_affected":1057,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital & Medical Center of Omaha agreed to pay $45,000 to settle potential HIPAA violations after impermissibly disclosing PHI.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"d02ca297-f57a-4611-849f-37b0683efc1a","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":206000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England Health System agreed to pay $1 million to settle potential HIPAA violations after a breach involving a business associate.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":80},{"record_id":"c82e5a0c-5c0b-4c35-992d-abe97b86b665","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera Blue Cross agreed to pay $6.85 million to settle potential HIPAA violations stemming from a cyberattack that exposed the PHI of over 10.4 million individuals.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"bbe72f8b-d661-41e0-bffc-8d1dbd83e225","source_event_group_id":"1ad20a1c-13e1-4804-a804-06e894495773","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danville Pediatric Dentistry","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danville Pediatric Dentistry agreed to pay $30,000 and to implement a corrective action plan to address potential violations of the HIPAA right of access standard.","event_id":"1ad20a1c-13e1-4804-a804-06e894495773","severity_score":50},{"record_id":"a8c1c843-66ce-47a2-8e28-1c362fbc2839","source_event_group_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Children's Hospital","state":"AR","individuals_affected":21816,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arkansas Children's Hospital agreed to pay $250,000 to resolve potential HIPAA violations after a breach involving a phishing attack.","event_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","severity_score":65},{"record_id":"8b7c4602-6625-4f5e-8630-42fa5b0785d5","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem Inc. agreed to pay $16 million to settle potential violations of HIPAA Privacy and Security Rules following a series of cyberattacks that led to a massive data breach affecting nearly 79 million individuals.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"8a6655b5-5a3d-4aa1-93f8-1f5dd29cd568","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan","state":"NY","individuals_affected":9358900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excellus Health Plan agreed to pay $5.1 million to settle potential HIPAA violations stemming from a cyberattack that exposed the PHI of over 9.3 million individuals.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":90},{"record_id":"7ce87dd4-9a04-469f-b669-323afb2c877b","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":206000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England Health System agreed to pay $1,000,000 and to implement a corrective action plan to address potential violations of the HIPAA security rules and business associate agreements.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":80},{"record_id":"77a0a3be-1661-468a-a5d0-7c1d1233061f","source_event_group_id":"1bed9832-0e6e-4d22-87c5-21f023218057","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Liautaud B. Placide, D.D.S.","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Liautaud B. Placide, D.D.S. agreed to pay $5,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1bed9832-0e6e-4d22-87c5-21f023218057","severity_score":50},{"record_id":"712efeb5-5273-4cc8-9fad-9a3c3af9d858","source_event_group_id":"58409e32-28f6-47d1-b866-4a3876ee79de","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Peter Kim","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Peter Kim agreed to pay $3,500 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"58409e32-28f6-47d1-b866-4a3876ee79de","severity_score":50},{"record_id":"6fca9e66-a152-4aca-8e4c-d3a4c1663427","source_event_group_id":"5130baa7-67d4-4b91-962b-9198a652a22d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Posture","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Posture agreed to pay $30,000 and to implement a corrective action plan to address potential violations of the HIPAA right of access standard.","event_id":"5130baa7-67d4-4b91-962b-9198a652a22d","severity_score":50},{"record_id":"69c922d3-b311-41e4-84e8-4961bbd74b1a","source_event_group_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Life Insurance Company","state":"CT","individuals_affected":14736,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna Life Insurance Company agreed to pay $1,000,000 and to implement a corrective action plan to address potential violations of the HIPAA privacy rule.","event_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","severity_score":80},{"record_id":"57232535-3350-4dea-94c8-337f4ea4b821","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC","state":"GA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management, LLC agreed to pay $25,000 to settle potential HIPAA violations and implement a corrective action plan to address impermissible uses and disclosures of protected health information (PHI).","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"44cdb9a2-5778-4c08-b80b-e89cddecc84d","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MGB Associates, Inc. dba Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System agreed to pay $2.4 million to settle potential HIPAA violations after impermissibly disclosing PHI.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"3dc3c4fc-ecc4-4ceb-b3dd-0a47c2cf40fa","source_event_group_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwell Health","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northwell Health agreed to pay $50,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","severity_score":50},{"record_id":"389dff05-3557-4b9f-9f90-1ccdb770cc41","source_event_group_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Orthopedic Clinic","state":"GA","individuals_affected":208557,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Orthopedic Clinic agreed to pay $1.5 million to settle potential HIPAA violations stemming from a data breach that exposed the PHI of over 200,000 individuals.","event_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","severity_score":90},{"record_id":"16c5f8ce-856a-4459-a787-e059c3a52957","source_event_group_id":"10672f39-6b5e-4e80-970a-45728138a2db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fallbrook Family Health Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fallbrook Family Health Center agreed to pay $30,000 and to implement a corrective action plan to address potential violations of the HIPAA right of access standard.","event_id":"10672f39-6b5e-4e80-970a-45728138a2db","severity_score":50},{"record_id":"0e430fb4-1299-4341-8fd4-65c45a3658cb","source_event_group_id":"27256834-555a-41eb-bfab-9100ee33f85a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group of Arkansas, P.A.","state":"AR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology Group of Arkansas, P.A. agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"27256834-555a-41eb-bfab-9100ee33f85a","severity_score":50},{"record_id":"0d1bae84-eb17-437f-93c1-de31e2d7bc6c","source_event_group_id":"891a3bc9-807e-456b-a26d-b552926b51e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical Records","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical Records agreed to pay $10,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"891a3bc9-807e-456b-a26d-b552926b51e0","severity_score":50},{"record_id":"0c44149f-67dc-434f-ad7b-177605c5db16","source_event_group_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Rajendra Bhayani","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Rajendra Bhayani agreed to pay $45,000 to settle potential HIPAA violations after posting patient information on a public website.","event_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","severity_score":50},{"record_id":"05d62205-77f2-4bde-baf1-01c8331e4cd5","source_event_group_id":"842d1da0-b187-4ba0-8451-c14ffe835b50","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes, Endocrinology & Nutrition Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes, Endocrinology & Nutrition Center agreed to pay $5,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"842d1da0-b187-4ba0-8451-c14ffe835b50","severity_score":50},{"record_id":"a3927cbe-7d51-4227-ad26-72bb941ba86e","source_event_group_id":"99263433-c42b-49eb-95cc-85e72f8d720e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cahb Medical Systems, LLC (dba Concentra Health Services)","state":null,"individuals_affected":800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra Health Services entered into a resolution agreement stemming from the theft of an unencrypted laptop. OCR found a lack of an adequate risk analysis.","event_id":"99263433-c42b-49eb-95cc-85e72f8d720e","severity_score":90},{"record_id":"296dd9d3-ede2-4d19-87bd-e3bac6a3bc72","source_event_group_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc. (MEEI)","state":null,"individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI entered into a resolution agreement after a laptop containing unsecured ePHI was stolen. The agreement addressed deficiencies in MEEI’s security management processes.","event_id":"fb9e648d-a332-4c8f-bc6b-0fc2f875e6eb","severity_score":90},{"record_id":"b34d56af-2d01-433f-900f-762e0c09e21f","source_event_group_id":"7f356798-21a6-4356-83b9-47c1b05f02a8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Campbell University","state":"NC","individuals_affected":500,"breach_submission_date":"2026-05-29","enforcement_action_date":null,"summary":"","event_id":"7f356798-21a6-4356-83b9-47c1b05f02a8","severity_score":30},{"record_id":"544550b3-ee45-4f8d-b002-ab18253c5316","source_event_group_id":"a562de04-6ccc-45cf-ad3c-0d11eeb85a20","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"South Florida Injury Centers, Inc.","state":"FL","individuals_affected":1525,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"a562de04-6ccc-45cf-ad3c-0d11eeb85a20","severity_score":50},{"record_id":"e4281e5f-4bb8-4870-bb1e-70f3827f4db3","source_event_group_id":"d283c22f-56c3-436f-9a0d-c7abb54f3724","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minnesota Epilepsy Group, P.A.","state":"MN","individuals_affected":80061,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"d283c22f-56c3-436f-9a0d-c7abb54f3724","severity_score":70},{"record_id":"c4efab2e-c77d-4c08-897f-b87c0ac25d11","source_event_group_id":"6eb76069-281f-462d-9261-89c7b5164ba1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of Middletown","state":"OH","individuals_affected":20608,"breach_submission_date":"2026-06-03","enforcement_action_date":null,"summary":"","event_id":"6eb76069-281f-462d-9261-89c7b5164ba1","severity_score":70},{"record_id":"8c62caa9-0b79-44d1-b776-07b0024a7846","source_event_group_id":"01e970dd-b27e-4f32-aeb2-5e9d367e84b2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center)","state":"CA","individuals_affected":2287,"breach_submission_date":"2026-04-22","enforcement_action_date":null,"summary":"","event_id":"01e970dd-b27e-4f32-aeb2-5e9d367e84b2","severity_score":50},{"record_id":"5903d8b8-9ffa-41ff-8b83-55bf2558a19d","source_event_group_id":"ef80ed4b-aaa5-4c65-a4b5-874f7bb1008a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Eyemart Express, LLC","state":"TX","individuals_affected":25000,"breach_submission_date":"2026-05-18","enforcement_action_date":null,"summary":"","event_id":"ef80ed4b-aaa5-4c65-a4b5-874f7bb1008a","severity_score":70},{"record_id":"7aa2a6fd-30b0-42ba-852f-bc75b5e25866","source_event_group_id":"c56844bd-8431-419a-be6a-26c005d2a364","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Passaic County, New Jersey","state":"NJ","individuals_affected":1109,"breach_submission_date":"2026-05-05","enforcement_action_date":null,"summary":"","event_id":"c56844bd-8431-419a-be6a-26c005d2a364","severity_score":50},{"record_id":"0d100d00-1bd0-4dfc-bfa6-c9187dc8ba55","source_event_group_id":"e80cab84-4e11-4b81-9cf9-fcc2cdfbf8d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Amicus Solutions, Inc. (additional related entities may be impacted, the names of which are available upon request)","state":"SC","individuals_affected":1137,"breach_submission_date":"2026-06-03","enforcement_action_date":null,"summary":"","event_id":"e80cab84-4e11-4b81-9cf9-fcc2cdfbf8d2","severity_score":50},{"record_id":"11b808c4-1f0d-4c42-be7c-fd20a72bad6e","source_event_group_id":"30574475-72d7-4073-a909-350c6ecd3b55","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Xsolis, Inc.","state":"TN","individuals_affected":1396519,"breach_submission_date":"2026-06-05","enforcement_action_date":null,"summary":"","event_id":"30574475-72d7-4073-a909-350c6ecd3b55","severity_score":95},{"record_id":"fc4d7f3b-b2a0-42cc-92fe-4ace8e43efa8","source_event_group_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Miami Children's Hospital","state":"FL","individuals_affected":750,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCH impermissibly disclosed PHI of 750 patients when a laptop bag containing patient information was stolen. MCH failed to implement appropriate safeguards.","event_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","severity_score":50},{"record_id":"8806e2e3-da99-4a56-ad3e-77f2ccc98b93","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary","state":"MA","individuals_affected":3500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass Eye and Ear failed to protect the privacy of patients when a laptop containing unsecured ePHI was stolen. The laptop contained the ePHI of 3,500 patients.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"9be34555-d2a8-41f0-824a-f6fdba421fa8","source_event_group_id":"fffa5259-493b-4347-a159-2b158c421ac2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Greater Regional Medical Center","state":"IA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Greater Regional Medical Center following a breach involving a former employee accessing protected health information.","event_id":"fffa5259-493b-4347-a159-2b158c421ac2","severity_score":50},{"record_id":"928bf490-f9b6-4ec1-896f-3267bd18c907","source_event_group_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Raleigh Orthopaedic Clinic, P.A.","state":"NC","individuals_affected":17300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Raleigh Orthopaedic Clinic following a breach involving a business associate's unsecured servers.","event_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","severity_score":80},{"record_id":"6a154af2-c7c8-4f76-a5ab-b7cc8eb3aa4c","source_event_group_id":"0d0e5b05-0709-4e3a-a66b-96a7fc273923","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presentations of the Carolinas, P.A.","state":"NC","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Presentations of the Carolinas following a complaint that patient records were dumped in an unsecured waste bin.","event_id":"0d0e5b05-0709-4e3a-a66b-96a7fc273923","severity_score":50},{"record_id":"35f86064-e095-497d-a8be-c7152ef0b2df","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center (n/k/a Mount Sinai St. Luke's)","state":"NY","individuals_affected":6,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated St. Luke's-Roosevelt Hospital Center for impermissibly disclosing protected health information to a film crew.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"e5a8c38e-8c14-412d-98d6-f162bbe4f75b","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":36254,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated MD Anderson Cancer Center following multiple breaches, resulting in a CMP due to non-compliance.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"a18876ae-90f5-41a9-bf85-00d4933d5997","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Cancer Care Group following a breach involving a stolen unencrypted laptop.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"96eeffd6-12f6-439b-a65d-0344a6b15bb2","source_event_group_id":"ac834aa1-14be-4ae5-adbc-7b8a6a0b91a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Orthopaedic and Sports Medicine Specialists of Green Bay (OSMS)","state":"WI","individuals_affected":36324,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated OSMS following a breach where protected health information was impermissibly disclosed due to a mailing error.","event_id":"ac834aa1-14be-4ae5-adbc-7b8a6a0b91a5","severity_score":65},{"record_id":"5e9372df-9369-40de-8ae5-705cbe3a9769","source_event_group_id":"95a3b5f1-bbc3-4d00-bf27-e6b8ac2414f0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"InsMed, Inc.","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated InsMed following a breach where protected health information was exposed on an unsecured server.","event_id":"95a3b5f1-bbc3-4d00-bf27-e6b8ac2414f0","severity_score":50},{"record_id":"5e07b915-a9e6-49e1-aa2d-d791ff40a35c","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network (MCPN)","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated MCPN following a breach where protected health information was impermissibly disclosed via an insecure email system.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"5de09421-fb4b-4ec4-b24d-1e748b259f52","source_event_group_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Prentice Women's Hospital (Northwestern Memorial Hospital)","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Prentice Women's Hospital for impermissibly disclosing protected health information to a film crew.","event_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","severity_score":50},{"record_id":"48abc010-546d-4b5f-902d-543b37769047","source_event_group_id":"acb96b8a-efb9-4535-af34-f2900ca249f2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mercy Medical Center (D.B.A. Mercy Hospital)","state":"IA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Mercy Medical Center following a breach where protected health information was impermissibly disclosed via email.","event_id":"acb96b8a-efb9-4535-af34-f2900ca249f2","severity_score":80},{"record_id":"35801722-cccc-4778-8874-0db323bacd52","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, P.C.","state":"MA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Adult & Pediatric Dermatology following a breach involving a stolen unencrypted portable device.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"2ef0d24d-2f94-4edf-95ab-a378401f703c","source_event_group_id":"12ddc37c-bd0a-4e00-b929-74beaeabcbc4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPS Counseling Services, P.A.","state":"MA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated MAPS Counseling Services following a breach where protected health information was exposed on an unsecured server.","event_id":"12ddc37c-bd0a-4e00-b929-74beaeabcbc4","severity_score":50},{"record_id":"fb67c483-d0f8-459f-9d7c-8475a6747173","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4030206,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advocate Health Care for multiple breaches, finding widespread non-compliance with HIPAA Security Rules.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"fabc34b4-db23-48a7-93c0-dc5dc215bd64","source_event_group_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fountain Valley Regional Hospital (Tenet Health)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Fountain Valley Regional Hospital for impermissibly disclosing protected health information to a film crew.","event_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","severity_score":50},{"record_id":"fa5707f5-ae3e-4e70-bf63-1122e368c62d","source_event_group_id":"e7b51005-4985-4d22-bfa3-a92ed0ef52ab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blackstone Valley Community Health Care","state":"RI","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Blackstone Valley Community Health Care following a breach where protected health information was exposed on an unsecured server.","event_id":"e7b51005-4985-4d22-bfa3-a92ed0ef52ab","severity_score":65},{"record_id":"f7a3e9af-57dd-4cbd-9edb-00a749d2f9e0","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children's Digestive Health (CCDH)","state":"IL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CCDH following a breach where protected health information was exposed due to a business associate's negligence.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"e91de97b-2b5a-49a6-be21-0ea9510e144a","source_event_group_id":"e11eaca1-af12-4c03-ad3e-2dc4008db7bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Roxborough Memorial Hospital","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Roxborough Memorial Hospital for impermissibly disclosing protected health information to a film crew.","event_id":"e11eaca1-af12-4c03-ad3e-2dc4008db7bc","severity_score":50},{"record_id":"e4807780-e1af-4840-82a1-51fcb454fe88","source_event_group_id":"92612061-2601-4266-ae7c-22c1fb8d6138","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"State of New York DOH","state":"NY","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the New York State Department of Health (NYSDOH) following impermissible disclosure of protected health information on its website. No monetary settlement was imposed, but a corrective action plan was required.","event_id":"92612061-2601-4266-ae7c-22c1fb8d6138","severity_score":55},{"record_id":"dc9e0815-ccc4-4c56-884b-c88bf5c6411a","source_event_group_id":"c2770979-048a-47ab-9afc-135c0d9048a4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Virtual Care Provider, Inc.","state":"CA","individuals_affected":3290,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Virtual Care Provider for multiple HIPAA violations related to an unsecured server.","event_id":"c2770979-048a-47ab-9afc-135c0d9048a4","severity_score":50},{"record_id":"7f685075-681b-40ef-b05e-adf1abc08beb","source_event_group_id":"4e764e48-5d0e-4fc3-a092-43b31b68b3e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of North Carolina Health Care","state":"NC","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the University of North Carolina Health Care following claims of improper disclosure of protected health information.","event_id":"4e764e48-5d0e-4fc3-a092-43b31b68b3e6","severity_score":80},{"record_id":"5e67f172-c108-41eb-bfe3-625aa47a9d97","source_event_group_id":"085f6c20-6357-40cb-b1eb-c95617d082b9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fax USA","state":"FL","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Fax USA following a breach where protected health information was impermissibly disclosed via fax.","event_id":"085f6c20-6357-40cb-b1eb-c95617d082b9","severity_score":50},{"record_id":"57c9f43f-81b0-4bc0-bc33-65f66301d55c","source_event_group_id":"3fda95a4-9b26-4b54-bf0d-00030db6b978","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management d.b.a. Back Pain Centers of America","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advanced Spine & Pain Management following a breach where protected health information was impermissibly disclosed for marketing.","event_id":"3fda95a4-9b26-4b54-bf0d-00030db6b978","severity_score":50},{"record_id":"514476d5-7a00-4d6a-bd60-782833119d63","source_event_group_id":"48e8633e-61a1-447e-b086-2d4dc63588a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dartmouth-Hitchcock Medical Center","state":"NH","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Dartmouth-Hitchcock Medical Center following a breach involving unencrypted spreadsheets.","event_id":"48e8633e-61a1-447e-b086-2d4dc63588a1","severity_score":50},{"record_id":"3f91928f-20a3-40da-8c02-4a61b525ffbd","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services (DMS)","state":"MA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated DMS following a breach where protected health information was left unsecured at an unmanaged storage facility.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":50},{"record_id":"34e2aeb7-8eb0-427f-b1e1-bf808c40a1d2","source_event_group_id":"8905f426-9cd3-4b33-bedd-0071fdddb14b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mental Health Associates of Central Florida","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Mental Health Associates of Central Florida following a breach involving improper disposal of patient records.","event_id":"8905f426-9cd3-4b33-bedd-0071fdddb14b","severity_score":50},{"record_id":"325345fa-0ef3-4e63-b903-55a4a4c0776f","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences (UAMS)","state":"AR","individuals_affected":1494,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UAMS following a breach where protected health information was impermissibly disclosed through a mailing error.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":90},{"record_id":"28dace19-7f18-49b5-9f77-0d53d3d544d0","source_event_group_id":"0727cd4a-def3-4310-b4e3-e4287ea16916","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connected Care Alliance dba Advanced Care Hospitalists","state":"MI","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Connected Care Alliance following a breach where protected health information was impermissibly disclosed for marketing.","event_id":"0727cd4a-def3-4310-b4e3-e4287ea16916","severity_score":50},{"record_id":"21a316a4-08ce-4215-86ab-5c7f74fb811a","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UCLA Health following a breach where protected health information was impermissibly accessed by an unapproved individual.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":90},{"record_id":"15f901c9-ef74-4679-9ef5-fe0b9fd05b94","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Massachusetts Amherst","state":"MA","individuals_affected":16700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated The University of Massachusetts Amherst following a breach where protected health information was exposed on an unsecured server.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":90},{"record_id":"14e696ca-7ede-448b-889e-26dfc47d8ddd","source_event_group_id":"4f81b844-fea3-4625-945c-6df1241ecdea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Health Corporation","state":"MI","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Metropolitan Health Corporation following a breach where protected health information was impermissibly disclosed via email.","event_id":"4f81b844-fea3-4625-945c-6df1241ecdea","severity_score":65},{"record_id":"0973b240-8656-45df-87a7-ba6367ef03cd","source_event_group_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas, Division of Spartanburg Regional Healthcare System","state":"SC","individuals_affected":3726,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medical Group of the Carolinas following a breach involving email accounts.","event_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","severity_score":65},{"record_id":"060b60a0-d414-4f81-ab05-060635fd8f90","source_event_group_id":"d4098a22-592b-4612-95a6-9f4475183e4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Family Healthcare, P.C.","state":"VA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advanced Family Healthcare after a breach report indicated an unsecured server exposed protected health information.","event_id":"d4098a22-592b-4612-95a6-9f4475183e4b","severity_score":50},{"record_id":"00738a90-f74e-4539-85d0-f02e35534a7e","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UCLA Health following a breach where protected health information was impermissibly accessed by an unapproved individual.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"c00c5865-2490-4ad9-91d1-1cac46fc560c","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"KY","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CHCS following multiple breaches involving unencrypted mobile devices.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"bd5fe437-16e8-4c4c-aab7-8c037354ab36","source_event_group_id":"b3194d35-a986-46f5-9f02-7745d9b7a29c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asturia, P.A.","state":"FL","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Allergy Associates of Asturia following a breach where protected health information was exposed on an unsecured server.","event_id":"b3194d35-a986-46f5-9f02-7745d9b7a29c","severity_score":65},{"record_id":"b5a8f0e5-ec75-4780-af0e-639349cd979c","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, Inc. (d.b.a BioTelemetry Healthcare)","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CardioNet following a breach where an unencrypted laptop containing protected health information was stolen.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"63dc3d85-0537-4121-b9fb-188ae2915ae2","source_event_group_id":"f056a6f1-2d2e-4b79-8e2c-57c3334c247f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"California Pacific Medical Center","state":"CA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated California Pacific Medical Center following a breach involving an unencrypted laptop.","event_id":"f056a6f1-2d2e-4b79-8e2c-57c3334c247f","severity_score":65},{"record_id":"5e399a51-4c8b-404c-9c38-9c85e3275887","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (d.b.a. Agape Health Services)","state":"NC","individuals_affected":12638,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Agape Health Services after a breach report indicated an unsecured website exposed protected health information.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"573e97bf-9be1-4609-a09f-9619810ec9e0","source_event_group_id":"0975d405-ae38-40b1-ba1f-2f65f8dccb25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LifeBridge Health","state":"MD","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated LifeBridge Health following a breach where protected health information was impermissibly disclosed via email.","event_id":"0975d405-ae38-40b1-ba1f-2f65f8dccb25","severity_score":80},{"record_id":"48dd676a-5622-42c9-8657-7e550ef7f464","source_event_group_id":"856dc7ce-ad72-44f2-9230-64429f5bbd80","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Genomics Inc.","state":"CA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Complete Genomics Inc. following a breach involving improper disposal of biological materials.","event_id":"856dc7ce-ad72-44f2-9230-64429f5bbd80","severity_score":65},{"record_id":"2d9b7bcc-d261-4405-8354-1d3247c11904","source_event_group_id":"bc32feb2-0d49-497f-b74e-98245b7c4c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kelsey-Seybold Clinic, P.A.","state":"TX","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Kelsey-Seybold Clinic following a breach report due to an unsecured server that impermissibly disclosed protected health information.","event_id":"bc32feb2-0d49-497f-b74e-98245b7c4c1f","severity_score":90},{"record_id":"15bf76ce-91c5-44f6-a900-c4a8f86f6ec3","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health (CCDH)","state":"IL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CCDH following a breach where protected health information was exposed due to a business associate's negligence.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"0d23ffb9-7953-4cc0-9c20-57ecff141deb","source_event_group_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partners HealthCare System, Inc.","state":"MA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Partners HealthCare following a breach where protected health information was impermissibly disclosed via email.","event_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","severity_score":90},{"record_id":"f1dd33ee-8d25-44e2-99d6-6654e15f9011","source_event_group_id":"b5a79bc0-df90-4755-b818-78c694f7a31b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sallyport Global","state":"VA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sallyport Global failed to implement safeguards, leading to the impermissible disclosure of ePHI on an unsecured server.","event_id":"b5a79bc0-df90-4755-b818-78c694f7a31b","severity_score":50},{"record_id":"f06acd1b-2df9-445b-8130-633ba12488bd","source_event_group_id":"14c43f5d-9aec-4426-8aee-d2727965662b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester Orthopedic Associates, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester Orthopedic Associates failed to provide a patient with timely access to their medical records despite multiple requests.","event_id":"14c43f5d-9aec-4426-8aee-d2727965662b","severity_score":50},{"record_id":"de5fc0eb-f7ec-405a-bffd-988c1926c3a3","source_event_group_id":"8be622d2-7060-4284-a7c5-c075d113783e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete P.T., Pool & Fitness Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete P.T. impermissibly disclosed PHI by posting patient testimonials, including full names and protected health information, on its website.","event_id":"8be622d2-7060-4284-a7c5-c075d113783e","severity_score":50},{"record_id":"dd61f6af-04d3-422d-80f3-399c76b70073","source_event_group_id":"31366a45-f644-4347-a470-a5e7ea31626b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"RevSpring, Inc.","state":"MI","individuals_affected":1100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"RevSpring, Inc. impermissibly disclosed PHI to unauthorized entities due to an insufficient business associate agreement.","event_id":"31366a45-f644-4347-a470-a5e7ea31626b","severity_score":80},{"record_id":"d89fa5d8-7d6c-4678-b80c-3682160480ac","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (doing business as Massachusetts General Hospital)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital settled with OCR after an impermissible disclosure of PHI when a patient’s HIV status was publicly revealed by a researcher preparing study results.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"cdabe7c0-fec9-454a-8e10-d73411708d15","source_event_group_id":"fba78a24-4f86-475b-b016-e54ced61a578","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Green Ridge Behavioral Health","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Green Ridge Behavioral Health failed to provide a patient with timely access to their medical records despite multiple requests.","event_id":"fba78a24-4f86-475b-b016-e54ced61a578","severity_score":50},{"record_id":"c16d3859-931f-41d4-9e6d-9fd4641812e5","source_event_group_id":"3b005b5b-6154-4a65-9557-9bbd5d417456","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Swope Health Services","state":"MO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Swope Health Services failed to provide a patient with timely access to their medical records despite multiple requests.","event_id":"3b005b5b-6154-4a65-9557-9bbd5d417456","severity_score":50},{"record_id":"bb774040-f979-487c-9621-d22deac736a8","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital and Columbia University Medical Center","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and CUMC settled with OCR due to an impermissible disclosure of ePHI of 6,800 patients. A security vulnerability allowed patient information, including status, vital signs, and medications, to be discoverable on internet search engines.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"b2190b0b-5a97-4da9-bd34-d8ccc9b363b5","source_event_group_id":"55e7cf96-13b3-40d2-937f-4725a28cc83c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cencal Health","state":"CA","individuals_affected":1170,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cencal Health settled with OCR after a breach involving the impermissible disclosure of PHI when an employee's unencrypted laptop, containing the ePHI of 1,170 individuals, was stolen.","event_id":"55e7cf96-13b3-40d2-937f-4725a28cc83c","severity_score":65},{"record_id":"b12043f7-a3fd-4c6b-a274-56358b6c725a","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Feinstein Institute for Medical Research","state":"NY","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Feinstein Institute for Medical Research failed to implement appropriate safeguards, leading to the theft of an unencrypted laptop containing ePHI.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":65},{"record_id":"9fa44c87-123b-4596-9185-87852b1d43e8","source_event_group_id":"f65891c9-193f-4921-9852-06c0d925a1ab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Western Digital Corporation","state":"CA","individuals_affected":32624,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Western Digital Corporation failed to implement administrative, technical, and physical safeguards for ePHI, leading to an impermissible disclosure.","event_id":"f65891c9-193f-4921-9852-06c0d925a1ab","severity_score":65},{"record_id":"9d604b08-1d72-49af-b865-bbc53c44bb78","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee (BCBST)","state":"TN","individuals_affected":1023274,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBST settled with OCR following a breach where 57 unencrypted hard drives containing the ePHI of over 1 million individuals were stolen from a leased facility. These drives were not inventoried or tracked, and were accessible to unauthorized persons.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"9a4f8862-2b48-4f28-a053-d5e9a7b83028","source_event_group_id":"94c9a4f9-b905-49ef-a369-53a1c512a46b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MD Anderson Cancer Center (MDACC)","state":"TX","individuals_affected":34850,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MDACC settled with OCR after repeated impermissible disclosure of ePHI. This included the theft of an unencrypted laptop and two separate incidents of lost unencrypted USB drives, affecting thousands of patients.","event_id":"94c9a4f9-b905-49ef-a369-53a1c512a46b","severity_score":90},{"record_id":"905f01be-f0f9-44b4-af4b-1ec6a24decf7","source_event_group_id":"76303630-da0e-4d3c-be41-638da4ee1965","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of the Comforter","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospice of the Comforter failed to implement safeguards after a mobile device containing the ePHI of over 1000 patients was stolen.","event_id":"76303630-da0e-4d3c-be41-638da4ee1965","severity_score":65},{"record_id":"8f88c002-b7f2-4845-8941-e4c8952521ee","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc. (Affinity)","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity settled with OCR after returning multiple photocopiers to a leasing agent without properly erasing or destroying the ePHI stored on the copier hard drives.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"83be4a97-a1c7-476b-b60e-ecfeaab5deee","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":33500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson Cancer Center failed to encrypt ePHI on stolen devices and impermissibly disclosed the PHI of over 30,000 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"72b87d00-fd31-4184-be2e-25fe0477a745","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System, Inc. (Parkview)","state":"IN","individuals_affected":8000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview settled with OCR after impermissibly disposing of 71 boxes of medical records containing the PHI of approximately 5,000 to 8,000 patients in the driveway of a physician's home.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"5adaec67-eb0d-4ccf-978c-9bc8ac8c593a","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS failed to conduct a risk analysis and implement security measures, resulting in the theft of a mobile device containing unsecured ePHI.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"55a62580-6e76-4e02-95ae-db199394d450","source_event_group_id":"3fb388b0-e7c1-4dee-ae6b-6a463f2dd32c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Texas (BCBSTX)","state":"TX","individuals_affected":3100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSTX impermissibly disclosed the PHI of over 3000 patients when a third-party vendor disposed of protected health information improperly.","event_id":"3fb388b0-e7c1-4dee-ae6b-6a463f2dd32c","severity_score":90},{"record_id":"54aa34a5-83bc-4e93-84fa-d80369b54c1b","source_event_group_id":"66b56619-afbf-4eae-8068-cddfb901c614","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lumina Health Partners (formerly La Clinica de la Raza)","state":"CA","individuals_affected":1100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lumina Health Partners impermissibly disclosed PHI to a state agency because its business associate agreement was insufficient.","event_id":"66b56619-afbf-4eae-8068-cddfb901c614","severity_score":80},{"record_id":"4d3ff1e3-0fa1-4ca8-837e-524662b3a00e","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas impermissibly disclosed PHI by leaving a box of patient records unattended in the parking lot of a local pharmacy.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":50},{"record_id":"49788699-903b-40e4-8eea-b54cfc7527f3","source_event_group_id":"4f53444c-9844-4a8b-b0db-5c4bae4a67eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Return Home, Inc.","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Return Home, Inc. impermissibly disclosed PHI to unauthorized entities due to an insufficient business associate agreement.","event_id":"4f53444c-9844-4a8b-b0db-5c4bae4a67eb","severity_score":65},{"record_id":"42248578-d503-4cb6-808f-98cbeab5f3bf","source_event_group_id":"9b28af4d-8d7e-410e-be8e-4144eec3a724","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diocese of Little Rock, Arkansas","state":"AR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Diocese of Little Rock impermissibly disclosed PHI of mental health patients due to an insufficient business associate agreement.","event_id":"9b28af4d-8d7e-410e-be8e-4144eec3a724","severity_score":50},{"record_id":"4061a1a1-e546-4ba4-bc23-7c414bbebad3","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc.","state":"IN","individuals_affected":3908862,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering failed to implement safeguards after a hacker infiltrated its web-based electronic health record system.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"3d5e15bb-1c8e-4fc8-bdf6-4f331d90186b","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, LLC (now BioTelemetry, Inc.)","state":"PA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet failed to implement safeguards, resulting in the theft of an unencrypted laptop containing the ePHI of over 1000 patients.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"3346b970-92e7-4fa9-9c02-6b0e2e74bb59","source_event_group_id":"97f39624-e27d-45c2-8135-da43b24d6738","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eastern Maine Medical Center","state":"ME","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eastern Maine Medical Center impermissibly disclosed the PHI of a patient to a local newspaper reporter.","event_id":"97f39624-e27d-45c2-8135-da43b24d6738","severity_score":50},{"record_id":"2e5d79dd-4f4a-4a39-8403-ba5d4f8c3d0b","source_event_group_id":"51d89c69-0478-4e96-9f31-420392672bd2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Treatment Center, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Treatment Center disclosed the PHI of a patient to that patient's parents without authorization because the patient was an adult.","event_id":"51d89c69-0478-4e96-9f31-420392672bd2","severity_score":50},{"record_id":"1c726db5-5c7f-4378-add5-eaea5d2f8ca1","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Care Alliance failed to implement safeguards, resulting in the impermissible disclosure of ePHI on an unsecured server.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":65},{"record_id":"198b98bd-6ddb-491b-a900-0cda82b047a5","source_event_group_id":"b19e5cbc-7485-45b7-bc15-929d10ccd902","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Alliance Plan of Michigan","state":"MI","individuals_affected":248,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Alliance Plan impermissibly disclosed the PHI of over 2000 patients when it mailed letters containing sensitive information to the wrong recipients.","event_id":"b19e5cbc-7485-45b7-bc15-929d10ccd902","severity_score":50},{"record_id":"0a9198ee-6ad5-4fb9-b0a8-fd89f04f7b1f","source_event_group_id":"8041ea2f-85d6-4ecc-b3dd-47615c24942f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Haven VA Medical Center","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Haven VA Medical Center impermissibly disclosed PHI by sending an email containing sensitive patient information to the wrong recipient.","event_id":"8041ea2f-85d6-4ecc-b3dd-47615c24942f","severity_score":50},{"record_id":"d5ac1776-a2dd-4ebe-80f8-3e6a76565c07","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center (SRMC)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SRMC settled with OCR after internal hospital documents containing PHI were impermissibly disclosed to the media, violating patient privacy.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":65},{"record_id":"c5b271ca-9fff-4f39-aca8-33c4af214a93","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary (MEEI) and Massachusetts Eye and Ear Associates, Inc. (MEEA)","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI and MEEA entered into a resolution agreement stemming from the theft of an unencrypted laptop containing ePHI of patients and research subjects.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"bce86e9b-600c-4530-9dad-96ca7c2666d4","source_event_group_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"QCA Health Plan, Inc. (QCA)","state":"AR","individuals_affected":148,"breach_submission_date":null,"enforcement_action_date":null,"summary":"QCA settled with OCR after a breach where spreadsheets containing the ePHI of 148 individuals were uploaded to a publicly accessible website. The information included names, addresses, and medical information.","event_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","severity_score":65},{"record_id":"aa10da8b-d6d9-41c1-b672-48993f9fc27b","source_event_group_id":"460f0497-0866-4dcb-8f0a-f18b101bbddf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cejka & Company","state":"MO","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cejka & Company settled with OCR after a breach involving an unencrypted laptop containing the PHI of job applicants was stolen.","event_id":"460f0497-0866-4dcb-8f0a-f18b101bbddf","severity_score":50},{"record_id":"9e888b4d-f90d-45dc-81d7-873724d3fd3d","source_event_group_id":"8578eb9e-0cc6-4637-b6ab-cfba5784521e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Western Union","state":"CO","individuals_affected":612,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Western Union settled with OCR after impermissibly disclosing PHI when a former employee continued to have access to a database containing ePHI after their employment was terminated.","event_id":"8578eb9e-0cc6-4637-b6ab-cfba5784521e","severity_score":65},{"record_id":"35d36c37-c9fc-47c6-a909-515dbfb3be51","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services (Concentra)","state":"TX","individuals_affected":873,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra settled with OCR after a breach involving an unencrypted laptop that was stolen from one of its facilities, exposing the ePHI of over 850 patients.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"68dfc129-6a3a-4458-99de-46fdaf895b2b","source_event_group_id":"ea6a0b13-ebb4-41cb-94ab-6bd3afbab331","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Dental Centers","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Dental Centers failed to provide a patient with timely access to their medical records despite multiple requests.","event_id":"ea6a0b13-ebb4-41cb-94ab-6bd3afbab331","severity_score":50},{"record_id":"d9c30753-57c1-4a80-96a4-47a7a48e8cfd","source_event_group_id":"5e5a461d-efc9-4e1b-9a17-cc5b6607ef4c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southwest Behavioral Health Services.org","state":"AZ","individuals_affected":2316,"breach_submission_date":"2026-05-20","enforcement_action_date":null,"summary":"","event_id":"5e5a461d-efc9-4e1b-9a17-cc5b6607ef4c","severity_score":50},{"record_id":"d7b6367b-f98f-497b-a1c8-ea707bc0aed4","source_event_group_id":"6cfb8c84-0afd-4ce1-98fd-7b89e1ebac2f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oakwood Lutheran Senior Ministries, Inc.","state":"WI","individuals_affected":1080,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"6cfb8c84-0afd-4ce1-98fd-7b89e1ebac2f","severity_score":50},{"record_id":"b6cae339-e01a-46aa-afea-b5bdb8990d07","source_event_group_id":"c1b24955-aa67-474c-ac79-ab043e92016c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Medical Doctors","state":"CA","individuals_affected":501,"breach_submission_date":"2026-05-29","enforcement_action_date":null,"summary":"","event_id":"c1b24955-aa67-474c-ac79-ab043e92016c","severity_score":30},{"record_id":"452f2338-d2d2-4724-8212-4fa770271f7a","source_event_group_id":"3076c65f-84ad-4da1-abec-7b666a94eb1d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regence","state":"OR","individuals_affected":2856,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"3076c65f-84ad-4da1-abec-7b666a94eb1d","severity_score":50},{"record_id":"ac4ad44a-c23a-40cd-9e4c-acf8ff71ac6c","source_event_group_id":"d6f0cd0a-a475-4ad0-a0d0-720a0b3617de","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ira L. Savetsky, MD PLLC","state":"NY","individuals_affected":564,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"d6f0cd0a-a475-4ad0-a0d0-720a0b3617de","severity_score":30},{"record_id":"41aebd3f-d3aa-40f3-a8ab-3a783ef5699d","source_event_group_id":"51a0df26-9e37-4207-8854-84af630915ed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gastro Health","state":"FL","individuals_affected":1628,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"51a0df26-9e37-4207-8854-84af630915ed","severity_score":50},{"record_id":"21fc974b-cdbe-4919-b7b7-fb88836b415c","source_event_group_id":"a8b64900-bb7f-4b86-8d99-9285a80ca5a6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Coastal Carolina Centers of Urology and Surgery, LLC","state":"SC","individuals_affected":2886,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"a8b64900-bb7f-4b86-8d99-9285a80ca5a6","severity_score":50},{"record_id":"52a92c34-5881-4fd1-a20b-228d127c58ba","source_event_group_id":"1c74c57e-9d38-4a39-a838-45afbc15aa27","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Virta Medical PC","state":"CO","individuals_affected":14636,"breach_submission_date":"2026-05-23","enforcement_action_date":null,"summary":"","event_id":"1c74c57e-9d38-4a39-a838-45afbc15aa27","severity_score":70},{"record_id":"445e4be7-668b-445c-9054-f8c0dc3a7b95","source_event_group_id":"5fb06d39-1ea3-4775-badf-0bb6d8b1e59d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Saurabh N. Patel, M.D – Florida Retina Center","state":"LA","individuals_affected":13652,"breach_submission_date":"2026-05-11","enforcement_action_date":null,"summary":"","event_id":"5fb06d39-1ea3-4775-badf-0bb6d8b1e59d","severity_score":70},{"record_id":"36ed465d-c51a-490e-bdc5-f267c91d829d","source_event_group_id":"423788e2-f424-4ec3-b5fc-de50a70fac35","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nottingham Village","state":"PA","individuals_affected":5240,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"423788e2-f424-4ec3-b5fc-de50a70fac35","severity_score":50},{"record_id":"fdcc55a9-827d-4068-9cce-41365ebe6526","source_event_group_id":"b857155b-d68f-49d9-948a-6a1a1a47462a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Solara Hospital Psychiatric Unit","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Solara Hospital Psychiatric Unit will pay $85,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"b857155b-d68f-49d9-948a-6a1a1a47462a","severity_score":50},{"record_id":"ef876939-d7d5-48fb-a794-19bb7270873d","source_event_group_id":"442b26e2-be92-4fef-b729-b8a70d0a0ae7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Coast Medical Group","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Coast Medical Group will pay $10,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"442b26e2-be92-4fef-b729-b8a70d0a0ae7","severity_score":50},{"record_id":"e81d7564-fed9-4082-96e5-36087ba92052","source_event_group_id":"5d37165a-6a42-484c-ab4e-c269829a4e2b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CME Hospital","state":"GA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CME Hospital will pay $1.5 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"5d37165a-6a42-484c-ab4e-c269829a4e2b","severity_score":90},{"record_id":"d9eb1333-90da-4fd9-975f-6b526636090a","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital and Medical Center of Omaha","state":"NE","individuals_affected":750000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital and Medical Center of Omaha will pay $2.15 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":90},{"record_id":"d27068a1-6ea8-4924-9888-6c7a480aa453","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health Care Services of the Archdiocese of Philadelphia will pay $650,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information when an unencrypted iPhone was stolen.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"cbf98713-811e-4c29-86a2-5c0948f3de4f","source_event_group_id":"e677b99a-956b-46bc-8d32-99d9db58085f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Iowa Hospitals and Clinics","state":"IA","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Iowa Hospitals and Clinics will pay $900,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"e677b99a-956b-46bc-8d32-99d9db58085f","severity_score":80},{"record_id":"c5891cfb-669a-435e-92b3-5c46794f6c1d","source_event_group_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Psychiatric Medical Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Riverside Psychiatric Medical Group will pay $50,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","severity_score":50},{"record_id":"c31890d5-ec73-41fc-83c8-122cfa2bde7f","source_event_group_id":"3f596fd5-9b7b-4011-9b58-e5ac0f81a834","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Medical, LLC d/b/a Regional Medical Imaging","state":"MI","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Medical, LLC d/b/a Regional Medical Imaging will pay $100,000 to settle potential HIPAA violations and implement a corrective action plan.","event_id":"3f596fd5-9b7b-4011-9b58-e5ac0f81a834","severity_score":50},{"record_id":"beccdbfc-20ab-4e8f-b7fb-0469d12d43ba","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America","state":"MA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresenius Medical Care North America will pay $3.5 million to settle potential HIPAA violations. The case involved five separate breaches of protected health information.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"be4308f7-224a-4e12-a855-4d0fc4c97334","source_event_group_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partners HealthCare System, Inc.","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Partners HealthCare System, Inc. will pay $1.8 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","severity_score":90},{"record_id":"bbda7b15-bb56-4821-9382-95204e57657c","source_event_group_id":"c665e2e9-31e7-40e8-8bb9-d02313843c18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Academic HealthPlans","state":"TX","individuals_affected":580000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Academic HealthPlans will pay $2.7 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information when an employee's email account was compromised.","event_id":"c665e2e9-31e7-40e8-8bb9-d02313843c18","severity_score":90},{"record_id":"b860c688-00cd-4d50-9304-7b55ad4f7295","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":62500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health will pay $3 million to settle potential HIPAA violations. The case involved two data breaches affecting over 62,000 individuals.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":90},{"record_id":"afb69481-c62d-40ae-97d4-34a02e525a2d","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts General Hospital","state":"MA","individuals_affected":3600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts Eye and Ear Infirmary and Massachusetts General Hospital settled with OCR after a breach involving the loss of an unencrypted laptop containing ePHI of patients.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"94c88f00-b15e-4701-94ae-e66d09470f0e","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System","state":"FL","individuals_affected":1157832,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Healthcare System will pay $5.5 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information due to unauthorized access.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"885cfe20-10c5-4bb9-bb18-9934be649d48","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Healthcare","state":"VA","individuals_affected":600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Healthcare will pay $2.175 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":90},{"record_id":"850b2402-7306-43ce-90f6-3718d0aec31a","source_event_group_id":"484f639d-96de-4a99-b517-3a686ec6c13c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Services","state":"CA","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors' Management Services will pay $1.7 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"484f639d-96de-4a99-b517-3a686ec6c13c","severity_score":90},{"record_id":"8393acec-92a7-4815-8836-6676e3cc09a1","source_event_group_id":"292e08d7-81b8-44d3-87c5-01ce7e010a85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memphis Dental Craft, Inc.","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memphis Dental Craft, Inc. will pay $25,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information on social media.","event_id":"292e08d7-81b8-44d3-87c5-01ce7e010a85","severity_score":50},{"record_id":"8202dde0-868c-44d3-8e45-464c8889dd23","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health will pay $865,500 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"80883548-2e27-4bef-bf64-2fddf6441ada","source_event_group_id":"7b5bf9cd-29cd-4f06-a358-97b5eeae38fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advance Care Hospital of Fort Smith","state":"AR","individuals_affected":12,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advance Care Hospital of Fort Smith will pay $10,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information due to a lack of proper administrative safeguards.","event_id":"7b5bf9cd-29cd-4f06-a358-97b5eeae38fe","severity_score":50},{"record_id":"76e39a4f-f90c-448e-8580-875085ba06ab","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals will pay $2.175 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":90},{"record_id":"7680dd52-8bb5-4fc2-995d-8cc409b02db8","source_event_group_id":"d107f17a-a82a-4de4-bee5-5888cfdac3d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Neurosurgery Center","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Neurosurgery Center will pay $31,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"d107f17a-a82a-4de4-bee5-5888cfdac3d3","severity_score":50},{"record_id":"6fc9e0d2-de73-4a8c-86e0-389deda756fe","source_event_group_id":"aa4f9656-6c4a-43a7-816c-51489b1f5d30","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westbury Clinic, P.A.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westbury Clinic, P.A. will pay $35,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"aa4f9656-6c4a-43a7-816c-51489b1f5d30","severity_score":50},{"record_id":"6e04d318-7b71-4fee-a5c2-4e198eb9b848","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boston Medical Center will pay $100,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information when a reporter was allowed to film in a patient care area.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"6786012b-78dc-46a1-93fa-5dad1a7312dd","source_event_group_id":"dd6e9052-a6a8-4570-ad55-be2c3647e3ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wellmont Health System","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wellmont Health System will pay $75,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information when patient information was found in a dumpster.","event_id":"dd6e9052-a6a8-4570-ad55-be2c3647e3ac","severity_score":50},{"record_id":"641ebe5f-b9f8-46d8-af91-43edd4476bcd","source_event_group_id":"a3a4fb25-ebee-4139-98a1-1e3419c81551","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sunrise Medical Laboratories, Inc.","state":"NY","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sunrise Medical Laboratories, Inc. will pay $1.5 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"a3a4fb25-ebee-4139-98a1-1e3419c81551","severity_score":90},{"record_id":"5b63c55e-822a-4806-9884-349ed2bee449","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority","state":"CO","individuals_affected":750000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health and Hospital Authority will pay $2.15 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":90},{"record_id":"44585f51-8bb5-400a-83af-c7583cd01d56","source_event_group_id":"e0ffffe3-2fd1-4c82-bcbe-38114c44caf9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Spine & Joint Hospital","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Spine & Joint Hospital will pay $1.2 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"e0ffffe3-2fd1-4c82-bcbe-38114c44caf9","severity_score":90},{"record_id":"43524066-4bc9-4c05-8803-9144c44dcdc6","source_event_group_id":"67f9e02e-b84c-45d3-97f5-3af32e6d7917","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCR","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR will pay $1.2 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"67f9e02e-b84c-45d3-97f5-3af32e6d7917","severity_score":90},{"record_id":"3ff1e8c8-c168-4132-9efb-464ccfdc2272","source_event_group_id":"3f596fd5-9b7b-4011-9b58-e5ac0f81a834","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Medical, LLC d/b/a Regional Medical Imaging","state":"MI","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Medical, LLC d/b/a Regional Medical Imaging will pay $100,000 to settle potential HIPAA violations and implement a corrective action plan.","event_id":"3f596fd5-9b7b-4011-9b58-e5ac0f81a834","severity_score":50},{"record_id":"3cffc9d0-a4e3-4397-8af2-f18bd9fc598b","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Medical Center will pay $85,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":50},{"record_id":"3c1db908-4704-45d8-b820-955dcf313404","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":6000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health and Human Services Commission will pay $1.6 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"29202d07-5beb-422e-8f6d-3ac2373c4ea9","source_event_group_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas - Division of Spartanburg Regional Healthcare System","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas will pay $100,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","severity_score":50},{"record_id":"1d954833-6ea5-4806-9ba2-16d36af78116","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health","state":"UT","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Utah Health will pay $500,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":65},{"record_id":"16aa2914-25e0-4c07-b93e-1ea100335641","source_event_group_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Physicians","state":"IN","individuals_affected":639396,"breach_submission_date":null,"enforcement_action_date":null,"summary":"IU Health will pay $2.6 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","severity_score":90},{"record_id":"15fd1579-7e4a-4846-b1e4-b90d15df76a0","source_event_group_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's Health Care Group of Pennsylvania, LLC","state":"PA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's Health Care Group of Pennsylvania, LLC will pay $1.5 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","severity_score":90},{"record_id":"10be981f-badf-46fd-93ca-e5efa697ec45","source_event_group_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Resources","state":"TX","individuals_affected":750000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Resources will pay $2.15 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","severity_score":90},{"record_id":"10268ec9-90ee-4d18-94cd-396203f11cf5","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, P.A. will pay $85,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"05cd5b33-0aa2-4b0d-bd12-ec0a28cd99df","source_event_group_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health","state":"CA","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health will pay $1.2 million to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative and technical safeguards.","event_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","severity_score":90},{"record_id":"019983c5-6054-44dc-829c-da7fe46865d6","source_event_group_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's & Infants Hospital of Rhode Island","state":"RI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's & Infants Hospital of Rhode Island will pay $31,000 to settle potential HIPAA violations. The case involved impermissible disclosures of protected health information and a lack of proper administrative safeguards.","event_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","severity_score":50},{"record_id":"d286a5d5-aa22-4667-b592-e673d785fab4","source_event_group_id":"f21fd787-76b5-463a-a00f-df371728db3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Imaging","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Foresight Imaging after receiving a notification that a business associate was impermissibly disclosing the ePHI of 1,000 individuals.","event_id":"f21fd787-76b5-463a-a00f-df371728db3c","severity_score":65},{"record_id":"bd06a7e5-428b-4b97-ac34-73268d72ed9d","source_event_group_id":"c8de192d-db93-440b-ac98-88630ebcaf86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jersey Spine and Rehabilitation","state":"NJ","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jersey Spine and Rehabilitation impermissibly disclosed the PHI of 1,000 individuals when an unencrypted laptop was stolen.","event_id":"c8de192d-db93-440b-ac98-88630ebcaf86","severity_score":50},{"record_id":"896bd611-25c0-400d-8654-57e011a5c92a","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center (BMC)","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BMC impermissibly disclosed the PHI of 1,000 individuals due to the theft of an unencrypted laptop from an employee's car.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"88856835-b921-4c1e-9e3a-b302f571ba03","source_event_group_id":"b451da9f-80d0-451e-beb6-89fad8448968","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allentown, PA, Police Department","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Allentown Police Department impermissibly disclosed the PHI of an individual by publicly revealing their medical condition in a press conference and related documents.","event_id":"b451da9f-80d0-451e-beb6-89fad8448968","severity_score":50},{"record_id":"f6185aad-7162-4aa8-9a01-cd3bf21b2dc7","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospital impermissibly disclosed the PHI of 200 individuals due to a data breach involving unencrypted electronic media.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"f441dee2-5ce8-414b-bb31-0e91baf465b9","source_event_group_id":"bee61592-5bcf-40d7-bb84-9f57ae1b3939","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPS Medical Management","state":"CA","individuals_affected":250000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPS Medical Management impermissibly disclosed the PHI of 250,000 individuals after a hacking incident compromised their network server.","event_id":"bee61592-5bcf-40d7-bb84-9f57ae1b3939","severity_score":65},{"record_id":"e353937b-e162-4533-9732-665b6c8f2fd9","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University – Center for Health Sciences (OSU-CHS)","state":"OK","individuals_affected":279000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OSU-CHS impermissibly disclosed the PHI of 279,000 individuals due to a hacking incident affecting its electronic health record system.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"dfdd3841-8b08-469b-8cdd-a01e456c5efe","source_event_group_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Clinic, LLP","state":"AR","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Clinic failed to safeguard the ePHI of 55,000 individuals, which was exposed after a cyberattack on its IT system.","event_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","severity_score":50},{"record_id":"defe80bf-b457-404e-bf68-6dca963c1e8a","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Medical Center","state":"DC","individuals_affected":3000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's National Medical Center impermissibly disclosed the PHI of 3,000 individuals when an unencrypted laptop was stolen.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":90},{"record_id":"d6c201c6-d207-4bed-9e60-76cc8c4080e7","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Corporation","state":"PR","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Triple-S Management Corporation impermissibly disclosed the PHI of 13,000 individuals due to its failure to implement appropriate physical and technical safeguards.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"d25a5a3a-f833-4991-a716-6eb3d00f3550","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":36373,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson failed to protect the ePHI of over 30,000 individuals, which was exposed after three separate data breaches involving the theft of an unencrypted laptop and two unencrypted USB drives.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"d20db1d6-1351-478e-b5e3-53154e05f380","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS impermissibly disclosed the ePHI of 412 individuals after unencrypted mobile devices were stolen.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"d0e4d010-3c04-46b4-a369-235d610b30d0","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de la Raza, Inc.","state":"CA","individuals_affected":900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de la Raza impermissibly disclosed the PHI of 900 individuals due to its failure to implement appropriate safeguards.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":65},{"record_id":"caa291c8-1bd9-4e1e-87cf-a28d1d05283a","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England Health System impermissibly disclosed the PHI of 14,000 individuals due to a data breach involving unencrypted backup tapes.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":80},{"record_id":"c867bdc3-8001-4d3b-a1df-ac376fbfb9fc","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMMC impermissibly disclosed the ePHI of 10,000 individuals due to its failure to conduct an enterprise-wide risk analysis and to implement appropriate security measures.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"c62e0bb5-0538-4fb9-ab10-d327d758b3da","source_event_group_id":"f21fd787-76b5-463a-a00f-df371728db3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Imaging, LLC","state":"MA","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Imaging impermissibly disclosed the PHI of 2,000 individuals due to its failure to enter into a business associate agreement with a vendor.","event_id":"f21fd787-76b5-463a-a00f-df371728db3c","severity_score":65},{"record_id":"c5337035-bd3e-4357-9bcc-b6d4e0fc30e1","source_event_group_id":"53e3ba23-c4cc-40f9-a18b-3d177dbdcfdc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's & Children's Hospital","state":"LA","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's & Children's Hospital impermissibly disclosed the PHI of 600 individuals due to its failure to implement appropriate safeguards.","event_id":"53e3ba23-c4cc-40f9-a18b-3d177dbdcfdc","severity_score":65},{"record_id":"c413b53f-15bc-438a-8e06-086831830886","source_event_group_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diocese of Providence","state":"RI","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diocese of Providence impermissibly disclosed the PHI of 600 individuals when unencrypted backup tapes were stolen.","event_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","severity_score":50},{"record_id":"b9db6713-614c-44e1-b124-049540a112ed","source_event_group_id":"ee3f50db-1c34-4f88-9cf2-19b27fc29d76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Health","state":"MA","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Health impermissibly disclosed the PHI of 13,000 individuals when an employee improperly disposed of documents containing PHI.","event_id":"ee3f50db-1c34-4f88-9cf2-19b27fc29d76","severity_score":80},{"record_id":"aff462de-5581-4bde-b56a-9f098e622e4c","source_event_group_id":"ed62c0d9-b7b3-4aea-8171-dbd43cd4684c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Center (MCHC)","state":"DC","individuals_affected":1400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCHC impermissibly disclosed the PHI of 1,400 individuals due to a phishing attack that compromised email accounts.","event_id":"ed62c0d9-b7b3-4aea-8171-dbd43cd4684c","severity_score":65},{"record_id":"afb57d82-e12a-4c69-8e6c-b0546d3fb7b4","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services, Inc.","state":"AK","individuals_affected":2740,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACMHS impermissibly disclosed the protected health information of 2,740 patients due to a malware breach that compromised its IT system.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":90},{"record_id":"af754d88-00f2-411d-bb72-161be3c4382f","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health (IU Health)","state":"IN","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"IU Health impermissibly disclosed the PHI of 13,000 individuals due to its failure to terminate access to a former employee's user account.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":80},{"record_id":"addc91ae-341f-4629-ac9f-d6a88da2283f","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"OH","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management impermissibly disclosed the PHI of 1,000 individuals due to its failure to implement appropriate safeguards.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":50},{"record_id":"a70dabb6-4d75-42de-87f9-3b1651cc65cb","source_event_group_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospital of Montana","state":"MT","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Care Hospital of Montana impermissibly disclosed the PHI of 1,000 individuals due to a ransomware attack.","event_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","severity_score":50},{"record_id":"9cda1e3a-738b-4825-9dd5-505c1cd1834d","source_event_group_id":"312aa44a-22fc-42c6-8ed1-d063087d184c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group P.C.","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group P.C. impermissibly disclosed the PHI of 1,000 individuals due to its failure to implement appropriate safeguards.","event_id":"312aa44a-22fc-42c6-8ed1-d063087d184c","severity_score":50},{"record_id":"99b91ed7-33a7-469b-a9e9-2d570c3b2011","source_event_group_id":"d2f64318-3bd5-4544-be05-5db102461c7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cesar De Leon, M.D.","state":"NC","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cesar De Leon, M.D. impermissibly disclosed the PHI of 500 individuals when an unencrypted laptop was stolen.","event_id":"d2f64318-3bd5-4544-be05-5db102461c7f","severity_score":50},{"record_id":"823105ea-7928-4ddf-ab53-45a3a494690d","source_event_group_id":"27256834-555a-41eb-bfab-9100ee33f85a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Arkansas","state":"AR","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathology Group of Arkansas impermissibly disclosed the PHI of 2,000 individuals due to a ransomware attack.","event_id":"27256834-555a-41eb-bfab-9100ee33f85a","severity_score":50},{"record_id":"7b4d9ad5-84d6-4fc8-9366-37dfdb14e00e","source_event_group_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Tech University Health Sciences Center (TTUHSC)","state":"TX","individuals_affected":1200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"TTUHSC impermissibly disclosed the PHI of 1,200 individuals due to the theft of an unencrypted flash drive.","event_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","severity_score":65},{"record_id":"7171743f-8b17-4523-b495-45962bea367b","source_event_group_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna, Inc.","state":"CT","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna impermissibly disclosed the PHI of 12,000 individuals when mailing envelopes with sensitive PHI arrived with large clear windows, exposing the information.","event_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","severity_score":80},{"record_id":"60b7592b-a9b0-47b6-97eb-8593c31e9840","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery, P.C.","state":"AZ","individuals_affected":8000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phoenix Cardiac Surgery impermissibly disclosed the PHI of 8,000 individuals due to the posting of clinical and surgical appointments on a publicly accessible online calendar.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"583ba259-60de-45dd-9b9a-1228cf6dc11e","source_event_group_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Womens & Infants Hospital of Rhode Island","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Womens & Infants Hospital impermissibly disclosed the protected health information of 14,000 patients when a laptop containing patient data was stolen.","event_id":"016adf5a-e4b7-4281-b232-6cfb9fe50832","severity_score":65},{"record_id":"56638cc2-cdf7-4c6d-b3aa-3b86357ad460","source_event_group_id":"05f5d911-b7d1-4add-9e63-642bec4e454d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presbyterian Healthcare Services","state":"NM","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presbyterian Healthcare Services impermissibly disclosed the PHI of 13,000 individuals due to the theft of an unencrypted laptop.","event_id":"05f5d911-b7d1-4add-9e63-642bec4e454d","severity_score":90},{"record_id":"5570e9d4-3816-419a-a32a-46ccc49da0ed","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, P.A.","state":"FL","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical impermissibly disclosed the PHI of 7,000 individuals due to a ransomware attack.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"55429181-c00a-4d6c-9a6f-46bdba75427a","source_event_group_id":"94ba938e-43ff-4f72-8073-2d66827db2c3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fiducia Solutions, LLC","state":"NV","individuals_affected":395,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fiducia Solutions impermissibly disclosed the PHI of 395 individuals due to its failure to enter into a business associate agreement with a vendor.","event_id":"94ba938e-43ff-4f72-8073-2d66827db2c3","severity_score":50},{"record_id":"3b3184ed-6392-4a21-b44b-aaffe0423a58","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anchorage Community Mental Health Services impermissibly disclosed the PHI of 2,700 individuals due to a malware attack on its IT system.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"3630ea66-8497-4f62-b1d1-8bd03684be08","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, San Francisco","state":"CA","individuals_affected":3129,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF impermissibly disclosed the protected health information of 3,129 patients when an unencrypted hard drive was stolen from a physician's home.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":50},{"record_id":"2862fafc-4cd5-4283-8a04-d1b515795a71","source_event_group_id":"dac5007d-6456-4489-bcc1-a0cc555a2315","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit Valley Hospital","state":"WA","individuals_affected":899,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit Valley Hospital impermissibly disclosed the protected health information of 899 patients when an unencrypted laptop was stolen from an employee's vehicle.","event_id":"dac5007d-6456-4489-bcc1-a0cc555a2315","severity_score":65},{"record_id":"14cebe06-01a9-426f-9d4f-c420786c7aa8","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, LLC","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet impermissibly disclosed the PHI of 1,391 individuals due to the theft of an unencrypted laptop from an employee's car.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"1344d669-f042-4f77-a663-43a26d51986f","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians, P.A.","state":"CA","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Physicians impermissibly disclosed the PHI of 2,000 individuals due to a data breach involving an unsecured server.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"133c149f-d453-4307-b60d-4cf03ed34d9b","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Massachusetts Amherst impermissibly disclosed the PHI of 1,670 individuals through an unsecured website.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"0af7c04d-d9a1-4338-99ea-8d96af23ecdd","source_event_group_id":"837aa19d-f8ff-41fb-9a37-805b9917c8eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Medical Services, Inc.","state":"LA","individuals_affected":1200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Emergency Medical Services impermissibly disclosed the PHI of 1,200 individuals when an unencrypted laptop was stolen.","event_id":"837aa19d-f8ff-41fb-9a37-805b9917c8eb","severity_score":50},{"record_id":"012655ff-52fd-4992-ab3a-6de89e0c6c80","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center impermissibly disclosed the PHI of 12,000 individuals due to the theft of an unencrypted laptop from an employee's car.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":90},{"record_id":"9133138a-8a04-4fc3-8eec-48a39d315c8d","source_event_group_id":"375bb482-28a6-4a97-af5d-1a1d9fc1e852","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jefferson Health Plans","state":"PA","individuals_affected":1855,"breach_submission_date":"2026-05-18","enforcement_action_date":null,"summary":"","event_id":"375bb482-28a6-4a97-af5d-1a1d9fc1e852","severity_score":50},{"record_id":"ae73d73f-f3e7-45d3-8ae5-6cac09d7ec23","source_event_group_id":"2d3d37f0-302c-46f2-b1f1-3a6c90d92a96","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Greenbaum Rowe Smith & Davis LLP","state":"NJ","individuals_affected":12801,"breach_submission_date":"2026-05-18","enforcement_action_date":null,"summary":"","event_id":"2d3d37f0-302c-46f2-b1f1-3a6c90d92a96","severity_score":70},{"record_id":"f8bde050-e550-424f-8386-45689cc0d065","source_event_group_id":"34090798-bed8-4a84-93ed-d24e7e306c42","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ocelot Ventures, LLC dba Excelas","state":"OH","individuals_affected":2275,"breach_submission_date":"2026-05-12","enforcement_action_date":null,"summary":"","event_id":"34090798-bed8-4a84-93ed-d24e7e306c42","severity_score":50},{"record_id":"8efd10ef-d2b9-4c51-ae74-eefd873a98b8","source_event_group_id":"0817ad26-5384-4492-928f-eac927b6264f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AUTOAPS LLC","state":"CA","individuals_affected":1591,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"0817ad26-5384-4492-928f-eac927b6264f","severity_score":50},{"record_id":"6e5b0405-70b4-43c2-9dc4-452207445074","source_event_group_id":"1e09d38d-61cb-4d01-8632-a26551f90225","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pivot Health","state":"FL","individuals_affected":5864,"breach_submission_date":"2026-05-13","enforcement_action_date":null,"summary":"","event_id":"1e09d38d-61cb-4d01-8632-a26551f90225","severity_score":50},{"record_id":"2c856b34-5785-47ec-b273-ad12630aad77","source_event_group_id":"6357bf0e-3e57-47ef-8cdc-9ec73449319f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Acadia Healthcare Company, Inc","state":"TN","individuals_affected":1807,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"6357bf0e-3e57-47ef-8cdc-9ec73449319f","severity_score":50},{"record_id":"2263e1c9-b478-4060-bd00-fe0c70dc2a48","source_event_group_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trinity Health","state":"MI","individuals_affected":5905,"breach_submission_date":"2026-05-13","enforcement_action_date":null,"summary":"","event_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","severity_score":50},{"record_id":"c6334d9b-76ee-4a1d-a3e6-17a0d0377daf","source_event_group_id":"74c37040-6cc5-4e5a-8bc5-67f156ec49b9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"JASON R EGBERT OD PC","state":"WA","individuals_affected":1225,"breach_submission_date":"2026-06-02","enforcement_action_date":null,"summary":"","event_id":"74c37040-6cc5-4e5a-8bc5-67f156ec49b9","severity_score":50},{"record_id":"53a15c66-7b67-4b49-9418-f891951dd3d1","source_event_group_id":"4489b1e4-c8e9-452a-9366-cad4a8e9af04","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Liberty Solutions, Inc.","state":"NY","individuals_affected":7329,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"4489b1e4-c8e9-452a-9366-cad4a8e9af04","severity_score":50},{"record_id":"c860ef21-dc08-49b9-beff-46882712bdfd","source_event_group_id":"1a3f97d3-801f-4b20-a6ed-ae7b2f7c5f46","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiology Associates of Richmond","state":"VA","individuals_affected":266183,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"1a3f97d3-801f-4b20-a6ed-ae7b2f7c5f46","severity_score":85},{"record_id":"dfc9d7c7-5739-4654-859d-46c57bf5621e","source_event_group_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Defense Health Agency (TriWest)","state":"VA","individuals_affected":11848,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","severity_score":70},{"record_id":"71b69113-f507-4ad2-b669-56c539e845ec","source_event_group_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Connecticut Department of Social Services","state":"CT","individuals_affected":22500,"breach_submission_date":"2026-05-21","enforcement_action_date":null,"summary":"","event_id":"8cdc5961-712f-42e5-9f71-b70739dce0ac","severity_score":70},{"record_id":"f750d919-2240-46d3-bfc2-3d09c1dddcef","source_event_group_id":"603d7a8e-09bd-4af3-bea8-de0fa60a097e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DentaQuest","state":"MA","individuals_affected":3086,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"603d7a8e-09bd-4af3-bea8-de0fa60a097e","severity_score":50},{"record_id":"fcefb7e0-630a-450e-9ea8-9796b5d500d2","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health paid $200,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records. This is Banner Health's second right of access enforcement action.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"ee5bb0b3-29bd-4398-a40d-8f24884a9442","source_event_group_id":"c0d4520c-d215-4519-b575-03d9be13327d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Schuyler Hospital","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Schuyler Hospital paid $40,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"c0d4520c-d215-4519-b575-03d9be13327d","severity_score":50},{"record_id":"cdc71257-c177-4249-bf15-617d937c4436","source_event_group_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Erie County Medical Center Corporation (ECMCC)","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Erie County Medical Center Corporation paid $200,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","severity_score":65},{"record_id":"ca4bc2e5-b6e8-4555-af7b-254b5b88fa37","source_event_group_id":"818fbf78-9ab5-48ab-8c77-13a71fddbc0e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jeffrey L. Roberson, M.D., P.A.","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jeffrey L. Roberson, M.D., P.A. paid $35,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"818fbf78-9ab5-48ab-8c77-13a71fddbc0e","severity_score":50},{"record_id":"babeda4f-a36b-437e-9d43-b6c39a1c47ef","source_event_group_id":"8e990967-628f-48be-a11d-2e4da5cfbfc1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B.H. Optometry, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"B.H. Optometry paid $20,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"8e990967-628f-48be-a11d-2e4da5cfbfc1","severity_score":50},{"record_id":"a80e883b-68f0-42cd-8ccb-1ff8a844f5d0","source_event_group_id":"57e2648f-68fd-478f-8e16-fc3cfad6a8ee","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital of the King's Daughters","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital of the King's Daughters paid $400,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"57e2648f-68fd-478f-8e16-fc3cfad6a8ee","severity_score":65},{"record_id":"8370026c-c51c-4337-a7db-0c84fc08db73","source_event_group_id":"eb686694-6120-4655-8f3e-905935f8fe9f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology of Northern Virginia","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology of Northern Virginia paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"eb686694-6120-4655-8f3e-905935f8fe9f","severity_score":50},{"record_id":"70e533a1-d8d0-4f47-a097-ab4aebaa301d","source_event_group_id":"65b285c0-e9e1-42ce-8a5e-0e43e869d471","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Jeffrey C. Newman, M.D., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Jeffrey C. Newman paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"65b285c0-e9e1-42ce-8a5e-0e43e869d471","severity_score":50},{"record_id":"3a7759d3-2fec-498b-85d1-b210fe29e125","source_event_group_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Resources","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Resources paid $1.35 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","severity_score":90},{"record_id":"2e206b6f-6af4-4037-b80a-95508c241e4e","source_event_group_id":"bf876c64-09b5-4cee-b132-01e1dfc2bad4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes & Endocrine Associates, S.C.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes & Endocrine Associates paid $5,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"bf876c64-09b5-4cee-b132-01e1dfc2bad4","severity_score":50},{"record_id":"04a39b76-4e74-4b98-89a2-630b619414f0","source_event_group_id":"4e2fae74-1f92-411b-af91-1000dd4fc4cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robert P. Roth, M.D.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Robert P. Roth paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"4e2fae74-1f92-411b-af91-1000dd4fc4cd","severity_score":50},{"record_id":"02fbd79e-a8a1-453d-8629-adf7f8a3718b","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center (Dignity Health)","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center, a Dignity Health facility, paid $160,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"fac36604-38ef-480b-b2fe-1deae557ea6d","source_event_group_id":"ad4d25be-5166-4cee-93f8-b062da087d91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"VibrantWorks","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"VibrantWorks paid $220,000 and agreed to a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"ad4d25be-5166-4cee-93f8-b062da087d91","severity_score":65},{"record_id":"f994608c-5d54-4357-879a-064121eb6238","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premera Blue Cross paid $6.85 million to settle potential HIPAA violations related to a cyberattack that exposed the PHI of over 10.4 million people.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"f8ee604b-67ee-4177-8145-4d46ee27541f","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health paid $1.5 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":90},{"record_id":"f6cdb68f-d2e9-44d6-9fc3-8da5f68addde","source_event_group_id":"d4f93af2-da32-4cc3-acd7-e4c053e7973e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NY Spine Institute","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NY Spine Institute paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d4f93af2-da32-4cc3-acd7-e4c053e7973e","severity_score":50},{"record_id":"f677f41c-5a90-40dd-8019-9aef673caf50","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Children's Hospital of Philadelphia (CHOP)","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHOP paid $500,000 and agreed to a corrective action plan to settle potential HIPAA violations related to an impermissible disclosure of PHI when a research investigator's unencrypted laptop containing patient data was stolen.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":65},{"record_id":"ef82203e-b73f-4598-aeb6-1a64bd722318","source_event_group_id":"86e5bd20-cf0f-4557-a300-21e50f12bc20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner University Medical Center Tucson (second enforcement)","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner University Medical Center Tucson paid $300,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records. This is Banner Health's third right of access enforcement action.","event_id":"86e5bd20-cf0f-4557-a300-21e50f12bc20","severity_score":65},{"record_id":"d4747385-5e67-4986-8662-3382e2d8ccc6","source_event_group_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UnitedHealthCare Services, Inc.","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UnitedHealthCare paid $450,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","severity_score":65},{"record_id":"cc0c60a9-388a-4ce7-91e3-166095f1dba6","source_event_group_id":"c1a1c0b8-dfb8-4443-8e2e-a51fe80f69d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Center (doing business as 'Metropolitan Family Health Network')","state":"NJ","individuals_affected":46000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Family Health Network paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations related to the impermissible disclosure of patients' PHI.","event_id":"c1a1c0b8-dfb8-4443-8e2e-a51fe80f69d7","severity_score":50},{"record_id":"cbc387e6-f06a-4780-a6d9-6d85be5c7757","source_event_group_id":"50c97d70-3696-4173-996e-ae4bab549fe2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ideal Image Development Corp.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ideal Image paid $25,000 and agreed to take corrective actions to settle potential HIPAA violations for failing to provide a patient with timely access to medical records.","event_id":"50c97d70-3696-4173-996e-ae4bab549fe2","severity_score":50},{"record_id":"bd2f1735-553c-49ca-b5bd-a21754a1b2c1","source_event_group_id":"c4e0d6d8-a434-48cc-9718-41df0abb8a7b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aultman Hospital","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aultman Hospital paid $60,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"c4e0d6d8-a434-48cc-9718-41df0abb8a7b","severity_score":50},{"record_id":"bbbe6c36-6592-406b-b855-9906802fa58a","source_event_group_id":"5f62a4cc-debb-422c-9051-c0aff1c6516a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Psychiatric Services, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Psychiatric Services paid $40,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5f62a4cc-debb-422c-9051-c0aff1c6516a","severity_score":50},{"record_id":"b79a49a0-1f26-41bc-abe2-71a89c93c70c","source_event_group_id":"83b9cb6d-f66d-4255-88a4-af6b458cd9d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Paul Braun, M.D., P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Paul Braun paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"83b9cb6d-f66d-4255-88a4-af6b458cd9d2","severity_score":50},{"record_id":"b74ac107-a8be-4aea-8209-a5025f35aca2","source_event_group_id":"d50734bf-758d-4417-933e-f79536be8b15","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Community Health Center","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Community Health Center paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d50734bf-758d-4417-933e-f79536be8b15","severity_score":50},{"record_id":"a9b1d2b9-a457-4db2-acb9-172a214857b0","source_event_group_id":"c4cf3cb1-0357-4944-9106-e796bb9472aa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Keith P. Lewis, M.D., P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Keith P. Lewis paid $5,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"c4cf3cb1-0357-4944-9106-e796bb9472aa","severity_score":50},{"record_id":"a776ff9e-bbbe-4739-8cfc-0c3f0c31b5d0","source_event_group_id":"2d75b60f-6606-43a4-8811-63466655917f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Potomac Primary Care, LLC","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Potomac Primary Care paid $20,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2d75b60f-6606-43a4-8811-63466655917f","severity_score":50},{"record_id":"a6710c6b-0660-4ca8-aa5f-89ee3f66c9d4","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates paid $27,500 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"a0b3ab22-39ae-4103-b355-effc7101f497","source_event_group_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Plastic Surgery, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Plastic Surgery paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","severity_score":50},{"record_id":"98c95b15-cce3-4f57-95eb-3ec0cbd85a2c","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health Behavioral Services","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Beth Israel Lahey Health Behavioral Services paid $160,000 and agreed to a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":65},{"record_id":"8e3bbd2d-f844-4914-aecf-ba7188bc17dd","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital and Medical Center of Omaha","state":"NE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital and Medical Center of Omaha paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"8568810d-445c-4c29-b8ba-919bcef6292a","source_event_group_id":"ea2c92e0-1cc2-4f72-ac14-83898b7ac159","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Psychiatric Services, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Psychiatric Services paid $15,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ea2c92e0-1cc2-4f72-ac14-83898b7ac159","severity_score":50},{"record_id":"83605bf0-3c57-462d-8466-06b9f6394fcb","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health System","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Beth Israel Lahey Health System paid $218,400 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":65},{"record_id":"7c112f3b-c0c9-4322-9074-49b6d78f14e9","source_event_group_id":"7aef5b1f-6af3-4df2-b2d9-a33e2790af5f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Florida Family Practice","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Florida Family Practice paid $6,500 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"7aef5b1f-6af3-4df2-b2d9-a33e2790af5f","severity_score":50},{"record_id":"79517edd-a795-474d-b9df-79670367cc62","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission (HHSC)","state":"TX","individuals_affected":6000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Texas HHSC paid $1.6 million and agreed to a corrective action plan to settle potential HIPAA violations stemming from an internet-based application vulnerability that exposed the PHI of over 6,000 individuals.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"72cb10b1-e163-43f6-b4d3-680868986af1","source_event_group_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Works, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Housing Works paid $38,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","severity_score":50},{"record_id":"708d9356-feef-4af7-a64d-d3cfc3dffc21","source_event_group_id":"00378fc7-ceed-4ca4-81ed-93122a4ea60c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AEON Clinical Laboratories","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AEON Clinical Laboratories paid $8,500 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"00378fc7-ceed-4ca4-81ed-93122a4ea60c","severity_score":50},{"record_id":"6f1c6984-3850-42fb-8b1d-8493f52d2e34","source_event_group_id":"915a0c85-34fc-4353-84eb-a944b7894eb1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Katherine A. Farr, D.C.","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Katherine A. Farr paid $3,500 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"915a0c85-34fc-4353-84eb-a944b7894eb1","severity_score":50},{"record_id":"6ecd3d3e-9f88-4bad-b78a-6e9726f0f7e4","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services (DHSS)","state":"AK","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Alaska DHSS paid $1.7 million and agreed to a corrective action plan to settle potential HIPAA violations stemming from a phishing incident that compromised employee email accounts and exposed the PHI of 2,000 individuals.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"6e303652-e20d-4a42-9516-c3e5904937cc","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Healthcare System paid $1.5 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"6aba2d2f-a855-4bf7-8be6-b00e66a29314","source_event_group_id":"75d46f5f-b632-4ef8-b019-d74bb36f08b5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Tennessee Medical Group","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Tennessee Medical Group paid $150,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"75d46f5f-b632-4ef8-b019-d74bb36f08b5","severity_score":65},{"record_id":"68f1382f-e951-442c-a3b7-fa6cd0b9af8b","source_event_group_id":"173fd031-1090-4268-a4e1-614706a3cdf8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Leaders, a business associate","state":"NC","individuals_affected":178000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eye Care Leaders paid $4.5 million and agreed to a corrective action plan to settle potential HIPAA violations for impermissible disclosures of PHI through a cyberattack.","event_id":"173fd031-1090-4268-a4e1-614706a3cdf8","severity_score":90},{"record_id":"6880c6bd-2201-4644-8089-e584ef852909","source_event_group_id":"c146fa57-2f7f-4fe8-8965-bb87f2a263d1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Envision Healthcare Corporation","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Envision Healthcare, a large physician services company, paid $2.2 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to medical records.","event_id":"c146fa57-2f7f-4fe8-8965-bb87f2a263d1","severity_score":90},{"record_id":"5e7b969a-8010-4bf0-8654-0ffb06e33302","source_event_group_id":"4f95f8c6-cd2e-4b59-9265-aa57e75bbfc9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront HMA Medical Group (Florida)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront HMA Medical Group paid $85,000 to settle potential HIPAA violations for failing to provide a patient with timely access to medical records.","event_id":"4f95f8c6-cd2e-4b59-9265-aa57e75bbfc9","severity_score":50},{"record_id":"55006bd9-e996-4025-82e6-af7185172b92","source_event_group_id":"a3c5e524-9846-4585-aafe-518c97a57e56","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shlomo Litvin","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shlomo Litvin, an individual physician, paid $5,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a3c5e524-9846-4585-aafe-518c97a57e56","severity_score":50},{"record_id":"4df3bba3-e754-4e1f-b7d9-e73d16cdab04","source_event_group_id":"031fa09e-faf7-400c-a562-76bb640c1f1e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health (CommonSpirit Health)","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health, a California-based health system, paid $1.6 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"031fa09e-faf7-400c-a562-76bb640c1f1e","severity_score":90},{"record_id":"3c7e2d60-0b30-4bca-9d81-bd2677d20bef","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Medical Center paid $560,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":80},{"record_id":"37434d64-220f-4c9d-ad8b-07048b0c2944","source_event_group_id":"54ac1f05-98a2-4f3a-a135-b064b723d8ff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Anthony J. Ferracane, D.D.S.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Anthony J. Ferracane paid $5,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"54ac1f05-98a2-4f3a-a135-b064b723d8ff","severity_score":50},{"record_id":"29ef6556-2d54-459b-b9a1-6b73ca0c8112","source_event_group_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Cincinnati Medical Center (UCMC)","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCMC paid $65,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","severity_score":50},{"record_id":"241961c2-5a96-426d-ac42-7bdf2f02a3c8","source_event_group_id":"187010b1-4ad5-4a4d-8e30-6e57ab53c151","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UMass Memorial Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMass Memorial Medical Center paid $240,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"187010b1-4ad5-4a4d-8e30-6e57ab53c151","severity_score":65},{"record_id":"1bce90f2-3951-4ead-b8c5-877b1e909514","source_event_group_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group, P.C.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology Group paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to medical records.","event_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","severity_score":50},{"record_id":"1b550e53-6a7e-49f1-b13e-6b066f18140b","source_event_group_id":"3632d19f-3074-408f-ba0b-d5c7950823ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Choice Network of Florida (HCN)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Choice Network paid $150,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"3632d19f-3074-408f-ba0b-d5c7950823ec","severity_score":65},{"record_id":"1ac95487-5a01-40b3-a315-5e34179ad490","source_event_group_id":"f9da4b2a-1e41-42d4-8315-1b52e0aa7a6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley Medical Center","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Valley Medical Center paid $180,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f9da4b2a-1e41-42d4-8315-1b52e0aa7a6a","severity_score":65},{"record_id":"15e89963-5d0e-4aa0-a9a8-aa45910c69aa","source_event_group_id":"8209690a-fa32-47ab-9335-8529f5dbe17f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HFY, Inc. (d/b/a GSB Wellness)","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HFY, Inc. paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"8209690a-fa32-47ab-9335-8529f5dbe17f","severity_score":50},{"record_id":"0c4d82fa-072f-438b-9b4e-c736e5326208","source_event_group_id":"e07aa778-8873-4f52-8354-0ba3bf6f46df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Piedmont Healthcare","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Piedmont Healthcare paid $250,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e07aa778-8873-4f52-8354-0ba3bf6f46df","severity_score":65},{"record_id":"0b9795d7-57f1-4558-9987-96728b90bff1","source_event_group_id":"3d4f0686-ae4f-4cf2-941e-e88caffa6567","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"East Tennessee Children's Hospital","state":"TN","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"East Tennessee Children's Hospital paid $320,000 and agreed to a corrective action plan to settle potential HIPAA violations stemming from a breach of unsecured PHI due to a missing portable device.","event_id":"3d4f0686-ae4f-4cf2-941e-e88caffa6567","severity_score":65},{"record_id":"0a41b87b-e00e-4eec-8ac1-f6e0be5c57a9","source_event_group_id":"1c926aaf-d56c-4d29-86c1-a97efec92d53","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Corporation","state":"RI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifespan Corporation paid $1.04 million and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1c926aaf-d56c-4d29-86c1-a97efec92d53","severity_score":90},{"record_id":"08db00df-66a3-41fe-b33d-f6548a2a5545","source_event_group_id":"0611d30a-ad77-4b27-804c-2ccb161c95d8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rainrock Treatment Center, LLC (doing business as 'Monte Nido & Affiliates')","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rainrock Treatment Center paid $160,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0611d30a-ad77-4b27-804c-2ccb161c95d8","severity_score":65},{"record_id":"077c2b01-8dfe-42ea-bc64-9254afcda9b6","source_event_group_id":"681fec95-b6da-4c93-a926-3a91bc4abca8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Donald R. Spencer, DDS","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Donald R. Spencer paid $3,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"681fec95-b6da-4c93-a926-3a91bc4abca8","severity_score":50},{"record_id":"061e8d93-3643-4f0f-bf38-86a763d8987f","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Healthcare","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Healthcare paid $225,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":65},{"record_id":"0483a620-accf-4fea-9223-76f7fc9163c6","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem Inc. paid $16 million to settle potential HIPAA violations stemming from a series of cyberattacks that led to the largest health data breach in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"03e4c120-1b33-4789-b6ea-93dd441b894a","source_event_group_id":"1daa8b31-167e-4689-8954-b39177b0d20a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D., P.A. (under legal name A Dental and Orthodontic Practice)","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A dental practice paid $10,000 and agreed to a corrective action plan to settle potential HIPAA violations for impermissibly disclosing a patient's protected health information (PHI) in response to a Yelp review.","event_id":"1daa8b31-167e-4689-8954-b39177b0d20a","severity_score":50},{"record_id":"eca77d45-5532-4ca0-a9da-04a042a331a9","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg paid $85,000 and adopted a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"bf5e4dd1-aff2-4586-abb3-2e06202af980","source_event_group_id":"74e9a2d8-43eb-4814-b7f5-ebe6412309f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Forrest T. Glen","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Forrest T. Glen paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"74e9a2d8-43eb-4814-b7f5-ebe6412309f9","severity_score":50},{"record_id":"b5e039c9-9433-4e88-9f79-3d692c2aab0c","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC paid $85,000 and agreed to a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"94b44cb8-4132-4f9f-9a57-b80689501e21","source_event_group_id":"2d4fa4ba-4bd4-4d00-ae5f-fb8fe3615562","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John Patrick D. H. Hsu","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Hsu paid $3,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2d4fa4ba-4bd4-4d00-ae5f-fb8fe3615562","severity_score":50},{"record_id":"83a979b7-533c-49c5-ad12-a8b8f8cbfbe8","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem Inc. paid a record settlement and agreed to a corrective action plan to settle potential HIPAA violations following a series of cyberattacks that led to the largest health data breach in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"7531531a-a849-4b35-8dc7-271499da9826","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, LLC (now BioTelemetry, Inc.)","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, LLC agreed to pay $2.5 million to settle potential HIPAA violations that were discovered after a laptop containing the ePHI of 1,391 individuals was stolen.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"66c1bbc0-565f-42a4-8094-69d7bb794f86","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records upon request, a core patient right. The organization also failed to cooperate with OCR's investigation.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"0a1a911f-cd99-4ab4-9364-8b28117a31ba","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Medical Center paid $65,000 and agreed to a corrective action plan to settle potential HIPAA violations concerning the right of access.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":50},{"record_id":"ecab1312-d030-4517-a0f7-167e583fd9a6","source_event_group_id":"9e8f6e2d-f8d5-487f-a106-72c108da82f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wellmark Health Insurance","state":"IA","individuals_affected":6666,"breach_submission_date":"2026-05-26","enforcement_action_date":null,"summary":"","event_id":"9e8f6e2d-f8d5-487f-a106-72c108da82f9","severity_score":50},{"record_id":"1d0ff09b-0a6d-4e04-888c-a724b50dc6fe","source_event_group_id":"241062d9-ba56-4e62-8076-7e0a08b03d6c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Stafford Oral Surgery P.C.","state":"VA","individuals_affected":7019,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"241062d9-ba56-4e62-8076-7e0a08b03d6c","severity_score":50},{"record_id":"f60e7743-8626-4a2c-a759-9d2751d69c7b","source_event_group_id":"54ec8dce-2831-4832-8738-9c45a7b7bf79","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Garrisonville Dental L.L.C","state":"VA","individuals_affected":5204,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"54ec8dce-2831-4832-8738-9c45a7b7bf79","severity_score":50},{"record_id":"6ef3576d-fa86-4da5-8d28-8db4b82ab25b","source_event_group_id":"3fefee3c-89d0-45df-89cc-bdae08b704dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Drs. Abdelbaky, Boes, Cameron & Associates of Cary Park, PLLC","state":"NC","individuals_affected":547,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"3fefee3c-89d0-45df-89cc-bdae08b704dc","severity_score":30},{"record_id":"35d602d6-16cb-41b4-9e5f-dc18f7b83898","source_event_group_id":"3fefee3c-89d0-45df-89cc-bdae08b704dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Drs. Abdelbaky, Boes, Cameron & Associates of Wake Forest, PLLC","state":"NC","individuals_affected":908,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"3fefee3c-89d0-45df-89cc-bdae08b704dc","severity_score":30},{"record_id":"1fa74762-bc1d-42cd-ac4d-4d09ed3fa944","source_event_group_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wellpoint Washington, Inc.","state":"IN","individuals_affected":12020,"breach_submission_date":"2026-05-20","enforcement_action_date":null,"summary":"","event_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","severity_score":70},{"record_id":"454604eb-2d71-4ac9-ad22-ed55b19631ec","source_event_group_id":"8151f9d9-743c-4d1b-9fd4-7d3b84a72561","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Equinix Incorporated Group Health and Welfare Benefit Plan","state":"CA","individuals_affected":677,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"8151f9d9-743c-4d1b-9fd4-7d3b84a72561","severity_score":30},{"record_id":"d19de018-b0ff-4d1d-a9eb-5497f116b997","source_event_group_id":"a603f68d-857d-4d19-a577-1231cec67083","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Various pharmacies","state":"Various","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated several major pharmacy chains for improper disposal of patient information in publicly accessible dumpsters.","event_id":"a603f68d-857d-4d19-a577-1231cec67083","severity_score":90},{"record_id":"85b54a4e-e6ce-43b7-89f4-e49289e63bb1","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital (NYP) and Columbia University (CU)","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and CU impermissibly disclosed the PHI of 6,800 patients when a computer server was not properly configured and accessible via the internet.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"3420490a-2191-4999-8a58-312f41bd6fc5","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services (ADHSS)","state":"AK","individuals_affected":170000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ADHSS reported a portable USB drive containing ePHI was stolen, leading to an investigation into its HIPAA compliance.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"3176efe4-fcc6-41d6-85b2-997f8a449e63","source_event_group_id":"5c799899-81c5-4457-8e23-b7230fd63ddb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bayside Dental","state":"WA","individuals_affected":10216,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"5c799899-81c5-4457-8e23-b7230fd63ddb","severity_score":70},{"record_id":"43c165f5-6d5f-4758-9a34-27e8a47e7031","source_event_group_id":"6d0f0989-a20d-4000-bdb8-bad1d122bf62","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Connections","state":"DC","individuals_affected":18943,"breach_submission_date":"2026-05-18","enforcement_action_date":null,"summary":"","event_id":"6d0f0989-a20d-4000-bdb8-bad1d122bf62","severity_score":70},{"record_id":"6f52df66-1b3e-479b-8374-27ca34cb58fd","source_event_group_id":"53450bda-7202-4249-838b-8e93f3afdc60","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Illinois Ob-Gyn Associates, S.C.","state":"IL","individuals_affected":38700,"breach_submission_date":"2026-05-22","enforcement_action_date":null,"summary":"","event_id":"53450bda-7202-4249-838b-8e93f3afdc60","severity_score":70},{"record_id":"f527453b-f8be-427c-b4eb-bc078bdf05f7","source_event_group_id":"ba7c70a1-3b5d-42b0-9bec-67a18272af0d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"IKRON Corporation","state":"OH","individuals_affected":11845,"breach_submission_date":"2026-05-04","enforcement_action_date":null,"summary":"","event_id":"ba7c70a1-3b5d-42b0-9bec-67a18272af0d","severity_score":70},{"record_id":"69102012-e275-48c5-b4c4-a89e5e530b49","source_event_group_id":"cd40f3fb-6390-4c32-a070-7381744dab9c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hematology Oncology Consultants","state":"MI","individuals_affected":62972,"breach_submission_date":"2026-04-24","enforcement_action_date":null,"summary":"","event_id":"cd40f3fb-6390-4c32-a070-7381744dab9c","severity_score":70},{"record_id":"89213398-8fb9-46cc-8a6a-e32eec08fb46","source_event_group_id":"ae08d296-3720-4379-b685-845a27629fe5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Singing River Health System","state":"MS","individuals_affected":53888,"breach_submission_date":"2026-05-19","enforcement_action_date":null,"summary":"","event_id":"ae08d296-3720-4379-b685-845a27629fe5","severity_score":70},{"record_id":"1e291c82-8e21-4e82-b7b2-ffb3de70b964","source_event_group_id":"bd099a42-162b-4eb8-ba4f-eb6cfefefa5d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NJ Pain Care Specialists, LLC","state":"NJ","individuals_affected":501,"breach_submission_date":"2026-05-14","enforcement_action_date":null,"summary":"","event_id":"bd099a42-162b-4eb8-ba4f-eb6cfefefa5d","severity_score":30},{"record_id":"94206a70-ea1d-434d-b4d4-b6861442f813","source_event_group_id":"6479dd13-a921-4bff-b80d-efaf7eef401a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Stewart Home & School","state":"KY","individuals_affected":3677,"breach_submission_date":"2026-04-23","enforcement_action_date":null,"summary":"","event_id":"6479dd13-a921-4bff-b80d-efaf7eef401a","severity_score":50},{"record_id":"f8701060-1ad4-48f4-bb41-6012db93aef8","source_event_group_id":"b3211942-5507-4ce8-9c1c-b9854449960d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Verber Dental Group PC","state":"NY","individuals_affected":8598,"breach_submission_date":"2026-05-08","enforcement_action_date":null,"summary":"","event_id":"b3211942-5507-4ce8-9c1c-b9854449960d","severity_score":50},{"record_id":"12b5d126-d7a3-43c2-aef1-da1132f1d4ff","source_event_group_id":"61caf0ef-499d-4bdc-ba4a-a8ec928417ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bronsky Orthodontics","state":"NY","individuals_affected":3183,"breach_submission_date":"2026-05-08","enforcement_action_date":null,"summary":"","event_id":"61caf0ef-499d-4bdc-ba4a-a8ec928417ec","severity_score":50},{"record_id":"f732a488-10bb-41cd-b636-a5d40809b4ff","source_event_group_id":"3050b394-0a8e-4a61-a625-4bff169cf8ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Adams County Memorial Hospital","state":"IN","individuals_affected":5305,"breach_submission_date":"2026-05-11","enforcement_action_date":null,"summary":"","event_id":"3050b394-0a8e-4a61-a625-4bff169cf8ee","severity_score":50},{"record_id":"befe2b9b-58da-4392-a7a8-e50d34952726","source_event_group_id":"efd77609-ef0f-458c-8c02-0f09cced6b93","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bridle Trails Family Dentistry","state":"WA","individuals_affected":20976,"breach_submission_date":"2026-05-14","enforcement_action_date":null,"summary":"","event_id":"efd77609-ef0f-458c-8c02-0f09cced6b93","severity_score":70},{"record_id":"ff340bdc-f6f2-4346-a559-ba699f3b4493","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":2810000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cyberattack resulted in hackers accessing patient records, including PHI, of 2.8 million individuals.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"fdfcb9ba-9e03-45bf-b60c-620fa1d685f8","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England (CNE), Women & Infants Hospital of Rhode Island (WIH), and Lifespan (Parent of Rhode Island Hospital, The Miriam Hospital and Newport Hospital) agreed to settle potential violations of the HIPAA Privacy and Security Rules following a breach of unsecured electronic protected health information (ePHI) involving an unencrypted laptop containing the PHI of 14,000 individuals.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":65},{"record_id":"f65f3e5d-0f9d-4f59-8142-39c17b2945e1","source_event_group_id":"592d3372-b082-44e4-b18a-5d0c6528a4e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete PT, Pool & Land Physical Therapy","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to respond to a patient's request for records led to a HIPAA violation.","event_id":"592d3372-b082-44e4-b18a-5d0c6528a4e2","severity_score":50},{"record_id":"f43b418e-a549-4cfb-8852-722049f54865","source_event_group_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester County Health Care Corporation (WCHCC)","state":"NY","individuals_affected":244,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Email phishing attack resulted in the impermissible disclosure of PHI of 244 patients to unauthorized users.","event_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","severity_score":90},{"record_id":"edc0f319-25ec-4410-af5a-d99f19387e37","source_event_group_id":"a0ee42b1-f10c-45d6-b2cd-47385a225e1d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CareMount Medical, P.C.","state":"NY","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Email phishing attack compromised the PHI of 55,000 patients.","event_id":"a0ee42b1-f10c-45d6-b2cd-47385a225e1d","severity_score":65},{"record_id":"e7226bd5-d3b5-4cbe-9332-dccd72728370","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Feinstein Institute for Medical Research","state":"NY","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Theft of an unencrypted laptop containing the PHI of 13,000 individuals due to inadequate safeguards.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":65},{"record_id":"e6043196-4c94-4610-95e3-2823dd7839dc","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A physician's unauthorized access and disclosure of PHI of thousands of patients during the filming of a reality TV show.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"e57e2b68-bcf1-4dce-9b3a-2d610c4b8112","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Large health insurance company suffered multiple cyberattacks, compromising the Protected Health Information (PHI) of nearly 79 million individuals.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"e5247ef8-0209-46df-9c58-3f399eb2af66","source_event_group_id":"9fa35bcc-34ff-4e5c-8cdd-0db116b05137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Tuomey Healthcare System","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI due to an employee accessing patient records without authorization.","event_id":"9fa35bcc-34ff-4e5c-8cdd-0db116b05137","severity_score":50},{"record_id":"db7aaac4-7031-4e59-8db4-4fcb661db7a6","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, Inc.","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Theft of an unencrypted laptop exposed the PHI of 1,391 individuals.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"da456a08-2b9d-4e2e-a464-6d40ed7203c3","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center (URMC)","state":"NY","individuals_affected":3744,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unencrypted portable devices led to the impermissible disclosure of PHI of 3,744 individuals.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"d4c04b9a-22b2-4d45-9b9e-f7c917cfc84e","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network (MCPN)","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A phishing attack led to the impermissible disclosure of PHI of 3,200 individuals.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"ae6ff82b-fc03-4b18-aa9e-04d2f9cb5d8f","source_event_group_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Raleigh Orthopaedic Clinic, P.A.","state":"NC","individuals_affected":17300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Raleigh Orthopaedic Clinic, P.A. of North Carolina (ROC) has agreed to pay $750,000 to OCR and to adopt a corrective action plan to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The settlement is a result of ROC impermissibly disclosing the protected health information (PHI) of 17,300 individuals to a business associate without a business associate agreement in place.","event_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","severity_score":80},{"record_id":"a27c8d8e-d84b-46e5-a6f1-03eadab052e7","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center (SEMC)","state":"MA","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement appropriate security measures, leading to improper access to surgical schedules and PHI of 498 individuals.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"a21f9dbd-026d-4697-a742-57667155b314","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":6265,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement adequate security measures led to the impermissible disclosure of PHI on a laptop and USB drive, impacting over 6,000 individuals.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"958b5bde-390f-4303-9e77-52d712cd2ebb","source_event_group_id":"b6c7b149-5aad-4097-a05c-11dc38eff1eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Oncology Hematology Associates of Spokane (MOHAS)","state":"WA","individuals_affected":13861,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MOHAS impermissibly disclosed the PHI of 13,861 individuals when an unprotected PHI database was available on the internet. MOHAS had failed to conduct an adequate risk analysis, failed to implement security measures, and failed to implement technical safeguards.","event_id":"b6c7b149-5aad-4097-a05c-11dc38eff1eb","severity_score":65},{"record_id":"930643b7-5961-4fbb-b4e8-ad1459a9850b","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":36371,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Three separate incidents involving the theft of unencrypted devices and PHI, impacting over 30,000 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"895d03dd-ff03-4bb6-9005-9fcad53bdc35","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":1073,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement security measures, resulting in the impermissible disclosure of PHI of 1,073 patients on publicly accessible servers.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":90},{"record_id":"840cf73d-31da-43d9-9a74-aa1aba67a468","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System","state":"FL","individuals_affected":115143,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unauthorized access to patient records by employees caused an impermissible disclosure of PHI affecting 115,143 individuals.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"83dee9b6-f9cb-42ef-a310-d231759a64e0","source_event_group_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Health","state":"TX","individuals_affected":3600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Stolen unencrypted laptop compromised the PHI of 3,600 individuals.","event_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","severity_score":65},{"record_id":"823263e9-5a76-40dc-ab86-897e6ba891ac","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to erase PHI from photocopiers, resulting in the impermissible disclosure of PHI of 344,579 individuals.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"7ba32854-685f-49e2-b237-6fac29ce7fc8","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de La Raza, Inc.","state":"CA","individuals_affected":9200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to apply appropriate security patches led to a cyberattack exposing the PHI of 9,200 individuals.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":65},{"record_id":"78dbea1e-de7e-4faa-9a47-09a5e98cff74","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":289330,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Third-party business associate impermissibly disclosed the PHI of 289,330 individuals.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"72b975e3-b23b-4ffa-8187-16dbf9b366a9","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":2209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple security failures led to the exposure of PHI of 2,209 individuals on a company server.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"6f730122-21ae-43b0-a858-9c0393584b6c","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health insurance company experienced a cyberattack exposing the PHI of over 10 million individuals.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"67a25737-fab8-4f69-8623-6ff96b42bf3f","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":1925,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Improper sharing of PHI for a research project without adequate authorization, affecting 1,925 individuals.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"645e6e09-e37d-4f58-a2e9-ecca850bf54e","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":3619,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement proper security measures led to the online posting of PHI of 3,619 individuals.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"58cf3bb1-3806-45b5-be5e-f59627c9a099","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Health","state":"IL","individuals_affected":836,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Operating room schedules, containing the PHI of 836 individuals, were mailed to an incorrect address.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"537acb4b-a57e-4bb5-99d1-2f3a9c345bb9","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Theft of an unencrypted laptop from an employee's car resulted in the impermissible disclosure of PHI of 55,000 individuals.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"515ff65c-5883-4498-941d-de939ba06883","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System, Inc.","state":"IN","individuals_affected":5900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Patient PHI was impermissibly disclosed when patient lists were left outside a physician's office, affecting 5,900 individuals.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"46a1943c-4aee-405d-9c49-4ddb7cad272c","source_event_group_id":"8db9621f-89b0-4611-907f-24c84713efff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagosa Springs Medical Center","state":"CO","individuals_affected":5570,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Email phishing attack exposed the PHI of 5,570 individuals due to inadequate security measures.","event_id":"8db9621f-89b0-4611-907f-24c84713efff","severity_score":65},{"record_id":"467d1a51-687a-4f61-97b9-2d2398c22365","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4030200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Three separate breaches affected the PHI of over 4 million individuals, involving unencrypted laptops and unauthorized access to a network.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"3ea31269-5b04-44b5-9083-05d8e0f4b668","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University (OHSU)","state":"OR","individuals_affected":4022,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Employee's use of an unencrypted USB drive resulted in the impermissible disclosure of PHI of 4,022 individuals.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"380b995a-3ba5-45cb-928d-06783947f18c","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging, LLC","state":"TX","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lack of an accurate and thorough risk analysis led to the impermissible disclosure of PHI of 300,000 individuals on FTP servers.","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"36e2c196-3989-4338-9a4f-54f50a61f701","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America","state":"MA","individuals_affected":1059715,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Five separate breaches across multiple locations involved inadequate security practices exposing the PHI of over 100,000 individuals.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"337fbfc5-b425-40fd-b9f5-b06984047b9a","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pervasive non-compliance with HIPAA Rules led to unencrypted mobile devices being stolen, compromising the PHI of 412 individuals.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"331e1605-9bb1-4386-b8cb-0678fec54ece","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":13,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a complaint alleging St. Luke’s-Roosevelt Hospital Center (SLRHC) impermissibly disclosed the PHI of 13 patients by incorrectly sending discharge summaries and bills.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"271c1d18-3665-4b71-a35e-2ccac67271f5","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center (UMMC)","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement appropriate security measures resulted in an unencrypted laptop being stolen, exposing the PHI of 10,000 individuals.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"12604b78-3a3d-4dd2-bba0-0e869f363d9a","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission (HHSC)","state":"TX","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple data breaches involving the unauthorized public posting of PHI on government websites, affecting 6,800 individuals.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"c8427c5f-4442-470f-9d18-7ae33bd66bcc","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County agreed to pay $215,000 to settle potential HIPAA violations after patient information was impermissibly disclosed due to a computer error.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"6fd98f9f-27f5-4e2c-b08b-940bb769b8cd","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":689,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra Health Services agreed to pay an additional $1,725,000 in a separate settlement to address further potential HIPAA violations, bringing their total settlement to $3,450,000 for multiple breaches.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"67356f38-26e8-413e-81b8-03bb63ab2adf","source_event_group_id":"1ff70fb0-fdee-44ca-b3cd-21d6852ca3da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pioneer Re-Pack, Inc.","state":"OH","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pioneer Re-Pack, Inc. agreed to pay $85,000 to settle potential HIPAA violations after an impermissible disclosure of PHI affecting 1,000 individuals occurred.","event_id":"1ff70fb0-fdee-44ca-b3cd-21d6852ca3da","severity_score":50},{"record_id":"2edb744e-8c22-4305-b155-7d61a604b37c","source_event_group_id":"6cd65a65-e9fd-4cea-8e01-57629a864668","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bradford Health Services","state":"AL","individuals_affected":3900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bradford Health Services agreed to pay $750,000 to settle potential HIPAA violations stemming from a breach of unsecured ePHI affecting 3,900 individuals.","event_id":"6cd65a65-e9fd-4cea-8e01-57629a864668","severity_score":80},{"record_id":"1dbe3440-c377-4258-b94d-e29b8f829518","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":6200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Medical Center of Dallas agreed to pay $3,200,000 to settle potential HIPAA violations related to the loss of an unencrypted BlackBerry and unsecured PHI on a server.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"cfeb0898-306b-4928-9576-636e2b34d75c","source_event_group_id":"f4901725-fc4e-45a7-a8c6-e90a7254a874","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"GrayRobinson, P.A.","state":"FL","individuals_affected":54131,"breach_submission_date":"2026-04-24","enforcement_action_date":null,"summary":"","event_id":"f4901725-fc4e-45a7-a8c6-e90a7254a874","severity_score":70},{"record_id":"886a9e14-4785-4cd7-9de7-81c42178e9ff","source_event_group_id":"2150e4c2-57e7-4b04-a0e1-a966f04c4db8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BAYADA Home Health Care, Inc.","state":"NJ","individuals_affected":500,"breach_submission_date":"2026-05-04","enforcement_action_date":null,"summary":"","event_id":"2150e4c2-57e7-4b04-a0e1-a966f04c4db8","severity_score":30},{"record_id":"1166971f-b890-491f-a501-98af5f68f52d","source_event_group_id":"b2078b84-fa46-4863-9908-70a9fd783a0b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aldrich Pediatric Dentistry","state":"IN","individuals_affected":5900,"breach_submission_date":"2026-04-24","enforcement_action_date":null,"summary":"","event_id":"b2078b84-fa46-4863-9908-70a9fd783a0b","severity_score":50},{"record_id":"53b0bcc8-afda-4509-8942-f09e580b5847","source_event_group_id":"c63deaa5-80b9-408b-8be8-c30cf09f0643","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"C2N Diagnostics, LLC","state":"MO","individuals_affected":2027,"breach_submission_date":"2026-04-27","enforcement_action_date":null,"summary":"","event_id":"c63deaa5-80b9-408b-8be8-c30cf09f0643","severity_score":50},{"record_id":"019e0545-bbdd-4ea4-bfd1-6fc3083d7025","source_event_group_id":"45173438-f590-4642-bd13-b9b8b38dc82d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sanger Skilled Care, LLC dba Cornerstone Care Center","state":"CA","individuals_affected":1510,"breach_submission_date":"2026-05-07","enforcement_action_date":null,"summary":"","event_id":"45173438-f590-4642-bd13-b9b8b38dc82d","severity_score":50},{"record_id":"e9b49541-1106-4f7e-b3b7-07b0b46b1697","source_event_group_id":"407e6ea5-ea90-4548-91e5-e20ea221ccc1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ViaQuest Psychiatric & Behavioral Solutions, LLC","state":"OH","individuals_affected":6420,"breach_submission_date":"2026-05-08","enforcement_action_date":null,"summary":"","event_id":"407e6ea5-ea90-4548-91e5-e20ea221ccc1","severity_score":50},{"record_id":"8caca444-f637-449e-b10e-de6f850548a1","source_event_group_id":"d0cc04f3-55c0-45cc-83a0-03c4b6f1020e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lumexa Imaging","state":"NC","individuals_affected":2994,"breach_submission_date":"2026-05-15","enforcement_action_date":null,"summary":"","event_id":"d0cc04f3-55c0-45cc-83a0-03c4b6f1020e","severity_score":50},{"record_id":"6c772115-2f08-4b87-8264-45e571fd1619","source_event_group_id":"13df4121-5556-48b5-bb41-722de9db01ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University Medical Center of Southern Nevada","state":"NV","individuals_affected":1221,"breach_submission_date":"2026-03-28","enforcement_action_date":null,"summary":"","event_id":"13df4121-5556-48b5-bb41-722de9db01ec","severity_score":50},{"record_id":"68060ad1-57b4-4607-902c-24c2548f8675","source_event_group_id":"98b8e22a-4631-4c37-9f06-d665932b77fd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Volvo Welfare Benefit Plan","state":"NC","individuals_affected":16991,"breach_submission_date":"2026-03-16","enforcement_action_date":null,"summary":"","event_id":"98b8e22a-4631-4c37-9f06-d665932b77fd","severity_score":70},{"record_id":"44801b9b-b14b-4678-a8f7-3f41fd13570d","source_event_group_id":"e24644fd-0008-48cf-aa4d-47c908656aeb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Elara Caring","state":"TX","individuals_affected":10490,"breach_submission_date":"2026-05-12","enforcement_action_date":null,"summary":"","event_id":"e24644fd-0008-48cf-aa4d-47c908656aeb","severity_score":70},{"record_id":"f3992974-c573-47c5-8977-61a3f7992745","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County, WA","state":"WA","individuals_affected":1261,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County impermissibly disclosed the PHI of 1,261 patients when it mailed notices of a data breach, including other patients’ PHI, to the wrong addresses.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"f2650d30-ddf1-43b2-a769-90abf00d93df","source_event_group_id":"8f62e117-212c-4f32-b1e1-613efe3f27a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Digital Care","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to provide timely access to medical records after repeated family requests and unresponsiveness to OCR's investigation, demonstrating a disregard for patient rights.","event_id":"8f62e117-212c-4f32-b1e1-613efe3f27a3","severity_score":50},{"record_id":"d6e6991d-723c-49cd-a176-2761aed34602","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc. (MIE)","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple security failures led to a breach of over 3.9 million individuals' PHI, exposing significant vulnerabilities in their systems.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"d1d846db-8efc-42fb-a25f-d1cfd5d14b73","source_event_group_id":"6b63bff0-da0a-4f19-8775-f13db7e664c2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Psychology","state":"PA","individuals_affected":2800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement basic HIPAA safeguards, including a risk analysis and employee training, after a mobile device containing PHI was stolen.","event_id":"6b63bff0-da0a-4f19-8775-f13db7e664c2","severity_score":50},{"record_id":"cf1fe4c6-9c0c-4222-acb8-f0f26e9cce32","source_event_group_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna, Inc.","state":"PA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna impermissibly disclosed the PHI of 500 patients when it mailed notices of a data breach, including other patients’ PHI, to the wrong addresses.","event_id":"e7929d86-8528-4627-abf9-d8b7ca60427c","severity_score":65},{"record_id":"c983e328-16c7-44a9-a4a0-ea5abcec95fd","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth’s Medical Center (SEMC)","state":"MA","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple security failures, including unencrypted laptops and server vulnerabilities, resulted in a $2.18 million settlement and corrective action plan.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"b4de6879-6f9c-4f0b-a13c-7960d87870bb","source_event_group_id":"172bc563-f7ff-424b-a0c4-1db4ac726d0d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mental Health Associates of San Diego","state":"CA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement basic HIPAA safeguards, including risk analysis and training, after a mobile device containing the PHI of 500 patients was stolen.","event_id":"172bc563-f7ff-424b-a0c4-1db4ac726d0d","severity_score":50},{"record_id":"b4c92fe9-52f2-4f82-9cf1-a475d6c6dc96","source_event_group_id":"e1b86555-bcf0-4824-b0e0-11b1248b1db5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MedStar Health, Inc.","state":"MD","individuals_affected":49454,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Improper disposal of outdated computer servers led to a breach affecting over 40,000 individuals, demonstrating a failure to implement proper device and media controls.","event_id":"e1b86555-bcf0-4824-b0e0-11b1248b1db5","severity_score":90},{"record_id":"afc3af20-dfbe-4408-ac74-0d6e9f193d9f","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s National Medical Center (CNMC)","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Two employees impermissibly accessed and released patient information about public figures, revealing inadequate access controls and training.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":50},{"record_id":"97de900b-118f-4a15-afaa-fac53bafbc8a","source_event_group_id":"e6b9f5b7-130a-4d13-a7cb-e6529f2f4f6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Commonwealth Health Corporation","state":"KY","individuals_affected":43763,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to address risks identified in a security assessment, including leaving network servers unencrypted, which led to a breach of over 40,000 individuals' PHI.","event_id":"e6b9f5b7-130a-4d13-a7cb-e6529f2f4f6a","severity_score":90},{"record_id":"97d4afd0-d6c5-4327-84e5-31c06460313b","source_event_group_id":"eaa3dcc7-f64f-4ae6-8359-86568935bfda","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"RMA Practice, LLC","state":"NY","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":" impermissible disclosure of PHI of over 100,000 individuals after transferring medical records to a new electronic health record vendor without a proper business associate agreement.","event_id":"eaa3dcc7-f64f-4ae6-8359-86568935bfda","severity_score":65},{"record_id":"948dbbcf-2b3e-4340-8214-ac1f1dd624ba","source_event_group_id":"67a84bea-0e1e-40cf-866b-a084c521fc0f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brooke Army Medical Center (BAMC)","state":"TX","individuals_affected":80,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The impermissible disclosure of patient PHI to a local news outlet revealed a lack of clear policies and procedures for handling patient information.","event_id":"67a84bea-0e1e-40cf-866b-a084c521fc0f","severity_score":65},{"record_id":"91c660e6-a96d-4d50-b1f0-2dc172e6926d","source_event_group_id":"d355080d-9f5e-419a-b0f5-63119b004e99","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advance Care Hospital Oakland","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records to a patient's personal representative, despite multiple attempts and state law.","event_id":"d355080d-9f5e-419a-b0f5-63119b004e99","severity_score":50},{"record_id":"90322b65-9dbc-4843-9487-4d74d4c7c625","source_event_group_id":"4935187c-42fe-4d10-99fa-5b5de2306900","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas - Division of Vascular Surgery","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to train employees after a complaint revealed that PHI was impermissibly shared with a patient's employer.","event_id":"4935187c-42fe-4d10-99fa-5b5de2306900","severity_score":50},{"record_id":"874717c4-024f-43fc-bcb5-3586ed59a5ec","source_event_group_id":"549c3629-502a-473e-b548-2b97276de39b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Verity Health System of California, Inc.","state":"CA","individuals_affected":5,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records in multiple instances, demonstrating a systemic issue.","event_id":"549c3629-502a-473e-b548-2b97276de39b","severity_score":65},{"record_id":"8291c5ff-f64c-4e6d-bafd-992ffa49dd58","source_event_group_id":"1f0a65a7-db54-4146-9e14-c643643fc9a9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Home Health Care Group, Inc.","state":"IL","individuals_affected":2049,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A stolen laptop containing PHI of over 2,000 patients revealed a lack of proper risk analysis and mobile device security.","event_id":"1f0a65a7-db54-4146-9e14-c643643fc9a9","severity_score":65},{"record_id":"7f0f2068-eb28-41a9-b762-504d774017ca","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A malware infection led to a breach of 1,670 patients' PHI, revealing a failure to implement proper audit controls and security incident procedures.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"79a34cc1-9122-42e7-a520-9290b0df75cb","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Physicians (IUHP)","state":"IN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An impermissible disclosure of PHI by leaving patient medical records in an unsecured outside waiting room resulted in a settlement.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":65},{"record_id":"711d2f1b-4fee-451b-9d31-93aa41b2f04c","source_event_group_id":"233dfc9f-2d61-4731-a920-2127dbaaad05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hancock Health","state":"IN","individuals_affected":1330,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A ransomware attack led to a breach of PHI, revealing a failure to conduct an adequate risk analysis prior to the incident.","event_id":"233dfc9f-2d61-4731-a920-2127dbaaad05","severity_score":50},{"record_id":"5a61296c-4cf6-49b1-89f6-42950fb1b5c6","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"General Hospital Corporation impermissibly disclosed the PHI of 1,000 patients when patient schedules were left unsecured by medical residents in public transportation.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"533442b4-cbfb-4adf-8fe9-3d523986e6a2","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System / Catholic Health Care Services","state":"FL","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Two separate enforcement actions for failure to have business associate agreements (BAA) in place with vendors.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"512b5165-ed2f-4cb9-97be-d7127a700807","source_event_group_id":"df8f1305-8c82-44b5-8383-9b39c8844c85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Medical Transport","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely and comprehensive access to medical records after multiple requests from a patient, exacerbated by an uncooperative attitude.","event_id":"df8f1305-8c82-44b5-8383-9b39c8844c85","severity_score":50},{"record_id":"4b543745-ac19-4f27-aeff-0ba3d602f09c","source_event_group_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkadelphia Human Services","state":"AR","individuals_affected":1100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A breach of over 1,000 individuals' PHI due to an impermissible disclosure by leaving patient medical records in a public area.","event_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","severity_score":50},{"record_id":"3f33c866-2401-47dc-91f8-2b0c9c9cb6b1","source_event_group_id":"58c9dd9f-2aeb-4148-b093-57c72e9215ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"East Coast Community Healthcare","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to address risks identified in a security assessment, including leaving network servers unencrypted, which led to a breach of over 40,000 individuals' PHI.","event_id":"58c9dd9f-2aeb-4148-b093-57c72e9215ce","severity_score":50},{"record_id":"3b88837f-7338-48ed-a868-09db3aa55a14","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke’s-Roosevelt Hospital Center (SLRHC)","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Resolution agreement with Luke’s-Roosevelt Hospital Center (SLRHC) for multiple HIPAA violations stemming from multiple impermissible disclosures of PHI, which were not addressed until many years later, including a violation where an unredacted list of patient PHI from their pain management clinic was impermissibly disclosed to a third-party.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"2eda39cd-e608-463a-9fe3-7eb7a863d08a","source_event_group_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardiovascular Medical Group Inc. (CMG)","state":"CA","individuals_affected":1400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple impermissible disclosures of PHI occurred due to a lack of proper policies and procedures, including unsecure faxes and patient sign-in sheets.","event_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","severity_score":50},{"record_id":"2c956952-9303-4ddd-bff0-363c957c3440","source_event_group_id":"a85e5fa8-4617-4e86-a3b0-44183ea38220","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Western Union Business Solutions","state":"DC","individuals_affected":612,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Two employees discovered a password-protected file on a computer, and despite the password protection, they were able to access the files, which contained the protected health information (PHI) of 612 beneficiaries.","event_id":"a85e5fa8-4617-4e86-a3b0-44183ea38220","severity_score":65},{"record_id":"26c79ca8-ca96-4424-bd77-78721b611ed0","source_event_group_id":"5639e270-2bb4-4966-9a36-bec1b8717d28","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wellforce (formerly Tufts Medical Center)","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An impermissible disclosure due to a lack of a BAA resulted in a settlement, highlighting the importance of proper vendor agreements.","event_id":"5639e270-2bb4-4966-9a36-bec1b8717d28","severity_score":65},{"record_id":"257dff12-0e90-4b9c-8f17-bd79f3655fcf","source_event_group_id":"acb96b8a-efb9-4535-af34-f2900ca249f2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mercy Medical Center","state":"IA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The impermissible disclosure of a patient's PHI to a local TV station and improper disposal of medical records led to a settlement.","event_id":"acb96b8a-efb9-4535-af34-f2900ca249f2","severity_score":65},{"record_id":"1a216fb8-227b-4e2e-898f-3f4a6b8f9fa6","source_event_group_id":"c9357cd5-f738-41bb-a438-fa8e6895ba9a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bradford Regional Medical Center","state":"PA","individuals_affected":395,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bradford Regional Medical Center impermissibly disclosed the PHI of 395 patients when it disposed of documents containing PHI in a public dumpster.","event_id":"c9357cd5-f738-41bb-a438-fa8e6895ba9a","severity_score":80},{"record_id":"01e86b7a-886f-45f9-a994-177804e1ed40","source_event_group_id":"4f81b844-fea3-4625-945c-6df1241ecdea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Health Corporation","state":"MI","individuals_affected":6393,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A ransomware attack revealed a failure to conduct an adequate risk analysis, leading to a breach of over 6,000 individuals' PHI.","event_id":"4f81b844-fea3-4625-945c-6df1241ecdea","severity_score":90},{"record_id":"6724ccc2-0ac0-4c4f-909c-425dff6b9d62","source_event_group_id":"c2e7756d-fa17-4309-ab0c-1a6e943b7faf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nacogdoches Memorial Hospital","state":"TX","individuals_affected":2507073,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"c2e7756d-fa17-4309-ab0c-1a6e943b7faf","severity_score":95},{"record_id":"df77c624-9f96-4334-b539-fe1b99b3c502","source_event_group_id":"9c644e60-b4e1-4e5e-8580-d86dd333941f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advance Care Hospital","state":"PA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advance Care Hospital impermissibly disclosed PHI to a local media outlet, and failed to adequately safeguard PHI.","event_id":"9c644e60-b4e1-4e5e-8580-d86dd333941f","severity_score":50},{"record_id":"d86726ed-46b5-4741-9f30-81c9aaaaed24","source_event_group_id":"bb54b4f7-3736-4e13-a5dd-804c584b93e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ohio Health Physician Group","state":"OH","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ohio Health Physician Group impermissibly disclosed PHI to a local media outlet, and failed to adequately safeguard PHI.","event_id":"bb54b4f7-3736-4e13-a5dd-804c584b93e6","severity_score":50},{"record_id":"d292ab71-95bc-4c6d-9fff-82b9df924813","source_event_group_id":"742bc5df-35f5-4d93-8333-f36d511342d4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Healthcare Provider, Inc.","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Healthcare Provider, Inc. impermissibly disclosed PHI in response to a patient's online review.","event_id":"742bc5df-35f5-4d93-8333-f36d511342d4","severity_score":50},{"record_id":"b3fc1d31-76a7-4428-8e9c-b1c946812137","source_event_group_id":"671766ec-3b67-440c-baf2-942e33477d02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asthema & Immunology","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of Asthema & Immunology impermissibly disclosed PHI in response to a patient's online review.","event_id":"671766ec-3b67-440c-baf2-942e33477d02","severity_score":65},{"record_id":"aac7b234-941b-46c7-8a61-c1806d7f0127","source_event_group_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"United Healthcare Services, Inc.","state":"MN","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"United Healthcare Services, Inc. failed to implement appropriate administrative, technical, and physical safeguards to protect the privacy of its members' PHI, leading to a large breach.","event_id":"ce4afb99-f0fa-4211-9196-83cccad9e8bd","severity_score":90},{"record_id":"9dc4ded2-5781-451b-a0a6-330fd1555177","source_event_group_id":"6d9bdc66-1c8e-4eb6-b06e-6ec634d5bb65","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arizona Spine & Joint Hospital","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arizona Spine & Joint Hospital was investigated after it impermissibly disclosed patient information on its website. OCR found a failure to implement policies and procedures to protect ePHI.","event_id":"6d9bdc66-1c8e-4eb6-b06e-6ec634d5bb65","severity_score":50},{"record_id":"8f23c0c5-cbca-45f5-81da-a5e7e8f89d38","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital reported a breach involving the loss of tissue slides and the accompanying patient information. OCR's investigation found insufficient safeguards for PHI and a lack of access controls.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"888a6405-4712-419e-8676-90d609aa2e99","source_event_group_id":"aa78a0d3-3ad2-4748-8d48-9d091d64d9c5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dominican Hospital","state":"CA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dominican Hospital impermissibly disclosed PHI to a local media outlet, and failed to adequately safeguard PHI.","event_id":"aa78a0d3-3ad2-4748-8d48-9d091d64d9c5","severity_score":50},{"record_id":"6ddb4777-910c-4566-b0f2-000d265579c9","source_event_group_id":"74c0f536-07e4-47dc-b8f7-a71d025a32f4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LabMD, Inc.","state":"GA","individuals_affected":9300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LabMD, Inc. impermissibly disclosed the PHI of 9,300 patients when it left billing information accessible on a peer-to-peer network.","event_id":"74c0f536-07e4-47dc-b8f7-a71d025a32f4","severity_score":55},{"record_id":"65c46341-9f55-4cfa-9f23-7154e1658f59","source_event_group_id":"0dc3f539-a95a-4515-8d0a-64118cd385c5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HIPAA Business Associate Cancer Care Group","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HIPAA Business Associate Cancer Care Group failed to implement appropriate administrative, technical, and physical safeguards to protect the privacy of its patients' PHI, leading to a large breach.","event_id":"0dc3f539-a95a-4515-8d0a-64118cd385c5","severity_score":80},{"record_id":"629e21f2-2b01-4b15-89e9-d3ab00655d33","source_event_group_id":"4aa5affa-efad-40ce-9ba2-37cc7f119321","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Tufts Medical Center","state":"MA","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tufts Medical Center failed to implement appropriate administrative and technical safeguards to protect the privacy of its patients' PHI, leading to a breach.","event_id":"4aa5affa-efad-40ce-9ba2-37cc7f119321","severity_score":65},{"record_id":"585bd366-2f0e-4ef5-88d1-f3876e85c7b0","source_event_group_id":"3f209f80-d06a-4917-a77a-9e62f4fcbfe7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presentations of the Holy Family","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presentations of the Holy Family failed to implement appropriate administrative and technical safeguards to protect the privacy of its patients' PHI, leading to a breach.","event_id":"3f209f80-d06a-4917-a77a-9e62f4fcbfe7","severity_score":65},{"record_id":"52d68f88-08d4-4142-8c28-48414e96dbdd","source_event_group_id":"721904cb-f07b-4e27-8889-7853cbc5ea9a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health, dba St. Joseph's Hospital and Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health failed to provide a patient with timely access to her medical records, violating the HIPAA right of access standard.","event_id":"721904cb-f07b-4e27-8889-7853cbc5ea9a","severity_score":65},{"record_id":"1d9c68b4-302d-424d-a80f-137977bea249","source_event_group_id":"763edc34-c077-43e8-8377-5f5286e29d8e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wolverine Dermatology","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wolverine Dermatology failed to provide a patient with timely access to her medical records, violating the HIPAA right of access standard.","event_id":"763edc34-c077-43e8-8377-5f5286e29d8e","severity_score":50},{"record_id":"946d17e2-166a-47a9-ae23-8708672d6750","source_event_group_id":"f994dd50-ff43-4a67-9062-452d7199c23f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NCH Corporation Employee Benefits Plan","state":"TX","individuals_affected":4055,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"f994dd50-ff43-4a67-9062-452d7199c23f","severity_score":50},{"record_id":"ea28861a-67b9-43ba-a20a-3f34707ee291","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care (NMHC)","state":"MN","individuals_affected":2898,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NMHC settled with OCR for $1,550,000 due to various HIPAA violations, including failure to implement a business associate agreement and failure to conduct an accurate risk analysis.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"e9d6656a-6945-47ca-ad00-084035a43958","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children’s Digestive Health (CCDH)","state":"IL","individuals_affected":10500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCDH settled with OCR for $31,000 for its failure to implement a business associate agreement.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"e9ab0685-aa31-46e7-9b4c-c88d1c4cdb59","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health System (IU Health)","state":"IN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"IU Health settled with OCR for $5,100,000 for impermissible disclosures of PHI due to media access.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":90},{"record_id":"e859c4c9-d274-4732-9818-fe0e64f6136e","source_event_group_id":"88c288c6-030b-4a7f-b5b6-1a1c378662d5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"FHP Health Care (FHP)","state":"GU","individuals_affected":907000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FHP settled with OCR for $2,425,000 for failure to conduct an enterprise-wide risk analysis and other HIPAA violations.","event_id":"88c288c6-030b-4a7f-b5b6-1a1c378662d5","severity_score":90},{"record_id":"e6c4e849-fd06-4469-9afd-c2cd915215b1","source_event_group_id":"35b919fb-e3a7-47dc-8bcb-78ab9957569f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AllWays Health Partners (formerly Neighborhood Health Plan)","state":"MA","individuals_affected":320000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AllWays Health Partners settled with OCR for $1,000,000 due to a breach of unsecured ePHI from a stolen laptop.","event_id":"35b919fb-e3a7-47dc-8bcb-78ab9957569f","severity_score":80},{"record_id":"e65bf15c-9412-47c0-b69c-cd8664c9bf15","source_event_group_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Cardiovascular Associates","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Cardiovascular Associates settled with OCR for $100,000 after failing to provide timely access to medical records when requested.","event_id":"ddd462eb-b19b-406c-a8ed-3bfec8793eab","severity_score":50},{"record_id":"e35eb581-0aaf-42f0-b579-a58a7e704238","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University (OHSU)","state":"OR","individuals_affected":40220,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OHSU settled with OCR for $2,700,000 for various HIPAA violations including an unencrypted laptop and issues with electronic health records.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"e1d8db02-babf-438c-b943-7c0c3d1484c3","source_event_group_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Medical Center-Waxahachie","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Medical Center-Waxahachie settled with OCR for $480,000 to resolve HIPAA violations, including the impermissible disclosure of protected health information (PHI) and failure to reasonably safeguard PHI.","event_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","severity_score":65},{"record_id":"de31b60e-7a2b-4088-ae51-c6752e289c66","source_event_group_id":"272e9a2e-0d92-4ff8-8989-d3a0cc9ce4f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic and Sports Medicine","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Orthopedic and Sports Medicine settled with OCR for $25,000 and agreed to implement a corrective action plan to address potential HIPAA violations, including failing to provide a patient with access to his medical records.","event_id":"272e9a2e-0d92-4ff8-8989-d3a0cc9ce4f1","severity_score":50},{"record_id":"dd39ece8-fc16-47af-89c2-bef65df3749f","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center (URMC)","state":"NY","individuals_affected":104760,"breach_submission_date":null,"enforcement_action_date":null,"summary":"URMC settled with OCR for $3 million and agreed to implement a corrective action plan to address potential HIPAA violations related to two breaches of unsecured electronic protected health information (ePHI).","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"ce4a63e3-b927-4889-98f2-e0bb4a829989","source_event_group_id":"51d89c69-0478-4e96-9f31-420392672bd2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Treatment Center (RTC)","state":"CA","individuals_affected":665,"breach_submission_date":null,"enforcement_action_date":null,"summary":"RTC settled with OCR for $25,000 and agreed to implement a CAP for a breach of 665 patient records. Investigation found failures in identifying and responding to security risks.","event_id":"51d89c69-0478-4e96-9f31-420392672bd2","severity_score":50},{"record_id":"cbbeffd1-826a-4e38-b9c7-038e97d54e89","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System (CNE)","state":"RI","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CNE settled with OCR for $400,000 for HIPAA violations including a lack of an enterprise-wide risk analysis.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":65},{"record_id":"bf18f958-fdb9-4243-9d45-813c80438598","source_event_group_id":"8227853c-4afd-4fdb-b48f-aa5074d2c3dc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Prevea360 Health Plan (Prevea360)","state":"WI","individuals_affected":10773,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Prevea360 settled with OCR for $380,000 after an impermissible disclosure of PHI affecting 10,773 individuals. This resulted from an employee mistakenly sending a spreadsheet of PHI to employers.","event_id":"8227853c-4afd-4fdb-b48f-aa5074d2c3dc","severity_score":65},{"record_id":"b8d6b864-35be-4ad1-8f35-bfb725358402","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, now BioTelemetry, Inc.","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet settled with OCR for $2.5 million for an unencrypted laptop breach affecting over 1,000 individuals.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"b46e9e04-e8b2-4ef3-9bd7-b6c5cf01b9ce","source_event_group_id":"5f378912-411c-482e-882d-2d445c966c9f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BUMC and BUH","state":"MA","individuals_affected":169000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BUMC and BUH settled with OCR for $1.7 million due to various HIPAA violations, including failure to conduct risk analysis, implement risk management plans, and address previous noncompliance.","event_id":"5f378912-411c-482e-882d-2d445c966c9f","severity_score":90},{"record_id":"ab700cba-1710-464a-81ac-2e946336c6a8","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de la Raza, Inc. (La Clinica)","state":"CA","individuals_affected":992,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica settled for $95,000 related to a breach of unsecured electronic protected health information (ePHI) that compromised the ePHI of 992 individuals.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":50},{"record_id":"ab540f25-9833-49d4-9b74-4f05e1ee7be1","source_event_group_id":"d4043243-d3ff-41ab-82f8-ffeae05ea9ba","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lawrence and Memorial Hospital","state":"CT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lawrence and Memorial Hospital settled with OCR for $200,000 regarding potential HIPAA violations related to the impermissible disclosure of patients' protected health information (PHI).","event_id":"d4043243-d3ff-41ab-82f8-ffeae05ea9ba","severity_score":65},{"record_id":"aa19b886-11d7-4b71-a4b3-1f1cddac82f4","source_event_group_id":"e67f515d-0034-4ec2-8427-b85126538fe8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The UCLA Health System (UCLA)","state":"CA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA settled with OCR for $750,000 for impermissible access of 20,000 patient records due to inadequate access controls.","event_id":"e67f515d-0034-4ec2-8427-b85126538fe8","severity_score":80},{"record_id":"a6ea693c-f9b4-453c-91f8-05f9fb4b88d9","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center (SEMC)","state":"MA","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SEMC settled for $218,400 due to numerous HIPAA violations including failure to implement appropriate access controls and lack of an accurate risk assessment.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"9e314716-8adc-43c7-8ebe-0454359e9dcd","source_event_group_id":"52e9829d-2a54-402b-acbf-9a85bb45f449","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Return to Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Return to Health settled with OCR for $28,000 after failing to provide patient with access to her medical records and delaying the OCR investigation.","event_id":"52e9829d-2a54-402b-acbf-9a85bb45f449","severity_score":50},{"record_id":"9c1141d2-2a8d-4bbe-aec0-d136f1583ead","source_event_group_id":"475bc211-5c53-4c73-a94a-a767ceefc94b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Revance Therapeutics, Inc.","state":"CA","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Revance Therapeutics, Inc. settled with OCR for $475,000 to resolve potential HIPAA violations relating to a breach of unsecured electronic protected health information (ePHI).","event_id":"475bc211-5c53-4c73-a94a-a767ceefc94b","severity_score":65},{"record_id":"94aaec96-d27b-41ad-b8ff-386aac95fefe","source_event_group_id":"a10b79b7-14c5-45a2-a084-27c6d1ad482b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Haven Dental Group","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Haven Dental Group settled with OCR for $12,000 after failing to provide a patient with timely access to her medical records.","event_id":"a10b79b7-14c5-45a2-a084-27c6d1ad482b","severity_score":50},{"record_id":"916d566f-1a17-45bc-aba4-85f31f1f6925","source_event_group_id":"5410a715-3987-4d88-bc7f-cc81a0d0157a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forrest General Hospital","state":"MS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forrest General Hospital settled with OCR for $75,000 for failing to provide timely access to medical records upon request.","event_id":"5410a715-3987-4d88-bc7f-cc81a0d0157a","severity_score":50},{"record_id":"9072febe-5349-4053-ac6a-994545a7e153","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine (UWM)","state":"WA","individuals_affected":90000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UWM settled with OCR for $750,000 and agreed to a corrective action plan to address potential HIPAA violations due to a breach of unsecured PHI.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"8ae108b2-97a9-4a56-9501-1645df99bfdd","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Cancer Care Group, P.C. (CCG)","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCG settled with OCR for $750,000 for its failure to implement appropriate security measures and policies.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"884de22b-7a0e-4b63-a98d-1d5324fadf51","source_event_group_id":"3aa1a9d9-a0ab-4cb4-841b-17f96471d8f7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas Southwestern Medical Center (UTSW)","state":"TX","individuals_affected":17290,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UTSW settled with OCR for $3,200,000 after a breach due to a stolen unencrypted USB thumb drive.","event_id":"3aa1a9d9-a0ab-4cb4-841b-17f96471d8f7","severity_score":90},{"record_id":"88013a18-e01e-4a46-8b26-198543b6df58","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Presbyterian Hospital (NYP)","state":"NY","individuals_affected":4,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP settled with OCR for $3,800,000 due to impermissible disclosure of PHI of four patients to a film crew and failure to implement policies.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"7f06efc8-0715-4be0-8106-b543d6896386","source_event_group_id":"5fd8eb09-120b-48c5-ba7d-bdd06e9d8fb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mirkin & Associates, Ltd.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mirkin & Associates, Ltd. settled with OCR for $3,000 due to failure to provide timely access to PHI.","event_id":"5fd8eb09-120b-48c5-ba7d-bdd06e9d8fb5","severity_score":50},{"record_id":"7d591f32-daa4-4b9e-b56b-d6a7adb95c72","source_event_group_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS settled with OCR for $650,000 due to a breach of unsecured ePHI from a stolen iPhone and failure to implement policies.","event_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","severity_score":80},{"record_id":"7b1519d8-d1d4-4c8b-a371-53fa8dc68d8c","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network (AHCN)","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AHCN settled with OCR for $5,550,000 for multiple breaches and HIPAA violations, including failure to conduct an adequate risk analysis.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"78203c8a-8d10-4dcf-8432-25ca71dc9a3e","source_event_group_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwestern Memorial Hospital (NMH)","state":"IL","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NMH settled with OCR for $5,500,000 due to the impermissible disclosure of PHI of 30,000 patients and failure to implement policies.","event_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","severity_score":90},{"record_id":"750816f8-4da5-48d0-a256-f3035026f051","source_event_group_id":"73be60ba-00a3-4851-b8eb-070de7fe8e8c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Center and Cape Fear Valley Health System (Fayetteville Diagnostic)","state":"NC","individuals_affected":5472,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fayetteville Diagnostic settled for $160,000 and agreed to implement a CAP for a breach that affected 5,472 individuals.","event_id":"73be60ba-00a3-4851-b8eb-070de7fe8e8c","severity_score":65},{"record_id":"6d5b5b05-9fc3-4411-9977-2b370dd09fb7","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Texas MD Anderson Cancer Center (MD Anderson)","state":"TX","individuals_affected":33500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson was issued a CMP of $4.3 million due to the theft of an unencrypted laptop and loss of two unencrypted USB drives, affecting over 33,000 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"6caac269-3492-4505-95d5-b8996fada348","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Hospital and Medical Center (LHMC)","state":"MA","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LHMC settled with OCR for $850,000 for failure to implement appropriate physical safeguards and proper disposal of PHI.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":80},{"record_id":"63844b25-e46d-46c0-ad51-49b65d17f73c","source_event_group_id":"38a9db05-93a7-4505-9fa1-60ab6834d2f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DFW Oral Facial Surgery","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DFW Oral Facial Surgery settled with OCR for $3,500 after impermissibly disclosing PHI on its website in response to a patient's online review.","event_id":"38a9db05-93a7-4505-9fa1-60ab6834d2f9","severity_score":50},{"record_id":"635fa0fe-fa1f-4732-8dcb-61466fd9131b","source_event_group_id":"0389df4d-780d-48c6-8f62-2a1d07dded2f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of Na Pali","state":"HI","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospice of Na Pali settled with OCR for $10,000 due to impermissible disclosure of PHI from an unencrypted laptop.","event_id":"0389df4d-780d-48c6-8f62-2a1d07dded2f","severity_score":50},{"record_id":"60ee80fe-a73f-4c48-8105-e34af1e00989","source_event_group_id":"f74143dd-664c-4243-a56c-826a79a78ea6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Surgical Group of Gainesville, LLC (Surgical Group)","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Surgical Group settled with OCR for $65,000 to resolve potential violations, including the impermissible disclosure of protected health information (PHI) and failure to implement HIPAA policies and procedures.","event_id":"f74143dd-664c-4243-a56c-826a79a78ea6","severity_score":50},{"record_id":"4a40733e-640a-48f9-a68d-a2d6d2b70419","source_event_group_id":"8db9621f-89b0-4611-907f-24c84713efff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagosa Springs Medical Center (PSMC)","state":"CO","individuals_affected":557,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PSMC settled with OCR for $111,400 due to impermissible disclosure of PHI to a third-party vendor and lack of a business associate agreement.","event_id":"8db9621f-89b0-4611-907f-24c84713efff","severity_score":65},{"record_id":"47772c9e-2847-4d95-8152-1f56eefdb138","source_event_group_id":"b7182a34-de97-4f37-ac28-8ba92f45a473","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Weight Watchers (formerly The Daily Burn, Inc. (Daily Burn))","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Weight Watchers (formerly Daily Burn) settled with OCR for $38,000 due to impermissible collection of PHI from children.","event_id":"b7182a34-de97-4f37-ac28-8ba92f45a473","severity_score":50},{"record_id":"3434f6de-89fd-4a95-8109-ae70878b04f0","source_event_group_id":"5a715740-c4de-46f9-892d-e6bfab436d6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians' Alliance, LLC","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Physicians' Alliance, LLC, settled with OCR for $75,000 for impermissible sharing of patient information, including PHI, with other patients.","event_id":"5a715740-c4de-46f9-892d-e6bfab436d6d","severity_score":50},{"record_id":"2994d1fe-de37-495b-8db1-c5fa29e51b1e","source_event_group_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority (DHHA)","state":"CO","individuals_affected":28947,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DHHA settled with OCR for $1,600,000 to address potential HIPAA violations related to a breach of unsecured electronic protected health information (ePHI).","event_id":"5b2bc4d5-0d20-4f16-8305-b7887639411e","severity_score":90},{"record_id":"2536a4b1-5160-41b3-b78b-46241f7673bc","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico (MAPFRE)","state":"PR","individuals_affected":220945,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPFRE settled with OCR for $2,200,000 after a breach of unsecured PHI from stolen backup tapes.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"1ba14fad-046d-4783-849e-922d7418e4fc","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mass General Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General Hospital settled with OCR for $515,000 to resolve potential HIPAA violations after an impermissible disclosure of protected health information (PHI) to a local news crew.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"154016d8-9dbe-4b07-9f00-21ef76c15f58","source_event_group_id":"bf64c567-53ed-4789-a0c5-5f134ec4dd7b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Newark Beth Israel Medical Center (NBIMC)","state":"NJ","individuals_affected":3,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NBIMC settled with OCR for $2,125,000 for impermissible disclosure of PHI of three newborns.","event_id":"bf64c567-53ed-4789-a0c5-5f134ec4dd7b","severity_score":90},{"record_id":"150293db-7c34-45ce-8f6b-7f29fdf8bb98","source_event_group_id":"80ac7f08-e871-4d4f-a8d2-ea7cac5725a6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Cardiovascular Associated (JCA)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson Cardiovascular Associated (JCA) settled with OCR for $40,000 because it impermissibly disclosed a patient's protected health information (PHI) to a debt collector.","event_id":"80ac7f08-e871-4d4f-a8d2-ea7cac5725a6","severity_score":50},{"record_id":"14ec67f2-4dc7-48d3-8188-a4a88379d5a5","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas (CMCD)","state":"TX","individuals_affected":6388,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CMCD was issued a CMP of $3.2 million for HIPAA violations related to impermissible disclosure of PHI and failure to conduct adequate risk analysis.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"145796f4-3004-45f5-ba06-4894261c4c49","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System (Memorial)","state":"FL","individuals_affected":1157832,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial settled with OCR for $5,500,000 due to violations including impermissible disclosure of PHI.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"0ba6365b-f4ad-48ca-9a03-ad75760f72fc","source_event_group_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas (MGC) and Spartanburg Regional Healthcare System (SRHS)","state":"SC","individuals_affected":8500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MGC and SRHS settled with OCR for $1.0 million due to a breach affecting over 8,000 individuals resulting from employee impermissible access to PHI.","event_id":"74fd4ca5-917f-4f10-84f5-155c2d059c3c","severity_score":80},{"record_id":"05db6879-3fc5-4e60-9913-1aa9c2f8aa3a","source_event_group_id":"ddb8f98d-e3cc-43ad-9b12-144e476c6c7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Practice of San Antonio (FPSA), P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"FPSA settled with OCR for $25,000 and agreed to implement a corrective action plan to address potential HIPAA violations including failing to provide a patient with access to his medical records.","event_id":"ddb8f98d-e3cc-43ad-9b12-144e476c6c7f","severity_score":50},{"record_id":"044df58c-e81e-4e55-9885-cc15f97ce9a5","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center (BMC)","state":"MA","individuals_affected":1335,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BMC settled with OCR for $45,000 to resolve potential HIPAA violations related to the impermissible disclosure of patients' protected health information (PHI) due to mailing errors.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":50},{"record_id":"ec475064-0495-4beb-946b-56edacbb178d","source_event_group_id":"1958451a-c1b9-4dd2-9e6d-54b987bbf6c9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Physical Therapy","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Physical Therapy settled with OCR for $15,000 regarding allegations that it failed to provide a patient with timely access to medical records.","event_id":"1958451a-c1b9-4dd2-9e6d-54b987bbf6c9","severity_score":50},{"record_id":"d431aeee-ac68-4e90-b131-ff2d74dd4570","source_event_group_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester Medical Center (WMC)","state":"NY","individuals_affected":6560,"breach_submission_date":null,"enforcement_action_date":null,"summary":"WMC settled with OCR for $3 million to resolve potential HIPAA violations related to a breach of unsecured ePHI affecting 6,560 individuals.","event_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","severity_score":90},{"record_id":"c8839805-d41a-4d52-87ce-35e8f03e376f","source_event_group_id":"d1074d76-c5d2-47f0-96e5-f951011a15ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cammack LaRhette Advisors, Inc.","state":"NY","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cammack LaRhette Advisors settled with OCR due to the impermissible disclosure of protected health information on its public website.","event_id":"d1074d76-c5d2-47f0-96e5-f951011a15ed","severity_score":80},{"record_id":"a830779e-f864-4e3e-81e0-9177fd9ed440","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University and New York and Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University and NYP jointly settled with OCR for HIPAA violations stemming from a breach where ePHI of thousands of patients became accessible on the internet due to a misconfigured server.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"828708ea-b602-4753-98a1-afba58db7bbe","source_event_group_id":"71421252-df04-486b-85ea-5dc26096d126","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCLA Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health settled with OCR following an investigation into several breaches, including unauthorized access to patient medical records by employees, revealing systemic failures in protecting patient data.","event_id":"71421252-df04-486b-85ea-5dc26096d126","severity_score":90},{"record_id":"7f9f5ba8-fd71-4deb-9624-0f242d5c38b4","source_event_group_id":"7654e414-d8b1-4e8a-ac6c-b2828eefee59","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Maryland","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records despite multiple requests and ignored OCR's demands, resulting in the first CMP against a provider for HIPAA violations.","event_id":"7654e414-d8b1-4e8a-ac6c-b2828eefee59","severity_score":90},{"record_id":"79afcac5-c8b4-47de-a70e-1c8fdecac301","source_event_group_id":"0b259bc6-b25b-4c7a-9636-9b08d2ddef05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services (Metro)","state":"FL","individuals_affected":41738,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro settled with OCR for a $1.25 million penalty after failing to conduct an enterprisewide risk analysis and risks management plan for over 15 years.","event_id":"0b259bc6-b25b-4c7a-9636-9b08d2ddef05","severity_score":90},{"record_id":"7594e40f-24b1-4f44-82de-fc697723272a","source_event_group_id":"41aeecff-53d6-4b43-9eaf-4f7d4fe19eb6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physician's Medical Care, P.A. (PMC)","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PMC settled with OCR for $100,000 resulting from multiple impermissible disclosures of PHI on a public website.","event_id":"41aeecff-53d6-4b43-9eaf-4f7d4fe19eb6","severity_score":50},{"record_id":"5a69b42b-7170-49c9-8831-98d823c4c8ef","source_event_group_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Inc.","state":"CT","individuals_affected":1642,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna settled with OCR following a breach where an unencrypted flash drive containing ePHI was stolen from an employee's car. The investigation revealed Aetna's failure to conduct a thorough risk analysis.","event_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","severity_score":80},{"record_id":"4518fee6-24ae-4d9c-8a1f-abf64e5ae5fc","source_event_group_id":"1250549b-e9ad-4dfb-a6ef-9ee85900c9c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health System","state":"CA","individuals_affected":625000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health settled with OCR following two separate breaches where protected health information was publicly accessible on the internet due to misconfigured servers.","event_id":"1250549b-e9ad-4dfb-a6ef-9ee85900c9c8","severity_score":90},{"record_id":"4078ea10-b27a-4a00-b216-6fbf1f2a3eb6","source_event_group_id":"8bf86ff9-22d5-45ab-a954-1561a2f8271d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Covenant Health System","state":"TX","individuals_affected":19688,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Covenant Health System settled with OCR after a breach involving the theft of an unencrypted laptop from its administrative offices, exposing the ePHI of over 19,000 patients.","event_id":"8bf86ff9-22d5-45ab-a954-1561a2f8271d","severity_score":90},{"record_id":"30ce41cb-c283-4b74-ac04-cff3e3b41c22","source_event_group_id":"0c310606-3b91-4910-8d1d-b5448df882a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Associates (MRA)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Records Associates (MRA) settled with OCR for $100,000 for failing to provide timely access to medical records.","event_id":"0c310606-3b91-4910-8d1d-b5448df882a1","severity_score":50},{"record_id":"2a25321f-f5a7-4e03-be7a-ca3bf1b14bea","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":3439,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg settled with OCR for $85,000 after inadvertently exposing the protected health information of 3,439 patients to other patients.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"0b1146da-e8e7-4e1c-889f-062945628836","source_event_group_id":"0e55de2c-dd00-45c2-a6ec-32fda51c98b3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Internal Medicine","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of Internal Medicine settled with OCR for $125,000 for failing to provide timely access to medical records to a patient.","event_id":"0e55de2c-dd00-45c2-a6ec-32fda51c98b3","severity_score":65},{"record_id":"07867deb-e6d7-4e93-bc72-768ba234fcf4","source_event_group_id":"c7f9da5e-67e1-442d-bae3-a2fd8fc7e741","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brighton Renal Dialysis","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brighton Renal Dialysis settled with OCR for $5,000 after failing to provide timely access to medical records upon request.","event_id":"c7f9da5e-67e1-442d-bae3-a2fd8fc7e741","severity_score":50},{"record_id":"9b2fe852-8270-43a7-a00c-804968fa23c1","source_event_group_id":"329decf9-0062-4608-a57f-3f9608da7071","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Stockton Cardiology Medical Group","state":"CA","individuals_affected":90000,"breach_submission_date":"2026-03-18","enforcement_action_date":null,"summary":"","event_id":"329decf9-0062-4608-a57f-3f9608da7071","severity_score":70},{"record_id":"a70e3f01-b7a8-44fc-b7fa-61a2cb94d8be","source_event_group_id":"08f5fe69-5b69-43b3-9878-af31731dd305","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Georgia Vascual Specialists PC","state":"GA","individuals_affected":600,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"08f5fe69-5b69-43b3-9878-af31731dd305","severity_score":30},{"record_id":"f16f2494-4ae6-42fe-b32c-b11e605a0dc8","source_event_group_id":"5e3ed774-90ef-4103-b406-0033a615900b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Palomar Health Medical Group","state":"CA","individuals_affected":501,"breach_submission_date":"2026-05-08","enforcement_action_date":null,"summary":"","event_id":"5e3ed774-90ef-4103-b406-0033a615900b","severity_score":30},{"record_id":"bd034199-8f02-4011-a6ad-5b03f9915ce6","source_event_group_id":"c3698749-c5f3-41a3-88e8-c61aea34334f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Shore Gardens Rehabilitation and Nursing Center, LLC","state":"PA","individuals_affected":755,"breach_submission_date":"2026-04-06","enforcement_action_date":null,"summary":"","event_id":"c3698749-c5f3-41a3-88e8-c61aea34334f","severity_score":30},{"record_id":"b2264373-ec9d-4ce0-8662-d07874c6e662","source_event_group_id":"06abffaf-4781-43f5-b54c-fb3085b6afca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hamilton County Government","state":"TN","individuals_affected":500,"breach_submission_date":"2026-05-14","enforcement_action_date":null,"summary":"","event_id":"06abffaf-4781-43f5-b54c-fb3085b6afca","severity_score":30},{"record_id":"2a3e5ab3-205e-4c07-aad0-47269f500a43","source_event_group_id":"a8d927a4-153c-41ab-8d48-b039366ad520","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Health Centers of San Diego","state":"CA","individuals_affected":523,"breach_submission_date":"2026-05-12","enforcement_action_date":null,"summary":"","event_id":"a8d927a4-153c-41ab-8d48-b039366ad520","severity_score":30},{"record_id":"925e416a-6858-4260-b215-e05709cf4fbc","source_event_group_id":"b0dcf609-3a68-4e19-895f-5b417df94473","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rosch Visionary Systems, Inc.","state":"NY","individuals_affected":500,"breach_submission_date":"2026-03-23","enforcement_action_date":null,"summary":"","event_id":"b0dcf609-3a68-4e19-895f-5b417df94473","severity_score":30},{"record_id":"268d9c3d-fa19-4bc5-b22c-bd6733448004","source_event_group_id":"c91d6365-8319-4d3d-a384-97971406a5c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Houston Dermatology Specialists","state":"TX","individuals_affected":648,"breach_submission_date":"2026-03-02","enforcement_action_date":null,"summary":"","event_id":"c91d6365-8319-4d3d-a384-97971406a5c7","severity_score":30},{"record_id":"af48e60a-a97a-4532-a497-f66c1383c5b2","source_event_group_id":"8263dd49-5776-48ef-b5ec-587220ca62ce","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aroostook Mental Health Center","state":"ME","individuals_affected":501,"breach_submission_date":"2026-05-05","enforcement_action_date":null,"summary":"","event_id":"8263dd49-5776-48ef-b5ec-587220ca62ce","severity_score":30},{"record_id":"76f7f685-5068-43f6-8778-016e0c142c44","source_event_group_id":"115e461f-92b5-4a19-bd25-9a4ef088cc69","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"World Trade Center Health Program","state":"DC","individuals_affected":1071,"breach_submission_date":"2026-05-07","enforcement_action_date":null,"summary":"","event_id":"115e461f-92b5-4a19-bd25-9a4ef088cc69","severity_score":50},{"record_id":"0d425f22-6baa-4bfe-b8cd-d831be5d9d0f","source_event_group_id":"34261048-691d-45d3-a82c-ddfaff6ac889","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Laurel Eye Clinic","state":"PA","individuals_affected":145221,"breach_submission_date":"2026-04-22","enforcement_action_date":null,"summary":"","event_id":"34261048-691d-45d3-a82c-ddfaff6ac889","severity_score":85},{"record_id":"fa1701bb-96b2-4158-83c0-c43b23e4bed6","source_event_group_id":"aa8d703b-845d-41f5-b775-3ffbf7feab4e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"R.T. Jones Memorial Hospital","state":"GA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"R.T. Jones Memorial Hospital impermissibly disclosed PHI by failing to implement security measures against cyber-attacks, affecting 15,000 individuals. It also failed to conduct a risk analysis and implement audit controls.","event_id":"aa8d703b-845d-41f5-b775-3ffbf7feab4e","severity_score":65},{"record_id":"f92fded7-76a6-4b05-83d2-04c1a4f114a3","source_event_group_id":"9fa35bcc-34ff-4e5c-8cdd-0db116b05137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Tuomey Healthcare System","state":"SC","individuals_affected":71514,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tuomey Healthcare System failed to conduct an accurate risk analysis, implement risk management plans, and failed to terminate a business associate agreement (BAA) after the business associate failed to provide adequate PHI security. This affected 71,514 individuals.","event_id":"9fa35bcc-34ff-4e5c-8cdd-0db116b05137","severity_score":90},{"record_id":"eeedf05e-12ef-4e27-b5cc-c405217a3f94","source_event_group_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Partners HealthCare","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Partners HealthCare impermissibly disclosed PHI by leaving patient registration lists in a public waiting area, affecting 192 individuals.","event_id":"ff91ca0a-a921-477c-b20e-6455261b7b92","severity_score":50},{"record_id":"e9a937f0-fb31-4b7d-b7cf-95afff2b1727","source_event_group_id":"e752fa71-7651-42b9-b054-7454b3ea3804","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Jude Children's Research Hospital","state":"TN","individuals_affected":575,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Jude Children's Research Hospital impermissibly disclosed PHI when an unencrypted laptop was stolen, affecting 575 individuals. It also failed to conduct an accurate risk analysis and implement device and media controls.","event_id":"e752fa71-7651-42b9-b054-7454b3ea3804","severity_score":65},{"record_id":"e7371d50-5549-484c-8e76-1d6319879729","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":4995,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SEMC impermissibly disclosed the PHI of approximately 4995 patients when an unencrypted laptop was stolen and backup tapes were lost.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":65},{"record_id":"e574425c-d40d-4305-bb05-203132b1df1b","source_event_group_id":"274249d6-f463-4032-a4f0-6561d8802400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King MD","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"King MD failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"274249d6-f463-4032-a4f0-6561d8802400","severity_score":50},{"record_id":"d3fe9901-40ba-4bd7-8b7e-065d57779c8c","source_event_group_id":"9b7fcffb-7563-4113-bb35-ffddaae3412d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children's Rehabilitation","state":"TX","individuals_affected":800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Center for Children's Rehabilitation impermissibly disclosed PHI when it disposed of patient records in an unsecured dumpster, affecting 800 individuals. It also failed to implement policies and procedures for the final disposition of ePHI and failed to conduct a risk analysis.","event_id":"9b7fcffb-7563-4113-bb35-ffddaae3412d","severity_score":50},{"record_id":"cbc51bfd-daa9-4929-acb6-4c97bb32a943","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Inc. and IU Health Arnett Inc.","state":"IN","individuals_affected":4,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health Inc. and IU Health Arnett Inc. impermissibly disclosed PHI when they allowed media access to patients without authorization, impacting 4 individuals.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":80},{"record_id":"b74c0852-cd3d-4078-ae3b-19222dfa2e8d","source_event_group_id":"e46ce4da-04de-4b79-8e72-fe52190db519","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hobbs Endoscopy Center, LLC","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hobbs Endoscopy Center, LLC impermissibly disclosed PHI by storing patient medical records in a public dumpster.","event_id":"e46ce4da-04de-4b79-8e72-fe52190db519","severity_score":50},{"record_id":"b5c64876-ddaa-49e6-9f5b-d4386abedb51","source_event_group_id":"7374456f-cc89-4a7b-b455-22ea98368e1b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Healthcare, LLC","state":"TN","individuals_affected":38000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Healthcare impermissibly disclosed the PHI of approximately 38000 patients when unencrypted laptop bags were stolen from an employee's car.","event_id":"7374456f-cc89-4a7b-b455-22ea98368e1b","severity_score":90},{"record_id":"b14a4423-143c-4a03-b7e6-800fed982e84","source_event_group_id":"933fa426-474d-4978-9246-9188efd16aaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management LLC","state":"CA","individuals_affected":206695,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors' Management LLC impermissibly disclosed PHI when it failed to implement security measures against cyber-attacks, affecting 206,695 individuals.","event_id":"933fa426-474d-4978-9246-9188efd16aaa","severity_score":90},{"record_id":"ad32b841-52ba-419b-b861-1612516de6e0","source_event_group_id":"e9eee319-dc0b-4d7f-8493-185b30babb9c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DFY Developmental Services","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DFY Developmental Services failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"e9eee319-dc0b-4d7f-8493-185b30babb9c","severity_score":50},{"record_id":"aba3672b-1224-4414-96ef-3bae6bc13882","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, San Francisco Medical Center","state":"CA","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF Medical Center impermissibly disclosed the PHI of approximately 16000 patients when a surgeon's unencrypted laptop was stolen.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":55},{"record_id":"a6ceb907-8104-4513-a006-2b6bbaced234","source_event_group_id":"5ae51743-8b5c-43f0-8610-718262c34687","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Maryland Medical Center","state":"MD","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Maryland Medical Center impermissibly disclosed the PHI of approximately 2000 patients when an unencrypted laptop was stolen from an employee's vehicle.","event_id":"5ae51743-8b5c-43f0-8610-718262c34687","severity_score":55},{"record_id":"9681669d-ad43-45db-937f-4618c4fcb05f","source_event_group_id":"9c3c2bf1-d7d8-4174-a333-398fae381e3d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hamilton Chiropractic","state":"MT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hamilton Chiropractic failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"9c3c2bf1-d7d8-4174-a333-398fae381e3d","severity_score":50},{"record_id":"9090f9ac-53c0-476b-8013-e13026bc7cd7","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Informatics Engineering (MIE) impermissibly disclosed PHI when it failed to implement security measures against cyber-attacks, affecting 3,900,000 individuals.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":90},{"record_id":"87e861b9-0c82-4aaa-9806-9b4d09803399","source_event_group_id":"cfaeefca-8519-48fb-bbcc-277ff2338c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Donald Bradley, D.D.S.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Donald Bradley, D.D.S. failed to provide timely and accurate access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"cfaeefca-8519-48fb-bbcc-277ff2338c6e","severity_score":50},{"record_id":"868be6e3-3b92-4cf7-b1a3-d4edf1b7a492","source_event_group_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospitalist","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Care Hospitalist impermissibly disclosed PHI by discussing patient information in a public hallway, affecting 1 individual.","event_id":"af44aa54-5f56-4f08-9008-d963e1c9998f","severity_score":65},{"record_id":"7db1ced0-f930-47bc-8658-e9a33b27f551","source_event_group_id":"39c55f0e-0731-4cf6-81dc-f1b3c6f42cc5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pasadena Psychiatric","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pasadena Psychiatric failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"39c55f0e-0731-4cf6-81dc-f1b3c6f42cc5","severity_score":50},{"record_id":"7251d47f-4f5e-4004-b1b9-5ec5370d6ea0","source_event_group_id":"891a3bc9-807e-456b-a26d-b552926b51e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Inclusive Medical","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Inclusive Medical failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"891a3bc9-807e-456b-a26d-b552926b51e0","severity_score":50},{"record_id":"6af2fb76-73ef-4476-ae50-eff16fd14a13","source_event_group_id":"da09e709-a42e-48b7-8db2-5909830c5be9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Health Care","state":"MI","individuals_affected":12028,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Health Care impermissibly disclosed PHI when an unencrypted laptop containing PHI was stolen, affecting 12,028 individuals. It also failed to conduct a risk analysis.","event_id":"da09e709-a42e-48b7-8db2-5909830c5be9","severity_score":50},{"record_id":"64b14ee9-d772-4356-815e-f0e5af2f5afe","source_event_group_id":"31d633a9-141d-46f2-a302-7957850e75ae","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ohio Health Alliance","state":"OH","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ohio Health Alliance impermissibly disclosed PHI when it provided PHI to a business associate without a business associate agreement (BAA), affecting 1,000,000 individuals. It also failed to conduct a risk analysis and implement audit controls.","event_id":"31d633a9-141d-46f2-a302-7957850e75ae","severity_score":90},{"record_id":"61cc60c5-499e-4ddb-ba14-c936b6eddd30","source_event_group_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Raleigh Orthopedic Clinic","state":"NC","individuals_affected":17300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Raleigh Orthopedic Clinic impermissibly disclosed PHI when x-ray films were impermissibly disclosed to a third-party vendor without a business associate agreement (BAA), affecting 17,300 individuals. It also failed to conduct a risk analysis.","event_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","severity_score":80},{"record_id":"533bfd79-efa9-4855-adea-ac6391c540a5","source_event_group_id":"2d3abada-0e39-4a43-9e1c-63d0d96cd47d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Centura Health","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Centura Health impermissibly disclosed PHI to a patient's family members, affecting 1 individual.","event_id":"2d3abada-0e39-4a43-9e1c-63d0d96cd47d","severity_score":65},{"record_id":"53261c36-8300-440f-9570-82ab76e3f873","source_event_group_id":"918adcc1-a38c-421a-ada6-75e229ad3864","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lawrence Memorial Hospital","state":"KS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lawrence Memorial Hospital failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"918adcc1-a38c-421a-ada6-75e229ad3864","severity_score":50},{"record_id":"5168c5b2-237e-4afd-ab72-6bb01e3a66e5","source_event_group_id":"c8b0155d-b393-42e5-9ae5-23a5b25674b9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardiovascular Medical Group of Southern California","state":"CA","individuals_affected":19000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cardiovascular Medical Group of Southern California impermissibly disclosed PHI by failing to implement security measures against cyber-attacks, affecting 19,000 individuals. It also failed to conduct a risk analysis.","event_id":"c8b0155d-b393-42e5-9ae5-23a5b25674b9","severity_score":90},{"record_id":"468cacc3-3de4-4aea-ba81-27c7dfc8c554","source_event_group_id":"7e98102b-bbe8-4810-a4b6-b4b2c5a6e138","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayshore Psychiatric","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayshore Psychiatric failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"7e98102b-bbe8-4810-a4b6-b4b2c5a6e138","severity_score":50},{"record_id":"3bf6b678-5e31-42e7-a79e-05387b0b9a61","source_event_group_id":"6e0f7bf3-bf8e-4175-8c39-5cb6f8cc3aa3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premier Healthcare","state":"IN","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premier Healthcare impermissibly disclosed PHI by leaving documents in a public shredder bin, affecting 2 individuals.","event_id":"6e0f7bf3-bf8e-4175-8c39-5cb6f8cc3aa3","severity_score":65},{"record_id":"34beff24-f6d1-49e6-8bbc-eab1675eba20","source_event_group_id":"cbc8d3b5-f6f0-4fdc-b092-19f931179c98","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forrest City Medical Center","state":"AR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forrest City Medical Center impermissibly disclosed PHI in response to a subpoena and failed to implement HIPAA policies and procedures.","event_id":"cbc8d3b5-f6f0-4fdc-b092-19f931179c98","severity_score":50},{"record_id":"30c515bf-a4e0-4833-ae6e-e82198ecabce","source_event_group_id":"0d67f485-be83-4765-b8e0-03bc6b6ef3f7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ReDent","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ReDent failed to provide timely access to PHI to a patient and failed to implement HIPAA policies and procedures.","event_id":"0d67f485-be83-4765-b8e0-03bc6b6ef3f7","severity_score":50},{"record_id":"253b8521-8bcd-4ef1-b6c6-74de4396e183","source_event_group_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fayetteville Diagnostic Clinic","state":"AR","individuals_affected":1586,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fayetteville Diagnostic Clinic impermissibly disclosed PHI when an unencrypted USB drive containing PHI was stolen, affecting 1,586 individuals.","event_id":"0c756fe6-1645-4b1a-ac35-58b6e1279fd8","severity_score":50},{"record_id":"248c9d99-c2b7-4706-a4f5-d95a963c0122","source_event_group_id":"abee9905-517b-4e7b-bac3-8963c3a93463","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HUPAC (a politically active organization affiliated with the University of Pennsylvania Health System)","state":"PA","individuals_affected":619,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HUPAC impermissibly disclosed the PHI of 619 individuals for fundraising purposes when PHI was sent as an attachment to a mass email.","event_id":"abee9905-517b-4e7b-bac3-8963c3a93463","severity_score":50},{"record_id":"0e75ead7-a6ed-4ba7-89a4-3c15468904f7","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Filefax, Inc.","state":"IL","individuals_affected":2154,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Filefax, Inc. impermissibly disposed of PHI in unsecured dumpsters, affecting 2,154 individuals, and failed to notify OCR of the breach.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":50},{"record_id":"0ada96da-99a8-4e7e-93a6-810b753a21b4","source_event_group_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University and NewYork-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University and NewYork-Presbyterian Hospital impermissibly disclosed PHI when a developer posted PHI to a public GitHub repository, affecting 6,800 individuals. They also failed to conduct a risk analysis and implement audit controls.","event_id":"a893b7a5-b8a6-4c9a-a293-42a2eb35e742","severity_score":90},{"record_id":"09b76889-d16a-4a9e-9658-c7f0c3302cdb","source_event_group_id":"1745b84a-1bd6-4642-9cbc-cf52e0e68c2a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Emergency Medical Associates, P.A.","state":"NJ","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Emergency Medical Associates impermissibly disclosed the PHI of 6800 patients when an unauthorized person gained access to patient schedules.","event_id":"1745b84a-1bd6-4642-9cbc-cf52e0e68c2a","severity_score":55},{"record_id":"f2afff2e-a432-455c-97f0-b57ee8c38441","source_event_group_id":"9a3f8cd9-3080-455a-b8c4-7d1e648ff47c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Erie Family Health Centers","state":"IL","individuals_affected":570000,"breach_submission_date":"2026-03-27","enforcement_action_date":null,"summary":"","event_id":"9a3f8cd9-3080-455a-b8c4-7d1e648ff47c","severity_score":95},{"record_id":"f2526920-1a2c-4c38-a116-071604cde8b2","source_event_group_id":"58b62d42-c76a-4b8c-b883-8e40f99a01a7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Proxycare, Inc.","state":"FL","individuals_affected":45196,"breach_submission_date":"2026-03-27","enforcement_action_date":null,"summary":"","event_id":"58b62d42-c76a-4b8c-b883-8e40f99a01a7","severity_score":70},{"record_id":"9552cb46-5054-40eb-84d5-a87d3a347115","source_event_group_id":"ca4ac785-0529-4e1d-b35a-4ce65ce7e7b1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Florida Physician Specialists","state":"FL","individuals_affected":276498,"breach_submission_date":"2026-04-24","enforcement_action_date":null,"summary":"","event_id":"ca4ac785-0529-4e1d-b35a-4ce65ce7e7b1","severity_score":85},{"record_id":"6ab50fdf-64d4-4791-a808-31f08787219d","source_event_group_id":"c24bf8a1-7944-491a-9b29-0d49295e6305","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Town of Apex, North Carolina","state":"NC","individuals_affected":970,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"c24bf8a1-7944-491a-9b29-0d49295e6305","severity_score":30},{"record_id":"5188657c-e290-4427-b714-10f5377eb606","source_event_group_id":"05f7a068-9965-443b-892f-c2f719bb0942","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"New Horizons Behavioral Health","state":"GA","individuals_affected":500,"breach_submission_date":"2026-03-18","enforcement_action_date":null,"summary":"","event_id":"05f7a068-9965-443b-892f-c2f719bb0942","severity_score":30},{"record_id":"4d0dec77-33fb-4d5d-a392-de16e2c089da","source_event_group_id":"ad849110-f4ea-4110-b8fa-e14391b788c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medi-Rents & Sales, Inc.","state":"MD","individuals_affected":1524,"breach_submission_date":"2026-03-25","enforcement_action_date":null,"summary":"","event_id":"ad849110-f4ea-4110-b8fa-e14391b788c7","severity_score":50},{"record_id":"a7a12cab-d6a3-4035-8fd3-852f2b6956b1","source_event_group_id":"a88ecbe7-2e45-4d0b-aca4-eb22ba9cca9f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lumio Dental","state":"OK","individuals_affected":500,"breach_submission_date":"2026-03-29","enforcement_action_date":null,"summary":"","event_id":"a88ecbe7-2e45-4d0b-aca4-eb22ba9cca9f","severity_score":30},{"record_id":"e0d92bcf-026b-4448-85f6-bb81d7670785","source_event_group_id":"11435022-c3c7-4481-90a3-5abd35906592","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"New York City Health and Hospitals Corporation","state":"NY","individuals_affected":1800000,"breach_submission_date":"2026-03-24","enforcement_action_date":null,"summary":"","event_id":"11435022-c3c7-4481-90a3-5abd35906592","severity_score":95},{"record_id":"60c125f9-7feb-4d01-aa9e-d5748ca321e6","source_event_group_id":"5c0c85e5-3316-4925-aa78-0c46b9c35f2c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"J. Arthur Trudeau Memorial Center","state":"RI","individuals_affected":5630,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"5c0c85e5-3316-4925-aa78-0c46b9c35f2c","severity_score":50},{"record_id":"f432bbad-496c-4d25-88bb-7c4598f3bb3d","source_event_group_id":"7d1cff92-3287-4266-a73e-2b7dfe0583fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Care","state":"UT","individuals_affected":500,"breach_submission_date":"2026-03-27","enforcement_action_date":null,"summary":"","event_id":"7d1cff92-3287-4266-a73e-2b7dfe0583fb","severity_score":30},{"record_id":"452c0674-bac7-4742-b9ae-1bf83f73dd45","source_event_group_id":"c000e4ce-1eea-474d-a2be-3123b6bd1da9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Glendora Surgery Center","state":"CA","individuals_affected":501,"breach_submission_date":"2026-03-27","enforcement_action_date":null,"summary":"","event_id":"c000e4ce-1eea-474d-a2be-3123b6bd1da9","severity_score":30},{"record_id":"00a5bf35-ccec-4d4a-8201-187c62c32cea","source_event_group_id":"6068ff4e-fd5f-4bb8-87b0-77c464027609","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NJ Division of Developmental Disabilities - Hunterdon Developmental Center","state":"NJ","individuals_affected":807,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"6068ff4e-fd5f-4bb8-87b0-77c464027609","severity_score":30},{"record_id":"951a9b47-e729-49fd-b7f3-18c5cb120c43","source_event_group_id":"e8538de5-8742-4410-94e3-92f0dfc63c67","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Navia Benefit Solutions, Inc.","state":"WA","individuals_affected":2151330,"breach_submission_date":"2026-03-18","enforcement_action_date":null,"summary":"","event_id":"e8538de5-8742-4410-94e3-92f0dfc63c67","severity_score":95},{"record_id":"5ddd12c7-ce15-458e-b98a-411a4bb52b4f","source_event_group_id":"635d6a83-8147-4af4-bf9b-7c9b2174aa1c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tampa Bay Dental Implants & Periodontics","state":"FL","individuals_affected":6400,"breach_submission_date":"2026-03-08","enforcement_action_date":null,"summary":"","event_id":"635d6a83-8147-4af4-bf9b-7c9b2174aa1c","severity_score":50},{"record_id":"73de4b2d-b05a-4d57-9914-45312d89dc14","source_event_group_id":"1a4b1a9b-2b9d-4987-9962-51c96db1d326","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Metrocare","state":"TX","individuals_affected":602,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"1a4b1a9b-2b9d-4987-9962-51c96db1d326","severity_score":30},{"record_id":"e7e9424b-58e4-4a0d-85b4-9b5606efc16a","source_event_group_id":"9af12378-c047-4f52-9ebd-20bb471a5d21","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Totem Lake Family Dentistry","state":"WA","individuals_affected":3464,"breach_submission_date":"2026-04-30","enforcement_action_date":null,"summary":"","event_id":"9af12378-c047-4f52-9ebd-20bb471a5d21","severity_score":50},{"record_id":"dadf52f0-140e-41bc-b1a2-3a872e3bbea1","source_event_group_id":"8b2e24a7-42ee-4011-a410-363353eb9cb8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Heartland Cardiac Care, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Heartland Cardiac Care failed to properly dispose of medical records, leading to a breach.","event_id":"8b2e24a7-42ee-4011-a410-363353eb9cb8","severity_score":50},{"record_id":"d982ac62-5e11-48ca-8d90-cfbe79cb2fc1","source_event_group_id":"71421252-df04-486b-85ea-5dc26096d126","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCLA Health System","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA impermissibly disclosed the PHI of one patient to a celebrity media outlet.","event_id":"71421252-df04-486b-85ea-5dc26096d126","severity_score":80},{"record_id":"bfa3d4a6-17af-4ef3-92da-00cdfd3a0a37","source_event_group_id":"59946012-bf29-47d5-a889-1de69b086af8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Correction","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Correction paid $25,000 and adopted a corrective action plan to resolve potential HIPAA violations after failing to provide a patient with timely access to their medical records.","event_id":"59946012-bf29-47d5-a889-1de69b086af8","severity_score":50},{"record_id":"ba892866-9bf8-46c1-9755-bc7b8967f25f","source_event_group_id":"4486a191-a82a-4fd5-87cc-42e8fe542650","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ERMI, LLC","state":"TN","individuals_affected":360,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ERMI impermissibly disclosed the PHI of 360 patients to a marketing firm.","event_id":"4486a191-a82a-4fd5-87cc-42e8fe542650","severity_score":50},{"record_id":"b69dbc0f-8b2d-4ea3-a830-a6e8c837caa0","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas","state":"SC","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas paid $400,000 to settle potential HIPAA violations, including failure to conduct a risk analysis and implement security measures.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":65},{"record_id":"ac6438ff-9f93-4173-bc19-32379bc49e9c","source_event_group_id":"51d89c69-0478-4e96-9f31-420392672bd2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Treatment Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Treatment Center paid $25,000 and agreed to a corrective action plan for failing to provide timely access to medical records.","event_id":"51d89c69-0478-4e96-9f31-420392672bd2","severity_score":50},{"record_id":"808ee551-b222-4d94-b1ab-f7981e007781","source_event_group_id":"ba9c3118-f84e-4bac-9dbd-705a58b4bb87","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fountain Valley Regional Hospital and Orange Coast Memorial Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fountain Valley Regional Hospital and Orange Coast Memorial Medical Center paid a combined $160,000 to resolve potential HIPAA violations after disclosing PHI to a local news outlet.","event_id":"ba9c3118-f84e-4bac-9dbd-705a58b4bb87","severity_score":65},{"record_id":"8088662c-3123-4724-80e5-391fbedf0e2f","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":62000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health paid $3 million to resolve potential HIPAA violations arising from two separate data breaches affecting over 62,000 individuals.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":90},{"record_id":"7dbe229b-efa9-4e67-930a-19ef9739ae30","source_event_group_id":"a8f5ab45-ad06-4d51-9029-be52e4428ac5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Medical, Inc.","state":"DC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Medical, Inc. paid $25,000 and adopted a corrective action plan to resolve potential HIPAA violations after failing to provide a patient with timely access to their medical records.","event_id":"a8f5ab45-ad06-4d51-9029-be52e4428ac5","severity_score":50},{"record_id":"7b329783-66c4-41ee-8970-d40561a07871","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem paid $16 million to resolve potential violations of the HIPAA Privacy and Security Rules after a series of cyberattacks led to the largest health data breach in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"6ddaad86-b149-49c6-9e74-36d7d90c435b","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County impermissibly disclosed the PHI of 1,581 individuals by posting it online.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"57da5f1b-5fa6-4339-8f7f-8443a542a7c4","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Shasta Regional Medical Center paid $10,000 and adopted a corrective action plan to resolve potential HIPAA violations after failing to provide a patient with timely access to their medical records.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":50},{"record_id":"4422e54a-a3c2-4523-b656-de27fb6b233b","source_event_group_id":"6167cb21-a79b-4f01-bcef-64f7c5c57e28","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians’ Business Office, Inc.","state":"TX","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"PBO exposed medical billing information of 2,000 individuals on their website.","event_id":"6167cb21-a79b-4f01-bcef-64f7c5c57e28","severity_score":50},{"record_id":"0f265aba-cd03-4ad7-8eff-ce7bd9753449","source_event_group_id":"dea45299-4d75-43f5-a3d8-345fc008e9af","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Newark Beth Israel Medical Center and Children's Hospital of New Jersey","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NBIMC and CHoNJ paid a combined $145,000 to resolve potential HIPAA violations after impermissibly disclosing PHI to a local news outlet.","event_id":"dea45299-4d75-43f5-a3d8-345fc008e9af","severity_score":65},{"record_id":"0efe53d9-8018-41ed-8763-4c6d0d306715","source_event_group_id":"1caaf3ed-3f2a-4b28-97f2-86c0e2a1f1e0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Payment Card Systems (PCS)","state":"TX","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Payment Card Systems (PCS) paid $100,000 to settle potential violations of the HIPAA Privacy Rule after impermissibly disclosing PHI.","event_id":"1caaf3ed-3f2a-4b28-97f2-86c0e2a1f1e0","severity_score":50},{"record_id":"0b9f725f-3aba-4f3e-9c99-a66422c2c592","source_event_group_id":"8be622d2-7060-4284-a7c5-c075d113783e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete P.T., Pool & Fitness, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete P.T., Pool & Fitness, Inc. paid $25,000 to settle potential HIPAA violations resulting from an impermissible disclosure of PHI for a single individual.","event_id":"8be622d2-7060-4284-a7c5-c075d113783e","severity_score":50},{"record_id":"05806026-1aba-4289-9ba5-58bc011643f4","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":192021,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General lost unencrypted backup tapes containing patient information, leading to a breach.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"94c13545-080e-4d8c-9c00-28fe61ba39ea","source_event_group_id":"48147459-f0ad-4d2f-b541-bf31b93e4738","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Access Information Management Shared Services, LLC","state":"MA","individuals_affected":1522,"breach_submission_date":"2026-02-28","enforcement_action_date":null,"summary":"","event_id":"48147459-f0ad-4d2f-b541-bf31b93e4738","severity_score":50},{"record_id":"73eafc9f-ad40-4b50-89df-448c3267a67e","source_event_group_id":"5fc8a523-fc78-48cc-851a-afe6cdc31326","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"FMRS Health Systems, Inc.","state":"WV","individuals_affected":500,"breach_submission_date":"2026-04-28","enforcement_action_date":null,"summary":"","event_id":"5fc8a523-fc78-48cc-851a-afe6cdc31326","severity_score":30},{"record_id":"2b37d930-fbb1-4fac-acd5-747022aeb154","source_event_group_id":"2bd3eaa1-cee1-410a-9c35-cdaa3e2dd53d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Nebraska Medical Center","state":"NE","individuals_affected":26937,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"2bd3eaa1-cee1-410a-9c35-cdaa3e2dd53d","severity_score":70},{"record_id":"e3cdd7f1-ec70-47bb-b139-11b28e660f96","source_event_group_id":"23ad55ab-d290-488c-a435-590afd476335","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Integrated Pain Associates","state":"TX","individuals_affected":500,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"23ad55ab-d290-488c-a435-590afd476335","severity_score":30},{"record_id":"aa84fae3-992f-413a-9db5-b869aeaec90f","source_event_group_id":"8fdb803c-846b-49bd-9532-7ed0b2340ee3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CUNNINGHAM PROSTHETIC CARE LLC","state":"ME","individuals_affected":2523,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"8fdb803c-846b-49bd-9532-7ed0b2340ee3","severity_score":50},{"record_id":"9bedb02d-a15d-4915-a9d5-d00cdeea9bbc","source_event_group_id":"5fd43917-07f5-4eeb-9e65-b72017300ce6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ASC Ortho Management Company, LLC  d/b/a Aligned Orthopedic Partners","state":"MD","individuals_affected":7213,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"5fd43917-07f5-4eeb-9e65-b72017300ce6","severity_score":50},{"record_id":"3bd22baf-26f4-482d-a22a-12903251e461","source_event_group_id":"7d5093ec-e873-4855-9338-66a351ca633a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Capitol Pain Institute","state":"CO","individuals_affected":695,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"7d5093ec-e873-4855-9338-66a351ca633a","severity_score":30},{"record_id":"5f5b15a9-a50f-445e-ab26-49e6e238f57c","source_event_group_id":"8e35ff97-8535-4589-84c1-ebbf1bd05995","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Western Orthopaedics, P.C.","state":"CO","individuals_affected":113330,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"8e35ff97-8535-4589-84c1-ebbf1bd05995","severity_score":85},{"record_id":"98511e56-dcf0-4c84-86b6-bb7ab35567e6","source_event_group_id":"357a8d9c-25b0-4f94-b64e-fb4fe67967a9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mays Housecall Home Health, Inc.","state":"TX","individuals_affected":5208,"breach_submission_date":"2026-03-21","enforcement_action_date":null,"summary":"","event_id":"357a8d9c-25b0-4f94-b64e-fb4fe67967a9","severity_score":50},{"record_id":"f704e5e9-3ae7-40c0-960b-ef05208914d3","source_event_group_id":"da7bbaa2-fc87-428e-8c08-307c0be378dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cullen/Frost Bankers, Inc.","state":"TX","individuals_affected":4698,"breach_submission_date":"2026-03-26","enforcement_action_date":null,"summary":"","event_id":"da7bbaa2-fc87-428e-8c08-307c0be378dc","severity_score":50},{"record_id":"2aafd34e-29c5-424b-a8ee-a24b0f3d5dcf","source_event_group_id":"383c0c5d-7bec-42a8-a85e-2f7ef4c3edfe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"LifeSpring Home Care","state":"OK","individuals_affected":7509,"breach_submission_date":"2026-04-06","enforcement_action_date":null,"summary":"","event_id":"383c0c5d-7bec-42a8-a85e-2f7ef4c3edfe","severity_score":50},{"record_id":"853a6328-77e5-4da6-864a-263984f3f390","source_event_group_id":"2c1be959-370c-49f9-990d-b0205c5311c8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CORPORACION DE SERVICIOS MEDICOS PRIMARIOS Y PREVENCION DE HATILLO","state":"","individuals_affected":24236,"breach_submission_date":"2026-03-26","enforcement_action_date":null,"summary":"","event_id":"2c1be959-370c-49f9-990d-b0205c5311c8","severity_score":70},{"record_id":"bba68f0a-4062-4664-b0a7-453f8d264b5e","source_event_group_id":"73c1067e-01df-46c2-b3d2-085a8d344ef6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Austin Plastic and Reconstructive Surgery","state":"TX","individuals_affected":4266,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"73c1067e-01df-46c2-b3d2-085a8d344ef6","severity_score":50},{"record_id":"b34b27bd-ab06-4563-86cf-e4960fd629ed","source_event_group_id":"fb913fb8-8a7d-48d0-b9b7-6c9a9f4b7000","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Waterford Surgical Center","state":"MI","individuals_affected":9000,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"fb913fb8-8a7d-48d0-b9b7-6c9a9f4b7000","severity_score":50},{"record_id":"98d467e8-c487-4120-9a61-7d18d33e05a3","source_event_group_id":"9d3e31c1-7f59-4ad4-8fa1-6c85b2fe8899","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The South Alabama Regional Planning Commission","state":"AL","individuals_affected":3043,"breach_submission_date":"2026-03-18","enforcement_action_date":null,"summary":"","event_id":"9d3e31c1-7f59-4ad4-8fa1-6c85b2fe8899","severity_score":50},{"record_id":"7eae1b6e-9631-429f-8a5c-d8db5798dae6","source_event_group_id":"5e5c0096-9d6b-4719-a08f-47d31ba6d671","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OpenLoop Health, Inc.","state":"IA","individuals_affected":716000,"breach_submission_date":"2026-03-17","enforcement_action_date":null,"summary":"","event_id":"5e5c0096-9d6b-4719-a08f-47d31ba6d671","severity_score":95},{"record_id":"6ee49802-792c-4997-9db5-8b78e7e5b682","source_event_group_id":"67113777-934d-426e-884d-a9e4ba8a6665","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Healthcare In Action","state":"CA","individuals_affected":1143,"breach_submission_date":"2026-03-30","enforcement_action_date":null,"summary":"","event_id":"67113777-934d-426e-884d-a9e4ba8a6665","severity_score":50},{"record_id":"686ba69f-3462-4ead-a1b2-55bb0ec4c942","source_event_group_id":"fc220aed-df98-4da6-b5df-d771e9c708d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Spokane Digestive Disease Center, P.S.","state":"WA","individuals_affected":501,"breach_submission_date":"2026-04-20","enforcement_action_date":null,"summary":"","event_id":"fc220aed-df98-4da6-b5df-d771e9c708d8","severity_score":30},{"record_id":"423d6313-964c-4a11-89ad-5f0499f79461","source_event_group_id":"a694cc68-cb97-4fc5-a2a1-bba378bdbdd3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Belmont Aesthetic and Reconstructive Plastic Surgery","state":"VA","individuals_affected":528,"breach_submission_date":"2026-04-23","enforcement_action_date":null,"summary":"","event_id":"a694cc68-cb97-4fc5-a2a1-bba378bdbdd3","severity_score":30},{"record_id":"2a96b494-4672-4847-82d7-29ea118f07fe","source_event_group_id":"2df97729-e6d0-4416-9581-66e2011b41c1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Coastal Carolina Health Care, PA","state":"NC","individuals_affected":110304,"breach_submission_date":"2026-03-24","enforcement_action_date":null,"summary":"","event_id":"2df97729-e6d0-4416-9581-66e2011b41c1","severity_score":85},{"record_id":"0c86780e-8ce8-46a7-a4b1-a98bfe43494e","source_event_group_id":"28e6aeb3-29fa-47c3-99c9-f67a4b1ad928","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Complete Eye Care dba Orem Eye Clinic","state":"UT","individuals_affected":5800,"breach_submission_date":"2026-03-19","enforcement_action_date":null,"summary":"","event_id":"28e6aeb3-29fa-47c3-99c9-f67a4b1ad928","severity_score":50},{"record_id":"0ba8f4dd-1bfc-478b-aaee-ef4d892e8009","source_event_group_id":"45d9d179-fcc2-4ceb-94df-45edded0993b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prime Care 12 Priority Health","state":"WV","individuals_affected":1000,"breach_submission_date":"2026-04-20","enforcement_action_date":null,"summary":"","event_id":"45d9d179-fcc2-4ceb-94df-45edded0993b","severity_score":30},{"record_id":"ec96663c-f950-4591-9ee5-86ee05c79a6f","source_event_group_id":"db717f4e-1d59-4f93-a98f-e6c71d9bd50b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Weight Watchers North America","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI of children through an unsecured website.","event_id":"db717f4e-1d59-4f93-a98f-e6c71d9bd50b","severity_score":50},{"record_id":"c32c4f8e-82c7-4dfd-a33b-02b75eaec251","source_event_group_id":"800bb0c4-c9e2-448b-a831-880456b51bd4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Humana Health Plan of Ohio, Inc.","state":"OH","individuals_affected":328000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI through mailed explanations of benefits (EOBs).","event_id":"800bb0c4-c9e2-448b-a831-880456b51bd4","severity_score":65},{"record_id":"bbb26177-c418-4e12-9a42-fc9fd30e8e3f","source_event_group_id":"e6c730e7-6b5c-4981-9b15-81b9876a6915","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Mississippi Health Services","state":"MS","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement proper security measures, leading to impermissible PHI disclosure.","event_id":"e6c730e7-6b5c-4981-9b15-81b9876a6915","severity_score":50},{"record_id":"b6559a17-440d-47c4-b95b-d3279baa5267","source_event_group_id":"9fd08e38-ac2f-44ea-9bd1-8462a397ca91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Fairfield County","state":"CT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to PHI, even after being notified of a potential violation.","event_id":"9fd08e38-ac2f-44ea-9bd1-8462a397ca91","severity_score":65},{"record_id":"b54ae63a-2167-428b-a98e-7d1c5d509843","source_event_group_id":"ba93d094-4463-4823-89d1-902d7b594cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph Health","state":"CA","individuals_affected":31800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI due to unsecure servers, affecting 31,800 individuals.","event_id":"ba93d094-4463-4823-89d1-902d7b594cfa","severity_score":90},{"record_id":"b41252c3-593f-4510-8d59-7bcb9975dba6","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George’s County","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with copies of their medical records upon request, and then failed to cooperate with OCR's investigation.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"b2337dfa-f70e-4fe6-b9d0-be5687d54eb9","source_event_group_id":"c003213c-1318-4f7b-a6ac-cc95ac939f20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rye Psychiatric Hospital Center","state":"NY","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to protect PHI after a phishing email compromised protected health information.","event_id":"c003213c-1318-4f7b-a6ac-cc95ac939f20","severity_score":50},{"record_id":"b1a606c9-8112-4050-88f2-b60ac9b1ac07","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LA Care Health Plan","state":"CA","individuals_affected":14000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LA Care improperly disclosed the PHI of 14,000 members when it sent faxes to wrong recipients. They failed to implement appropriate safeguards. This was part of a multistate action.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":90},{"record_id":"ab539fe8-e120-4f2e-b016-5434bccec92f","source_event_group_id":"8f8e8bc2-6db3-478a-ac09-98da54b16dd9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Technology, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Arts Radiology impermissibly disposed of X-ray films and patient information in a public dumpster. They failed to implement proper disposal policies.","event_id":"8f8e8bc2-6db3-478a-ac09-98da54b16dd9","severity_score":50},{"record_id":"926da31e-f652-481f-a303-01938e71e3bd","source_event_group_id":"b8c8190c-b81f-4cc4-8370-412db265723f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cornell Prescription Pharmacy","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disposed of PHI in dumpsters, exposing patient information.","event_id":"b8c8190c-b81f-4cc4-8370-412db265723f","severity_score":65},{"record_id":"8b5f78f3-7414-473d-85ec-77c64693cf0d","source_event_group_id":"f88ec36c-d84e-4c52-88ad-bf16dbaedbfc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Central Florida College of Medicine","state":"FL","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI from insecure research data containing patient information.","event_id":"f88ec36c-d84e-4c52-88ad-bf16dbaedbfc","severity_score":65},{"record_id":"7da0f5a2-6cf5-433d-992a-d6451106dcc9","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS experienced a breach involving the theft of an unencrypted iPhone. They failed to conduct a risk analysis and implement safeguards.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"7c6850d7-020c-4862-8f02-c2b4c81aa862","source_event_group_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Group","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI to a marketing company without patient authorization.","event_id":"f0d1d9a7-031a-4aa9-8f6a-46e960e0c35f","severity_score":65},{"record_id":"72fb7b4f-7039-4ba1-b655-bbaddcacc42d","source_event_group_id":"d16b5d1c-4082-4a01-a122-842e4f0864a6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Methodist Hospital","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI to a patient's employer.","event_id":"d16b5d1c-4082-4a01-a122-842e4f0864a6","severity_score":80},{"record_id":"6d581b1a-a8a5-4a91-9fd5-3cc57c1c98b3","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Saint Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly faxed PHI to a patient's employer.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"6ad361fd-0def-455d-bc64-8720b2eed820","source_event_group_id":"13869475-9a0c-4082-ba6a-c0cb89f8c043","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Care","state":"IL","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely breach notification for unsecured PHI.","event_id":"13869475-9a0c-4082-ba6a-c0cb89f8c043","severity_score":65},{"record_id":"5bf1e920-7121-4cfa-b933-ab8b741adfb4","source_event_group_id":"42692779-0a68-4ae5-beb0-0630e18771ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Responsible for Accountable Care","state":"MA","individuals_affected":4099,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI when mailing patient appointment reminders.","event_id":"42692779-0a68-4ae5-beb0-0630e18771ad","severity_score":80},{"record_id":"5b50376f-8e08-4971-a369-b9e710f8d74e","source_event_group_id":"805dc0f6-9343-4363-b24c-fff1ae5697c0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians' Business Office","state":"PA","individuals_affected":400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Business associate left medical records unprotected and accessible to the public.","event_id":"805dc0f6-9343-4363-b24c-fff1ae5697c0","severity_score":65},{"record_id":"579b960b-8aae-470a-9bb4-e4c411a53f07","source_event_group_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lincare, Inc.","state":"FL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI of over 18,000 individuals due to data breach in mailing system.","event_id":"1e7f8358-c86a-4b63-baa2-99d4c8915df7","severity_score":65},{"record_id":"5613db5f-3d32-47f3-90e2-3ae9222c804c","source_event_group_id":"5aed74b7-077a-402f-b24b-27bfaf0bde9c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Harvard Medical School Teaching Hospital","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Harvard Medical School Teaching Hospital reported a breach of unsecured PHI. They failed to conduct an adequate risk analysis and implement safeguards.","event_id":"5aed74b7-077a-402f-b24b-27bfaf0bde9c","severity_score":90},{"record_id":"55a6d606-0087-4cd9-9f56-5951eda03047","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Services","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches affecting over 4 million individuals, due to inadequate security measures.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"4d5e8001-7e49-455b-866f-6567e4cad934","source_event_group_id":"a641b9ee-8545-437b-8df2-8fdb1d329944","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Pharmacy","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mailed prescription information for over 1,000 individuals in envelopes with clear windows, exposing PHI.","event_id":"a641b9ee-8545-437b-8df2-8fdb1d329944","severity_score":50},{"record_id":"4adc5d73-0e5d-43ec-b2f7-33d4833a1ed3","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health System","state":"IN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI to the media during a television interview.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":50},{"record_id":"4833eddf-9b4f-4033-b4af-f60e949254e9","source_event_group_id":"45974f00-41f8-4e53-a99b-c1b2039f4d50","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Vision Therapy & Rehabilitation","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to PHI.","event_id":"45974f00-41f8-4e53-a99b-c1b2039f4d50","severity_score":50},{"record_id":"1f60a16b-5cb8-4621-9f92-51172ed8991d","source_event_group_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fountain Valley Regional Hospital","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly faxed PHI to prospective employers.","event_id":"87eeac68-8ff5-421a-aa0f-256c148e9633","severity_score":80},{"record_id":"1877df9c-2ee0-4357-a532-f1cb5e565bf4","source_event_group_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diocese of Providence, Rhode Island","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Published a newsletter that impermissibly included PHI.","event_id":"7b361bea-5ea3-4eec-b905-4ff565cded6d","severity_score":50},{"record_id":"126ba003-b2d6-48aa-b9ce-dff3c0026960","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Hospital & Medical Center","state":"MA","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI of 600 individuals when unencrypted laptop was stolen.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":80},{"record_id":"0cbec9d7-19f0-4b4b-81bb-f7ee064f139d","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissibly disclosed PHI by responding to a negative online review.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"a3a7ba93-6b6f-4c9a-b405-65ab88640e21","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MEEI reported that an unencrypted laptop containing the PHI of patients and research subjects was stolen. MEEI failed to conduct an adequate risk analysis.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"f9034263-2ed5-47ac-84b1-3feb7c6c4e22","source_event_group_id":"d331252c-5949-420e-97f3-eb1ae972c5d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"LHC Group","state":"LA","individuals_affected":8644,"breach_submission_date":"2026-03-26","enforcement_action_date":null,"summary":"","event_id":"d331252c-5949-420e-97f3-eb1ae972c5d2","severity_score":50},{"record_id":"4d3d7c6d-d1ed-4ca1-a970-a4485277eb78","source_event_group_id":"1f1610e1-940a-4933-aa55-6f5d052c5b63","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VirtuOx, LLC","state":"FL","individuals_affected":621,"breach_submission_date":"2026-03-24","enforcement_action_date":null,"summary":"","event_id":"1f1610e1-940a-4933-aa55-6f5d052c5b63","severity_score":30},{"record_id":"1136e6a4-62f8-4d00-871f-410c8fa398b5","source_event_group_id":"e53a42a6-6403-463a-b11f-80a75d34f2db","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Amedisys","state":"LA","individuals_affected":9111,"breach_submission_date":"2026-03-26","enforcement_action_date":null,"summary":"","event_id":"e53a42a6-6403-463a-b11f-80a75d34f2db","severity_score":50},{"record_id":"69198260-196a-4b20-8305-a755959eeec3","source_event_group_id":"4d1e172a-b25d-44b7-a791-efa5091f6d94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Interim HealthCare of Amarillo","state":"TX","individuals_affected":666,"breach_submission_date":"2026-04-23","enforcement_action_date":null,"summary":"","event_id":"4d1e172a-b25d-44b7-a791-efa5091f6d94","severity_score":30},{"record_id":"4d6fca6a-7592-495c-a07a-056a314bf851","source_event_group_id":"4d1e172a-b25d-44b7-a791-efa5091f6d94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Interim HealthCare of Lubbock","state":"TX","individuals_affected":2071,"breach_submission_date":"2026-04-23","enforcement_action_date":null,"summary":"","event_id":"4d1e172a-b25d-44b7-a791-efa5091f6d94","severity_score":50},{"record_id":"47047e74-666a-4a67-91a4-d6d558195afd","source_event_group_id":"d2a2c044-1b9e-4be5-af1a-1ab0f12cb3dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Liberty Bankers Life Ins. Co.","state":"TX","individuals_affected":20202,"breach_submission_date":"2026-04-22","enforcement_action_date":null,"summary":"","event_id":"d2a2c044-1b9e-4be5-af1a-1ab0f12cb3dc","severity_score":70},{"record_id":"17931f5c-3d9c-4648-8683-bc935cafe059","source_event_group_id":"9fa27fdc-ac1d-4903-b387-8ceb8eef402a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Continental Casualty Company (CNA)","state":"IL","individuals_affected":6086,"breach_submission_date":"2026-03-23","enforcement_action_date":null,"summary":"","event_id":"9fa27fdc-ac1d-4903-b387-8ceb8eef402a","severity_score":50},{"record_id":"721394e9-353c-4091-bb69-a6eccd5b3460","source_event_group_id":"3d54b7ee-7bf4-4bf9-8f7d-e562836690c2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tri-Cities Gastroenterology","state":"TN","individuals_affected":67115,"breach_submission_date":"2026-04-29","enforcement_action_date":null,"summary":"","event_id":"3d54b7ee-7bf4-4bf9-8f7d-e562836690c2","severity_score":70},{"record_id":"e68a9d62-293c-4fdb-9fb2-69710a559803","source_event_group_id":"a01b05d5-dc33-457a-ae0f-92ba7f906b31","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwoods Surgery Center","state":"MN","individuals_affected":5385,"breach_submission_date":"2026-04-29","enforcement_action_date":null,"summary":"","event_id":"a01b05d5-dc33-457a-ae0f-92ba7f906b31","severity_score":50},{"record_id":"e75a2c81-a2b4-49d6-bbea-5ed2f5f38cca","source_event_group_id":"76709c4b-ff84-4ab7-95ef-5dfb7c0a0807","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ouster, Inc.","state":"CA","individuals_affected":574,"breach_submission_date":"2026-04-30","enforcement_action_date":null,"summary":"","event_id":"76709c4b-ff84-4ab7-95ef-5dfb7c0a0807","severity_score":30},{"record_id":"e6bd00d4-ca18-4053-a291-ac436f4d579d","source_event_group_id":"77f3178c-6536-402b-97be-1b70b67bae7f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mt. Spokane Pediatrics","state":"WA","individuals_affected":32021,"breach_submission_date":"2026-04-30","enforcement_action_date":null,"summary":"","event_id":"77f3178c-6536-402b-97be-1b70b67bae7f","severity_score":70},{"record_id":"28427cc7-431d-4a1b-8239-0caa3af36d0f","source_event_group_id":"70069ada-b991-4cfc-8287-245b5eabd4af","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Michigan/Michigan Medicine","state":"MI","individuals_affected":551,"breach_submission_date":"2026-05-01","enforcement_action_date":null,"summary":"","event_id":"70069ada-b991-4cfc-8287-245b5eabd4af","severity_score":30},{"record_id":"ee340dd2-69e3-4e36-9e77-33b5cf9d8d80","source_event_group_id":"350b032c-ccd7-484f-8d98-01becc8e8baa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DFW Family Hospital","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DFW Family Hospital impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found DFW Family Hospital failed to provide patients with timely access to their medical records.","event_id":"350b032c-ccd7-484f-8d98-01becc8e8baa","severity_score":50},{"record_id":"b430f9b3-8a18-4ec3-be4f-67d0dea133df","source_event_group_id":"dc69e692-4091-4500-950b-b46ae091e3d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southeastern Retina Associates","state":"TN","individuals_affected":70000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southeastern Retina Associates impermissibly disclosed the PHI of 70,000 individuals due to an impermissible disclosure to a third party. The OCR investigation found Southeastern Retina Associates failed to execute a business associate agreement.","event_id":"dc69e692-4091-4500-950b-b46ae091e3d0","severity_score":50},{"record_id":"31335766-71f8-420a-8f69-f75098e9b5d6","source_event_group_id":"d6ef1749-b627-4462-bf91-33df700debc4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"American Medical Collection Agency (AMCA)","state":"NY","individuals_affected":7000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"American Medical Collection Agency impermissibly disclosed the PHI of 7 million individuals in a massive data breach. The OCR investigation found AMCA failed to conduct an accurate and thorough risk analysis and implement security measures.","event_id":"d6ef1749-b627-4462-bf91-33df700debc4","severity_score":55},{"record_id":"05ede6d1-ee55-4ac9-9d16-0d865b3217f4","source_event_group_id":"0708d181-46e5-4d3c-a26d-43aacd261358","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brighton Dental","state":"UT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brighton Dental impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found Brighton Dental failed to provide patients with timely access to their medical records.","event_id":"0708d181-46e5-4d3c-a26d-43aacd261358","severity_score":50},{"record_id":"ca74c8c1-1f24-47d6-bff6-f765cba88dea","source_event_group_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester County Health Care Corporation","state":"NY","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester County Health Care Corporation impermissibly disclosed the PHI of 500 individuals when two employees impermissibly accessed patient information. The OCR investigation found WCHCC failed to implement HIPAA policies and procedures and access controls.","event_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","severity_score":90},{"record_id":"c55121a3-6132-406d-b853-6e8b2b27b879","source_event_group_id":"89db1e49-9f72-400e-aac9-8446b7494d90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Settlement One (Small)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Settlement One (Small) impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found Settlement One (Small) failed to provide patients with timely access to their medical records.","event_id":"89db1e49-9f72-400e-aac9-8446b7494d90","severity_score":50},{"record_id":"b428af71-e5e7-4ee6-944a-16ba08fdb656","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NewYork-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NewYork-Presbyterian Hospital impermissibly disclosed the electronic protected health information of 6,800 patients when a computer server containing protected health information became accessible on the internet. OCR’s investigation found that neither entity had conducted an adequate risk analysis to address the risks to the electronic protected health information.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"b02b7f5e-f73e-4756-8ba3-80fe86045959","source_event_group_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Cincinnati Medical Center","state":"OH","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Cincinnati Medical Center impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found University of Cincinnati Medical Center failed to provide patients with timely access to their medical records.","event_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","severity_score":50},{"record_id":"aab9772e-6660-40d3-bcee-aeedf747716b","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth’s Medical Center","state":"MA","individuals_affected":4942,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center impermissibly disclosed the protected health information of 4,942 individuals when an unencrypted laptop containing protected health information was stolen. OCR’s investigation revealed that, while SEMC had identified encryption as a necessary safeguard, it was not implemented prior to the breach.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"91f5440a-b1f7-415a-b54b-13637d9e56c6","source_event_group_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rite Aid Corporation","state":"PA","individuals_affected":3950,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rite Aid impermissibly disposed of protected health information in dumpsters that were not secure and accessible to the public at various locations. This was a joint enforcement action with the Federal Trade Commission.","event_id":"36ef58b4-09ff-45b5-9d48-ef73cd0727e6","severity_score":80},{"record_id":"61e1d183-d9e1-46f1-befc-533228943467","source_event_group_id":"9d01b210-ffe8-47f3-bf2e-19180d44894f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wichita State University","state":"KS","individuals_affected":800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wichita State University impermissibly disclosed the PHI of 800 individuals after a server containing ePHI was left unsecured and impermissibly accessed. The OCR investigation found Wichita State University failed to conduct an accurate and thorough enterprise-wide risk analysis.","event_id":"9d01b210-ffe8-47f3-bf2e-19180d44894f","severity_score":65},{"record_id":"61dfc994-fe9b-45a0-aebf-6ee1107cf19f","source_event_group_id":"2248a9d7-08d6-4f98-8386-0517e1201981","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ketubah Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ketubah Medical Center impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found Ketubah Medical Center failed to provide patients with timely access to their medical records.","event_id":"2248a9d7-08d6-4f98-8386-0517e1201981","severity_score":50},{"record_id":"51949913-1984-4dd8-940d-0813aff917fe","source_event_group_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Dermatology","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Dermatology impermissibly disclosed the PHI of a patient after posting patient information in response to an online review. The OCR investigation found Texas Dermatology failed to implement policies and procedures to protect PHI.","event_id":"6055f2c2-7afe-4a92-98d7-b95084e5082f","severity_score":50},{"record_id":"411ce050-b6d5-4fc8-b946-cb505fedfbdc","source_event_group_id":"5b7425a5-561c-4079-b59a-b6c93302636e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of Greater New York, Inc.","state":"NY","individuals_affected":2200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO impermissibly disclosed the protected health information of 2,200 individuals when it disposed of 1,600 patient pathology and laboratory results and 700 related manifests without following proper disposal procedures, leaving them accessible by the public. OCR found MSO failed to implement procedures for the final disposition of electronic protected health information and had not conducted an accurate and thorough risk analysis.","event_id":"5b7425a5-561c-4079-b59a-b6c93302636e","severity_score":65},{"record_id":"30bcba19-9c50-486a-b3e9-8bf434354b89","source_event_group_id":"6a8b06d2-3d2f-4bcd-8d02-461091f2758d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Center Endoscopy","state":"MD","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Center Endoscopy impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found Medical Center Endoscopy failed to provide patients with timely access to their medical records.","event_id":"6a8b06d2-3d2f-4bcd-8d02-461091f2758d","severity_score":50},{"record_id":"2db709a9-acf2-495d-8a60-96067f118d60","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed the protected health information of 192 patients when a surgical patient’s protected health information was lost while in the possession of a MGH-contracted richshaw driver. OCR’s investigation also found MGH failed to implement appropriate safeguards.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"1ac5d9ab-597f-41cb-b740-c7922768442f","source_event_group_id":"24bbd4b6-c003-4fa5-a1c0-5f0ca2569281","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King's Daughters Medical Center","state":"KY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"King's Daughters Medical Center impermissibly disclosed the PHI of a patient after impermissibly disclosing PHI to a third party. The OCR investigation found King's Daughters Medical Center failed to provide patients with timely access to their medical records.","event_id":"24bbd4b6-c003-4fa5-a1c0-5f0ca2569281","severity_score":65},{"record_id":"161f7e50-4025-4453-826f-c8b93d317ef6","source_event_group_id":"be2e9cd3-d7dc-4891-bffc-79267829af01","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Transforming Data, Inc. (dba InSync Healthcare Solutions)","state":"FL","individuals_affected":18187,"breach_submission_date":null,"enforcement_action_date":null,"summary":"InSync Healthcare Solutions impermissibly disclosed the PHI of 18,187 individuals due to a lack of a business associate agreement. The OCR investigation found that InSync Healthcare Solutions was operating as an EHR provider without a BAA.","event_id":"be2e9cd3-d7dc-4891-bffc-79267829af01","severity_score":65},{"record_id":"14190cf1-6c9a-427b-b507-07316fd18a60","source_event_group_id":"52620e69-b411-4684-9f43-c243fe9a42fa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"APIBCO, Inc.","state":"OH","individuals_affected":3950,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Discount Drug Mart impermissibly disposed of protected health information in dumpsters that were not secure and accessible to the public at various locations. This was a joint enforcement action with the Federal Trade Commission.","event_id":"52620e69-b411-4684-9f43-c243fe9a42fa","severity_score":65},{"record_id":"11c06e23-7b02-4719-b72c-91485ba9e8eb","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health impermissibly disclosed the protected health information of 41 patients and failed to cooperate with OCR's investigation, which spanned over two years.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"0c6c796f-250a-4f6b-8435-61f0ab53c91a","source_event_group_id":"ec720041-fde3-48e8-b892-0903352f472f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University impermissibly disclosed the electronic protected health information of 6,800 patients when a computer server containing protected health information became accessible on the internet. OCR’s investigation found that neither entity had conducted an adequate risk analysis to address the risks to the electronic protected health information.","event_id":"ec720041-fde3-48e8-b892-0903352f472f","severity_score":90},{"record_id":"3aee37c3-404a-4b4d-aa22-064b614ee452","source_event_group_id":"ec132dde-a8e0-432a-8eb2-f09447598be7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Securian Financial","state":"MN","individuals_affected":500,"breach_submission_date":"2026-03-25","enforcement_action_date":null,"summary":"","event_id":"ec132dde-a8e0-432a-8eb2-f09447598be7","severity_score":30},{"record_id":"c02fa090-c784-4215-9c0b-2f843d5de0ac","source_event_group_id":"59d48a79-ec74-4f6e-bb15-ef62d5431be7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fenwick & West Group Health Plan","state":"CA","individuals_affected":1740,"breach_submission_date":"2026-03-24","enforcement_action_date":null,"summary":"","event_id":"59d48a79-ec74-4f6e-bb15-ef62d5431be7","severity_score":50},{"record_id":"9d39a2e9-fac2-4962-92bf-d238f1fc28ac","source_event_group_id":"8d71a368-9faa-4425-a926-0ef2d43315bc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Ohio Urology Group","state":"OH","individuals_affected":4234,"breach_submission_date":"2026-03-12","enforcement_action_date":null,"summary":"","event_id":"8d71a368-9faa-4425-a926-0ef2d43315bc","severity_score":50},{"record_id":"4fb8c9b6-43de-4fdc-8b3f-fca42971a45c","source_event_group_id":"89e73a71-66a6-4be1-94f5-e6c084ae3b09","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Woodfords Family Services","state":"ME","individuals_affected":38061,"breach_submission_date":"2026-03-27","enforcement_action_date":null,"summary":"","event_id":"89e73a71-66a6-4be1-94f5-e6c084ae3b09","severity_score":70},{"record_id":"e6173790-d568-4e0b-8ae5-4fb345d81373","source_event_group_id":"ce834c35-5059-465e-8d79-b1b0dfe423a4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Women's Healthcare","state":"TX","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Women’s Healthcare impermissibly disclosed the ePHI of 500 individuals when a business associate impermissibly disclosed patient information.","event_id":"ce834c35-5059-465e-8d79-b1b0dfe423a4","severity_score":50},{"record_id":"e24cccca-67a6-4400-936a-37ac9f5ed179","source_event_group_id":"1f2df6a2-4e3f-42d5-939c-adfa4271599f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas at Austin-Dell Medical School","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Texas at Austin-Dell Medical School impermissibly disclosed the ePHI of 1,000 individuals when a business associate impermissibly disclosed patient information.","event_id":"1f2df6a2-4e3f-42d5-939c-adfa4271599f","severity_score":50},{"record_id":"cb354f80-3cf0-4022-92d4-0324961c1afb","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR clarified that another settlement with CVS involved additional states and amounted to the same total settlement for similar violations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"bd26c8e5-be0d-4d33-b196-23a33b39f931","source_event_group_id":"e3cb123e-8b68-4136-b724-1fce6fc41516","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"HIPAA EMR, LLC","state":"CA","individuals_affected":400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HIPAA EMR, LLC (a business associate) impermissibly disclosed the ePHI of 400 individuals when a server containing patient information was accessible to unauthorized users.","event_id":"e3cb123e-8b68-4136-b724-1fce6fc41516","severity_score":50},{"record_id":"b8dc26f7-04a6-4fbf-8d88-a52c2ed43328","source_event_group_id":"d811ac70-8c26-4f42-9cbb-6d1927b20a90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of Northern New York","state":"NY","individuals_affected":800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hospice of Northern New York impermissibly disclosed the ePHI of 800 individuals due to the loss of an unencrypted laptop.","event_id":"d811ac70-8c26-4f42-9cbb-6d1927b20a90","severity_score":65},{"record_id":"b78850f1-24a8-43f8-9889-afe744b1fe5f","source_event_group_id":"9f32062e-e738-4407-94b0-37ebe5ba88d1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor College of Medicine","state":"TX","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor College of Medicine impermissibly disclosed the ePHI of 500 individuals due to the loss of an unencrypted laptop.","event_id":"9f32062e-e738-4407-94b0-37ebe5ba88d1","severity_score":50},{"record_id":"b6bdf5f9-b6dd-46cb-a218-1654f60bd1d5","source_event_group_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester Medical Center","state":"NY","individuals_affected":700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester Medical Center impermissibly disclosed the PHI of 700 individuals by sending patient information to inappropriate recipients.","event_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","severity_score":90},{"record_id":"b68ba58c-3d77-4ba9-8eb7-67440371995e","source_event_group_id":"291ef640-132b-4366-aa7b-b1b203e2335e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dominion National","state":"VA","individuals_affected":2900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dominion National, a business associate of many health plans and other covered entities, impermissibly disclosed the ePHI of 2.9 million individuals.","event_id":"291ef640-132b-4366-aa7b-b1b203e2335e","severity_score":65},{"record_id":"b65ac83f-2581-455a-97cb-a3d276a395be","source_event_group_id":"d4cf8a7c-c28b-416e-8012-e7a44f81c7f2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Gentiva Health Services, Inc.","state":"GA","individuals_affected":78000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Gentiva Health Services settled after a breach involving several unencrypted backup tapes containing protected health information.","event_id":"d4cf8a7c-c28b-416e-8012-e7a44f81c7f2","severity_score":90},{"record_id":"b463c26a-7350-42f5-a071-dffb6ffbd193","source_event_group_id":"54151524-c488-4725-8ea2-f356a1787345","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"AHMC Healthcare, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"AHMC Healthcare settled after a complaint alleged failure to provide a patient with access to their medical records.","event_id":"54151524-c488-4725-8ea2-f356a1787345","severity_score":50},{"record_id":"b3c5d094-80d8-4604-87cc-e8c21e1d2392","source_event_group_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Prince George's County","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet failed to provide patients with access to their medical records in violation of HIPAA. They also failed to cooperate with OCR's investigation.","event_id":"0f4ef64b-8164-491b-900a-4a2a7fd64d18","severity_score":90},{"record_id":"9b72a2a3-1d7d-4bb4-9fed-c2a0a713e334","source_event_group_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Tech University Health Sciences Center El Paso","state":"TX","individuals_affected":1200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Tech University Health Sciences Center El Paso impermissibly disclosed the ePHI of 1,200 individuals due to the loss of an unencrypted USB drive.","event_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","severity_score":65},{"record_id":"99754530-c193-41b8-a8b9-da1e06653e42","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health Care","state":"UT","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Utah Health Care impermissibly disclosed the ePHI of 500 individuals when a business associate impermissibly disclosed patient information.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":50},{"record_id":"9512bca7-48f5-418e-8456-6adfd4979516","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery, P.C.","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phoenix Cardiac Surgery settled after impermissibly disclosing protected health information on its public website.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"64ffb57b-5d17-4097-8ca9-e0503cda27f9","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County settled after an unencrypted laptop was stolen from an employee's car, containing protected health information.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"5f09738b-781f-4f0b-90d3-12fbcbb3f474","source_event_group_id":"930d093a-9e17-44f7-b68d-444af30173cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Idaho Correctional Institution","state":"ID","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Idaho Correctional Institution impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"930d093a-9e17-44f7-b68d-444af30173cf","severity_score":50},{"record_id":"5cdda849-3c0c-4ca5-9adc-11cc71c358cf","source_event_group_id":"32005b20-72f9-4c9e-a3bd-0d00ec1fcd64","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Medical Services","state":"GA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Emergency Medical Services impermissibly disclosed the PHI of 500 individuals when an employee accessed patient information without authorization.","event_id":"32005b20-72f9-4c9e-a3bd-0d00ec1fcd64","severity_score":50},{"record_id":"54c1706a-57ce-4173-932c-3f460d8f47b7","source_event_group_id":"f801efb3-b2d8-4635-af17-287541bf4a0a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho Department of Health and Welfare","state":"ID","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Idaho Department of Health and Welfare impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"f801efb3-b2d8-4635-af17-287541bf4a0a","severity_score":50},{"record_id":"48e440f2-f8b6-4032-b3e8-52147d1ab0fa","source_event_group_id":"4de69bef-48fe-40d3-a892-087b211b69d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Return to Care, LLC","state":"CA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Return to Care, LLC impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"4de69bef-48fe-40d3-a892-087b211b69d0","severity_score":50},{"record_id":"416a692c-8290-4324-b18d-a41b2513354c","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR's report indicated a coordinated enforcement effort involving CVS across numerous states for similar violations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"3f3ac77d-6ff2-44bc-99bd-7d5f41971a1c","source_event_group_id":"1b75ea20-d330-44ec-976b-33a32ba305d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"VisionQuest Eyecare","state":"IN","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"VisionQuest Eyecare impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"1b75ea20-d330-44ec-976b-33a32ba305d7","severity_score":65},{"record_id":"3156c314-6a67-4991-818a-a865aed60577","source_event_group_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Children's Hospital, Inc.","state":"FL","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Children’s Hospital, Inc. impermissibly disclosed the ePHI of 500 individuals due to the loss of an unencrypted laptop.","event_id":"f8328a25-9425-4ac3-9b20-c9e7b455a712","severity_score":50},{"record_id":"2f343c49-fa69-40a3-b290-69272d49ffb8","source_event_group_id":"e0f561d9-1014-4e56-b374-adb764512181","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Alabama, P.C.","state":"AL","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathology Group of Alabama, P.C. impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"e0f561d9-1014-4e56-b374-adb764512181","severity_score":50},{"record_id":"0e5d3a68-4825-45bd-a1dd-73b5a823b054","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR mentioned additional enforcement related to CVS for similar improper disposal practices across multiple states.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"0a481897-3642-41d4-b699-f8475ebc8c01","source_event_group_id":"636a07e7-5d1a-43e5-b209-8393ba608de6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Florida Health","state":"FL","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Florida Health impermissibly disclosed the ePHI of 500 individuals when a business associate impermissibly disclosed patient information.","event_id":"636a07e7-5d1a-43e5-b209-8393ba608de6","severity_score":50},{"record_id":"0967fa48-c239-4fbb-bc6e-2e0f7ac330b0","source_event_group_id":"5ab84341-7592-4e38-9a24-98902331845e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Health Care Management, LLC","state":"LA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Health Care Management, LLC impermissibly disclosed the PHI of 500 individuals when patient information was improperly disclosed on the internet.","event_id":"5ab84341-7592-4e38-9a24-98902331845e","severity_score":50},{"record_id":"071746e6-148b-4387-93ba-68e182c09b5d","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS entered a second resolution agreement with OCR to resolve similar allegations of improper disposal of protected health information.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"0118f376-7124-49ab-9ae6-7f8ee9b1adf3","source_event_group_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Dentistry, P.C.","state":"CA","individuals_affected":1200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Dentistry, P.C. impermissibly disclosed the ePHI of 1,200 individuals when patient information was improperly disclosed on the internet.","event_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","severity_score":50},{"record_id":"91049cf4-044e-41af-ad86-8d667320016e","source_event_group_id":"0c310606-3b91-4910-8d1d-b5448df882a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Records Associates","state":"MA","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Records Associates paid $180,000 to resolve potential HIPAA violations arising from a delay in providing patients with timely access to their medical records. The OCR investigation found multiple Right of Access violations.","event_id":"0c310606-3b91-4910-8d1d-b5448df882a1","severity_score":65},{"record_id":"84673523-0522-4a97-a328-930cb6b700b0","source_event_group_id":"7f5b3b69-e736-4c9d-96e6-c5f8dacfe5fd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Mental Health Care","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Mental Health Care paid $100,000 to OCR to settle potential HIPAA violations related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"7f5b3b69-e736-4c9d-96e6-c5f8dacfe5fd","severity_score":50},{"record_id":"2464c781-8c37-4e06-baca-e9dda35719c3","source_event_group_id":"f6fb682e-92d4-465f-b922-13bfaf19f235","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Grimes' medical office (Practice)","state":"IL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Grimes' medical office (Practice) paid $100,000 to settle potential HIPAA violations after a breach involving unsecured patient records. The OCR investigation found a failure to conduct a proper risk analysis and implement safeguards.","event_id":"f6fb682e-92d4-465f-b922-13bfaf19f235","severity_score":50},{"record_id":"0be6192d-3e77-487e-afd5-79367b3a4ee7","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sherman Hospital (Advocate Health Care Network)","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sherman Hospital (Advocate Health Care Network) paid $90,000 to OCR to settle a potential HIPAA violation related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":50},{"record_id":"053b73c3-5dfc-420f-9335-bead236f84c6","source_event_group_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of New Mexico Hospital","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of New Mexico Hospital paid $100,000 to OCR to settle potential HIPAA violations related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","severity_score":50},{"record_id":"fc16d091-325c-4d3f-b235-8e4f2f259ce8","source_event_group_id":"53a0bae5-f655-4138-a711-b3c266f8ebb8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Tech University Health Sciences Center","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Tech University Health Sciences Center paid $215,000 to OCR to settle potential HIPAA violations arising from a delay in providing a patient with timely access to their medical records.","event_id":"53a0bae5-f655-4138-a711-b3c266f8ebb8","severity_score":65},{"record_id":"f5b6c21d-797f-40dc-b12a-e6706df1d433","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Massachusetts General Hospital)","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed PHI of 192 patients due to a lost unencrypted backup tape.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"f33533ca-465a-4d54-a188-3c737981eeeb","source_event_group_id":"b3194d35-a986-46f5-9f02-7745d9b7a29c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asturia","state":"FL","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of Asturia paid $125,000 to settle potential HIPAA violations after an online calendar impermissibly disclosed protected health information. The OCR investigation found a failure to implement appropriate technical safeguards.","event_id":"b3194d35-a986-46f5-9f02-7745d9b7a29c","severity_score":65},{"record_id":"ec12e8bb-3d1c-46c2-8238-49d19f78ef78","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System failed to safeguard ePHI, resulting in unauthorized access to patient records by employees and impermissible disclosures.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":90},{"record_id":"e1a7c303-694b-4ee6-aad3-55bece70c3b8","source_event_group_id":"f74529b9-0e24-4be2-a47d-2b57cea7176d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Revere Psychiatric Associates","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Revere Psychiatric Associates paid $10,000 to OCR to settle a potential HIPAA violation related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"f74529b9-0e24-4be2-a47d-2b57cea7176d","severity_score":50},{"record_id":"dfc183d3-036f-4629-9ecf-dc1788dc3dbf","source_event_group_id":"26603acd-008d-4c07-a184-3f5d2a297a88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho State University (ISU)","state":"ID","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ISU impermissibly disclosed ePHI of 17,500 patients due to a breach involving unencrypted server hard drives.","event_id":"26603acd-008d-4c07-a184-3f5d2a297a88","severity_score":65},{"record_id":"de61e4f0-c171-45ac-b471-e3d945b2840e","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de la Raza","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de la Raza paid $250,000 to settle potential HIPAA violations after a breach involving unsecured patient records. The OCR investigation revealed a failure to implement appropriate physical and administrative safeguards.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":65},{"record_id":"dd14656d-827d-42ac-9b9c-07f2e053550f","source_event_group_id":"56cb801f-025e-47e9-bfb9-b5845ac5afb7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson & Coker (Business Associate)","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson & Coker (Business Associate) paid $25,000 to OCR to settle potential HIPAA violations related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"56cb801f-025e-47e9-bfb9-b5845ac5afb7","severity_score":50},{"record_id":"d901c1bb-b75f-411e-baf4-a082a76223e2","source_event_group_id":"403e7ec0-dcfa-4d04-8591-e59ae58d548c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foresight Mental Health","state":"CA","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foresight Mental Health paid $3.5 million to OCR related to a breach of unsecured protected health information. The investigation found failures to implement security measures, conduct a risk analysis, and manage risks.","event_id":"403e7ec0-dcfa-4d04-8591-e59ae58d548c","severity_score":90},{"record_id":"d3f26e00-b050-43a7-9ac0-2529a787ca41","source_event_group_id":"a8d35c4b-f8f5-4a86-b835-a31ecf05b8b7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Central Surgical Center LLP","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Central Surgical Center LLP paid $38,000 to OCR for potential HIPAA violations as a result of impermissible disclosure of protected health information. The investigation found a delay in providing a patient with a copy of their medical record.","event_id":"a8d35c4b-f8f5-4a86-b835-a31ecf05b8b7","severity_score":50},{"record_id":"a65c4a38-d417-4a1a-87d3-dcc71b08b907","source_event_group_id":"54889e2b-e4f3-403e-a839-e5caa206256f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Walgreen Co.","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Walgreen Co. impermissibly disposed of unsecured protected health information (PHI) in dumpsters, violating the Privacy Rule's disposal requirements.","event_id":"54889e2b-e4f3-403e-a839-e5caa206256f","severity_score":65},{"record_id":"a41ec465-74a5-4692-9221-91ec68fbf2fd","source_event_group_id":"96cdcd43-5318-41b3-b037-d58929bb756b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LTC Partners","state":"NH","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LTC Partners paid $650,000 to settle potential HIPAA violations after an impermissible disclosure of protected health information on its website. The OCR investigation found a failure to conduct proper risk analysis and implement security measures.","event_id":"96cdcd43-5318-41b3-b037-d58929bb756b","severity_score":80},{"record_id":"a24e8d91-bacc-4800-bc2c-a89ca0918e71","source_event_group_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County, Washington","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County impermissibly disclosed the ePHI of over 1,500 patients due to a misconfigured server.","event_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","severity_score":65},{"record_id":"91f7fcf8-844d-4820-86ed-414f5fcc158a","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco (UCSF) Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF Medical Center impermissibly disclosed PHI due to the theft of an unencrypted USB drive containing patient data.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":50},{"record_id":"90b71cf0-107a-4ab2-8be4-05914085b0ad","source_event_group_id":"119bb673-32b4-4d92-a3d0-8c25d477f6d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services of Colorado, Inc. (Colorado Retina Associates P.C.)","state":"CO","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Management Services of Colorado impermissibly disclosed PHI when it sent billing statements to the wrong addresses for 1,100 patients.","event_id":"119bb673-32b4-4d92-a3d0-8c25d477f6d2","severity_score":50},{"record_id":"879d2efa-b39e-40c5-b27a-15613173971e","source_event_group_id":"3fd521fd-75d8-474d-92af-5e8f228f7805","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Shore Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Shore Hospital impermissibly disclosed PHI of 800 patients to a third-party vendor without a business associate agreement.","event_id":"3fd521fd-75d8-474d-92af-5e8f228f7805","severity_score":90},{"record_id":"82e82602-2432-40f2-bd47-ae7ef6239527","source_event_group_id":"c1f10dd0-58d4-4d3e-9e5c-780ef31dcc7a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Healthcare, LLC d/b/a LabMD, Inc.","state":"GA","individuals_affected":9300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LabMD impermissibly disclosed PHI of 9,300 patients when an insurance company discovered a LabMD document on a peer-to-peer file-sharing network. OCR closed the complaint with a finding that there was insufficient evidence of a HIPAA violation. The FTC subsequently pursued enforcement.","event_id":"c1f10dd0-58d4-4d3e-9e5c-780ef31dcc7a","severity_score":55},{"record_id":"7e47f69d-8dd7-44da-81d1-50b93dec4339","source_event_group_id":"77a75c52-d755-44a3-a9f3-6692ba70e73a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UnityPoint Health","state":"IA","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UnityPoint Health paid $1.65 million to settle potential HIPAA violations after a series of phishing incidents compromised employee email accounts. The OCR investigation found a failure to conduct proper risk analysis and implement security measures.","event_id":"77a75c52-d755-44a3-a9f3-6692ba70e73a","severity_score":90},{"record_id":"760ec72b-3f8f-4c87-af2e-67a5a9ed4607","source_event_group_id":"b641f882-a6ee-424a-a2b0-e9b555b3ccfd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Systema Software","state":"CA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Systema Software paid $2.25 million to resolve potential HIPAA violations arising from a security incident that exposed protected health information. The investigation found a failure to implement security safeguards, conduct a risk analysis, and manage risks.","event_id":"b641f882-a6ee-424a-a2b0-e9b555b3ccfd","severity_score":90},{"record_id":"73b0359b-cebe-4c06-bd2d-83a37db5df21","source_event_group_id":"3950c2ce-1d4e-4de9-86eb-a020b915ecc1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront HMA Medical Center (formerly)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront HMA Medical Center (formerly) paid $85,000 to resolve potential HIPAA violations arising from a delay in providing a patient with timely access to their medical records. The OCR investigation found a Right of Access violation.","event_id":"3950c2ce-1d4e-4de9-86eb-a020b915ecc1","severity_score":50},{"record_id":"6af97637-a682-406e-b94e-b3a399c2812b","source_event_group_id":"eee8c743-c76a-4328-99d6-838a07da4da5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ERISA Covered Entity in Texas","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Resolution agreement with an ERISA covered entity due to impermissible disclosure of PHI. This was the first settlement in which OCR directly addressed HIPAA compliance by a health plan that is a group health plan under ERISA.","event_id":"eee8c743-c76a-4328-99d6-838a07da4da5","severity_score":65},{"record_id":"62d1c889-0aea-41d2-aa87-0786203f00c3","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System","state":"IN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health System impermissibly discarded 71 cardboard boxes containing thousands of patient medical records in the driveway of a physician's home.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"55cd9e6f-40b3-4c49-804d-2ae205eddbe6","source_event_group_id":"b9a3fbae-f874-43ad-8179-89ddc0599897","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U.S. Patel, D.O.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U.S. Patel, D.O. paid $160,000 to settle potential HIPAA violations after impermissibly disclosing protected health information to a local news reporter. The OCR investigation found a violation of patient privacy rights.","event_id":"b9a3fbae-f874-43ad-8179-89ddc0599897","severity_score":65},{"record_id":"55880738-e9cb-4bcd-88a1-c7820aa4b054","source_event_group_id":"15acc516-5035-4238-8b6e-c0eac70e7ca7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Iowa Mental Health Center","state":"IA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Iowa Mental Health Center paid $70,000 to OCR to settle a potential HIPAA violation related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"15acc516-5035-4238-8b6e-c0eac70e7ca7","severity_score":50},{"record_id":"54e2c4e3-b6f6-4e73-8fab-25fbbc5467a8","source_event_group_id":"acd0e4d9-01b8-46e6-aeab-c1bee7906d63","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jenny Craig, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jenny Craig impermissibly disclosed PHI of clients to a marketing vendor without authorization.","event_id":"acd0e4d9-01b8-46e6-aeab-c1bee7906d63","severity_score":90},{"record_id":"504f6f33-d337-4626-8dfe-3ad09acf239d","source_event_group_id":"aaf50ba7-2491-4b52-ac20-4c6191ee79c6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MetroPlus Health Plan","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MetroPlus Health Plan paid $1.5 million to settle potential HIPAA violations after a mailing error exposed protected health information. The OCR investigation identified a failure to implement appropriate safeguards for protected health information.","event_id":"aaf50ba7-2491-4b52-ac20-4c6191ee79c6","severity_score":90},{"record_id":"3a325229-22a9-4554-af0c-2be9a0da7f61","source_event_group_id":"b72a734d-7780-404d-9f7d-c211c89a5f6c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boca Raton Regional Hospital","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boca Raton Regional Hospital impermissibly disclosed ePHI of 7,723 patients on the internet due to a misconfigured server.","event_id":"b72a734d-7780-404d-9f7d-c211c89a5f6c","severity_score":90},{"record_id":"37748750-4c49-40df-987b-a29dc8799555","source_event_group_id":"06e207c4-f648-49ff-acce-cbee8a12948e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"DecisionOne Dental Partners","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DecisionOne Dental Partners paid $100,000 to OCR to settle potential HIPAA violations arising from a delay in providing a patient with access to their medical records, violating the Right of Access standard.","event_id":"06e207c4-f648-49ff-acce-cbee8a12948e","severity_score":50},{"record_id":"2d759146-25c1-473e-b83f-1c66c2ceb272","source_event_group_id":"32dd8733-4892-45a9-8668-f966f0e63f53","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wolverine Radiology and Imaging","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wolverine Radiology and Imaging paid $20,000 to OCR to settle a potential HIPAA violation related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"32dd8733-4892-45a9-8668-f966f0e63f53","severity_score":50},{"record_id":"20749c10-4640-4e43-a0c6-e5ac57dc80c2","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan","state":"NY","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity Health Plan paid $1.215 million to settle potential HIPAA violations after unsecured protected health information was exposed in a phishing attack. The OCR investigation found a failure to conduct a comprehensive risk analysis and implement security measures.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"1f3fa521-9b01-4082-be96-bd8511d068e7","source_event_group_id":"59941114-2151-4727-9101-35dee4a78493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University Irving Medical Center","state":"NY","individuals_affected":60000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University Irving Medical Center paid $4.8 million to settle potential HIPAA violations after a breach involving unsecured ePHI. The OCR investigation found a lack of comprehensive risk analysis and security measures.","event_id":"59941114-2151-4727-9101-35dee4a78493","severity_score":90},{"record_id":"1ca6d0de-2593-47e1-b140-3e62dbb604e7","source_event_group_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Dental Practice (Small Practice)","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Connecticut Dental Practice (Small Practice) paid $25,000 to OCR to settle potential HIPAA violations related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","severity_score":50},{"record_id":"1aff1d1e-7c49-4147-b4c3-6c699e73adf4","source_event_group_id":"b21c66fb-9c3b-43ce-81bd-94934b893f07","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management Centre","state":"PR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors' Management Centre paid $100,000 to OCR to settle a potential HIPAA violation related to the Right of Access. The investigation found the entity failed to provide a patient with timely access to their medical records.","event_id":"b21c66fb-9c3b-43ce-81bd-94934b893f07","severity_score":50},{"record_id":"1932bbb8-7e7a-4c83-a9b6-76ab1a2455f3","source_event_group_id":"b0faa8c0-71e2-4e60-8a8c-f65f5b2e083f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Covered Entity in the Midwest","state":"IA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Resolution agreement with a Midwest-based covered entity for disclosures associated with a major breach.","event_id":"b0faa8c0-71e2-4e60-8a8c-f65f5b2e083f","severity_score":65},{"record_id":"0b2ceef0-ab2c-4765-bd84-ea52150a58dd","source_event_group_id":"766aca54-085c-41c8-a057-7cfed13c5f19","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Foley Grill","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Foley Grill impermissibly disclosed PHI in a complaint filed with a state licensing board. The settlement amount was not publicly disclosed.","event_id":"766aca54-085c-41c8-a057-7cfed13c5f19","severity_score":55},{"record_id":"0751db37-ceff-44f5-acf1-9e2e8c6432fb","source_event_group_id":"ea9135f2-f3b7-418f-b7e6-345111b03c13","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group P.C. (Parkview Health)","state":"IN","individuals_affected":6000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group P.C. (Parkview Health) paid $500,000 to resolve potential HIPAA violations arising from unsecured protected health information accessible through a third-party vendor. The OCR investigation found a failure to have a business associate agreement in place.","event_id":"ea9135f2-f3b7-418f-b7e6-345111b03c13","severity_score":65},{"record_id":"f2c334c9-53ea-49ff-b3f4-0200fdf13f0e","source_event_group_id":"e51887a9-8ef5-4815-8b69-68b7d8f7e123","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Deaconess Health System","state":"IN","individuals_affected":8941,"breach_submission_date":"2026-03-20","enforcement_action_date":null,"summary":"","event_id":"e51887a9-8ef5-4815-8b69-68b7d8f7e123","severity_score":50},{"record_id":"bf365627-a634-4972-9fba-cf56603cc411","source_event_group_id":"8151f9d9-743c-4d1b-9fd4-7d3b84a72561","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Amyris Incorporated Health and Welfare Plan","state":"CA","individuals_affected":2042,"breach_submission_date":"2026-03-17","enforcement_action_date":null,"summary":"","event_id":"8151f9d9-743c-4d1b-9fd4-7d3b84a72561","severity_score":50},{"record_id":"2cd85e6d-e4e9-4c1e-8646-ab35ef1dc0f4","source_event_group_id":"b73adc90-3690-4c43-8144-ccde8cebcaf3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BeyondFaith Homecare & Rehab, LLC","state":"TX","individuals_affected":708,"breach_submission_date":"2026-03-19","enforcement_action_date":null,"summary":"","event_id":"b73adc90-3690-4c43-8144-ccde8cebcaf3","severity_score":30},{"record_id":"7db5f837-049b-44ee-9548-cdcf7be7a8fc","source_event_group_id":"b5f2fa98-dd11-4bac-9934-b1ec7c6e73b2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Greater Boston Urology","state":"MA","individuals_affected":4717,"breach_submission_date":"2026-02-28","enforcement_action_date":null,"summary":"","event_id":"b5f2fa98-dd11-4bac-9934-b1ec7c6e73b2","severity_score":50},{"record_id":"faeb436c-df73-4f58-a3ef-3c17f272eb37","source_event_group_id":"50c97d70-3696-4173-996e-ae4bab549fe2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ideal Image Development Corp.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ideal Image Development Corp. settled for $25,000 for failing to provide timely access to medical records to a patient, a violation of the access rule.","event_id":"50c97d70-3696-4173-996e-ae4bab549fe2","severity_score":50},{"record_id":"f6f3b6ba-5bd9-4630-b478-8f939975e0d4","source_event_group_id":"6e4e66ab-fac4-460c-90a1-83ac69fea408","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CHSPSC LLC","state":"TN","individuals_affected":6120000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHSPSC LLC paid $2.3 million to settle potential HIPAA violations related to a breach affecting over 6 million individuals.","event_id":"6e4e66ab-fac4-460c-90a1-83ac69fea408","severity_score":90},{"record_id":"e5891d7f-d39c-4381-b9e8-31fe57dad471","source_event_group_id":"49873f1f-fe46-4a13-80a1-82ad5984ca56","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"J.W.CHAO, M.D.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"J.W.CHAO, M.D. settled for $20,000 for failing to provide timely access to medical records to a patient, ensuring quicker access to care.","event_id":"49873f1f-fe46-4a13-80a1-82ad5984ca56","severity_score":50},{"record_id":"b27c4265-0284-488f-ad03-b88185423420","source_event_group_id":"e613fe64-8776-4cc4-b259-cb754fbdecb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Executive Health Resources (EHR)","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"EHR paid $90,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"e613fe64-8776-4cc4-b259-cb754fbdecb5","severity_score":50},{"record_id":"7cd7cb85-13e3-4136-b571-64d2de821d8f","source_event_group_id":"c2d8082e-fb02-444e-8f53-9df52df0d204","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Keith Christiansen","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Keith Christiansen paid $25,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c2d8082e-fb02-444e-8f53-9df52df0d204","severity_score":50},{"record_id":"73c220d8-8e0d-4c5a-a754-cfc11c987a02","source_event_group_id":"b1a63b39-ff53-4f57-9d38-2aec99cd76f8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Amery Hospital & Clinic","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Amery Hospital & Clinic paid $75,000 to settle potential HIPAA violations for impermissibly disclosing PHI on social media.","event_id":"b1a63b39-ff53-4f57-9d38-2aec99cd76f8","severity_score":50},{"record_id":"62e9eaef-6793-433b-905f-86dd63bd1650","source_event_group_id":"eb686694-6120-4655-8f3e-905935f8fe9f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Associates of Northern Virginia (DANV)","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"DANV paid $30,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"eb686694-6120-4655-8f3e-905935f8fe9f","severity_score":50},{"record_id":"56f16ed7-c886-4e17-81c9-6cb2e46dfa0b","source_event_group_id":"c17de30a-5aeb-44a5-8ae6-a5de13076442","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Emergency Centers","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Emergency Centers paid $30,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"c17de30a-5aeb-44a5-8ae6-a5de13076442","severity_score":50},{"record_id":"524ca177-f880-40cb-a7bb-b472922b9377","source_event_group_id":"ec25ea77-df3e-4228-a6cf-7a38f35c6a83","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B.C. Centers for Mental Health and Addiction Services","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"B.C. Centers for Mental Health and Addiction Services paid $160,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ec25ea77-df3e-4228-a6cf-7a38f35c6a83","severity_score":65},{"record_id":"3e0b1140-aa2f-424a-aa8f-8be8dc080821","source_event_group_id":"e6cfba9c-c1bd-4d97-a578-7b37db269431","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Uniontown Hospital","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Uniontown Hospital settled for $85,000 for failing to provide timely access to medical records to a patient, emphasizing the prompt release of records.","event_id":"e6cfba9c-c1bd-4d97-a578-7b37db269431","severity_score":50},{"record_id":"380e64fd-92c8-47f7-9af2-4254f9121106","source_event_group_id":"6a1ef7f9-d9bf-443c-8d1c-75995a54c7a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Verndale Healthcare and Rehabilitation Center","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Verndale Healthcare and Rehabilitation Center settled for $55,000 for failing to provide timely access to medical records to a patient, underscoring patient access.","event_id":"6a1ef7f9-d9bf-443c-8d1c-75995a54c7a8","severity_score":50},{"record_id":"2f8ee45c-c05d-405e-b49b-36a34b77d355","source_event_group_id":"9af74c09-cb73-4feb-b696-66f55b8baee6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sangre de Cristo Community Mental Health Services","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sangre de Cristo Community Mental Health Services paid $30,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9af74c09-cb73-4feb-b696-66f55b8baee6","severity_score":50},{"record_id":"1a6f3a91-3aca-4606-b124-bfbc3043450d","source_event_group_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwell Health","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northwell Health paid $510,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a6ac79d9-05fc-47a2-893f-efdccbd03eb5","severity_score":80},{"record_id":"0bc15d13-81e2-4564-af5c-3b6f7bc2be4b","source_event_group_id":"b877a00d-6ed5-40d5-8a91-a9ac02d679de","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pride Medical, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pride Medical paid $25,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"b877a00d-6ed5-40d5-8a91-a9ac02d679de","severity_score":50},{"record_id":"fd138153-da92-4a68-b092-6df9d65dd5ea","source_event_group_id":"3f5a9633-eed5-4652-8d93-06839fb89c0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Drs. Osborne and Hamilton, PA","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Drs. Osborne and Hamilton, PA settled for $10,000 for failing to provide timely access to medical records to a patient, emphasizing patient access.","event_id":"3f5a9633-eed5-4652-8d93-06839fb89c0b","severity_score":50},{"record_id":"fa8f359f-62ad-4879-ab10-a6ebfcad6802","source_event_group_id":"2ff2d4ea-b4ce-4145-ac6b-85a960d1c1b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"EMC ANESTHESIA, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"EMC ANESTHESIA, P.C. settled for $15,000 for failing to provide timely access to medical records to a patient, affirming the right of access.","event_id":"2ff2d4ea-b4ce-4145-ac6b-85a960d1c1b0","severity_score":50},{"record_id":"e20a7777-4218-4031-bbd6-393bdac5e321","source_event_group_id":"141b898d-7aae-4300-9079-f64bb48da8fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Guidant Group, Inc.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Guidant Group, Inc. paid $100,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"141b898d-7aae-4300-9079-f64bb48da8fc","severity_score":50},{"record_id":"d695fcaa-8cd0-41a3-a3af-311bd3e83e63","source_event_group_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danbury Hospital","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danbury Hospital paid $100,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","severity_score":50},{"record_id":"d576e4cf-df03-4aab-aea7-cdd7b24ccb05","source_event_group_id":"11d3f2d6-bd6a-4508-a411-aad94f02dc64","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Specialists of Boston","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eye Care Specialists of Boston paid $80,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"11d3f2d6-bd6a-4508-a411-aad94f02dc64","severity_score":50},{"record_id":"d35ceab3-4c6a-4418-90ff-37b70a1bffe6","source_event_group_id":"1df14896-293f-472c-8823-8f873737d134","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardiac Surgeons, P.C.","state":"AL","individuals_affected":1286,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cardiac Surgeons, P.C. settled for $100,000 for failing to complete a HIPAA risk analysis and implement security measures after a server breach.","event_id":"1df14896-293f-472c-8823-8f873737d134","severity_score":50},{"record_id":"cee729ca-8d28-4c77-9bd9-a012a0163cd3","source_event_group_id":"f08b42f5-b476-4e69-a22c-54b92f4a37be","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LUIS VILLA, D.M.D., P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LUIS VILLA, D.M.D., P.A. settled for $2,000 for failing to provide timely access to dental records to a patient, affirming the right of access.","event_id":"f08b42f5-b476-4e69-a22c-54b92f4a37be","severity_score":50},{"record_id":"cac1ed47-f17d-44ed-8c37-3075c2f27639","source_event_group_id":"8c692cee-d0ac-4323-a14a-7fb0f388e53f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Donald F. McKenna, D.M.D.","state":"VT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Donald F. McKenna, D.M.D. settled for $25,000 for failing to provide timely access to medical records to a patient, highlighting the importance of the right of access.","event_id":"8c692cee-d0ac-4323-a14a-7fb0f388e53f","severity_score":50},{"record_id":"c9bdbb15-c375-4b76-9565-8fa7fc41e2f9","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Services","state":"PR","individuals_affected":1344406,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Triple-S Management Services settled potential HIPAA violations for $3.5 million following multiple breaches affecting over 1.3 million individuals. OCR's investigation found pervasive non-compliance with HIPAA Rules.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"be9f14da-a4cd-40ab-aa58-f43a65bf7a47","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC d/b/a AEON Clinical Laboratories","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management paid $50,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"af56e5e1-1528-4bfe-b031-f4b8bd8fb337","source_event_group_id":"e6ea5857-2aa6-4ab4-a5db-7bcbda3f49a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fallbrook Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fallbrook Medical Center paid $20,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"e6ea5857-2aa6-4ab4-a5db-7bcbda3f49a3","severity_score":50},{"record_id":"a63e5a86-257c-44e8-9ef3-56b71c420d97","source_event_group_id":"ee3f50db-1c34-4f88-9cf2-19b27fc29d76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Health","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Health paid $100,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"ee3f50db-1c34-4f88-9cf2-19b27fc29d76","severity_score":50},{"record_id":"a3ca7db0-a39a-42f2-bfe6-77a8cea4443c","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America (FMCNA)","state":"MA","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresenius Medical Care North America settled for $3.5 million for five separate data breaches across various facilities, highlighting systemic failures in HIPAA compliance.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"a2cabb74-929b-412c-b57e-855823f13e26","source_event_group_id":"0dfca483-27e5-4dab-899d-091908050e10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Jason White's Dental Practice","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. White's Dental Practice paid $25,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"0dfca483-27e5-4dab-899d-091908050e10","severity_score":50},{"record_id":"94e62145-4553-469e-a0f1-285888f5a70e","source_event_group_id":"22b0cfe4-ea46-4fd8-b403-fabac2bc85b2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dekalb County Health Department","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dekalb County Health Department paid $30,000 to settle potential HIPAA violations for impermissibly disclosing PHI on social media.","event_id":"22b0cfe4-ea46-4fd8-b403-fabac2bc85b2","severity_score":50},{"record_id":"8556c62e-05e7-46f4-9f53-ddc41dc3aa4c","source_event_group_id":"9bece4f0-d185-4975-b713-63cd5a148b86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Donald Brockley","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brockley paid $30,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9bece4f0-d185-4975-b713-63cd5a148b86","severity_score":50},{"record_id":"839704bb-e92d-46eb-9a92-76bddbba3732","source_event_group_id":"299504db-3bf3-4395-b878-af5c953d3fd7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jacksonville Eye Center","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jacksonville Eye Center settled for $90,000 for impermissible disclosure of patient information on Yelp, violating HIPAA privacy rules.","event_id":"299504db-3bf3-4395-b878-af5c953d3fd7","severity_score":50},{"record_id":"7f14141f-d4f1-4397-a00b-67be3b85230f","source_event_group_id":"de47fbba-aa35-4c9e-bd5d-7247358294e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Centers (Metro)","state":"WI","individuals_affected":41767,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro paid $300,000 to settle potential HIPAA violations after impermissibly disclosing the protected health information of 41,767 patients.","event_id":"de47fbba-aa35-4c9e-bd5d-7247358294e7","severity_score":65},{"record_id":"78aaa6f8-4202-4baf-8372-fe306be07f9a","source_event_group_id":"272e9a2e-0d92-4ff8-8989-d3a0cc9ce4f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ALLIED ORTHOPEDIC AND SPORTS MEDICINE","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ALLIED ORTHOPEDIC AND SPORTS MEDICINE settled for $25,000 for failing to provide timely access to medical records to a patient and not having a proper access policy.","event_id":"272e9a2e-0d92-4ff8-8989-d3a0cc9ce4f1","severity_score":50},{"record_id":"768af57a-279d-4314-827b-581666de0634","source_event_group_id":"786ccec6-f386-4cc6-a6cc-2d164f6c2927","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diet & Weight Loss Center","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diet & Weight Loss Center settled for $30,000 for failing to provide timely access to medical records to a patient, underscoring patient access rights.","event_id":"786ccec6-f386-4cc6-a6cc-2d164f6c2927","severity_score":50},{"record_id":"73f0df01-5c13-431c-b930-65695fbb91d2","source_event_group_id":"0166d8dd-1969-4157-9c7b-2e2ba47eacd5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"THE DENTAL OFFICE","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"THE DENTAL OFFICE settled for $25,000 for failing to provide timely access to dental records to a patient, reaffirming patient rights.","event_id":"0166d8dd-1969-4157-9c7b-2e2ba47eacd5","severity_score":50},{"record_id":"72d7eafd-301a-407a-9e99-65b802ccc349","source_event_group_id":"1c44407f-064b-479d-ad55-14553dbf13cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northeast Dermatology Associates","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northeast Dermatology Associates paid $30,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"1c44407f-064b-479d-ad55-14553dbf13cd","severity_score":50},{"record_id":"722381bf-adde-413e-a5f3-0715734998db","source_event_group_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Care Hospital of Montana","state":"MT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Care Hospital of Montana settled for $10,000 for failing to provide timely access to medical records to a patient, violating their right of access under HIPAA.","event_id":"fb3641bf-d77b-4ed1-8f94-5e5a2c84e2ce","severity_score":50},{"record_id":"6d0352bf-700c-4f4e-8d2d-226d8dbb21f9","source_event_group_id":"bdb15153-b680-44c9-abfa-b80475552850","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Small Hospital","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A small hospital (name not disclosed by OCR) paid $15,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI to a local newspaper.","event_id":"bdb15153-b680-44c9-abfa-b80475552850","severity_score":50},{"record_id":"6c7bd045-ac33-4397-b448-93b00637482c","source_event_group_id":"34742746-2270-44b1-b95b-4e2f1db04288","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Health Associates, LTD","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dental Health Associates, LTD settled for $25,000 for failing to provide timely access to medical records to a patient, failing to provide proper access.","event_id":"34742746-2270-44b1-b95b-4e2f1db04288","severity_score":50},{"record_id":"5e27b5eb-9bf4-4c09-95e3-87de56402314","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas-Upstate Cardiology","state":"SC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas-Upstate Cardiology settled for $31,000 for impermissible disclosure of patient information, emphasizing proper safeguards.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":50},{"record_id":"54b580b3-02c8-4e2a-83a2-bc0f6631d0ce","source_event_group_id":"9e33b3cf-422b-4853-b084-1124b860fe6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Charles J. Adams, D.D.S.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Charles J. Adams, D.D.S. paid $10,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9e33b3cf-422b-4853-b084-1124b860fe6e","severity_score":50},{"record_id":"4992464b-2226-44d3-b176-794eabd9dcf9","source_event_group_id":"9a53930b-d6a0-46a4-b54a-dea01e36df40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rainelle Medical Center, Inc.","state":"WV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rainelle Medical Center, Inc. paid $25,000 to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"9a53930b-d6a0-46a4-b54a-dea01e36df40","severity_score":50},{"record_id":"483be7b8-67fb-4871-af36-3e3e918e36ba","source_event_group_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester County Healthcare Corporation","state":"NY","individuals_affected":204683,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester County Health Care Corporation settled for $1.15 million for an impermissible disclosure of patient information due to a phishing attack, affecting over 200,000 individuals.","event_id":"d6469f59-db1c-4fc0-96ac-ab9ab95fc074","severity_score":90},{"record_id":"46b149e7-4e95-4b1d-a5cf-4b90f75c4d3b","source_event_group_id":"45ed7590-755a-4e0d-9c20-6717e34a384a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mount Sinai Health System","state":"NY","individuals_affected":2,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mount Sinai Health System settled for $160,000 for impermissibly disclosing patient PHI to a film crew during filming, failing to apply proper safeguards.","event_id":"45ed7590-755a-4e0d-9c20-6717e34a384a","severity_score":65},{"record_id":"41a90d4d-84bc-44fe-89c2-4ef282d681d9","source_event_group_id":"8449313d-939c-4179-9547-4b2bed935cc8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"eliness LLC dba Personal physical therapy","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"eliness LLC, dba Personal physical therapy, settled for $25,000 for neglecting to provide a former patient with timely access to their medical records.","event_id":"8449313d-939c-4179-9547-4b2bed935cc8","severity_score":50},{"record_id":"413000c7-36a3-402a-affb-fc14989541f5","source_event_group_id":"8a3c207c-9ee8-48d9-a442-e737946164a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"VisionQuest Ophthalmologic Centre","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"VisionQuest Ophthalmologic Centre paid $45,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI in response to a negative Yelp review.","event_id":"8a3c207c-9ee8-48d9-a442-e737946164a3","severity_score":50},{"record_id":"400e9171-a0f1-45d6-a729-4083058adada","source_event_group_id":"442b26e2-be92-4fef-b729-b8a70d0a0ae7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Coast Medical Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Coast Medical Group settled for $25,000 for failing to provide timely access to medical records to a patient, ensuring quicker access to care.","event_id":"442b26e2-be92-4fef-b729-b8a70d0a0ae7","severity_score":50},{"record_id":"3f8192f7-427f-4653-9147-e6159547481a","source_event_group_id":"29346e2b-1f64-4d39-9ef8-35c85e6023e1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachwood Dental Group","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachwood Dental Group paid $25,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI on Yelp.","event_id":"29346e2b-1f64-4d39-9ef8-35c85e6023e1","severity_score":50},{"record_id":"35995adb-4620-4267-9da0-1f7b9be118f7","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan, Inc.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excellus Health Plan, Inc. paid $1.2 million to settle potential HIPAA violations for failing to provide timely access to a patient's medical records.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":90},{"record_id":"322e3e2d-a82a-4338-ad90-6da6c096068e","source_event_group_id":"7343045e-3272-4e12-b60b-509b75d96b60","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aventura Hospital and Medical Center","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aventura Hospital impermissibly disclosed patient PHI to a local news reporter during a celebrity patient's stay, violating privacy rules.","event_id":"7343045e-3272-4e12-b60b-509b75d96b60","severity_score":80},{"record_id":"298eaed4-d7c3-455b-9cfa-6b5bbd0095d4","source_event_group_id":"9e22427a-1903-4c12-b88e-6f09a8a3a303","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Long Beach Community Medical Center","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Long Beach Community Medical Center settled for $100,000 for failing to provide timely access to medical records to a patient, ensuring patient rights.","event_id":"9e22427a-1903-4c12-b88e-6f09a8a3a303","severity_score":50},{"record_id":"24fe9851-23e4-4afd-8f38-2d9a8a232040","source_event_group_id":"d297577b-b67c-44d8-ac22-d7d7b0b7676e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Florida Dental Associates","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Florida Dental Associates settled for $5,000 for failing to provide timely access to medical records to a patient, stressing individual access rights.","event_id":"d297577b-b67c-44d8-ac22-d7d7b0b7676e","severity_score":50},{"record_id":"1e79c6bd-12e2-4e77-b025-142be519f144","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":169,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health settled for $865,500 after an impermissible disclosure of patient information by employees, indicating failures in access controls and audit logging.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"0c80a8ff-caa5-4590-a448-cd911b79b806","source_event_group_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, LLC (now BioTelemetry Healthcare)","state":"PA","individuals_affected":1362,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, LLC (now BioTelemetry Healthcare) settled for $2.5 million for failing to conduct a risk analysis and secure an unencrypted laptop containing patient data.","event_id":"c3df169e-eece-479d-8fd1-f4b8ea2265f1","severity_score":90},{"record_id":"04383df6-b3c1-41ae-afa3-fe70ff184cc7","source_event_group_id":"dcdd9d2d-552a-4a8e-ba9e-c4a864f9a62a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"East Houston Regional Medical Center","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"East Houston Regional Medical Center settled for $110,000 for failing to provide timely access to medical records to a patient, emphasizing quick access.","event_id":"dcdd9d2d-552a-4a8e-ba9e-c4a864f9a62a","severity_score":65},{"record_id":"dd6bde22-cf99-4bce-a0a1-706fde55404e","source_event_group_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NYC Health + Hospitals","state":"NY","individuals_affected":5086,"breach_submission_date":"2026-03-10","enforcement_action_date":null,"summary":"","event_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","severity_score":50},{"record_id":"95144a3c-e99f-4753-b388-f6315f1bd17a","source_event_group_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Defense Health Agency","state":"VA","individuals_affected":1300,"breach_submission_date":"2026-04-14","enforcement_action_date":null,"summary":"","event_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","severity_score":50},{"record_id":"83df0d2a-8c3e-4501-b078-1f684d28fcc3","source_event_group_id":"56a86358-732d-46a6-919a-a7c81ee74089","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Coastal Skin Surgery & Dermatology","state":"FL","individuals_affected":6173,"breach_submission_date":"2026-03-17","enforcement_action_date":null,"summary":"","event_id":"56a86358-732d-46a6-919a-a7c81ee74089","severity_score":50},{"record_id":"791e4632-5f3e-4115-85ef-74bac6088259","source_event_group_id":"8201613a-578b-44ec-b89c-3a8eaaf12b6f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Providence St. Joseph Orange","state":"CA","individuals_affected":11329,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"8201613a-578b-44ec-b89c-3a8eaaf12b6f","severity_score":70},{"record_id":"6a5bc464-3128-4105-90b5-6271dc8cef17","source_event_group_id":"670d6556-07f6-4b42-81d3-5ccf4818159a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Washington VA Medical Center","state":"DC","individuals_affected":1467,"breach_submission_date":"2026-04-16","enforcement_action_date":null,"summary":"","event_id":"670d6556-07f6-4b42-81d3-5ccf4818159a","severity_score":50},{"record_id":"0f2d15dc-3de4-4550-a7ac-044734398973","source_event_group_id":"f271c734-4b6c-455f-b464-415e8ff43871","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Walpole Area Visiting Nurse Association, Inc.","state":"MA","individuals_affected":566,"breach_submission_date":"2026-03-16","enforcement_action_date":null,"summary":"","event_id":"f271c734-4b6c-455f-b464-415e8ff43871","severity_score":30},{"record_id":"09079730-faa8-46ce-9dcf-1a1525652921","source_event_group_id":"3c54c39a-b23b-4b8b-8996-227516ab8e1c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ideal Home Care","state":"OK","individuals_affected":1331,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"3c54c39a-b23b-4b8b-8996-227516ab8e1c","severity_score":50},{"record_id":"bb5d1e41-6bd4-43f8-8a74-5468c5864809","source_event_group_id":"ec3601b6-ff20-4d48-af29-f7dc7f9cf6b0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Instabase, Inc.","state":"DE","individuals_affected":908,"breach_submission_date":"2026-04-13","enforcement_action_date":null,"summary":"","event_id":"ec3601b6-ff20-4d48-af29-f7dc7f9cf6b0","severity_score":30},{"record_id":"b1911cd1-0567-4cec-9941-71c1acede3af","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":2885,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":50},{"record_id":"86fe71ce-e58a-4cea-8f9a-2e088a59f369","source_event_group_id":"c5f1fe84-4a86-4f0d-9f34-e8fec38bffb0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lennox International Inc.","state":"TX","individuals_affected":3709,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"c5f1fe84-4a86-4f0d-9f34-e8fec38bffb0","severity_score":50},{"record_id":"7af2d36b-11ad-477a-9503-8e41d4736667","source_event_group_id":"bb9cfd3f-31ce-4680-9309-40cc541b1bf5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Iowa Department of Health and Human Services","state":"IA","individuals_affected":6717,"breach_submission_date":"2026-04-16","enforcement_action_date":null,"summary":"","event_id":"bb9cfd3f-31ce-4680-9309-40cc541b1bf5","severity_score":50},{"record_id":"65abb9db-d17b-44d6-bc32-2f549f440fc5","source_event_group_id":"2c7fdfad-921d-4ead-aec0-e4765545c993","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Branch Metrics, Inc.","state":"CA","individuals_affected":857,"breach_submission_date":"2026-04-10","enforcement_action_date":null,"summary":"","event_id":"2c7fdfad-921d-4ead-aec0-e4765545c993","severity_score":30},{"record_id":"4cea0caf-de7a-4273-bec7-dfbc3d321144","source_event_group_id":"ae945e88-e67b-4fa8-a443-f07744f505d6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wonderland Child & Family Services","state":"WA","individuals_affected":1283,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"ae945e88-e67b-4fa8-a443-f07744f505d6","severity_score":50},{"record_id":"379c1645-3556-4aa7-afe7-1e3b0d6e3905","source_event_group_id":"47e28e68-857c-44fa-9d5b-652cbef9264f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Orthopaedic Institute of Western Kentucky","state":"KY","individuals_affected":11474,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"47e28e68-857c-44fa-9d5b-652cbef9264f","severity_score":70},{"record_id":"2bda842d-dd7e-48fd-9758-1de6060b2021","source_event_group_id":"50fad4bd-8ee5-49ed-b39e-a72623ee54eb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Duncan Regional Hospital, Inc.","state":"OK","individuals_affected":724,"breach_submission_date":"2026-04-10","enforcement_action_date":null,"summary":"","event_id":"50fad4bd-8ee5-49ed-b39e-a72623ee54eb","severity_score":30},{"record_id":"263b7527-6b5b-4064-84fc-b936508c206c","source_event_group_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CardioFit Medical Group, Inc.","state":"CA","individuals_affected":7243,"breach_submission_date":"2026-04-09","enforcement_action_date":null,"summary":"","event_id":"08d2c4ed-80da-4c29-8144-128cdc2eee30","severity_score":50},{"record_id":"2587ca91-30c8-49e6-9f65-75385d3067ff","source_event_group_id":"4945e379-f8d4-475b-889e-67a4ef1926ad","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Renovo Chiropractic & Wellness","state":"WA","individuals_affected":538,"breach_submission_date":"2026-03-16","enforcement_action_date":null,"summary":"","event_id":"4945e379-f8d4-475b-889e-67a4ef1926ad","severity_score":30},{"record_id":"0be8b173-45c8-42ed-a759-8bc32df4a0db","source_event_group_id":"e28d1da3-64ad-4ea3-ab94-0f4eaf2e7688","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northern Regional Hospital","state":"NC","individuals_affected":1575,"breach_submission_date":"2026-03-15","enforcement_action_date":null,"summary":"","event_id":"e28d1da3-64ad-4ea3-ab94-0f4eaf2e7688","severity_score":50},{"record_id":"bc29e576-e38c-4883-87f9-3d062ebed7ac","source_event_group_id":"964fa88a-8a78-4df1-b815-f72051527958","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wound Technology Network, Inc.","state":"FL","individuals_affected":139830,"breach_submission_date":"2026-01-28","enforcement_action_date":null,"summary":"","event_id":"964fa88a-8a78-4df1-b815-f72051527958","severity_score":85},{"record_id":"3de7f7bf-edb4-4439-baa0-ce6d1063ddc9","source_event_group_id":"4f5aedc1-7aab-4b58-aeb2-ca5c37777958","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CARE Clinic","state":"MN","individuals_affected":500,"breach_submission_date":"2026-04-10","enforcement_action_date":null,"summary":"","event_id":"4f5aedc1-7aab-4b58-aeb2-ca5c37777958","severity_score":30},{"record_id":"2a84c057-42a8-4942-bd15-41c8df284c08","source_event_group_id":"91446197-e8d1-49cc-b474-090c19c9d753","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Springfield Hospital","state":"VT","individuals_affected":5892,"breach_submission_date":"2026-04-10","enforcement_action_date":null,"summary":"","event_id":"91446197-e8d1-49cc-b474-090c19c9d753","severity_score":50},{"record_id":"a87061ea-8e54-45af-82fb-27b706735e7e","source_event_group_id":"a4c9f001-78bf-4a7d-9f76-8fc35c045789","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Good Samaritan Health Center","state":"GA","individuals_affected":10000,"breach_submission_date":"2026-03-16","enforcement_action_date":null,"summary":"","event_id":"a4c9f001-78bf-4a7d-9f76-8fc35c045789","severity_score":50},{"record_id":"777df270-895f-4f44-9694-0d34538401dd","source_event_group_id":"44c382d3-0fb2-4f2a-9149-fcd47fbd4cd4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Innovative Scientific Solutions, LLC","state":"SC","individuals_affected":143842,"breach_submission_date":"2026-04-17","enforcement_action_date":null,"summary":"","event_id":"44c382d3-0fb2-4f2a-9149-fcd47fbd4cd4","severity_score":85},{"record_id":"72fbb7dd-a4c2-4c46-b513-a8ffa8dd61e9","source_event_group_id":"555c9bee-2e5d-47a7-a3e7-e762e2a09d18","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City Health, a medical corporation","state":"CA","individuals_affected":65000,"breach_submission_date":"2026-04-14","enforcement_action_date":null,"summary":"","event_id":"555c9bee-2e5d-47a7-a3e7-e762e2a09d18","severity_score":70},{"record_id":"66ffcbe4-3288-4a3c-87ac-670447046273","source_event_group_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trinity Health","state":"MI","individuals_affected":2740,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"e3fe3f4c-ac6e-4f28-b69f-d91b29a04c5a","severity_score":50},{"record_id":"06d9c075-718f-4b0e-ab0c-6ac83c8603ad","source_event_group_id":"b2970969-8422-4b87-8ae3-837b5eed5788","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mazzola Mardon, P.C.","state":"NY","individuals_affected":2123,"breach_submission_date":"2026-04-15","enforcement_action_date":null,"summary":"","event_id":"b2970969-8422-4b87-8ae3-837b5eed5788","severity_score":50},{"record_id":"f86b1fbd-7e2b-4d88-9d17-dfa1e1abc39f","source_event_group_id":"92abaa53-0b43-45a2-96d9-76cc5f261d30","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Medical Practice","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A New York-based medical practice settled after failing to provide timely access to medical records.","event_id":"92abaa53-0b43-45a2-96d9-76cc5f261d30","severity_score":50},{"record_id":"d2248279-ac50-482a-a778-57d53e0d9a89","source_event_group_id":"e517225c-738e-4e64-b275-b2eacf9a8b1a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Board of Regents of the University of Wisconsin System","state":"WI","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Board of Regents of the University of Wisconsin System settled after impermissibly disclosing PHI through third-party tracking technologies on its website, affecting millions of individuals.","event_id":"e517225c-738e-4e64-b275-b2eacf9a8b1a","severity_score":80},{"record_id":"7e9d5880-b8ec-4d5c-b747-be3012fb7abd","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America Dental, LLC","state":"FL","individuals_affected":8900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCNA Dental settled due to a large data breach affecting millions of individuals.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"7e5db1d2-9a7f-432e-a572-e13b28f732e2","source_event_group_id":"98933208-3ee9-49b6-88ca-acf80d8eb724","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Coastal Family Health Center","state":"MS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Coastal Family Health Center settled after failing to provide timely access to medical records.","event_id":"98933208-3ee9-49b6-88ca-acf80d8eb724","severity_score":50},{"record_id":"6b891d98-16f4-4e09-a4df-baa5ab442e5d","source_event_group_id":"133b0cd0-2f27-4de1-aab8-36ba9ba854ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Horace Mitchell","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Horace Mitchell settled after failing to provide timely access to medical records.","event_id":"133b0cd0-2f27-4de1-aab8-36ba9ba854ac","severity_score":50},{"record_id":"6063478d-6dc4-40ed-b4af-6e48e710edc8","source_event_group_id":"e62143b0-67f5-462c-9016-1d2c7f475ca2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Medical Practice","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Texas-based medical practice settled after failing to provide timely access to medical records.","event_id":"e62143b0-67f5-462c-9016-1d2c7f475ca2","severity_score":50},{"record_id":"5a08fa01-7ff5-4f4e-900d-6bde1267df9b","source_event_group_id":"9f0e046d-58e4-4534-a9e0-3b076f410f10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Mark Rosing","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mark Rosing settled after failing to provide timely access to medical records.","event_id":"9f0e046d-58e4-4534-a9e0-3b076f410f10","severity_score":50},{"record_id":"34b2ec5f-fa84-450f-a563-308b1d372bc7","source_event_group_id":"3a1cb5d1-39fb-48a2-9d57-29468343d7d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Bruce Ruderman","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Bruce Ruderman settled after failing to provide timely access to medical records.","event_id":"3a1cb5d1-39fb-48a2-9d57-29468343d7d3","severity_score":50},{"record_id":"233c6108-8bb6-45e3-8ebd-26ddcb6d2470","source_event_group_id":"e96a1667-1ed7-4cc7-b915-f18710b6130f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Healthcare, LLC d/b/a Paeonia Medical","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Medical settled after failing to provide timely access to medical records.","event_id":"e96a1667-1ed7-4cc7-b915-f18710b6130f","severity_score":50},{"record_id":"f8d88745-da61-4e88-b1a3-6b9c199e7740","source_event_group_id":"e7cf8163-b78e-4ff0-aca6-9f0e04fa6eaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allentown Cardiac and Commercial Diagnostic Center","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allentown Cardiac and Commercial Diagnostic Center agreed to pay $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e7cf8163-b78e-4ff0-aca6-9f0e04fa6eaa","severity_score":50},{"record_id":"f78d60de-717b-49fc-8d33-bfcc8d016ede","source_event_group_id":"9f32062e-e738-4407-94b0-37ebe5ba88d1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Texas & Baylor College of Medicine","state":"TX","individuals_affected":36000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSTX and BCM agreed to pay a combined $1.6 million to settle potential HIPAA violations stemming from an impermissible disclosure of the PHI of 36,000 individuals.","event_id":"9f32062e-e738-4407-94b0-37ebe5ba88d1","severity_score":90},{"record_id":"eb34f836-2deb-4fcd-bdb3-ee9a9484843d","source_event_group_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson & Coker (J&C)","state":"GA","individuals_affected":600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson & Coker (J&C) agreed to pay $500,000 to settle potential HIPAA violations after a data breach involving an impermissible disclosure of PHI.","event_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","severity_score":65},{"record_id":"e898562b-b864-4633-8431-62557d25eb07","source_event_group_id":"7e94c4f1-df57-4e1d-85ed-c3ad6bf8f49f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allegheny Health Network","state":"PA","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allegheny Health Network settled after a breach involving impermissible disclosure of PHI through a misconfigured email system.","event_id":"7e94c4f1-df57-4e1d-85ed-c3ad6bf8f49f","severity_score":65},{"record_id":"e7da5a9d-7def-464d-b928-25c98b1902ec","source_event_group_id":"28e41561-ba9b-4ea9-9417-25866cb7fad7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Florida-based pediatric practice","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Florida-based pediatric practice settled with OCR for failing to provide timely access to medical records.","event_id":"28e41561-ba9b-4ea9-9417-25866cb7fad7","severity_score":50},{"record_id":"e720ef60-bf19-4c61-a92c-bc32b8361ec1","source_event_group_id":"7c60d7e2-84a8-4a72-88e9-346814d6632b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shahriar Mojtaba","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shahriar Mojtaba settled after failing to provide timely access to medical records.","event_id":"7c60d7e2-84a8-4a72-88e9-346814d6632b","severity_score":50},{"record_id":"e53a5204-7655-4c8b-b9b1-49872abf565d","source_event_group_id":"206ee064-b113-49cd-9488-43d58cbcd921","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Vermont Medical Center","state":"VT","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Vermont Medical Center settled after an impermissible disclosure of PHI to Google and failing to have proper business associate agreements in place.","event_id":"206ee064-b113-49cd-9488-43d58cbcd921","severity_score":80},{"record_id":"dd0c8a1b-1f04-47ef-bdd9-69f5ada489a2","source_event_group_id":"ac7f8ec6-3581-4beb-8b7f-ae392d562717","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Arthur Brown","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Arthur Brown settled after failing to provide timely access to medical records.","event_id":"ac7f8ec6-3581-4beb-8b7f-ae392d562717","severity_score":50},{"record_id":"da39a52a-2471-4e7b-a685-5a274cb6e9ff","source_event_group_id":"4260a25d-718a-4c5c-954d-0f2ab7c5adf3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Retina Consultants","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Retina Consultants agreed to pay $25,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"4260a25d-718a-4c5c-954d-0f2ab7c5adf3","severity_score":50},{"record_id":"d7922c9b-6eaf-42e0-9d60-5191ab0fa989","source_event_group_id":"28aa836a-0dd3-4f64-9a1a-1af57be34b9b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optimal Wellness","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Optimal Wellness settled after failing to provide timely access to medical records.","event_id":"28aa836a-0dd3-4f64-9a1a-1af57be34b9b","severity_score":50},{"record_id":"d52378d0-ba73-4d60-a8d9-d18e68bc4cdb","source_event_group_id":"53e3ba23-c4cc-40f9-a18b-3d177dbdcfdc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's & Children's Hospital","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's & Children's Hospital agreed to pay $35,000 to settle potential HIPAA violations for an impermissible disclosure of protected health information.","event_id":"53e3ba23-c4cc-40f9-a18b-3d177dbdcfdc","severity_score":50},{"record_id":"d2ad621e-4b74-4c4a-92c2-992b10f2e607","source_event_group_id":"f62b6ca8-2272-4caf-99ea-0eda21690055","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Perry Memorial Hospital","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Perry Memorial Hospital settled after failing to provide a patient with timely access to their medical records.","event_id":"f62b6ca8-2272-4caf-99ea-0eda21690055","severity_score":50},{"record_id":"ce5bbe15-fe55-463b-926b-7f6ea75789b9","source_event_group_id":"930d093a-9e17-44f7-b68d-444af30173cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Idaho Correctional Institution (NICI)","state":"ID","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NICI settled after an impermissible disclosure of PHI of inmates.","event_id":"930d093a-9e17-44f7-b68d-444af30173cf","severity_score":50},{"record_id":"cc6b6602-d1bb-4b26-8594-2d7edb1eb5b8","source_event_group_id":"478844ea-c0a6-481f-bafe-0a1984d1b099","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Forrest Preston","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Forrest Preston settled after failing to provide timely access to medical records.","event_id":"478844ea-c0a6-481f-bafe-0a1984d1b099","severity_score":50},{"record_id":"c3dc18d4-42c2-4006-840a-037aadc2aa4c","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC agreed to pay $80,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"c1c92abe-b8d8-488b-be3b-5a9804e02d83","source_event_group_id":"3bc30665-08d4-4dbc-8608-4ea4a78bdf4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioVascular Group (CVG)","state":"GA","individuals_affected":11332,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioVascular Group agreed to pay $800,000 to settle potential HIPAA violations after an unencrypted laptop was stolen from an employee's car.","event_id":"3bc30665-08d4-4dbc-8608-4ea4a78bdf4b","severity_score":80},{"record_id":"b38da419-b321-4292-9e73-63a738c132e0","source_event_group_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California","state":"CA","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Regents of the University of California settled after failing to properly implement security measures, leading to a breach.","event_id":"5ec932ff-6b9f-4d8a-8294-62626368d258","severity_score":90},{"record_id":"b2587098-f2ca-4957-ae3a-55b99b28dc65","source_event_group_id":"5cf15059-889c-44bd-bd74-54b45ebdf9db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MetroStar Systems, Inc.","state":"VA","individuals_affected":178,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MetroStar Systems, Inc., a federal contractor, agreed to pay $125,000 to settle potential HIPAA violations after an impermissible disclosure of patient information.","event_id":"5cf15059-889c-44bd-bd74-54b45ebdf9db","severity_score":65},{"record_id":"b2096a32-d49b-4610-8002-e717dbc0e4e2","source_event_group_id":"85007e89-61fe-4286-ae56-0a6a0877d28e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Lance Plunkett","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Lance Plunkett settled after failing to provide timely access to medical records.","event_id":"85007e89-61fe-4286-ae56-0a6a0877d28e","severity_score":50},{"record_id":"af834ad0-0959-4fbc-8079-6368df339714","source_event_group_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arbour Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arbour Hospital settled after failing to provide timely access to medical records.","event_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","severity_score":50},{"record_id":"af305f96-babc-4bf8-9b8b-a4ca438a7b48","source_event_group_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jacob & Associates","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jacob & Associates settled after failing to provide timely access to medical records.","event_id":"4acc8c91-bc6b-4440-9aef-c1f41a728249","severity_score":50},{"record_id":"a88a16ff-750d-4bd4-990d-0d0a200ae434","source_event_group_id":"0ffe922c-7255-44a8-8d4b-2ab71f3c8fc5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physiotherapy Associates","state":"TN","individuals_affected":17931,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Physiotherapy Associates agreed to pay $2,150,000 to settle potential HIPAA violations after a data breach affecting 17,931 individuals.","event_id":"0ffe922c-7255-44a8-8d4b-2ab71f3c8fc5","severity_score":90},{"record_id":"a762119b-46fe-4581-b543-0060b6ea00b6","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California at Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health agreed to pay $865,000 to OCR and take corrective actions to settle potential HIPAA violations related to impermissible access to patient information.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"9b4c85ca-afd9-4506-a9b1-d5b9be8b7fa5","source_event_group_id":"ca791234-c868-4bda-9838-4ccf6772cd3f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Small Nova Scotia Business","state":"NS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A small business in Nova Scotia settled with OCR for failing to provide timely access to medical records.","event_id":"ca791234-c868-4bda-9838-4ccf6772cd3f","severity_score":50},{"record_id":"9a88460b-1bab-40fd-a47a-8e6f08cdbce6","source_event_group_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Works, Inc.","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Housing Works, Inc. settled due to impermissible disclosure of PHI of individuals living with HIV.","event_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","severity_score":50},{"record_id":"97a0ba2f-f277-45e6-bc18-b22e66391287","source_event_group_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Medical Practice","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Connecticut medical practice settled after failing to provide timely access to medical records.","event_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","severity_score":50},{"record_id":"86da50d8-1458-4762-bbd8-d0ee3ff1f478","source_event_group_id":"4e072458-9b13-4069-90e1-977de057aa99","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health and Hospital Authority","state":"CO","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health and Hospital Authority settled due to a breach involving impermissible disclosure of PHI through a misconfigured email server.","event_id":"4e072458-9b13-4069-90e1-977de057aa99","severity_score":90},{"record_id":"846442f3-a1bc-44dd-9c81-089687ef768e","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health (CCDH)","state":"IL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCDH agreed to pay $31,000 to settle potential HIPAA violations related to its failure to timely execute a business associate agreement.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"773a0137-527f-4a3b-bf51-7c9dad205d6d","source_event_group_id":"eb3ee110-3e03-4cc4-bb0c-019676b89b2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachwood affiliated entities","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachwood affiliated entities settled with OCR after failing to provide timely access to medical records.","event_id":"eb3ee110-3e03-4cc4-bb0c-019676b89b2c","severity_score":50},{"record_id":"7618f4a0-1194-4d0d-8b65-96d2229c689b","source_event_group_id":"809a3cf9-5234-44f5-877a-2491209a66cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lovelace Health System","state":"NM","individuals_affected":1900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lovelace Health System settled following a ransomware attack that resulted in the impermissible disclosure of PHI of millions of individuals.","event_id":"809a3cf9-5234-44f5-877a-2491209a66cb","severity_score":90},{"record_id":"727fd66f-cd41-4851-a53f-8bc96ef47b1c","source_event_group_id":"f869c02e-1e38-4d4a-9fab-2cba9b12d8ac","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Florida Orthodontic Practice","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Florida orthodontic practice settled after failing to provide timely access to medical records to a patient.","event_id":"f869c02e-1e38-4d4a-9fab-2cba9b12d8ac","severity_score":50},{"record_id":"6eba8312-e28b-47e0-aeb5-57219457ea29","source_event_group_id":"d052e4f3-dee4-4d42-b134-f89d208e4057","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Daniel Rubins","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Daniel Rubins settled after failing to provide timely access to medical records.","event_id":"d052e4f3-dee4-4d42-b134-f89d208e4057","severity_score":50},{"record_id":"631cba4c-e39c-4425-a598-3218552b612b","source_event_group_id":"08c2d455-3ce7-4237-a0be-c80e50dc5d1c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes and Endocrine Center of Chesterfield","state":"VA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Diabetes and Endocrine Center of Chesterfield settled for failing to provide a patient with timely access to their medical records.","event_id":"08c2d455-3ce7-4237-a0be-c80e50dc5d1c","severity_score":50},{"record_id":"6066e9b1-ffb5-4cea-a07d-958227ea2a38","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission (TX HHSC)","state":"TX","individuals_affected":66177,"breach_submission_date":null,"enforcement_action_date":null,"summary":"TX HHSC agreed to pay $1,600,000 to settle potential HIPAA violations after an impermissible disclosure of protected health information on its website.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"5fbbb0b6-a2d6-48b5-9f42-8e45889511cf","source_event_group_id":"d7428879-3309-4a37-88ab-485cb941d645","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"California Medical Practice","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A California-based medical practice settled after failing to provide timely access to medical records.","event_id":"d7428879-3309-4a37-88ab-485cb941d645","severity_score":50},{"record_id":"5a6a74ac-1a95-4449-bb90-23c645afe282","source_event_group_id":"38510892-1e29-4a57-af54-ebb4080ab061","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Dental","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A New Jersey dental practice settled with OCR for failing to provide timely access to medical records.","event_id":"38510892-1e29-4a57-af54-ebb4080ab061","severity_score":50},{"record_id":"50429a27-acc6-4405-b0cb-d54cc473039b","source_event_group_id":"55dc772f-b101-4f3c-993b-d86192c40de4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Diana Wang","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Diana Wang settled after failing to provide timely access to medical records.","event_id":"55dc772f-b101-4f3c-993b-d86192c40de4","severity_score":50},{"record_id":"4fd73a0c-ca2e-4fac-80f3-13c3f8be6a01","source_event_group_id":"045df0ae-9569-4021-84ed-9d8f0eb13743","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Egbert van der Rijt","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Egbert van der Rijt settled after failing to provide timely access to medical records.","event_id":"045df0ae-9569-4021-84ed-9d8f0eb13743","severity_score":50},{"record_id":"48fd5054-9228-4e20-a708-d38a6e35b437","source_event_group_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, d/b/a Peachstate Urgent Care","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Urgent Care settled after failing to provide timely access to medical records.","event_id":"3f47e649-750a-4730-9e2c-155fdda5eecd","severity_score":50},{"record_id":"4125ecf3-6c58-4aa6-8ac3-49854027301b","source_event_group_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Resources","state":"TX","individuals_affected":2700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Resources agreed to pay $4,800,000 to settle potential HIPAA violations associated with an unsecured USB drive containing the ePHI of 2,7 million individuals.","event_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","severity_score":90},{"record_id":"3b873298-6ae5-4f86-a955-3d61fafadf8a","source_event_group_id":"bee71e68-d2d1-4f16-9ec6-8cae794241ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Indiana, LLC","state":"IN","individuals_affected":5791,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathology Group of Indiana, LLC agreed to pay $85,000 to settle potential HIPAA violations for impermissibly disclosing PHI on its website.","event_id":"bee71e68-d2d1-4f16-9ec6-8cae794241ad","severity_score":50},{"record_id":"2e7686a2-4f1d-4192-8c73-c01e9b642fc3","source_event_group_id":"c549267b-c9a1-418d-acea-b5f5524d9da0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology Practice of NJ","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A New Jersey medical practice settled after failing to provide timely access to medical records.","event_id":"c549267b-c9a1-418d-acea-b5f5524d9da0","severity_score":50},{"record_id":"2a50f15b-f76b-4df2-8f88-9a3a28d9b24a","source_event_group_id":"0cff99f2-4e60-47cc-81c5-008d7890567d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Medical Practice","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Massachusetts medical practice settled after failing to provide timely access to medical records.","event_id":"0cff99f2-4e60-47cc-81c5-008d7890567d","severity_score":50},{"record_id":"232b4f28-7780-4daa-9371-4db41116ee09","source_event_group_id":"53c93be3-02d6-429c-8c1a-b4909fff1127","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Medical","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Medical settled due to a lack of an enterprise-wide risk analysis and other security failures, leading to a ransomware attack.","event_id":"53c93be3-02d6-429c-8c1a-b4909fff1127","severity_score":50},{"record_id":"22280a12-3c4a-4b15-a274-7aef278fc133","source_event_group_id":"2d367bd2-a53b-428b-8539-9af831aff9cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Carolina medical practice","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A North Carolina medical practice settled after failing to provide timely access to medical records.","event_id":"2d367bd2-a53b-428b-8539-9af831aff9cb","severity_score":50},{"record_id":"1ed179ed-0941-42e0-824d-b0eaf044e641","source_event_group_id":"79f001e8-1bf3-4697-b1a9-83e7ce1c6fc6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Virginia Medical Practice","state":"WV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A West Virginia medical practice settled after failing to provide timely access to medical records.","event_id":"79f001e8-1bf3-4697-b1a9-83e7ce1c6fc6","severity_score":50},{"record_id":"145f2ac1-e73b-4d5f-b92b-c14026564744","source_event_group_id":"9af74c09-cb73-4feb-b696-66f55b8baee6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sangre de Cristo Community Mental Health Services","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sangre de Cristo Community Mental Health Services settled after failing to provide timely access to medical records.","event_id":"9af74c09-cb73-4feb-b696-66f55b8baee6","severity_score":50},{"record_id":"110bd8cf-4d4d-4c0e-a617-b118d300b36b","source_event_group_id":"306431d6-966d-4b15-8715-1e95f22e3801","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain, P.C.","state":"PA","individuals_affected":2400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain settled with OCR after impermissibly disclosing PHI to a marketing company and failing to have a proper business associate agreement in place.","event_id":"306431d6-966d-4b15-8715-1e95f22e3801","severity_score":50},{"record_id":"0be1129e-74a1-4bd8-b097-84df8c12afa8","source_event_group_id":"6980afd2-478f-482c-b213-db0a4de4bbb1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Townsend Park Dental","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Townsend Park Dental agreed to pay $38,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"6980afd2-478f-482c-b213-db0a4de4bbb1","severity_score":50},{"record_id":"04116eee-5601-41d2-b404-3d360081c64c","source_event_group_id":"a1e7de92-34fe-401e-bda0-33a1dc897199","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctor's Diet Program, LLC","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctor's Diet Program, LLC agreed to pay $30,000 to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a1e7de92-34fe-401e-bda0-33a1dc897199","severity_score":50},{"record_id":"fa0a0c1c-da63-4a6c-8e42-d3214782319d","source_event_group_id":"cb9e7a26-91a3-427e-a2db-78a1b76c1338","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Healthy Partners, Inc.","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Healthy Partners impermissibly disclosed PHI when it mailed appointment reminders on postcards, violating privacy.","event_id":"cb9e7a26-91a3-427e-a2db-78a1b76c1338","severity_score":55},{"record_id":"e8674a45-2b17-4d11-b0dc-32c88dc99f5a","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, San Diego Health System","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSD Health System impermissibly disclosed PHI by mailing medical records to the wrong recipient.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":55},{"record_id":"d32aeaaf-de18-4d74-9d30-56519c28deca","source_event_group_id":"a8431a47-a518-4418-b7cf-74aaf303da94","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCSF Medical Center","state":"CA","individuals_affected":16500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCSF experienced a breach when a lost unencrypted USB drive containing student and patient PHI resulted in impermissible disclosure.","event_id":"a8431a47-a518-4418-b7cf-74aaf303da94","severity_score":90},{"record_id":"cf0b8d0f-7fce-4530-a28b-8a557d27e9f6","source_event_group_id":"f8e086fa-92ec-40bc-8776-21b546229f79","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Jewish Health System","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MJHS impermissibly disclosed PHI when a USB drive containing ePHI was lost and was not encrypted.","event_id":"f8e086fa-92ec-40bc-8776-21b546229f79","severity_score":55},{"record_id":"ca7852ff-577d-4a69-b467-1415c9717e38","source_event_group_id":"44b2c9e1-bfdb-4467-9e0d-1b29d7ccfbc6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Virginia Commonwealth University Health System","state":"VA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"VCU Health System impermissibly disclosed PHI when an unencrypted laptop containing ePHI was stolen.","event_id":"44b2c9e1-bfdb-4467-9e0d-1b29d7ccfbc6","severity_score":55},{"record_id":"bbc28a71-d0f7-4998-8079-3b738bd63e2d","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet failed to provide 41 patients with access to their medical records and did not cooperate with OCR's investigation.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"a5d8c1e5-08e8-4454-94bf-c746fc1b0af4","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County","state":"WA","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County impermissibly disclosed PHI when a vendor allowed public access to medical records of county residents.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"994f2284-13fc-495a-bb20-dfe021cb26b4","source_event_group_id":"7ff4cb78-b88e-4aff-8494-c213fcb46209","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MSO of Greater New York, Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO impermissibly disclosed PHI when an unencrypted external hard drive containing ePHI was stolen.","event_id":"7ff4cb78-b88e-4aff-8494-c213fcb46209","severity_score":55},{"record_id":"9778e525-212a-49c5-a123-7f98d6c62fdf","source_event_group_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Physicians","state":"IN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"IU Health impermissibly disclosed PHI by engaging in conversations about patients in public waiting areas.","event_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","severity_score":55},{"record_id":"91cce44c-454f-4f0d-877c-06f9f27bb325","source_event_group_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of New Mexico Hospitals","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UNM Hospitals impermissibly disclosed PHI of a patient to law enforcement without proper authorization.","event_id":"a036a482-0656-45c2-a7ff-9ff378db92ad","severity_score":55},{"record_id":"8b00a400-eae2-43ea-872d-2bdd3a97f0f0","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York and Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NYP and Columbia University Medical Center impermissibly disclosed ePHI of 6,800 patients due to a misconfigured server.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"8a5136b7-984c-416e-ab2f-40864c948c94","source_event_group_id":"a9ad209a-7f3e-48dd-9116-1c220961e314","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Coulton Milligan Architects, P.C.","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Coulton Milligan impermissibly disclosed PHI by leaving patient documents in a publicly accessible shred bin.","event_id":"a9ad209a-7f3e-48dd-9116-1c220961e314","severity_score":55},{"record_id":"84912be1-9209-47c5-8f3f-6c2084ff538d","source_event_group_id":"311f2163-43c6-4e76-9a7a-268586d0a1a9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sanford Health","state":"ND","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sanford Health impermissibly disclosed ePHI when unencrypted backup tapes were lost during transit.","event_id":"311f2163-43c6-4e76-9a7a-268586d0a1a9","severity_score":55},{"record_id":"82e719d1-e472-46a0-b3e5-1aac2490f79a","source_event_group_id":"0e35155d-dbca-492f-ab01-649c28f1c7f8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Utah Department of Health","state":"UT","individuals_affected":780000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Utah Department of Health's servers were hacked, compromising the ePHI of over 780,000 individuals.","event_id":"0e35155d-dbca-492f-ab01-649c28f1c7f8","severity_score":65},{"record_id":"7fad4dfd-f614-4be9-9e4a-498815830dfb","source_event_group_id":"e2c6ee7e-8456-4177-9b97-cd525b604155","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"21st Century Oncology, Inc.","state":"FL","individuals_affected":2200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"21st Century Oncology agreed to pay $2.3 million to resolve potential HIPAA violations after a hacker gained unauthorized access to its network.","event_id":"e2c6ee7e-8456-4177-9b97-cd525b604155","severity_score":90},{"record_id":"71eb57fc-fe94-4f4c-9d32-bd98ed2375a2","source_event_group_id":"3fd521fd-75d8-474d-92af-5e8f228f7805","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Shore Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Shore Hospital impermissibly disclosed PHI by sending unencrypted backup tapes containing patient data to an offsite vendor.","event_id":"3fd521fd-75d8-474d-92af-5e8f228f7805","severity_score":90},{"record_id":"6fc07e32-c04f-46b4-83b5-2a9aa7732082","source_event_group_id":"f042bba1-3831-49dc-8c7a-3664efa9bf54","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital Central California","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital Central California impermissibly disclosed ePHI on an unencrypted laptop stolen from an employee's car.","event_id":"f042bba1-3831-49dc-8c7a-3664efa9bf54","severity_score":55},{"record_id":"4f1cf844-e17a-4477-bb82-1c232603b502","source_event_group_id":"7dac2a00-cddf-4315-9d5f-153dba63c525","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Pennsylvania Health System","state":"PA","individuals_affected":520,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UPHS impermissibly disclosed PHI of 520 patients when a researcher posted detailed clinical information on a public website.","event_id":"7dac2a00-cddf-4315-9d5f-153dba63c525","severity_score":55},{"record_id":"386fa2a6-7302-490c-926a-ea55f88e5847","source_event_group_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Apria Healthcare Group Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Apria impermissibly disclosed PHI to a patient's employer, violating the minimum necessary rule.","event_id":"b9985834-ec69-4eb0-acfa-659bbb3eef7f","severity_score":55},{"record_id":"2983b030-d32e-40db-8dda-73452bd0d0d5","source_event_group_id":"2c5d694b-c87b-4b64-85af-1ff300d4fd35","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Homer Memorial Hospital","state":"LA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Homer Memorial Hospital impermissibly disclosed PHI when an independent contractor removed patient records for improper disposal.","event_id":"2c5d694b-c87b-4b64-85af-1ff300d4fd35","severity_score":55},{"record_id":"26ae736c-8b16-4cd2-9ec2-2b7627affd40","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth’s Medical Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth’s impermissibly disclosed PHI due to an unencrypted laptop being stolen, exposing ePHI.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"167fc8e3-b3c1-4758-999f-dad7ce00db42","source_event_group_id":"59941114-2151-4727-9101-35dee4a78493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University Medical Center","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CUMC and New York and Presbyterian Hospital impermissibly disclosed ePHI of 6,800 patients due to a misconfigured server.","event_id":"59941114-2151-4727-9101-35dee4a78493","severity_score":90},{"record_id":"14e99cd6-d597-409e-8563-2fcd7232a38e","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem Inc. agreed to pay $16 million for one of the largest health data breaches in U.S. history.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"112033b3-86ef-4e6b-a4ad-8fa74f6ac285","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cardionet, LLC","state":"PA","individuals_affected":13916,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cardionet agreed to pay $2.5 million to settle potential HIPAA violations after the theft of an unencrypted laptop.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"0d30338a-a473-4309-9c45-7032e51ded9d","source_event_group_id":"e2b2dfe4-676d-478b-b7b3-71848ca8815b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kaiser Foundation Health Plan of Georgia, Inc.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser impermissibly disclosed PHI by leaving a patient's medical chart in a public area of an emergency room.","event_id":"e2b2dfe4-676d-478b-b7b3-71848ca8815b","severity_score":55},{"record_id":"daa25788-18e3-42d1-95b5-209fabcb129a","source_event_group_id":"d18ebce7-53d6-4723-87ed-a137508c42ff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Barrio Comprehensive Family Health Care Center","state":"TX","individuals_affected":19971,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"d18ebce7-53d6-4723-87ed-a137508c42ff","severity_score":70},{"record_id":"be15de26-b4f0-4daf-94a6-d71893de8a8f","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"La Clinica de La Raza, Inc. (La Clinica)","state":"CA","individuals_affected":11403,"breach_submission_date":"2026-01-22","enforcement_action_date":null,"summary":"","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":70},{"record_id":"5c4fe214-d3ba-448c-85a3-00a2142401db","source_event_group_id":"055b225e-479a-49f1-892d-348a5cedacd7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Action of Staten Island","state":"NY","individuals_affected":501,"breach_submission_date":"2026-03-09","enforcement_action_date":null,"summary":"","event_id":"055b225e-479a-49f1-892d-348a5cedacd7","severity_score":30},{"record_id":"3022ef98-4d89-4e7a-b0b5-2673539fa35b","source_event_group_id":"155149eb-89d2-42bd-a052-9606cd1e9a89","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cedar Valley Hospice","state":"IA","individuals_affected":10666,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"155149eb-89d2-42bd-a052-9606cd1e9a89","severity_score":70},{"record_id":"4f8208e5-fae7-4c08-ae09-a7804584c784","source_event_group_id":"2c77cc2f-2fcf-4da8-a159-41803918beb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Option Care Health, Inc.","state":"IL","individuals_affected":1891,"breach_submission_date":"2026-04-06","enforcement_action_date":null,"summary":"","event_id":"2c77cc2f-2fcf-4da8-a159-41803918beb2","severity_score":50},{"record_id":"33d7dd20-e37d-4cee-a161-f954a453bc79","source_event_group_id":"6150d8dc-bc16-4db7-a88e-93a2360d4348","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Delta Medical Systems","state":"WI","individuals_affected":1574,"breach_submission_date":"2026-03-10","enforcement_action_date":null,"summary":"","event_id":"6150d8dc-bc16-4db7-a88e-93a2360d4348","severity_score":50},{"record_id":"1d52ff8f-6676-4da1-b938-26ec5a57de7c","source_event_group_id":"af97b08e-760d-4827-ab8e-47c5acd4731c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"illumifin Corporation","state":"MN","individuals_affected":5385,"breach_submission_date":"2026-03-10","enforcement_action_date":null,"summary":"","event_id":"af97b08e-760d-4827-ab8e-47c5acd4731c","severity_score":50},{"record_id":"18089ffa-af21-43e8-a39e-81c10e82cd40","source_event_group_id":"9c17a5d8-b814-4e56-9d51-9e035b478e58","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Exclusive Physicians PLLC","state":"MI","individuals_affected":58000,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"9c17a5d8-b814-4e56-9d51-9e035b478e58","severity_score":70},{"record_id":"159ec9b3-55d6-4ea7-a0fe-99db2709d530","source_event_group_id":"bf484486-5217-4d43-aa3a-b9149b894fb9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health Center of Southeast Texas","state":"TX","individuals_affected":2389,"breach_submission_date":"2026-01-14","enforcement_action_date":null,"summary":"","event_id":"bf484486-5217-4d43-aa3a-b9149b894fb9","severity_score":50},{"record_id":"54eaa179-f15c-453e-9c9f-efaaf1e60c01","source_event_group_id":"7ae0b7ee-e3d4-41a0-97a6-8df9ae3fafcc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heart South Cardiovascular Group","state":"AL","individuals_affected":46666,"breach_submission_date":"2026-04-06","enforcement_action_date":null,"summary":"","event_id":"7ae0b7ee-e3d4-41a0-97a6-8df9ae3fafcc","severity_score":70},{"record_id":"e583c266-c52c-4a1d-9647-0f783f53d2e3","source_event_group_id":"4e31bfef-8c1b-49e8-abe7-1653b0866c87","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bloom Circle, Inc. d/b/a Lena Health","state":"TX","individuals_affected":3651,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"4e31bfef-8c1b-49e8-abe7-1653b0866c87","severity_score":50},{"record_id":"ca2caab4-4b10-4841-883a-bd17f453bbdb","source_event_group_id":"401e5e26-ac0c-4e49-8b3d-f274c40ff632","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"County of Murray dba Murray County Medical Center","state":"MN","individuals_affected":5073,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"401e5e26-ac0c-4e49-8b3d-f274c40ff632","severity_score":50},{"record_id":"b2c75aa4-2aef-441d-b304-106b883e2411","source_event_group_id":"48ed157e-68a2-4643-9e2f-fcf15c291b44","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"A Path of Care Home Health and Hospice","state":"OK","individuals_affected":3849,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"48ed157e-68a2-4643-9e2f-fcf15c291b44","severity_score":50},{"record_id":"888008c3-2a52-4f23-b520-5a78a8355ec8","source_event_group_id":"51c853cc-4e46-44ef-b931-d1c28b91583f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Texas Behavioral Health Authority","state":"TX","individuals_affected":285086,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"51c853cc-4e46-44ef-b931-d1c28b91583f","severity_score":85},{"record_id":"6aefe6ea-ce39-48c0-9136-36f0dd1d8fe3","source_event_group_id":"4ee52e2c-2607-4567-8c17-b4557a92a7e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MedPeds Associates of Sarasota","state":"FL","individuals_affected":22017,"breach_submission_date":"2026-03-13","enforcement_action_date":null,"summary":"","event_id":"4ee52e2c-2607-4567-8c17-b4557a92a7e7","severity_score":70},{"record_id":"48f9e032-b616-4edb-ba2f-8d15b2ee5252","source_event_group_id":"e92db41b-9f77-4b72-a212-587965aa567b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UPMC","state":"PA","individuals_affected":687,"breach_submission_date":"2026-03-14","enforcement_action_date":null,"summary":"","event_id":"e92db41b-9f77-4b72-a212-587965aa567b","severity_score":30},{"record_id":"32a17cdb-eaec-4ccc-9fb8-dd433b3dc0a4","source_event_group_id":"11f06412-7cc1-4490-b6b8-ff7baaf773d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Illinois Dermatology","state":"IL","individuals_affected":160312,"breach_submission_date":"2026-04-02","enforcement_action_date":null,"summary":"","event_id":"11f06412-7cc1-4490-b6b8-ff7baaf773d3","severity_score":85},{"record_id":"cc0b5e30-6a0b-4cc9-ac71-b6b6a0ca7054","source_event_group_id":"fef1b298-fb2e-4d29-959b-551d9d86bda4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Village Heart Seller, PC d/b/a Village Heart & Vein Center","state":"FL","individuals_affected":687,"breach_submission_date":"2026-04-03","enforcement_action_date":null,"summary":"","event_id":"fef1b298-fb2e-4d29-959b-551d9d86bda4","severity_score":30},{"record_id":"66a004ef-16e2-443f-a462-9ece716643fa","source_event_group_id":"3e09f7e4-e5d0-4a9e-8077-886591c5dcd3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hospital Caribbean Medical Center","state":"","individuals_affected":92000,"breach_submission_date":"2026-04-06","enforcement_action_date":null,"summary":"","event_id":"3e09f7e4-e5d0-4a9e-8077-886591c5dcd3","severity_score":70},{"record_id":"59e04f5d-ec10-4d12-b6fd-ec9f0390ca35","source_event_group_id":"d519e623-6a1f-4228-9aa6-2018cea9ffe8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SSM Health","state":"OK","individuals_affected":597,"breach_submission_date":"2026-03-11","enforcement_action_date":null,"summary":"","event_id":"d519e623-6a1f-4228-9aa6-2018cea9ffe8","severity_score":30},{"record_id":"2b67d2f7-ba2d-4e6e-881b-743b079dc79e","source_event_group_id":"673c16aa-5666-4f87-84cc-cae29a183789","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Saint Anthony Hospital","state":"IL","individuals_affected":146108,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"673c16aa-5666-4f87-84cc-cae29a183789","severity_score":85},{"record_id":"8dae2197-f9cf-4682-a60d-e453c4701cca","source_event_group_id":"66f7cbff-9232-4f8f-991a-ec163114bcc1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Team Select","state":"AZ","individuals_affected":949,"breach_submission_date":"2026-03-12","enforcement_action_date":null,"summary":"","event_id":"66f7cbff-9232-4f8f-991a-ec163114bcc1","severity_score":30},{"record_id":"f7a57a10-3418-4072-b8bc-f7f09aebeeba","source_event_group_id":"f1b306e9-d085-4682-911a-a4aa4238bc91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Heartland Community Bank","state":"MO","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Heartland Community Bank, a business associate, settled with OCR after a server containing the PHI of 500 individuals was impermissibly disclosed due to improper disposal. This was the first settlement with a business associate.","event_id":"f1b306e9-d085-4682-911a-a4aa4238bc91","severity_score":80},{"record_id":"e1ed9cdc-3c6a-480b-8105-c2d89cdfcb84","source_event_group_id":"6a6455aa-4b95-420f-ab34-6bac658a78d6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Guam Department of Public Health and Social Services (GDPHSS)","state":"GU","individuals_affected":9200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"GDPHSS settled with OCR after an unencrypted USB drive containing the PHI of 9,200 individuals was stolen. The PHI included patient names, Social Security Numbers, and other personal information.","event_id":"6a6455aa-4b95-420f-ab34-6bac658a78d6","severity_score":65},{"record_id":"c6c235ad-96a5-4cb8-ba34-8e82f61c2cb4","source_event_group_id":"27e3e8ce-47e2-42bb-8497-9cf2d6a38417","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Best Practice Automation (BPA)","state":"CA","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BPA settled with OCR after a laptop containing unsecured PHI of 7,000 individuals was stolen from an employee's car. The laptop was unencrypted.","event_id":"27e3e8ce-47e2-42bb-8497-9cf2d6a38417","severity_score":50},{"record_id":"baab65a0-04a6-48f5-b0d7-5cb5015c7a09","source_event_group_id":"90e58cae-0c9e-4ecf-a954-2747d0fd090c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Health Department","state":"WA","individuals_affected":1181,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County Health Department settled with OCR after a breach involving unsecured PHI on a publicly accessible server. The PHI of 1,181 patients was exposed.","event_id":"90e58cae-0c9e-4ecf-a954-2747d0fd090c","severity_score":65},{"record_id":"b7065c53-b63e-4c06-971d-93b4613fbe35","source_event_group_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (Mass General)","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Mass General settled with OCR after a physician impermissibly disclosed the PHI of 192 patients on a subway. The PHI included HIV status, drug prescriptions, and other sensitive information.","event_id":"3ff64b34-cf92-4186-8319-623cf8d289bc","severity_score":80},{"record_id":"a29b1814-2f9f-43e1-8a95-a5d208936c33","source_event_group_id":"147bcf43-28a0-4f1e-9eb5-a6fbdc113980","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hastings Endoscopy Center, Ltd.","state":"NE","individuals_affected":1399,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hastings Endoscopy Center settled with OCR after a breach involving the impermissible disclosure of the PHI of 1,399 patients for marketing purposes.","event_id":"147bcf43-28a0-4f1e-9eb5-a6fbdc113980","severity_score":80},{"record_id":"9c497104-7b91-494e-95b6-c7c505e6cfbc","source_event_group_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Erie County Medical Center (ECMC)","state":"NY","individuals_affected":6712,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ECMC settled with OCR after an unencrypted backup tape containing the PHI of 6,712 patients was lost. The data included names, addresses, diagnoses, and other treatment information.","event_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","severity_score":90},{"record_id":"844b88c4-6ee7-49be-995b-7285a502a375","source_event_group_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkadelphia Human Services Center","state":"AR","individuals_affected":468,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Arkadelphia Human Services Center settled with OCR after a flash drive containing the PHI of 468 individuals was lost. The flash drive was not encrypted.","event_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","severity_score":65},{"record_id":"7d460415-dfc7-4103-b7b1-3f455a0dd670","source_event_group_id":"c5651980-a2bb-4ca2-b6c5-cb2f8c88bcdd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lakeshore Medical Clinic, S.C.","state":"WI","individuals_affected":1016,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lakeshore Medical Clinic settled with OCR after an unencrypted laptop containing the PHI of 1,016 individuals was stolen.","event_id":"c5651980-a2bb-4ca2-b6c5-cb2f8c88bcdd","severity_score":50},{"record_id":"5f036b21-ea22-4d08-b5e1-0e3849b1cb7a","source_event_group_id":"bc32feb2-0d49-497f-b74e-98245b7c4c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kelsey-Seybold Clinic, P.A.","state":"TX","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kelsey-Seybold Clinic settled with OCR after an unencrypted laptop containing the PHI of 5,000 individuals was stolen from an employee's car.","event_id":"bc32feb2-0d49-497f-b74e-98245b7c4c1f","severity_score":90},{"record_id":"41fa16c0-5dbf-4826-91b2-b09510b2af9c","source_event_group_id":"52157932-f3ec-4dcb-a41c-4c47751f0841","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Eye Care","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Alaska Eye Care settled with OCR after a flash drive containing the PHI of 2,700 individuals was stolen. The flash drive was unencrypted.","event_id":"52157932-f3ec-4dcb-a41c-4c47751f0841","severity_score":65},{"record_id":"082d87bd-9793-4e35-bd4f-92bc9321f7cc","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services","state":"AK","individuals_affected":2740,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anchorage Community Mental Health Services settled with OCR after a malware infection compromised the PHI of 2,740 individuals stored on its IT systems.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"ced2d907-4bf4-47ca-a93c-4f870c145244","source_event_group_id":"bca7b616-7a81-4ab7-9127-25025cfba9c0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EDINGER MEDICAL GROUP","state":"CA","individuals_affected":1246,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"bca7b616-7a81-4ab7-9127-25025cfba9c0","severity_score":50},{"record_id":"6c5467f1-04c0-4b78-a767-ad508b2abbc3","source_event_group_id":"a9df153f-7236-4f21-8da7-f78b0c7c4c5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Longevity Health Plan","state":"FL","individuals_affected":15000,"breach_submission_date":"2026-03-04","enforcement_action_date":null,"summary":"","event_id":"a9df153f-7236-4f21-8da7-f78b0c7c4c5e","severity_score":70},{"record_id":"4a5de1d5-a76b-4c85-bdd6-979b2908f0be","source_event_group_id":"f6150832-c40c-4ded-a716-075bdf5bc6d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Colorado Allergy & Asthma Centers, P.C.","state":"CO","individuals_affected":2063,"breach_submission_date":"2026-03-06","enforcement_action_date":null,"summary":"","event_id":"f6150832-c40c-4ded-a716-075bdf5bc6d2","severity_score":50},{"record_id":"f8bd81d6-c944-4675-8d59-73fa9644a062","source_event_group_id":"e73b0057-132e-44a4-b0aa-ac960c1024d5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Virginia Department of Behavioral Health and Developmental Services","state":"VA","individuals_affected":724,"breach_submission_date":"2026-04-07","enforcement_action_date":null,"summary":"","event_id":"e73b0057-132e-44a4-b0aa-ac960c1024d5","severity_score":30},{"record_id":"ef40d3b6-2482-4d73-84be-1dc651c913d0","source_event_group_id":"3f4f55aa-646b-4d8f-94cf-1445e99fcf64","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Guardian Home Health Care, LLC","state":"MA","individuals_affected":613,"breach_submission_date":"2026-03-11","enforcement_action_date":null,"summary":"","event_id":"3f4f55aa-646b-4d8f-94cf-1445e99fcf64","severity_score":30},{"record_id":"7ae54847-d71c-471f-b49e-0372ca7ad7e1","source_event_group_id":"c75297aa-2c02-4618-ada7-477880161d8d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Nurse","state":"MA","individuals_affected":6746,"breach_submission_date":"2026-03-12","enforcement_action_date":null,"summary":"","event_id":"c75297aa-2c02-4618-ada7-477880161d8d","severity_score":50},{"record_id":"cb017f46-1ae3-43b3-9c15-209f9abe6d73","source_event_group_id":"f4087348-e051-4993-89c2-276ca951c642","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Heartland Dental, Inc.","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Heartland Dental impermissibly disclosed PHI to a business associate without a business associate agreement in place. OCR's investigation revealed that Heartland Dental failed to enter into a business associate agreement with a vendor for its electronic health records system.","event_id":"f4087348-e051-4993-89c2-276ca951c642","severity_score":80},{"record_id":"ad4d8ff1-9069-43ca-a9c8-b2f0907ae26f","source_event_group_id":"0f8fc494-ddbc-4c9d-97ea-46dce7bf240f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Net, Inc.","state":"CT","individuals_affected":1946322,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Net experienced a breach involving the loss of multiple unencrypted servers containing ePHI of 1.9 million patients. OCR found a failure to conduct an accurate and thorough risk analysis and implement device and media controls.","event_id":"0f8fc494-ddbc-4c9d-97ea-46dce7bf240f","severity_score":90},{"record_id":"729dfbb8-0027-4ef0-98ae-c80154cbb8b5","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary and Massachusetts Eye and Ear Associates, Inc.","state":"MA","individuals_affected":3500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts Eye and Ear Infirmary and Associates experienced a breach involving the theft of an unencrypted laptop containing ePHI of 3,500 patients. OCR's investigation found a lack of risk analysis, risk management, and device and media controls.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"2deac2be-c797-4093-8d77-bc1a8fbdf3f1","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NewYork-Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NewYork-Presbyterian Hospital, along with Columbia University, failed to protect the ePHI of 6,800 patients. OCR found a failure to conduct an accurate and thorough risk analysis, implement security management processes and audit controls.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"04fe3cc8-ea15-4c9d-bb87-7164ae01b105","source_event_group_id":"bb9cfd3f-31ce-4680-9309-40cc541b1bf5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Iowa Health and Human Services","state":"IA","individuals_affected":3340,"breach_submission_date":"2026-01-06","enforcement_action_date":null,"summary":"","event_id":"bb9cfd3f-31ce-4680-9309-40cc541b1bf5","severity_score":50},{"record_id":"9920cd71-f414-4b47-a23e-9b129563318b","source_event_group_id":"d6586a8d-2808-48d8-9f44-c1576e31708c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"180 Health Partners, Inc.","state":"MD","individuals_affected":1167,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"d6586a8d-2808-48d8-9f44-c1576e31708c","severity_score":50},{"record_id":"c088495e-1c67-4e4f-bcd8-e41cbf5ea391","source_event_group_id":"af8d4ebf-efe6-42bd-bdbc-6b7e87ce6f1e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Revenue Cycle Support Group","state":"TX","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Revenue Cycle Support Group (RCSG) after RCSG submitted a breach report involving the protected health information (PHI) of 600 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"af8d4ebf-efe6-42bd-bdbc-6b7e87ce6f1e","severity_score":50},{"record_id":"aa44dd3b-3773-488a-a117-f26d7464187e","source_event_group_id":"3ff8c01f-d2d9-4a6a-a008-48d3e1783532","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seward County Memorial Hospital","state":"NE","individuals_affected":3300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Seward County Memorial Hospital (SCMH) after SCMH submitted a breach report involving the protected health information (PHI) of 3300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"3ff8c01f-d2d9-4a6a-a008-48d3e1783532","severity_score":50},{"record_id":"a2b34d86-3115-4358-8a54-5aa121188c23","source_event_group_id":"16487d7d-4119-498f-bc9e-7d83ab4f8231","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Durango Orthopedics and Sports Medicine, PC","state":"CO","individuals_affected":300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Durango Orthopedics and Sports Medicine, PC (Durango) after Durango submitted a breach report involving the protected health information (PHI) of 300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"16487d7d-4119-498f-bc9e-7d83ab4f8231","severity_score":50},{"record_id":"8d69c051-e309-44bd-a83c-2dbc39e2b0d7","source_event_group_id":"34303a20-9742-46ce-8129-f6d975324b0d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Enterprise Medical Imaging, LLC","state":"AL","individuals_affected":2300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Enterprise Medical Imaging, LLC (EMI) after EMI submitted a breach report involving the protected health information (PHI) of 2300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"34303a20-9742-46ce-8129-f6d975324b0d","severity_score":50},{"record_id":"6ae78789-d3d8-4db7-80ad-bb7f9dddaf1b","source_event_group_id":"9f3e7a2c-ebd6-4f8d-a2aa-6ecec53bc8c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excel Therapeuatic Services, Inc.","state":"LA","individuals_affected":300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Excel Therapeuatic Services, Inc. (Excel) after Excel filed a breach report indicating that the protected health information (PHI) of 300 individuals was impermissibly disclosed through an email server. An unauthorized individual gained access to an employee’s email account.","event_id":"9f3e7a2c-ebd6-4f8d-a2aa-6ecec53bc8c7","severity_score":50},{"record_id":"570736b8-4dc2-4514-8e8c-7df916eb485e","source_event_group_id":"23cf69d8-0710-4c23-8e1c-b6be0864e4cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Palo Alto Networks","state":"CA","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Palo Alto Networks (Palo Alto) after Palo Alto submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"23cf69d8-0710-4c23-8e1c-b6be0864e4cb","severity_score":50},{"record_id":"31f09445-8fb5-40b5-a508-bffcc826a0a4","source_event_group_id":"5d64bab3-8704-433d-912e-b700f3f5676f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Grimes County Medical Center","state":"TX","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Grimes County Medical Center (GCMC) after GCMC submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"5d64bab3-8704-433d-912e-b700f3f5676f","severity_score":50},{"record_id":"30f66883-8ed4-4f72-a479-fbcacddbda1d","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Healthcare","state":"VA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Sentara Healthcare (Sentara) after Sentara submitted a breach report involving the protected health information (PHI) of 1000 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":50},{"record_id":"28b2ea61-2445-4545-a272-b27b23dc7142","source_event_group_id":"edaa1c1f-3b04-4e79-82d9-0d6ea69cb735","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alliance Spine and Pain Centers","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Alliance Spine and Pain Centers (Alliance Spine) because of a complaint alleging that Alliance Spine impermissibly disclosed a patient’s HIV status. The disclosure was made to the patient’s employer without their authorization.","event_id":"edaa1c1f-3b04-4e79-82d9-0d6ea69cb735","severity_score":50},{"record_id":"f98ce30f-710e-4807-ae2d-590f05b0b111","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, Los Angeles Health System","state":"CA","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the Regents of the University of California, Los Angeles Health System (UCLA Health) after it filed a breach report involving unauthorized access to the protected health information (PHI) of 12,000 individuals.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"f3aa3a21-18be-448d-87b5-a4f05c183d28","source_event_group_id":"e7cf8163-b78e-4ff0-aca6-9f0e04fa6eaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allentown Cardiac and Commercial Diagnostic Associates, Inc.","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Allentown Cardiac and Commercial Diagnostic Associates, Inc. (Allentown) after receiving a complaint that Allentown impermissibly provided an individual’s protected health information (PHI) to their employer without authorization.","event_id":"e7cf8163-b78e-4ff0-aca6-9f0e04fa6eaa","severity_score":50},{"record_id":"f1b0a3f3-3b86-4f39-bb50-8864ffb881dd","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, San Francisco","state":"CA","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the University of California, San Francisco (UCSF) after UCSF submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":90},{"record_id":"efed5350-fad0-4d3a-928f-36d8ebf8873e","source_event_group_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson & Coker, LLC","state":"GA","individuals_affected":3700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Jackson & Coker, LLC (Jackson & Coker) after it submitted a breach report involving the protected health information (PHI) of 3700 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","severity_score":50},{"record_id":"eceff774-13f0-4932-9e97-4f0c634f2a30","source_event_group_id":"edb19dcb-085d-4b3f-a7d1-0d54145e8acc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite IT Partners","state":"GA","individuals_affected":490,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Elite IT Partners (Elite IT) after Elite IT submitted a breach report involving the protected health information (PHI) of 490 individuals.","event_id":"edb19dcb-085d-4b3f-a7d1-0d54145e8acc","severity_score":50},{"record_id":"ea28bcb0-bea0-4304-9ab8-8a848ffbc10c","source_event_group_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CoPilot Provider Support Services","state":"NY","individuals_affected":200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated CoPilot Provider Support Services (CoPilot) after CoPilot submitted a breach report involving the protected health information (PHI) of 200 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"dc5db2f0-fd67-42a0-8cf5-d2f2e0fa9553","severity_score":50},{"record_id":"e0f89eac-aeb2-42d8-bff8-ce50678f57ba","source_event_group_id":"4a443a50-ef79-43f8-90da-6f87348a1c78","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group P.C. d/b/a Digestive Disease Group","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medical Group P.C. d/b/a Digestive Disease Group (DDG) after receiving a complaint alleging that DDG impermissibly disclosed a patient’s protected health information (PHI) to news media. The PHI was shared with a local news station.","event_id":"4a443a50-ef79-43f8-90da-6f87348a1c78","severity_score":50},{"record_id":"d9c0d4cc-0ed0-45d8-af3b-a46db637e46e","source_event_group_id":"9eb8a1f1-ddfb-49b0-a75a-fb2bcb895954","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Solara Medical Supplies, LLC","state":"CA","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Solara Medical Supplies, LLC (Solara) after Solara submitted a breach report indicating that the protected health information (PHI) of 100 individuals was impermissibly disclosed through an email server. An unauthorized individual gained access to an employee’s email account.","event_id":"9eb8a1f1-ddfb-49b0-a75a-fb2bcb895954","severity_score":50},{"record_id":"d24bdef0-6df5-4a07-a69d-957ba547d5b7","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health, Inc.","state":"MA","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Beth Israel Lahey Health, Inc. (Beth Israel) after Beth Israel submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":50},{"record_id":"cf86f443-a8f1-4aca-ae93-5b04f02e85d1","source_event_group_id":"46225736-feda-4550-bd16-fba8031035fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Mapleton Community Home","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Mapleton Community Home (Mapleton) after receiving a complaint alleging that Mapleton impermissibly disclosed a patient’s protected health information (PHI). The PHI was impermissibly shared with the patient’s family.","event_id":"46225736-feda-4550-bd16-fba8031035fe","severity_score":50},{"record_id":"c150b7ab-2b12-4a59-8de8-561172b2111b","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Services, LLC","state":"PR","individuals_affected":16604,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Triple-S Management Services, LLC (Triple-S) because of a breach involving the protected health information (PHI) of 16,604 individuals. The investigation revealed that Triple-S failed to implement appropriate administrative, physical, and technical safeguards.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"b8101d75-118d-4df9-83e9-8710a62d2839","source_event_group_id":"23ccd8a4-c7ea-48bb-819d-1321bd896fb9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seven Hills Hospital","state":"NV","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Seven Hills Hospital (Seven Hills) after Seven Hills submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"23ccd8a4-c7ea-48bb-819d-1321bd896fb9","severity_score":50},{"record_id":"abf91ff2-2cf0-4e07-a51f-1c39ce7bd011","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences (UAMS)","state":null,"individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UAMS settled with OCR after a data breach involving the protected health information of 10,000 individuals.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":80},{"record_id":"aa2e1dfb-3e97-4d01-894f-7045eeba285a","source_event_group_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Catholic Health Care Services (CHCS) after it filed a breach report indicating that the protected health information (PHI) of 412 individuals was exposed. The PHI was stored on mobile devices that were unencrypted and stolen.","event_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","severity_score":80},{"record_id":"aa14f2aa-c51c-4f45-af46-ea32ff870acd","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Filefax Inc.","state":"IL","individuals_affected":2100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Filefax, Inc. (Filefax) after receiving a complaint regarding the impermissible disclosure of protected health information (PHI). Filefax left the PHI of 2100 individuals in an unlocked dumpster.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":50},{"record_id":"a5f19644-6835-4e76-9ce1-445a37d86cc2","source_event_group_id":"10860b3e-16c1-4cdc-9fc1-a7437bb080c3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OCHIN, Inc.","state":"OR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR issued a CMP against OCHIN, Inc. (OCHIN) because OCHIN failed to respond to OCR’s data requests as part of a compliance review.","event_id":"10860b3e-16c1-4cdc-9fc1-a7437bb080c3","severity_score":65},{"record_id":"8f34e29b-1f7d-4280-899c-6d28f6b15679","source_event_group_id":"f4d88a8b-8916-40b1-9263-00e09784a77c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"SCL Health System","state":"CO","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated SCL Health System (SCL Health) after SCL Health submitted a breach report involving the protected health information (PHI) of 100 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"f4d88a8b-8916-40b1-9263-00e09784a77c","severity_score":50},{"record_id":"8a339b5e-25d5-4b03-bcc4-73c834865b3c","source_event_group_id":"1250549b-e9ad-4dfb-a6ef-9ee85900c9c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health System","state":null,"individuals_affected":62000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health System settled with OCR following two data breaches involving the impermissible disclosure of electronic protected health information (ePHI) of over 62,000 individuals.","event_id":"1250549b-e9ad-4dfb-a6ef-9ee85900c9c8","severity_score":90},{"record_id":"8465110a-4217-440f-b7e0-e3b40a52df08","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine","state":"WA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the University of Washington Medicine (UWM) after UWM submitted a breach report involving the protected health information (PHI) of 1000 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":80},{"record_id":"7c8ec058-9c95-42b1-9b33-116782827398","source_event_group_id":"a2275fe7-09e9-48be-8fcd-dff6beee60a9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"PA Department of Human Services","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR issued a CMP against the Pennsylvania Department of Human Services (PA DHS) because PA DHS failed to respond to OCR’s data requests as part of a compliance review. In total, PA DHS was penalized $250,000.","event_id":"a2275fe7-09e9-48be-8fcd-dff6beee60a9","severity_score":65},{"record_id":"77d27624-8e90-46af-ae42-aa814192857a","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology and Laser Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated New England Dermatology and Laser Center (NEDLC) after receiving a complaint alleging that NEDLC impermissibly disclosed a patient’s protected health information (PHI) in response to a negative online review.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":50},{"record_id":"6cfb751b-ca10-40c0-9fa5-64b63797a4ad","source_event_group_id":"9183d88a-6ad8-4c2f-bdba-bcad3e7391c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MD Now Urgent Care","state":"FL","individuals_affected":1300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated MD Now Urgent Care (MD Now) after it submitted a breach report involving the protected health information (PHI) of 1300 individuals. An unencrypted laptop was stolen from a regional manager’s car.","event_id":"9183d88a-6ad8-4c2f-bdba-bcad3e7391c7","severity_score":50},{"record_id":"483e3bdc-2b5e-4ca4-bbf4-b2f0ed69ca75","source_event_group_id":"853e3828-ab0a-4fbc-afa8-cbf0b8a89c1b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"RMA resolution, Inc. d/b/a Regional Medical Associates","state":"NJ","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated RMA resolution, Inc. (RMA) after it reported a breach involving its electronic medical records system. The system was impermissibly accessed by an unknown third-party, and the protected health information (PHI) of 20,000 individuals was exposed.","event_id":"853e3828-ab0a-4fbc-afa8-cbf0b8a89c1b","severity_score":65},{"record_id":"449231d2-91b8-4e24-93ba-2efea6b52f34","source_event_group_id":"c5ab9bdf-d9bd-4ea2-86de-2de56e1d273b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kentucky Spirit Health Plan, Inc.","state":"KY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR issued a CMP against Kentucky Spirit Health Plan, Inc. (Kentucky Spirit) because Kentucky Spirit failed to respond to OCR’s data requests as part of a compliance review.","event_id":"c5ab9bdf-d9bd-4ea2-86de-2de56e1d273b","severity_score":90},{"record_id":"40185f6d-1509-4a0f-bd1e-25242e048f78","source_event_group_id":"e6024270-fa02-43a3-9ab3-83fead8b96e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"WEST DERMATOLOGY","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated WEST DERMATOLOGY after receiving a complaint alleging that WEST DERMATOLOGY impermissibly disclosed a patient’s protected health information (PHI) on Yelp. An employee posted a response to a negative online review that contained PHI.","event_id":"e6024270-fa02-43a3-9ab3-83fead8b96e6","severity_score":50},{"record_id":"384733d4-e41f-43c7-b6f7-54fb20b3eec6","source_event_group_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Medical Center-Marble Falls","state":"TX","individuals_affected":300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Baylor Scott & White Medical Center-Marble Falls (Baylor Scott & White) after Baylor Scott & White submitted a breach report involving the protected health information (PHI) of 300 individuals. An unauthorized individual gained access to an employee’s email account.","event_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","severity_score":50},{"record_id":"33695c9a-09af-4036-91fb-df84255e459d","source_event_group_id":"ebadbd2e-e494-46a5-870a-a4f96e0e440d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Variety Care, Inc.","state":"OK","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Variety Care, Inc. (Variety Care) after Variety Care filed a breach report stating that the protected health information (PHI) of 1000 individuals was impermissibly disclosed. Variety Care used an unsecured online patient portal.","event_id":"ebadbd2e-e494-46a5-870a-a4f96e0e440d","severity_score":50},{"record_id":"2e41ac32-b506-4460-863c-c15f8de34ff9","source_event_group_id":"936a9bb0-ac7c-45bf-ba9b-bd0f05092535","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced EMR","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advanced EMR after receiving a complaint alleging that Advanced EMR impermissibly disclosed a patient’s protected health information (PHI) on Yelp. An employee posted a response to a negative online review that contained PHI.","event_id":"936a9bb0-ac7c-45bf-ba9b-bd0f05092535","severity_score":50},{"record_id":"26b23509-d82f-4549-9968-1ee2d66b66e5","source_event_group_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Physicians","state":"IN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Indiana University Health Physicians (IU Health) after it learned through media reports that a patient’s protected health information (PHI) was impermissibly disclosed. A local news crew was allowed to film a patient in a trauma bay without authorization.","event_id":"61ccbc6f-777f-42ea-bcae-0445c57dd573","severity_score":90},{"record_id":"15029c1d-93d2-4483-acbc-101333ba1560","source_event_group_id":"24232216-a743-4d8a-b42b-d03ce9e3dcb3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Correctional Health Services","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Correctional Health Services (CHS) after receiving a complaint alleging that CHS impermissibly disclosed protected health information (PHI) to news media. The PHI of patients at a local jail was shared.","event_id":"24232216-a743-4d8a-b42b-d03ce9e3dcb3","severity_score":50},{"record_id":"127f84ec-d2a9-4543-95cd-2d65357432ef","source_event_group_id":"95aaf866-e45b-4fbe-8081-066d64981512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LifePoint Health","state":"TN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated LifePoint Health (LifePoint) because of a complaint alleging that LifePoint impermissibly disclosed a patient’s protected health information (PHI) to news media without authorization.","event_id":"95aaf866-e45b-4fbe-8081-066d64981512","severity_score":80},{"record_id":"0376feac-7219-435c-8998-01a33f2d531f","source_event_group_id":"0dfa9f17-da33-4714-b504-b6ddc098a4b9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Freedom Health, Inc. and Optimum HealthCare, Inc.","state":"FL","individuals_affected":300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Freedom Health, Inc. and Optimum HealthCare, Inc. (Freedom/Optimum) after Freedom/Optimum submitted a breach report involving the protected health information (PHI) of 300 individuals. An unauthorized individual impermissibly accessed data stored on a network server.","event_id":"0dfa9f17-da33-4714-b504-b6ddc098a4b9","severity_score":65},{"record_id":"c658d2a9-6996-4cf4-9c64-e890038af08f","source_event_group_id":"f950c149-3a8a-487c-8c67-1fa3388d54cd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kin Counseling Services PLLC","state":"CO","individuals_affected":500,"breach_submission_date":"2026-03-02","enforcement_action_date":null,"summary":"","event_id":"f950c149-3a8a-487c-8c67-1fa3388d54cd","severity_score":30},{"record_id":"aeb07bb5-29a6-4de1-b75f-bd74aa9312e5","source_event_group_id":"bb3d162a-1ad2-4619-8a84-6a989280a0e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Associated Physicians, P.C.","state":"UT","individuals_affected":50640,"breach_submission_date":"2026-04-03","enforcement_action_date":null,"summary":"","event_id":"bb3d162a-1ad2-4619-8a84-6a989280a0e9","severity_score":70},{"record_id":"a7f488bf-45e2-4891-98c0-4685d853907e","source_event_group_id":"a8b07651-133b-4d85-b51e-aebfde68393c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pines of Sarasota Healthcare, LLC","state":"FL","individuals_affected":1258,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"a8b07651-133b-4d85-b51e-aebfde68393c","severity_score":50},{"record_id":"69160163-b967-4822-b0b4-af39f789c820","source_event_group_id":"28d7297a-b616-4d95-8fac-f05920e55a81","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tieu Dental Corporation","state":"CA","individuals_affected":8918,"breach_submission_date":"2026-03-05","enforcement_action_date":null,"summary":"","event_id":"28d7297a-b616-4d95-8fac-f05920e55a81","severity_score":50},{"record_id":"ccbd2b36-8a1c-43b4-8d9c-23d01947a9d0","source_event_group_id":"2b326932-72f2-4ef4-9d84-5c0f97173e58","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South West Cardiovascular Institute","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South West Cardiovascular Institute paid $65,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"2b326932-72f2-4ef4-9d84-5c0f97173e58","severity_score":50},{"record_id":"c6f84181-f396-4869-9b45-431abf9d1c27","source_event_group_id":"f02b6697-0ad3-410b-96b8-11d5185b3ac9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Health Networks","state":"CA","individuals_affected":1600000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MHN paid $2,250,000 to settle potential HIPAA violations after a data breach exposed the PHI of millions of individuals.","event_id":"f02b6697-0ad3-410b-96b8-11d5185b3ac9","severity_score":90},{"record_id":"c36f50b9-e186-4fda-84dd-aef25c0f800b","source_event_group_id":"6e4e66ab-fac4-460c-90a1-83ac69fea408","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The CHSPSC LLC","state":"TN","individuals_affected":6100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHSPSC LLC paid $2,300,000 to settle potential HIPAA violations after a cyberattack exposed PHI of 6.1 million patients.","event_id":"6e4e66ab-fac4-460c-90a1-83ac69fea408","severity_score":90},{"record_id":"b4bbfdaf-9907-42b6-87ed-c5c163df4e91","source_event_group_id":"f7d64604-d639-433e-a4a6-4ced2d6bd8fd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachwood Smiles","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachwood Smiles paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations for impermissibly disclosing patient PHI on social media.","event_id":"f7d64604-d639-433e-a4a6-4ced2d6bd8fd","severity_score":50},{"record_id":"a1b76be0-dce8-44f9-97b9-5da4e69663b8","source_event_group_id":"37ab6a0d-3df0-41d7-bc5d-1cdc621180cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wake Health Medical Group","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wake Health Medical Group paid $3,500,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI.","event_id":"37ab6a0d-3df0-41d7-bc5d-1cdc621180cf","severity_score":90},{"record_id":"9224c2fd-1c72-4268-89b9-c0389f3d9327","source_event_group_id":"5b4974f6-0752-437c-87ba-86b3298c5d9c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Conviva Care Center","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Conviva Care Center paid $60,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"5b4974f6-0752-437c-87ba-86b3298c5d9c","severity_score":50},{"record_id":"8cf9b2be-eaa0-4c3b-a60d-8f57de101fe1","source_event_group_id":"66cf9835-d6af-4d03-8ee6-bcb727f468b3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Medical Center","state":"CO","individuals_affected":340000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Medical Center paid $3,200,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach impacting 340,000 patients.","event_id":"66cf9835-d6af-4d03-8ee6-bcb727f468b3","severity_score":90},{"record_id":"8b7c1c8f-2826-4367-a581-3fbcfb840145","source_event_group_id":"6805545a-3493-4bf4-97ac-4a9b22fa6652","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sheridan Healthcorp, Inc.","state":"FL","individuals_affected":307000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sheridan Healthcorp, Inc. paid $3,000,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach exposed PHI of 307,000 patients.","event_id":"6805545a-3493-4bf4-97ac-4a9b22fa6652","severity_score":90},{"record_id":"889cd820-f955-4983-9ecc-eefdc2b73787","source_event_group_id":"67882217-01ea-4893-a0ee-1396f56fa417","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Morley Family Chiropractic","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Morley Family Chiropractic paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"67882217-01ea-4893-a0ee-1396f56fa417","severity_score":50},{"record_id":"8537fefc-64e7-46ac-8f9d-22693076f48b","source_event_group_id":"b767715d-e2be-42e9-9186-49434e285dcd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Joint Commission","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Joint Commission paid $1,600,000 and agreed to a corrective action plan to settle potential HIPAA violations after misdirecting faxes containing PHI.","event_id":"b767715d-e2be-42e9-9186-49434e285dcd","severity_score":90},{"record_id":"56759ff2-e29d-4d55-b892-c307dfcbe238","source_event_group_id":"5daa5450-766c-4cce-a1c6-989f105e3afc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Coastal Family Dermatology","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Coastal Family Dermatology paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"5daa5450-766c-4cce-a1c6-989f105e3afc","severity_score":50},{"record_id":"4bd0907a-0e47-4148-9b23-71f28b7989ee","source_event_group_id":"561ab794-4985-41ad-9870-65aa3606bdb8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Personal Touch Home Care","state":"NY","individuals_affected":154000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Personal Touch Home Care paid $2,200,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach impacting 154,000 patients.","event_id":"561ab794-4985-41ad-9870-65aa3606bdb8","severity_score":90},{"record_id":"410dfb94-dce9-4b6c-89e6-f5ee30afc30e","source_event_group_id":"71421252-df04-486b-85ea-5dc26096d126","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCLA Health","state":"CA","individuals_affected":4500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health paid $2,000,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach impacting 4.5 million individuals.","event_id":"71421252-df04-486b-85ea-5dc26096d126","severity_score":90},{"record_id":"3dc954b1-baf3-4f8c-989b-6b264ceffba7","source_event_group_id":"d822f4e7-190f-448f-85de-9b8a62429b44","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Green Springs Internal Medicine","state":"AL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Green Springs Internal Medicine paid $30,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"d822f4e7-190f-448f-85de-9b8a62429b44","severity_score":50},{"record_id":"29ae7772-f36c-4193-a5d1-fb2306956282","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital & Medical Center of Omaha","state":"NE","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital & Medical Center of Omaha paid $500,000 and agreed to a corrective action plan to settle potential HIPAA violations after disclosing PHI to a vendor without a BAA.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":65},{"record_id":"2803a193-51c9-494a-86b4-60dc1d53a070","source_event_group_id":"f4751bad-5f8b-4810-adec-f826ff7b6499","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Fulton Medical Center","state":"GA","individuals_affected":2988188,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Fulton Medical Center paid $1,980,000 to resolve potential HIPAA violations arising from a data breach that impacted nearly 3 million individuals.","event_id":"f4751bad-5f8b-4810-adec-f826ff7b6499","severity_score":90},{"record_id":"15adc95a-a939-4b9a-b154-62847bbbf5fc","source_event_group_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Danbury Hospital","state":"CT","individuals_affected":196800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Danbury Hospital paid $2,184,000 to resolve potential HIPAA violations arising from a data breach that impacted nearly 200,000 individuals.","event_id":"ba288fa3-50dd-4492-9edd-b2a511859a5c","severity_score":90},{"record_id":"1220fdc8-c724-467e-8b81-38046da1336c","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc.","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MIE paid $3,500,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach exposed PHI of 3.9 million individuals.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":90},{"record_id":"ecbbce40-a5c7-457a-9476-950a7dbb6243","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children's Digestive Health","state":"IL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCDH, a business associate, settled with OCR for failing to have a business associate agreement with its subcontractor and for not conducting an accurate and thorough risk analysis.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"e76f7d4b-db52-4ef0-b13a-3e3931c6ac7e","source_event_group_id":"edcfc0c0-6c9e-453c-99a3-bb9b61396e05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Counseling and Wellness","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Counseling and Wellness paid $30,000 to settle potential HIPAA violations after impermissibly disclosing patient PHI in response to online reviews.","event_id":"edcfc0c0-6c9e-453c-99a3-bb9b61396e05","severity_score":50},{"record_id":"db70a682-bd21-4fa8-b94c-db3226a23873","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D., P.A.","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D., P.A. paid $50,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI on social media.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"db33bc17-075d-4e52-9be5-8b3d85a4f318","source_event_group_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Hospital","state":"DC","individuals_affected":320000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's National Hospital paid $2,500,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach impacting 320,000 patients.","event_id":"9dc3fae4-d92f-416a-a380-77b81e5498c4","severity_score":90},{"record_id":"d95acda1-120b-4ef4-837b-22b7677c5b02","source_event_group_id":"16594189-d5ef-4bcb-b1e1-fba9c760f210","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presentations of Florida, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presentations of Florida settled with OCR for several HIPAA violations, including an impermissible disclosure of PHI when a business associate failed to properly dispose of medical records.","event_id":"16594189-d5ef-4bcb-b1e1-fba9c760f210","severity_score":50},{"record_id":"d7fd76ab-0ecc-4154-9565-2c0771dd14e3","source_event_group_id":"6a58c8b8-c572-4ef9-8f16-2073a7fddf52","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Horizon Blue Cross Blue Shield of New Jersey","state":"NJ","individuals_affected":83911,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Horizon Blue Cross Blue Shield of New Jersey settled with OCR after an unencrypted laptop was stolen from their premises, exposing the protected health information of over 83,000 individuals.","event_id":"6a58c8b8-c572-4ef9-8f16-2073a7fddf52","severity_score":90},{"record_id":"d44038f2-8d3a-498e-939c-79027b07ef0f","source_event_group_id":"70497e9b-990b-4377-9c0c-8e712e77f74c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Nemours Foundation","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Nemours Foundation settled with OCR after a breach involving the impermissible disclosure of protected health information on their website.","event_id":"70497e9b-990b-4377-9c0c-8e712e77f74c","severity_score":65},{"record_id":"cb307d74-032b-4041-972d-6a555db493ab","source_event_group_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's Health Care Group of PA","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Women's Health Care Group of PA settled with OCR after an impermissible disclosure of PHI when sensitive patient information was posted on Yelp in response to a patient complaint.","event_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","severity_score":50},{"record_id":"bcfbe347-3677-4165-8da2-bca97b6de4d9","source_event_group_id":"45aedecd-fb79-47e0-985a-b9f2813126a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Data Processing, Inc.","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ADP, Inc. paid $250,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"45aedecd-fb79-47e0-985a-b9f2813126a1","severity_score":65},{"record_id":"bc5e1a5c-1380-4183-ab19-8fd422aa652a","source_event_group_id":"1bf334a1-ec6b-471d-8ed2-e280676b89e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excela Health","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Excela Health agreed to a settlement for an impermissible disclosure of PHI when a staff member mistakenly sent a patient's protected health information to a local newspaper.","event_id":"1bf334a1-ec6b-471d-8ed2-e280676b89e3","severity_score":65},{"record_id":"bc14fd2b-6b13-4e79-9e11-f019532e909b","source_event_group_id":"578ebedb-0c1a-451d-9543-61787942233c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Howard University Hospital","state":"DC","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Howard University Hospital settled with OCR after patient information was found on a publicly accessible website.","event_id":"578ebedb-0c1a-451d-9543-61787942233c","severity_score":50},{"record_id":"b1a37055-952e-4b0e-b718-05b5c1d9b94f","source_event_group_id":"3dd9f7e2-6376-4cbd-bb94-67f352f4c206","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rape Recovery Center","state":"UT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rape Recovery Center settled with OCR after an impermissible disclosure of PHI when patient information was incorrectly stored on a publicly accessible server.","event_id":"3dd9f7e2-6376-4cbd-bb94-67f352f4c206","severity_score":65},{"record_id":"aec7cf34-ee23-44d5-9ff1-b33d1d99fc3a","source_event_group_id":"933fa426-474d-4978-9246-9188efd16aaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Doctors' Management, LLC","state":"WA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Doctors' Management, a business associate, settled with OCR for failing to conduct an enterprise-wide risk analysis and for not having a business associate agreement with a subcontractor.","event_id":"933fa426-474d-4978-9246-9188efd16aaa","severity_score":50},{"record_id":"ae6f438b-8d11-49a9-b53b-63b214632bd3","source_event_group_id":"1dba8f70-3da2-451c-aa79-f19becf144b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"A Caring Heart of Light","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Caring Heart of Light paid $6,500 and adopted a corrective action plan to settle potential HIPAA violations for failing to provide a patient with access to their medical records.","event_id":"1dba8f70-3da2-451c-aa79-f19becf144b0","severity_score":50},{"record_id":"adf087f9-c79e-4423-85f5-f2dcf3b48127","source_event_group_id":"e677b99a-956b-46bc-8d32-99d9db58085f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The University of Iowa Hospitals and Clinics","state":"IA","individuals_affected":1383,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UIHC settled with OCR due to an impermissible disclosure of PHI of nearly 1,400 patients when a phishing incident compromised employee email accounts.","event_id":"e677b99a-956b-46bc-8d32-99d9db58085f","severity_score":80},{"record_id":"a65e7d33-5e33-4f3d-9437-af6b689015d1","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, d.b.a. Peachstate Labs","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Labs paid $25,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI in response to an online review.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"9eb256f6-1651-47f9-b42c-eab70f3c2a26","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A nurse from St. Luke's-Roosevelt Hospital Center impermissibly disclosed a patient's PHI on social media. OCR settled with the hospital for failing to have proper policies and procedures and training.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":90},{"record_id":"9c780557-64fa-4932-89d9-5763ebed3d62","source_event_group_id":"8c4190f1-82d7-495e-88df-df03d390bd57","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Atrium Health","state":"NC","individuals_affected":2634,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Atrium Health settled with OCR for impermissible disclosures of PHI to a business associate that lacked a business associate agreement.","event_id":"8c4190f1-82d7-495e-88df-df03d390bd57","severity_score":90},{"record_id":"8c4cca8e-87bb-4793-976f-2645f7f00551","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University","state":"OR","individuals_affected":46000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OHSU settled with OCR for multiple HIPAA violations, including an impermissible disclosure of PHI due to the theft of an unencrypted laptop and issues with electronic health records.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"889b37e7-2e3a-4a57-ba2c-c2b65c6dc0a3","source_event_group_id":"23c2f115-59e7-4b8f-a852-fe220acc03ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optical","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Optical paid $100,000 and agreed to implement a corrective action plan to settle potential HIPAA violations for impermissibly disclosing patient PHI on Yelp.","event_id":"23c2f115-59e7-4b8f-a852-fe220acc03ec","severity_score":50},{"record_id":"88505d3d-4b96-4569-8a9d-a497a028e031","source_event_group_id":"09305abd-714f-4efd-8fc0-b14e86e28619","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes Care Center, Inc.","state":"NC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes Care Center, Inc. paid $5,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI in response to an online review.","event_id":"09305abd-714f-4efd-8fc0-b14e86e28619","severity_score":50},{"record_id":"85d5d578-39e2-4efd-9810-7ae785fb86b6","source_event_group_id":"09364afd-fe03-459d-b541-85fcca09f287","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"BAART Programs","state":"CA","individuals_affected":3957,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BAART Programs paid $100,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing patient PHI.","event_id":"09364afd-fe03-459d-b541-85fcca09f287","severity_score":50},{"record_id":"7f023d34-31e0-49b8-9dc8-edffc999d826","source_event_group_id":"722d994d-c363-4fbe-9687-a11b90fe2877","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Mental Health","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Center for Mental Health settled with OCR for multiple HIPAA violations, including failure to conduct an accurate and thorough risk analysis and impermissible disclosure of PHI.","event_id":"722d994d-c363-4fbe-9687-a11b90fe2877","severity_score":65},{"record_id":"799e49bc-5396-4566-be28-fa644420e9db","source_event_group_id":"4f21c1f0-ed39-478f-bcab-a3b4ed010151","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice Therapy Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Practice Therapy Inc. paid $50,000 and agreed to a corrective action plan to settle potential HIPAA violations for impermissibly disclosing patient PHI in response to online reviews.","event_id":"4f21c1f0-ed39-478f-bcab-a3b4ed010151","severity_score":50},{"record_id":"6b4a9d84-8654-4329-bc7a-c3056df94ad2","source_event_group_id":"43c34ad6-2224-4085-964e-31864a310d04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hillcrest Medical Center","state":"OK","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Hillcrest Medical Center paid $1,500,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach affecting 300,000 patients.","event_id":"43c34ad6-2224-4085-964e-31864a310d04","severity_score":90},{"record_id":"65c0300a-f84b-458d-b6dd-cc0c65f0bd00","source_event_group_id":"95f595fd-7b16-44d2-ac5c-c1298be5e03e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ambry Genetics","state":"CA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ambry Genetics paid $1,600,000 and agreed to a corrective action plan to settle potential HIPAA violations after a data breach affecting over 200,000 individuals.","event_id":"95f595fd-7b16-44d2-ac5c-c1298be5e03e","severity_score":90},{"record_id":"655041ea-5602-4f79-b437-37bded491fa8","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records upon request, leading to a significant penalty.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"6464c432-a03e-418f-bef5-9805cdfb9bf8","source_event_group_id":"8d20d893-24c7-4b60-a099-28b4df7fbf4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Horace Walthall, Jr., D.D.S.","state":"AL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Horace Walthall, Jr., D.D.S., paid $25,000 and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"8d20d893-24c7-4b60-a099-28b4df7fbf4d","severity_score":50},{"record_id":"5c8068f0-1d82-4823-93a2-8a49c7b3696a","source_event_group_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Life Insurance Company","state":"CT","individuals_affected":11887,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna paid $1 million to settle potential HIPAA violations after sending mailings that impermissibly revealed the HIV status of plan members.","event_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","severity_score":80},{"record_id":"42697f09-ae68-4dd4-9966-adc2dac60486","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas M.D. Anderson Cancer Center","state":"TX","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Texas MD Anderson Cancer Center settled with OCR after the theft of an unencrypted laptop containing the ePHI of over 30,000 individuals.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"3f37bc2c-b81a-4a4d-a295-92bf56970001","source_event_group_id":"0a489a3c-9d50-40a7-8e73-8a8070e7d906","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Various Healthcare Providers","state":"US","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR announced it would exercise enforcement discretion and waive potential penalties for HIPAA violations against healthcare providers in good faith during the COVID-19 nationwide public health emergency.","event_id":"0a489a3c-9d50-40a7-8e73-8a8070e7d906","severity_score":55},{"record_id":"3d7fa7d5-9b1c-40dc-aafe-bf478c77e5e8","source_event_group_id":"03e353c6-bb33-457a-8aef-042d3ef0ccc6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alliance Spine and Pain Management, LLC","state":"GA","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Alliance settled with OCR after an online calendar publicly exposed the PHI of approximately 5,000 individuals.","event_id":"03e353c6-bb33-457a-8aef-042d3ef0ccc6","severity_score":50},{"record_id":"3834f11e-a192-4da9-9c10-0944eb758630","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet","state":"PA","individuals_affected":1650,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet settled with OCR for multiple HIPAA violations, including a failure to conduct an accurate and thorough risk analysis, after a laptop containing PHI was stolen.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"33532ff9-ac77-454f-a01e-81f2e25a23fd","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMMC settled with OCR for multiple HIPAA violations, including a failure to conduct an accurate and thorough risk analysis, after a stolen laptop exposed patient data.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"2c034e1c-7b92-4509-bbf6-17ff1bc55936","source_event_group_id":"930d093a-9e17-44f7-b68d-444af30173cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Idaho Correctional Institution","state":"ID","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NICI paid $75,000 and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing the PHI of prisoners.","event_id":"930d093a-9e17-44f7-b68d-444af30173cf","severity_score":50},{"record_id":"2423b1e9-0497-4431-901a-ebb69182ae58","source_event_group_id":"0196569c-9480-4836-8956-f73ca2dd149f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MDLive Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MDLive, a telehealth provider, settled with OCR after failing to notify the public about potential security vulnerabilities on its platform.","event_id":"0196569c-9480-4836-8956-f73ca2dd149f","severity_score":50},{"record_id":"1e34b990-fb70-4de6-a659-db4f33b77d62","source_event_group_id":"88cf43d3-3cd8-45c5-96aa-3cdac5215964","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Specialists","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eye Care Specialists paid $100,000 to settle potential HIPAA violations after impermissibly disclosing patient PHI in response to an online review.","event_id":"88cf43d3-3cd8-45c5-96aa-3cdac5215964","severity_score":50},{"record_id":"1928b315-ffcc-4f20-9461-7f1e6fb2d1a5","source_event_group_id":"cb661e06-ea9b-4cb5-8fda-cf3f1994bc4e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Finity P.A.","state":"NC","individuals_affected":900,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Finity P.A., a medical billing company, settled with OCR for failing to have a business associate agreement in place and for not conducting a proper risk analysis.","event_id":"cb661e06-ea9b-4cb5-8fda-cf3f1994bc4e","severity_score":50},{"record_id":"08f0c089-0887-48e8-b51f-1967fe7921d7","source_event_group_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Athens Orthopedic Clinic","state":"GA","individuals_affected":200000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Athens Orthopedic Clinic paid $1.5 million to settle potential HIPAA violations after a hacking incident exposed the PHI of nearly 200,000 individuals.","event_id":"335bd209-e88a-4228-94a6-5886fce5ab6a","severity_score":90},{"record_id":"02fb30e8-aa91-46f5-bd1b-ba3e36534650","source_event_group_id":"b4482dc7-05d9-4d7c-a054-23ee2cfaf70a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NorthStar EMS","state":"AL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NorthStar EMS paid $65,000 to settle potential HIPAA violations after an employee impermissibly disclosed patient PHI on social media.","event_id":"b4482dc7-05d9-4d7c-a054-23ee2cfaf70a","severity_score":50},{"record_id":"0129c915-cc9e-4c1e-a419-40526ff0b567","source_event_group_id":"2c37eea0-2273-4cfb-94ea-f7cbd0058857","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arise Diagnostics","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arise Diagnostics paid $15,000 to settle potential HIPAA violations for impermissibly disclosing patient PHI in response to an online review.","event_id":"2c37eea0-2273-4cfb-94ea-f7cbd0058857","severity_score":50},{"record_id":"0097bd5c-8b1c-4d28-908a-39df07a4d9e1","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital and Medical Center of Omaha","state":"NE","individuals_affected":2800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital and Medical Center of Omaha settled with OCR for an impermissible disclosure of PHI after an employee took a hospital-owned laptop containing PHI home without authorization.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":90},{"record_id":"74415066-bc8a-4fd8-b137-b9620e0930ad","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg paid $325,000 to settle potential HIPAA violations for failing to provide timely access to PHI.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":65},{"record_id":"f05d477d-a675-4399-8e8f-8abde92357f0","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":68066,"breach_submission_date":"2026-01-05","enforcement_action_date":null,"summary":"","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":70},{"record_id":"59772fb9-3d1c-48bd-ae26-fc4801822ab3","source_event_group_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aetna","state":"CT","individuals_affected":775,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","severity_score":30},{"record_id":"c62af9eb-5c55-4013-8d38-1e77c6e69016","source_event_group_id":"d1310e1d-e917-4f2a-b703-a229aa695b26","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Interventional Pain Center, PLLC","state":"TN","individuals_affected":3171,"breach_submission_date":"2026-03-31","enforcement_action_date":null,"summary":"","event_id":"d1310e1d-e917-4f2a-b703-a229aa695b26","severity_score":50},{"record_id":"f0e9fae1-8cfb-40a8-9783-be7e575c1924","source_event_group_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Women's Health Care Group of Pennsylvania","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Women's Health Care Group of Pennsylvania after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"45cbb8f5-0779-4891-98db-ada6bcf84142","severity_score":65},{"record_id":"ed885eda-f737-4dcc-ae62-0effd7e1267d","source_event_group_id":"14580087-8606-43ee-afd5-929b7916383c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paean","state":"VT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Paean after a patient complained about an impermissible disclosure of PHI. The entity impermissibly disclosed PHI by leaving patient appointment information in a waiting room.","event_id":"14580087-8606-43ee-afd5-929b7916383c","severity_score":50},{"record_id":"8a5da78d-2226-4248-a0cb-9fb1768f13b1","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children’s Digestive Health","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the Center for Children’s Digestive Health due to numerous breach reports regarding impermissible disclosures of PHI. OCR found systemic noncompliance with the HIPAA Rules.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"6ed81621-2c10-44d3-9f43-cc737163fe77","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated St. Luke's-Roosevelt Hospital Center following a series of impermissible disclosures of patient information. The hospital impermissibly disclosed PHI in response to negative online reviews.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":65},{"record_id":"5ee60011-aaae-4c4b-a613-725735f83cd7","source_event_group_id":"7ab0b42d-c1b0-4a4a-8b59-d483c5a8865e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated St. Joseph Health System after an impermissible disclosure of PHI. St. Joseph Health System impermissibly disclosed PHI to a local homeless shelter.","event_id":"7ab0b42d-c1b0-4a4a-8b59-d483c5a8865e","severity_score":90},{"record_id":"484647bd-dfb2-481f-b20f-c89b26ac89db","source_event_group_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Raleigh Orthopaedic Clinic, P.A.","state":"NC","individuals_affected":17307,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Raleigh Orthopaedic Clinic, P.A. after a breach report involving unsecured x-ray films. OCR found the entity failed to conduct a risk analysis and implement security measures.","event_id":"dd5eef96-bafb-40ce-b6d7-7393ff3671d2","severity_score":80},{"record_id":"106fb6c4-60f7-4257-a815-afc8babd0e34","source_event_group_id":"b424fc9e-d16d-4ff8-9230-8a416c981904","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchor Hospital","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Anchor Hospital after a breach report indicated impermissible disclosure of PHI. The hospital impermissibly disclosed PHI to an unknown third party during a photo shoot.","event_id":"b424fc9e-d16d-4ff8-9230-8a416c981904","severity_score":65},{"record_id":"f5fadaa6-d8f0-40f7-9879-430883489fb0","source_event_group_id":"4c494e44-5fa6-4fcb-93d9-6827bbef521a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cornell Prescription Center","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cornell Prescription Center settled after disposing of PHI in a publicly accessible dumpster.","event_id":"4c494e44-5fa6-4fcb-93d9-6827bbef521a","severity_score":65},{"record_id":"f5a4cdf0-0a09-490d-839a-fc261faa2007","source_event_group_id":"1be41b4f-16dd-47bf-a77a-020341b283c0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UROGYN Specialists of Florida","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UROGYN Specialists of Florida after a patient complaint regarding impermissible disclosure of PHI. The entity impermissibly disclosed PHI to a business associate without a valid business associate agreement.","event_id":"1be41b4f-16dd-47bf-a77a-020341b283c0","severity_score":50},{"record_id":"ee9428f2-adc3-464d-b163-6bb1fefe2a50","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the University of Massachusetts Amherst after an anonymous complaint disclosed unsecured PHI. The university failed to conduct a risk analysis and implement security measures.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"ecba2d6e-1139-4548-aa04-f961a9b17fd2","source_event_group_id":"1be41b4f-16dd-47bf-a77a-020341b283c0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UROGYN Specialists of Florida","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated UROGYN Specialists of Florida after a patient complaint regarding impermissible disclosure of PHI. The entity impermissibly disclosed PHI to a business associate without a valid business associate agreement.","event_id":"1be41b4f-16dd-47bf-a77a-020341b283c0","severity_score":50},{"record_id":"e77d4668-71f6-4c7c-8153-80a73dfaeb05","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging","state":"TX","individuals_affected":3076149,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Touchstone Medical Imaging after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"e5ddf952-d6c2-4a78-be05-e4a2ae0513a3","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Elite Dental Associates after a patient complaint regarding denial of access to medical records. The entity failed to provide timely access to PHI.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"e5af397c-e8ca-48e4-a6b6-e08c0f4ed4bb","source_event_group_id":"2eb50638-a712-419e-8b8d-dcda0971db7e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"All Covered, Inc.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"All Covered, Inc. settled after a breach involving a server containing unencrypted PHI, as a business associate.","event_id":"2eb50638-a712-419e-8b8d-dcda0971db7e","severity_score":90},{"record_id":"e57be078-f366-4a7b-aad8-aab9d239bc97","source_event_group_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Filefax, Inc.","state":"IL","individuals_affected":2150000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Filefax, Inc. after a complaint alleged impermissible disposal of PHI. OCR found the entity failed to properly dispose of PHI and ensure compliance with its business associate agreement.","event_id":"862cbae6-d490-493a-9bb5-c4e2e3d734eb","severity_score":65},{"record_id":"e2979b0d-2350-40c3-9e81-b2f63c7da1ec","source_event_group_id":"615e24a8-b993-4737-9f03-7899edb354cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brigham and Women’s Hospital","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Brigham and Women’s Hospital after an employee impermissibly accessed patient records. The hospital failed to implement appropriate safeguards and sanctions policies.","event_id":"615e24a8-b993-4737-9f03-7899edb354cf","severity_score":65},{"record_id":"de043f69-9ea4-4aeb-9093-e1a372baaa03","source_event_group_id":"2da9228d-5c73-4562-a9a5-ce749a9b065d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem P.C.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Anthem P.C. after a massive data breach affecting nearly 79 million individuals. OCR found Anthem failed to conduct a risk analysis and implement appropriate security measures.","event_id":"2da9228d-5c73-4562-a9a5-ce749a9b065d","severity_score":90},{"record_id":"ddbb1e24-87ef-4ebc-8a57-fb553358f9d1","source_event_group_id":"d9f7b4d3-eb8e-4b9a-90ba-49abb5a39ace","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MedNax Services, Inc.","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated MedNax Services, Inc. after a breach report, finding noncompliance with the HIPAA Security Rule. MedNax Services, Inc. failed to conduct a risk analysis and implement security measures.","event_id":"d9f7b4d3-eb8e-4b9a-90ba-49abb5a39ace","severity_score":90},{"record_id":"dd483123-ae7c-4128-b43b-7f786caaf6a5","source_event_group_id":"54889e2b-e4f3-403e-a839-e5caa206256f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Walgreens Co.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Walgreens settled after a pharmacy employee impermissibly accessed and disclosed PHI.","event_id":"54889e2b-e4f3-403e-a839-e5caa206256f","severity_score":90},{"record_id":"d8ba8ab7-fcf9-40ed-bee1-3073dc4e85d4","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology & Laser Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated New England Dermatology & Laser Center after a breach report and found noncompliance with the HIPAA Security Rule. The entity impermissibly disclosed PHI and failed to implement security measures.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":65},{"record_id":"d3c9375d-acb0-4e0f-9dca-a6f8e6320099","source_event_group_id":"e98acf97-1ffc-4338-b6f1-b6a1424d8e76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Systema Healthcare Services, LLC","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Systema Healthcare Services, LLC (formerly Complete Business Solutions, Inc.) after a breach report. OCR found the entity failed to implement security measures to protect PHI.","event_id":"e98acf97-1ffc-4338-b6f1-b6a1424d8e76","severity_score":80},{"record_id":"d00b1463-c29b-429f-9325-46c5163f95ea","source_event_group_id":"b57b1bd5-a704-4232-9612-fc8ad01186da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Virginia University Hospitals","state":"WV","individuals_affected":1645,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated West Virginia University Hospitals after a breach report, finding noncompliance with the HIPAA Privacy Rule. WVU Hospitals impermissibly disclosed PHI to a local newspaper.","event_id":"b57b1bd5-a704-4232-9612-fc8ad01186da","severity_score":65},{"record_id":"cdff8f1c-3a06-4359-9c39-7e0247abeb34","source_event_group_id":"5ae51743-8b5c-43f0-8610-718262c34687","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Maryland Medical System","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Maryland Medical System settled after a breach involving the theft of an unencrypted laptop.","event_id":"5ae51743-8b5c-43f0-8610-718262c34687","severity_score":80},{"record_id":"cdab529f-4e3b-4455-8b65-c697c19f9802","source_event_group_id":"f0a97533-711e-4ea1-bacd-6c673ac31533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Hardin Medical Center","state":"TN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated The Hardin Medical Center after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"f0a97533-711e-4ea1-bacd-6c673ac31533","severity_score":50},{"record_id":"caec1a9a-8b86-40c3-a9d9-ef1017061a67","source_event_group_id":"b3508abd-e224-4bca-992d-b450e51f66da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Hawaii at Manoa","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Hawaii at Manoa settled after a network breach exposed the PHI of thousands of individuals.","event_id":"b3508abd-e224-4bca-992d-b450e51f66da","severity_score":65},{"record_id":"bc6059cd-cfa8-47cc-b709-812b6f81a74b","source_event_group_id":"9fd0c08e-b8fb-42d7-8c28-85a7aeb9b41a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Medical Imaging","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Elite Medical Imaging following a breach report, finding noncompliance with the HIPAA Security Rule. Elite Medical Imaging failed to conduct a risk analysis and implement security measures.","event_id":"9fd0c08e-b8fb-42d7-8c28-85a7aeb9b41a","severity_score":50},{"record_id":"b6b03ca5-9ee4-4b2a-b0f1-017fa5f51c6a","source_event_group_id":"d1fad614-db59-407c-9a86-9713a01b3928","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anchorage Community Mental Health Services (ACMHS)","state":"AK","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Anchorage Community Mental Health Services (ACMHS) after a data breach. OCR found ACMHS failed to conduct a risk analysis and implement security measures.","event_id":"d1fad614-db59-407c-9a86-9713a01b3928","severity_score":65},{"record_id":"acd5d9a6-219d-4cfc-9b7f-c96a37a44e7c","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":95000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated North Memorial Health Care after a breach report involving impermissible disclosure of PHI. OCR found the entity failed to apply appropriate sanctions against an employee.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":50},{"record_id":"a9df04ca-b4b6-459d-8ddd-c4c9db95692c","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a Georgia dental practice after a patient complained about an impermissible disclosure of PHI on social media. The practice impermissibly disclosed PHI in response to a negative online review.","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"9eb550d7-77b2-4e80-b1d8-9dd81cd63500","source_event_group_id":"a5780735-564d-4d76-910e-0e6fc022da6f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Group of Louisiana, LLC","state":"LA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Pathology Group of Louisiana, LLC after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"a5780735-564d-4d76-910e-0e6fc022da6f","severity_score":50},{"record_id":"93e6a85e-af7d-4298-84eb-665d7018621e","source_event_group_id":"92612061-2601-4266-ae7c-22c1fb8d6138","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York State Department of Health","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York State Department of Health settled after a breach involved the impermissible release of PHI of individuals receiving HIV care.","event_id":"92612061-2601-4266-ae7c-22c1fb8d6138","severity_score":65},{"record_id":"933d308f-7893-4ff3-86b9-d0b9bd380cd4","source_event_group_id":"3235dbda-9c3c-4434-a046-c77d6dd4c904","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eastar Health System","state":"OK","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Eastar Health System after a breach report indicated an impermissible disclosure of PHI. The entity failed to conduct a risk analysis and implement security measures.","event_id":"3235dbda-9c3c-4434-a046-c77d6dd4c904","severity_score":50},{"record_id":"8e143f31-84b4-4700-86c3-6bb10de0d249","source_event_group_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County of Washington","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County settled after a breach involving the impermissible disclosure of PHI due to an employee error.","event_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","severity_score":65},{"record_id":"84ab3e05-8c47-4c48-bd79-a34766c7dde7","source_event_group_id":"50f77576-a7b6-4061-9841-98b6b2867d17","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Practices","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated a Massachusetts medical practice following a patient complaint regarding inappropriate disclosure of PHI related to HIV status. OCR found the practice impermissibly disclosed PHI and failed to safeguard it.","event_id":"50f77576-a7b6-4061-9841-98b6b2867d17","severity_score":50},{"record_id":"7f6f9164-f09e-4f71-8d49-9f334bee0b81","source_event_group_id":"2822293e-85ed-425d-a63f-c13edf32fe06","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NewHaven County Cutaneous","state":"CT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated NewHaven County Cutaneous after a complaint alleged impermissible disclosure of PHI. The entity impermissibly disclosed PHI by leaving a patient schedule in a common area visible to others.","event_id":"2822293e-85ed-425d-a63f-c13edf32fe06","severity_score":50},{"record_id":"7e8cba63-326f-40e3-ba9a-c024b2d54bab","source_event_group_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cancer Care Group, P.C.","state":"IN","individuals_affected":55000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Cancer Care Group, P.C. after a breach report involving a stolen unencrypted laptop. The entity failed to conduct a risk analysis and implement security measures.","event_id":"0c7637fa-58e5-496d-bc8c-69593248eb2e","severity_score":80},{"record_id":"7e2e5ea7-837b-4896-80bd-df5b807271fb","source_event_group_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northwestern Memorial Hospital","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Northwestern Memorial Hospital after a breach report indicated impermissible disclosure of PHI. The hospital impermissibly disclosed PHI to a research foundation.","event_id":"009aa872-f34f-4e26-8778-7f5c9e36a6e6","severity_score":90},{"record_id":"7c5e7239-4d7e-435c-b6a5-71f22b3c9b64","source_event_group_id":"360a968e-31bd-4a2a-8f87-f2e62501d163","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Woman's Hospital","state":"LA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Woman's Hospital in Baton Rouge after a breach of PHI. The hospital impermissibly disclosed PHI when it sent medical records to a patient on another patient’s behalf.","event_id":"360a968e-31bd-4a2a-8f87-f2e62501d163","severity_score":50},{"record_id":"73be981e-e459-4678-b606-e13777f43254","source_event_group_id":"f4d88a8b-8916-40b1-9263-00e09784a77c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"SCL Health","state":"CO","individuals_affected":2685,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated SCL Health after a breach report indicated that PHI was impermissibly disclosed. OCR found SCL Health failed to have a business associate agreement in place and impermissibly disclosed PHI.","event_id":"f4d88a8b-8916-40b1-9263-00e09784a77c","severity_score":50},{"record_id":"52e65560-c589-4a23-94e8-96bf68361113","source_event_group_id":"50f77576-a7b6-4061-9841-98b6b2867d17","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Practices","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Baystate Medical Practices following a patient complaint regarding denial of access to medical records. The entity failed to provide timely access to PHI.","event_id":"50f77576-a7b6-4061-9841-98b6b2867d17","severity_score":50},{"record_id":"4ffac1df-17b6-4e61-949b-d0d65acb55c0","source_event_group_id":"26603acd-008d-4c07-a184-3f5d2a297a88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho State University","state":null,"individuals_affected":1757,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Idaho State University settled after a server containing unencrypted PHI was breached.","event_id":"26603acd-008d-4c07-a184-3f5d2a297a88","severity_score":65},{"record_id":"4fb90170-b3c1-42b8-883b-a2ecd40052fb","source_event_group_id":"2987475d-46e9-4f5c-89b5-bda412f60b7a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Mental Health Services","state":"IN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated the Center for Mental Health Services for impermissibly discussing a patient's PHI. OCR found the center impermissibly disclosed PHI, which led to a complaint.","event_id":"2987475d-46e9-4f5c-89b5-bda412f60b7a","severity_score":50},{"record_id":"4f99f5b5-b1e6-4b69-84ec-b89903d5ba77","source_event_group_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Psychiatric Medical Group","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Riverside Psychiatric Medical Group after a breach report and found noncompliance with the HIPAA Security Rule. Riverside Psychiatric Medical Group failed to conduct risk analyses and implement security measures.","event_id":"d28c2dc6-416d-458c-8cca-79bc673d5f0b","severity_score":50},{"record_id":"44623b94-ac9a-4140-992a-ba976d599955","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de La Raza, Inc.","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated La Clinica de La Raza, Inc. after a breach report involving the theft of an unencrypted laptop. OCR found the entity failed to conduct a risk analysis and implement security measures.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":65},{"record_id":"42ed9e0f-0219-48d4-b3af-db400a485bf4","source_event_group_id":"d74f224a-f249-486e-8feb-9990f3e169c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kornerstone Health","state":"MS","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Kornerstone Health (formerly Bolivar Medical Center) after a breach report, finding violations of the HIPAA Security Rule. Kornerstone Health failed to conduct an accurate and thorough risk analysis and implement security measures.","event_id":"d74f224a-f249-486e-8feb-9990f3e169c8","severity_score":50},{"record_id":"4270722b-e5f8-42d4-a458-4f83dcb266f2","source_event_group_id":"e66cc0e9-df48-4e91-ab65-f9f7c2514d70","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Page Memorial Hospital","state":"VA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Page Memorial Hospital after a breach report and found noncompliance with the HIPAA Security Rule. Page Memorial Hospital failed to conduct risk analyses and implement security measures.","event_id":"e66cc0e9-df48-4e91-ab65-f9f7c2514d70","severity_score":80},{"record_id":"410f9700-afbb-4aed-9395-9ddeb3c73713","source_event_group_id":"d433d4cc-019e-42d0-8c78-869a67840ce1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asthmas and Immunology","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Allergy Associates of Asthmas and Immunology following a complaint. The entity impermissibly disclosed PHI in response to a patient's online review.","event_id":"d433d4cc-019e-42d0-8c78-869a67840ce1","severity_score":65},{"record_id":"3e873cd7-a33b-4e96-b0b1-14223e72cbfc","source_event_group_id":"ea88ae8c-3623-41be-b599-30e73b96eb61","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Dermatology, P.C.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Advanced Dermatology, P.C. after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"ea88ae8c-3623-41be-b599-30e73b96eb61","severity_score":50},{"record_id":"348a560a-599b-4be5-ac05-7251ae5794d8","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management Corporation","state":"PR","individuals_affected":398163,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Triple-S Management Corporation following multiple breach reports. OCR found systemic noncompliance with the HIPAA Privacy and Security Rules.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"2deea0a9-419a-40be-b64e-50842573518e","source_event_group_id":"066e16fb-d02c-4c6f-a523-2caf6761e99a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Associates of Erie","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Medical Associates of Erie after a breach report and found noncompliance with the HIPAA Security Rule. The entity failed to conduct a risk analysis and implement security measures.","event_id":"066e16fb-d02c-4c6f-a523-2caf6761e99a","severity_score":65},{"record_id":"29567e7c-2118-45b1-a116-2ca88a6cfa6a","source_event_group_id":"d8c81bac-a6a5-4519-8cf3-6436944f8441","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Accretive Health, Inc.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Accretive Health settled after a stolen laptop containing unencrypted PHI, highlighting business associate responsibilities.","event_id":"d8c81bac-a6a5-4519-8cf3-6436944f8441","severity_score":90},{"record_id":"24c30510-6cae-4f03-a5dd-ce7f7857c670","source_event_group_id":"78eadefd-eeda-4366-a63f-7bcd45b3e191","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Hospice of Michigan","state":"MI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Hospice of Michigan after a breach report involving a stolen unencrypted laptop. The entity failed to conduct a risk analysis and implement security measures.","event_id":"78eadefd-eeda-4366-a63f-7bcd45b3e191","severity_score":50},{"record_id":"22323fcd-5484-45f0-88b8-6cd584186ba6","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Catholic Health Care Services after a breach report involving unencrypted mobile devices. OCR found the entity failed to conduct a risk analysis and implement security measures.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"216f7476-9b77-4f6f-816b-2180afaaa2f3","source_event_group_id":"414821f6-38c9-4aeb-b9c1-d6f3ce4ca2ad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Physicians' Specialty Hospital","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Physicians' Specialty Hospital after a breach report indicated an impermissible disclosure of PHI. The entity failed to conduct a risk analysis and implement security measures.","event_id":"414821f6-38c9-4aeb-b9c1-d6f3ce4ca2ad","severity_score":50},{"record_id":"16a7152c-a21f-49ce-a5e7-104c4a679c92","source_event_group_id":"70ea11c2-a6a7-4004-b0d4-d77f9bba034f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dean Memo Medical Center, S.C.","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Dean Memo Medical Center after a breach report, finding violations of the HIPAA Privacy Rule. Dean Memo Medical Center impermissibly disclosed PHI by leaving patient schedules in an unsecured manner.","event_id":"70ea11c2-a6a7-4004-b0d4-d77f9bba034f","severity_score":65},{"record_id":"0c3fa4cd-1faa-4914-98d0-1285ac18313e","source_event_group_id":"d433d4cc-019e-42d0-8c78-869a67840ce1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of Asthmas and Immunology","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Allergy Associates of Asthmas and Immunology following a patient complaint regarding denial of access to medical records. The entity failed to provide timely access to PHI.","event_id":"d433d4cc-019e-42d0-8c78-869a67840ce1","severity_score":65},{"record_id":"0251c6e9-2a17-406c-9973-a4dda03a9e40","source_event_group_id":"d990be57-d913-41fe-9bf8-a49dfe701857","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Nocona General Hospital","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR investigated Nocona General Hospital after a breach report indicated an impermissible disclosure of PHI. The entity failed to conduct a risk analysis and implement security measures.","event_id":"d990be57-d913-41fe-9bf8-a49dfe701857","severity_score":65},{"record_id":"ef0e91cd-b776-4503-a442-d6b141530123","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California Los Angeles Health System (UCLA Health)","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health settled after an employee impermissibly accessed PHI of multiple celebrities and other patients.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":80},{"record_id":"b6640822-cb09-4553-90b8-9650f7432588","source_event_group_id":"7ab0b42d-c1b0-4a4a-8b59-d483c5a8865e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Saint Joseph Health System","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Saint Joseph Health System settled after a breach involving the impermissible disclosure of patient information due to a misdirected fax.","event_id":"7ab0b42d-c1b0-4a4a-8b59-d483c5a8865e","severity_score":65},{"record_id":"79ba92d0-1284-4fd9-bbeb-f955304bf150","source_event_group_id":"06c87061-0fd4-4b61-a73c-854bde577afe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Net of California, Inc.","state":null,"individuals_affected":1900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Net settled after numerous unencrypted servers were lost or stolen, affecting a large number of individuals.","event_id":"06c87061-0fd4-4b61-a73c-854bde577afe","severity_score":90},{"record_id":"6ccb0963-ee15-42f6-afbb-ebb82abb881b","source_event_group_id":"0253c33e-b989-4367-bb95-b7f45e88b848","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lowe's Companies, Inc.","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lowe's settled after a breach involving employee health plan information, highlighting the need for strong data protection in employer-sponsored plans.","event_id":"0253c33e-b989-4367-bb95-b7f45e88b848","severity_score":90},{"record_id":"2c36d329-8e3a-434c-ae58-c9124fb7dd2d","source_event_group_id":"fdca2740-c8a8-4347-837a-371db48cd1a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allscripts","state":null,"individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allscripts settled after a breach involving unencrypted backup tapes, exposing patient information.","event_id":"fdca2740-c8a8-4347-837a-371db48cd1a8","severity_score":65},{"record_id":"23a9282f-f655-411c-b804-08d642dd7f63","source_event_group_id":"925aec40-32b1-4162-98a7-0caf425058bb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Management Services Organization of Western New York (MSO of WNY)","state":null,"individuals_affected":40000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MSO of WNY settled after a breach involving a stolen unencrypted laptop, showing the need for robust security measures for mobile devices.","event_id":"925aec40-32b1-4162-98a7-0caf425058bb","severity_score":65},{"record_id":"1ed1e80a-a71a-4a60-814b-16b91b8836b9","source_event_group_id":"2cbabfe6-50d1-4380-99ed-94e00824cb9d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"U.S. Department of Health and Human Services (HHS)","state":null,"individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"HHS settled after an employee's laptop with unencrypted PHI was stolen, leading to a breach.","event_id":"2cbabfe6-50d1-4380-99ed-94e00824cb9d","severity_score":50},{"record_id":"16949b25-5758-426e-8e3f-00ebf805c182","source_event_group_id":"59941114-2151-4727-9101-35dee4a78493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University Medical Center","state":null,"individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University Medical Center settled after a doctor impermissibly disclosed PHI of a patient to a television crew, resulting in privacy violations.","event_id":"59941114-2151-4727-9101-35dee4a78493","severity_score":90},{"record_id":"0ef417b6-166b-4a27-ab01-d44233cfc0bb","source_event_group_id":"c44e78dc-1ec5-4178-882e-2841500d8cf6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boise State University","state":null,"individuals_affected":170000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boise State University settled after a data breach involving unencrypted data on a server, compromising the privacy of students and employees.","event_id":"c44e78dc-1ec5-4178-882e-2841500d8cf6","severity_score":50},{"record_id":"cf36d03e-5634-48dd-a064-46a2e03be046","source_event_group_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Defense Health Agency","state":"VA","individuals_affected":96271,"breach_submission_date":"2026-03-12","enforcement_action_date":null,"summary":"","event_id":"e3beaeda-774f-44ae-b80b-a140a6a34a33","severity_score":70},{"record_id":"3718053b-39d9-4cbc-9108-3a150697ad4a","source_event_group_id":"730f2a6e-369c-434f-95a8-b7c4414197bd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dermatology Associates","state":"KY","individuals_affected":63657,"breach_submission_date":"2026-03-04","enforcement_action_date":null,"summary":"","event_id":"730f2a6e-369c-434f-95a8-b7c4414197bd","severity_score":70},{"record_id":"658a9ee3-a500-416a-a724-655e82eca972","source_event_group_id":"b963f597-c094-4563-81ac-3f057dd86db3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"High Point Treatment Center, Inc.","state":"MA","individuals_affected":25832,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"b963f597-c094-4563-81ac-3f057dd86db3","severity_score":70},{"record_id":"de43c4cb-d1f3-46f2-afde-e6e4a8c42886","source_event_group_id":"25844c45-e0d6-4e19-bf83-204126d075ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"IPPC Inc., IPPC of New York LLC, and Innovative Pharmacy LLC (collectively “IPPC”)","state":"NJ","individuals_affected":133862,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"25844c45-e0d6-4e19-bf83-204126d075ec","severity_score":85},{"record_id":"e28bd2f9-6545-47d7-adc3-7f89d597ad39","source_event_group_id":"1009b322-22aa-418b-83d6-3032ac2ffd30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jackson Hospital and Clinic","state":"AL","individuals_affected":13910,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"1009b322-22aa-418b-83d6-3032ac2ffd30","severity_score":70},{"record_id":"60943a4a-8a21-4d80-a34e-21d58021bcb4","source_event_group_id":"dc9a898e-c452-481f-84e1-4da547197a35","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lakeside Pediatrics & Adolescent Medicine, PLLC","state":"ID","individuals_affected":34154,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"dc9a898e-c452-481f-84e1-4da547197a35","severity_score":70},{"record_id":"f3fdc12d-3ca5-45c1-9b44-6751720cc3d0","source_event_group_id":"71057ee9-1dab-460b-b79f-96fc92a93239","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Michigan Health Plan","state":"MI","individuals_affected":2315,"breach_submission_date":"2026-02-26","enforcement_action_date":null,"summary":"","event_id":"71057ee9-1dab-460b-b79f-96fc92a93239","severity_score":50},{"record_id":"814c7e75-e0ad-4458-940c-0e330eb04d70","source_event_group_id":"d6398d74-0f3e-4529-b1ff-676ac4fef75a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fair Oaks Ortho P.C.","state":"VA","individuals_affected":1544,"breach_submission_date":"2026-02-02","enforcement_action_date":null,"summary":"","event_id":"d6398d74-0f3e-4529-b1ff-676ac4fef75a","severity_score":50},{"record_id":"e92c1d07-76b6-4271-8114-92d67f287e7c","source_event_group_id":"346eea9a-d2e2-4b65-aa69-0b1057b229a8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nephrology Associates Medical Group, Inc","state":"CA","individuals_affected":4631,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"346eea9a-d2e2-4b65-aa69-0b1057b229a8","severity_score":50},{"record_id":"6fb61937-c75a-4e85-b025-80ab34e28e22","source_event_group_id":"8429b2ba-d7c1-4471-a422-32b9a68eb581","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Boston Mountain Rural Health Center, Inc.","state":"AR","individuals_affected":4800,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"8429b2ba-d7c1-4471-a422-32b9a68eb581","severity_score":50},{"record_id":"6e76474e-ee64-4ac7-8e11-3914cf320313","source_event_group_id":"64d8a4fb-2773-4e11-a841-7f191aefc28d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pinnacle Holdings, LTD","state":"PA","individuals_affected":18313,"breach_submission_date":"2026-01-13","enforcement_action_date":null,"summary":"","event_id":"64d8a4fb-2773-4e11-a841-7f191aefc28d","severity_score":70},{"record_id":"fb06f6b2-40e2-4620-8f18-46a701cfdd84","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"NJ","individuals_affected":24000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center impermissibly disclosed the PHI of 24000 individuals. This was caused by a phishing attack that led to the impermissible disclosure of PHI. OCR found that St. Joseph's Hospital had not conducted an enterprise-wide risk analysis.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":50},{"record_id":"fa591544-4410-4ac8-9fab-2aa2ae317614","source_event_group_id":"b19e5cbc-7485-45b7-bc15-929d10ccd902","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Alliance Plan of Michigan","state":"MI","individuals_affected":1827,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Alliance Plan settled for $100,000 and CAP for impermissible disclosure of PHI via mailing error.","event_id":"b19e5cbc-7485-45b7-bc15-929d10ccd902","severity_score":50},{"record_id":"ea40f2c9-f695-4bbf-813f-00bd3f1633b7","source_event_group_id":"b1a7d0ad-d671-4a18-be12-42aec90e8b79","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Tasvir Singh","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Singh settled for $6,500 and CAP for failing to provide a patient with timely access to medical records.","event_id":"b1a7d0ad-d671-4a18-be12-42aec90e8b79","severity_score":50},{"record_id":"d3759ce8-87a7-4e80-833c-621a6ebec0bb","source_event_group_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Medical Center-Irving","state":"TX","individuals_affected":24000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Medical Center-Irving impermissibly disclosed the PHI of 24000 individuals using a document sharing application. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"90a87263-93d5-4f25-85c4-abeff5b050e3","severity_score":80},{"record_id":"cb8df57b-3fc6-4812-bb26-592b639a5212","source_event_group_id":"de47fbba-aa35-4c9e-bd5d-7247358294e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Center","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro Community Health settled for $25,000 and CAP for HIPAA Privacy Rule violations related to patient access.","event_id":"de47fbba-aa35-4c9e-bd5d-7247358294e7","severity_score":50},{"record_id":"c9f853d7-8ca6-4e4e-9ffb-3c3b6a9395fa","source_event_group_id":"1c926aaf-d56c-4d29-86c1-a97efec92d53","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Corporation","state":"RI","individuals_affected":20431,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifespan settled for $1,040,000 and CAP for a breach involving a stolen laptop impacting 20,431 individuals.","event_id":"1c926aaf-d56c-4d29-86c1-a97efec92d53","severity_score":90},{"record_id":"c73d4ad9-e6e1-4132-84a5-4ea09ac0ce4d","source_event_group_id":"77fa4fd5-eabe-461a-b5e2-7f0ba179aab0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Psychiatric Services","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"General Psychiatric Services settled for $18,000 and CAP for failing to provide timely access to PHI.","event_id":"77fa4fd5-eabe-461a-b5e2-7f0ba179aab0","severity_score":50},{"record_id":"c72c7408-f757-47e3-960e-258e5158607c","source_event_group_id":"ab06357d-621f-460a-b19e-b67a9c80fe20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Forrest T. Wright","state":"MO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Wright's practice settled for $3,500 and CAP for failing to provide a patient with timely access to medical records.","event_id":"ab06357d-621f-460a-b19e-b67a9c80fe20","severity_score":50},{"record_id":"c4c5a746-2c39-4067-9378-f9a7d5fc9cea","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health agreed to a second settlement for $200,000 and CAP for a second right of access violation.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"c4c02725-65ae-4c61-946f-ac0001022ce9","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health, St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":4210,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health settled for $160,000 and CAP for unauthorized access to patient records by a former employee.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"c4754284-8243-4b9b-b2f2-1243356387d2","source_event_group_id":"8881855d-5881-4463-852f-26fab175098b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Joseph's Hospital and Medical Center","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Joseph's Hospital and Medical Center settled for $160,000 and CAP for right of access violations.","event_id":"8881855d-5881-4463-852f-26fab175098b","severity_score":65},{"record_id":"c2ab33c9-4ec3-4fb4-83b7-018696579615","source_event_group_id":"fe4b4b49-2654-4556-a651-1ae75931691b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dean Memorial Hospital","state":"GA","individuals_affected":1400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dean Memorial settled for $1.1 million and CAP due to a phishing incident affecting 1.4 million individuals.","event_id":"fe4b4b49-2654-4556-a651-1ae75931691b","severity_score":90},{"record_id":"b7fb603f-5a4e-4024-bbb0-e804eabaa7fc","source_event_group_id":"fba1c451-b58c-4649-a989-eb33c872fed5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes Care Group, P.C.","state":"MA","individuals_affected":9800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes Care Group settled for $100,000 and CAP after a breach affecting approximately 9,800 patients.","event_id":"fba1c451-b58c-4649-a989-eb33c872fed5","severity_score":50},{"record_id":"b2ee3b7a-e3eb-4924-bb11-ca472c003dba","source_event_group_id":"af4ca257-e2da-4e3a-b2a8-20b32f8cc8fa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem P.S. Insurance Company","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem agreed to a $16 million settlement and CAP for multiple breaches impacting nearly 79 million individuals.","event_id":"af4ca257-e2da-4e3a-b2a8-20b32f8cc8fa","severity_score":90},{"record_id":"b0863cf4-deb7-434f-bcd0-18169bf4f13e","source_event_group_id":"274249d6-f463-4032-a4f0-6561d8802400","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"King MD","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"King MD settled for $3,500 and CAP for failing to provide a patient with timely access to medical records.","event_id":"274249d6-f463-4032-a4f0-6561d8802400","severity_score":50},{"record_id":"b022209a-1aed-4ce2-8807-e0be1d83db6f","source_event_group_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Beth Israel Lahey Health Behavioral Services","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Beth Israel Lahey Health Behavioral Services settled for $70,000 and CAP for failing to provide timely access to PHI.","event_id":"5b1a2254-c77e-43be-8a0f-edddb6aa0663","severity_score":50},{"record_id":"ad9037e1-c05f-457f-b037-fe4192bb5427","source_event_group_id":"94dc7c69-44e8-46d9-82a1-eeeb1d3a4222","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wise Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wise Health System settled for $4,500 and CAP for failing to provide a patient with their medical records in a timely manner.","event_id":"94dc7c69-44e8-46d9-82a1-eeeb1d3a4222","severity_score":50},{"record_id":"a1cfacfa-23dc-4565-9877-1722ea640b9c","source_event_group_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Rajendra Bhayani","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Bhayani settled for $10,000 and CAP for failing to provide timely access to medical records.","event_id":"7cfda61f-833e-4f57-a17a-8480c4be4401","severity_score":50},{"record_id":"9fa227fc-72b5-48ee-b9c3-e8c2be00b3ca","source_event_group_id":"88cf5ff7-c5ae-451d-aebe-b4bec70d5c03","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Thomas F. Zizzo, D.D.S.","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Zizzo settled for $10,000 and CAP for not providing a patient with a copy of their dental records upon request.","event_id":"88cf5ff7-c5ae-451d-aebe-b4bec70d5c03","severity_score":50},{"record_id":"95e93f52-bb98-4630-a234-8dfd8ca671b4","source_event_group_id":"52e9829d-2a54-402b-acbf-9a85bb45f449","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Return to Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Return to Health settled for $6,500 and CAP for not providing timely access to a patient's medical records.","event_id":"52e9829d-2a54-402b-acbf-9a85bb45f449","severity_score":50},{"record_id":"957d82b1-2764-4b31-a7f9-f5e6791f0edd","source_event_group_id":"536c76eb-6e44-430e-b014-6dbbc1946228","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"P.F.C. S.W., Inc. (Pediatric and Adolescent HealthCare Center of the Glades)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"P.F.C. S.W., Inc. settled for $20,000 and CAP for failing to provide timely access to PHI.","event_id":"536c76eb-6e44-430e-b014-6dbbc1946228","severity_score":50},{"record_id":"8ed1b9f0-45f0-45dd-9c91-beebaa09b9c7","source_event_group_id":"cc2fa819-8b1e-4da5-b159-2d88950e8152","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ohio Department of Medicaid","state":"OH","individuals_affected":1500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ohio Department of Medicaid impermissibly disclosed the PHI of 1500 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"cc2fa819-8b1e-4da5-b159-2d88950e8152","severity_score":50},{"record_id":"89190fee-ba29-473d-a2ae-4c06e98932dd","source_event_group_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Plastic Surgery","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Village Plastic Surgery settled for $30,000 and CAP for denying a patient access to their medical records.","event_id":"eaafb1e4-c5d5-4b09-a34e-acfde3953d91","severity_score":50},{"record_id":"85bf33fe-13be-48ae-9a76-4c7c5c26fafc","source_event_group_id":"01e9f2ef-f3ec-42a2-b0ba-ff283035ad20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Emergency Physicians, LLC","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Emergency Physicians settled for $10,000 and CAP for failing to provide a patient with timely access to medical records.","event_id":"01e9f2ef-f3ec-42a2-b0ba-ff283035ad20","severity_score":50},{"record_id":"715ca0e0-49c8-4055-876d-e68b21f0b704","source_event_group_id":"918adcc1-a38c-421a-ada6-75e229ad3864","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lawrence Memorial Hospital","state":"KS","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lawrence Memorial Hospital settled for $70,000 and CAP for right of access violations.","event_id":"918adcc1-a38c-421a-ada6-75e229ad3864","severity_score":50},{"record_id":"67acaa2f-651b-4845-ad6c-c8304b37ddc9","source_event_group_id":"cb711db2-1058-41de-a41d-cfad12375d96","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Charles B. Root, D.D.S.","state":"MO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Root settled for $10,000 and CAP for failing to provide a patient with access to their dental records.","event_id":"cb711db2-1058-41de-a41d-cfad12375d96","severity_score":50},{"record_id":"615c4b46-6305-4818-b23d-278c1f680b3d","source_event_group_id":"91375f0d-b3f3-4397-b34a-4c3365ae750e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wake Orthopaedics","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wake Orthopaedics settled for $10,000 and CAP for failing to provide timely access to PHI.","event_id":"91375f0d-b3f3-4397-b34a-4c3365ae750e","severity_score":50},{"record_id":"41f23f6d-02ec-462b-a422-f42a04552fd8","source_event_group_id":"928f8c95-867f-45ae-8aac-9a7ddc507f4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health-Arizona General Hospital","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health settled for $160,000 and CAP for failing to provide a patient with timely access to medical records.","event_id":"928f8c95-867f-45ae-8aac-9a7ddc507f4c","severity_score":65},{"record_id":"3f710f14-7939-47ad-9e46-b18387ea5a74","source_event_group_id":"bc3f9302-01f0-47a8-aa17-647c9ca73720","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ACM Medical Laboratory","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ACM Medical Laboratory settled for $80,000 and CAP for failing to provide timely access to PHI.","event_id":"bc3f9302-01f0-47a8-aa17-647c9ca73720","severity_score":50},{"record_id":"3ef7c3f2-ff09-4863-880f-b472a2eb5fcf","source_event_group_id":"cbad5159-ad13-4e24-96c4-b4b5593be0c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of the Lehigh Valley","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of the Lehigh Valley settled for $125,000 and CAP for failing to provide timely access to PHI.","event_id":"cbad5159-ad13-4e24-96c4-b4b5593be0c8","severity_score":65},{"record_id":"3dae5a96-4975-4ebe-8bd4-a969859e52ac","source_event_group_id":"50c97d70-3696-4173-996e-ae4bab549fe2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Ideal Image Development Corp.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ideal Image Development Corp. settled for $25,000 and CAP for failing to provide timely access to PHI.","event_id":"50c97d70-3696-4173-996e-ae4bab549fe2","severity_score":50},{"record_id":"3a5566a0-b1e0-4cbd-8354-5a7ac5308ba9","source_event_group_id":"bef58022-a18b-4457-850c-6a8ae1f6337b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southcross Community Health Center","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southcross Community Health Center settled for $100,000 and CAP for failing to provide timely access to PHI.","event_id":"bef58022-a18b-4457-850c-6a8ae1f6337b","severity_score":50},{"record_id":"3711f273-8c51-46b8-8eca-c6fbfca1be09","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management settled for $32,000 and CAP for failing to provide timely access to medical records.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":50},{"record_id":"304ea320-4f23-4a6b-a5cc-68fb3b914701","source_event_group_id":"9a53930b-d6a0-46a4-b54a-dea01e36df40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rainelle Medical Center","state":"WV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rainelle Medical Center settled for $10,000 and CAP for failing to provide timely access to PHI.","event_id":"9a53930b-d6a0-46a4-b54a-dea01e36df40","severity_score":50},{"record_id":"2de6fcc6-86ff-4405-936a-bb102d424bf2","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health agreed to a second settlement for $75,000 and CAP for another right of access violation.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"1a054677-8328-43b6-a53b-e81f2034f7f1","source_event_group_id":"e1b86555-bcf0-4824-b0e0-11b1248b1db5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MedStar Health","state":"MD","individuals_affected":115000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MedStar Health impermissibly disclosed the PHI of 115000 individuals. This was caused by a ransomware attack that led to the impermissible disclosure of PHI. OCR found that MedStar Health had not conducted an enterprise-wide risk analysis.","event_id":"e1b86555-bcf0-4824-b0e0-11b1248b1db5","severity_score":90},{"record_id":"1327e340-8f65-4a5a-a03d-9532af0958f3","source_event_group_id":"b134f779-3d61-4c34-ae9d-cada9ec633b0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Rosenberg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Rosenberg settled for $10,000 and CAP for failing to provide timely access to PHI.","event_id":"b134f779-3d61-4c34-ae9d-cada9ec633b0","severity_score":50},{"record_id":"10891801-5f1d-4794-b7bb-f9d9d93ab4d0","source_event_group_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New England Dermatology and Laser Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New England Dermatology settled for $30,000 and CAP for failing to provide timely access to PHI.","event_id":"28d326d4-5343-43cc-b6f0-369e0c9ba843","severity_score":50},{"record_id":"0ff85e87-74e4-4b71-9460-1d37ac4e3579","source_event_group_id":"c9a6d3a1-6148-4693-a8a3-1323f9ea31b7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Brock L. Bakewell","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Bakewell settled for $15,000 and CAP for failing to provide timely access to medical records.","event_id":"c9a6d3a1-6148-4693-a8a3-1323f9ea31b7","severity_score":50},{"record_id":"0441cc8c-7a6c-4a0c-9bdd-dbdedfee4592","source_event_group_id":"4f224c0f-166b-46fc-b71c-e0398893c3fb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Partners, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Partners settled for $125,000 and CAP for failing to provide timely access to PHI.","event_id":"4f224c0f-166b-46fc-b71c-e0398893c3fb","severity_score":65},{"record_id":"011f3213-2bfb-4932-b4a2-7e877a8fe9a0","source_event_group_id":"91835360-d67e-4b41-b168-dd636b5f0322","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UC San Diego Health","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UC San Diego Health settled for $82,500 and CAP for failing to provide timely access to PHI.","event_id":"91835360-d67e-4b41-b168-dd636b5f0322","severity_score":50},{"record_id":"ed79cda3-b9a9-4047-ad5e-6f06a03ac338","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Tennessee","state":"TN","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Blue Cross Blue Shield of Tennessee (BCBST) settled with OCR after an investigation found that 57 unencrypted computer hard drives were stolen from a leased facility.","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":90},{"record_id":"bd0dedc5-0321-4ba7-bdb6-c4ab39231964","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St Elizabeth's Medical Center","state":"MA","individuals_affected":4984,"breach_submission_date":null,"enforcement_action_date":null,"summary":"SEMC impermissibly disclosed the PHI of 4984 individuals via a USB drive that was unencrypted, and stolen. Additionally, SECA was unable to show that it had conducted a risk analysis, or implemented a risk management plan.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"ba681a32-d0c5-4e33-8035-1fb4d874801a","source_event_group_id":"36bd9765-8be9-4c9c-89ad-6f477be4c194","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forest Park Psychological Associates","state":"TX","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forest Park Psychological Associates impermissibly disclosed the PHI of 500 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"36bd9765-8be9-4c9c-89ad-6f477be4c194","severity_score":50},{"record_id":"a4a0a1a5-973c-424d-b755-b03582d78e4f","source_event_group_id":"d0a733f4-309d-4a95-b3be-a6ac4f2a30f0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Crescendo Collection Trust d/b/a Northcutt Dental","state":"AL","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Crescendo Collection Trust d/b/a Northcutt Dental impermissibly disclosed the PHI of 500 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"d0a733f4-309d-4a95-b3be-a6ac4f2a30f0","severity_score":50},{"record_id":"a23b400b-d9f8-4816-92e7-49cc2c2a5bc0","source_event_group_id":"f3efcded-c42b-49f6-ac27-4b5a4eb370d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Hospital","state":"DC","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Providence Hospital settled with OCR after an investigation found that the hospital had impermissibly disclosed protected health information when it announced the closure of its emergency department.","event_id":"f3efcded-c42b-49f6-ac27-4b5a4eb370d0","severity_score":50},{"record_id":"762ba518-071c-4d88-b31f-ecada89d956b","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Health","state":"IL","individuals_affected":10044,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presence Health impermissibly disclosed the PHI of 10044 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"73b3e60f-543b-4639-9ac8-bb7bf6862bcf","source_event_group_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Arkansas for Medical Sciences","state":"AR","individuals_affected":1069,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UAMS impermissibly disclosed the PHI of 1069 patients. 1048 patients were affected via impermissible disclosure of their PHI, due to an unencrypted laptop being stolen. The remaining 21 patients were affected by the impermissible disclosure of their PHI in other incidents.","event_id":"80f211d9-a152-4abf-9892-8e2734ae5b23","severity_score":80},{"record_id":"6eb2b04f-c1b3-4993-a0f7-a3fc8f07248b","source_event_group_id":"82adcb3d-f749-4fa0-b814-09aba20766ec","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County Public Hospital District","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County Public Hospital District (Skagit) settled with OCR after an investigation found that a vendor impermissibly disclosed the PHI of 1,770 patients.","event_id":"82adcb3d-f749-4fa0-b814-09aba20766ec","severity_score":65},{"record_id":"6c080938-025a-4dc6-b996-48d370814c94","source_event_group_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Dental","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Dental impermissibly disclosed the PHI of a patient by posting a public response to a negative online review, without authorization. OCR also found that Rodeo Dental failed to implement policies and procedures for the Security Rule, and had failed to train its employees on HIPAA policies and procedures.","event_id":"b1d24c96-1b27-45fd-8567-ce3f07a2cf4b","severity_score":50},{"record_id":"61c48e83-c3f5-46b5-a92d-8bd040ca2a51","source_event_group_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"La Clinica de La Raza","state":"CA","individuals_affected":9000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"La Clinica de La Raza impermissibly disclosed the PHI of 9000 individuals due to the loss of a laptop containing PHI. While the laptop was encrypted, OCR found deficiencies in La Clinica's risk analysis, and risk management processes. OCR also found that La Clinica had not implemented policies and procedures to address proper handling of electronic PHI.","event_id":"8cd69329-4dee-4183-ac85-3d83ae57792c","severity_score":65},{"record_id":"5fbb88af-822e-4676-a505-33af7708985f","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts Eye and Ear Infirmary (MEEI) settled with OCR after an investigation found that an unencrypted laptop containing the PHI of 3,500 patients was stolen.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"462b53d3-999c-44e5-944e-914d7b181104","source_event_group_id":"592d3372-b082-44e4-b18a-5d0c6528a4e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete PT Pool & Land Physical Therapy","state":"TX","individuals_affected":2476,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complete PT impermissibly disclosed the PHI of 2476 individuals via an unencrypted laptop. OCR found that Complete PT had not conducted an enterprise-wide risk analysis.","event_id":"592d3372-b082-44e4-b18a-5d0c6528a4e2","severity_score":50},{"record_id":"280cee8a-d678-4c01-a588-e94225567e7a","source_event_group_id":"b33d79a9-9e84-4900-8682-df8c357c8112","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Korunda Medical, LLC.","state":"FL","individuals_affected":7000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Korunda Medical, LLC. impermissibly disclosed the PHI of 7000 individuals. This was caused by a phishing attack that led to the impermissible disclosure of PHI. OCR found that Korunda Medical had not conducted an enterprise-wide risk analysis.","event_id":"b33d79a9-9e84-4900-8682-df8c357c8112","severity_score":50},{"record_id":"1b9a944b-c0aa-4f45-bb21-ce55c6cbfbba","source_event_group_id":"a8f5ab45-ad06-4d51-9029-be52e4428ac5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paeonia Medical, Inc.","state":"CA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paeonia Medical impermissibly disclosed the PHI of 500 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"a8f5ab45-ad06-4d51-9029-be52e4428ac5","severity_score":50},{"record_id":"11483467-aa94-49cf-94ea-d6a52a6c10f5","source_event_group_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Texas","state":"TX","individuals_affected":33400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSTX impermissibly disclosed the PHI of 33400 individuals. This was due to a server error that exposed the PHI of individuals to the public internet.","event_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","severity_score":90},{"record_id":"1093cd0d-85df-4814-96ee-c63830160de0","source_event_group_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Feinstein Institute for Medical Research","state":"NY","individuals_affected":13400,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Feinstein was found to have impermissibly disclosed the PHI of 13400 patients via an unencrypted laptop that was stolen. OCR also cited deficiencies in Feinstein's risk analysis, and risk management processes. Feinstein had failed to implement a mechanism to encrypt data.","event_id":"deba7b02-d95c-4525-93d0-a6bfa3806cfa","severity_score":90},{"record_id":"0f69b397-5b07-42ff-91f0-32f5e8e7b08f","source_event_group_id":"6cfd1786-9ae6-4f5c-8407-79977e4a6f61","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anderson Orthopaedic Clinic, Ltd.","state":"VA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anderson Orthopaedic Clinic, Ltd. impermissibly disclosed the PHI of 500 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"6cfd1786-9ae6-4f5c-8407-79977e4a6f61","severity_score":50},{"record_id":"050e202e-f116-42ed-a6b9-7ec1e6e64997","source_event_group_id":"dd0f8714-5acc-422f-b508-eb2483769dde","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kaiser Foundation Health Plan","state":"CO","individuals_affected":11000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kaiser Foundation Health Plan impermissibly disclosed the PHI of 11000 individuals. This was caused by the company failing to notify the affected individuals of the breach, failing to conduct a risk analysis, and failing to implement policies and procedures for the Security Rule.","event_id":"dd0f8714-5acc-422f-b508-eb2483769dde","severity_score":65},{"record_id":"33ac10d4-fb6f-4d24-ae77-a843e465d512","source_event_group_id":"ebbf8522-aef0-459c-a480-a1d84fe837b5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Brevard Skin and Cancer Center","state":"FL","individuals_affected":54570,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"ebbf8522-aef0-459c-a480-a1d84fe837b5","severity_score":70},{"record_id":"f8bf3d32-f41e-4f9a-b035-e8eaf6f5382e","source_event_group_id":"5226ff6a-66bb-45ed-b748-46306e323510","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CenterWell ACE/Home Solutions","state":"KY","individuals_affected":9651,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"5226ff6a-66bb-45ed-b748-46306e323510","severity_score":50},{"record_id":"d7c4f0d9-595d-4055-b67b-09ab5643c236","source_event_group_id":"83d2d49d-c58c-4d2c-99e6-b1af583f7a0c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prairie View Healthcare, Inc.","state":"OK","individuals_affected":700,"breach_submission_date":"2026-02-24","enforcement_action_date":null,"summary":"","event_id":"83d2d49d-c58c-4d2c-99e6-b1af583f7a0c","severity_score":30},{"record_id":"cf435f0e-6539-48d2-b22d-3ae91d6a0dec","source_event_group_id":"0c8cc9ff-4246-4c26-a925-8cda849f6332","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Indian Health Center of Santa Clara Valley","state":"CA","individuals_affected":3276,"breach_submission_date":"2026-01-05","enforcement_action_date":null,"summary":"","event_id":"0c8cc9ff-4246-4c26-a925-8cda849f6332","severity_score":50},{"record_id":"7f8f9aad-7efc-47c4-91ed-fd510e96dbae","source_event_group_id":"f66f9b11-91b4-4470-a697-c934a06b959d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oscar Health, Inc., on behalf of its affiliated covered entities: Oscar Health Plan, Inc.; Oscar Insurance Company of Florida; Oscar Health Plan of Ge","state":"NY","individuals_affected":91350,"breach_submission_date":"2026-02-27","enforcement_action_date":null,"summary":"","event_id":"f66f9b11-91b4-4470-a697-c934a06b959d","severity_score":70},{"record_id":"6aa98c61-b695-4b54-9391-a607dc1d8a41","source_event_group_id":"64367e89-ddc9-411b-bda0-5a3b9daeb454","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AccentCare","state":"TX","individuals_affected":19772,"breach_submission_date":"2026-02-24","enforcement_action_date":null,"summary":"","event_id":"64367e89-ddc9-411b-bda0-5a3b9daeb454","severity_score":70},{"record_id":"58720e2d-4093-44f9-aea8-2ec46781ff56","source_event_group_id":"e4031986-9104-4732-81ad-cb2aed6e775c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Native American Health Center","state":"CA","individuals_affected":2451,"breach_submission_date":"2026-01-14","enforcement_action_date":null,"summary":"","event_id":"e4031986-9104-4732-81ad-cb2aed6e775c","severity_score":50},{"record_id":"296c7a0c-a723-4d49-9f80-11c2ff20e0b5","source_event_group_id":"dcdf450e-9f52-476c-936b-87e5667ef276","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Insurance ACE/Humana Inc.","state":"KY","individuals_affected":1000,"breach_submission_date":"2026-02-28","enforcement_action_date":null,"summary":"","event_id":"dcdf450e-9f52-476c-936b-87e5667ef276","severity_score":30},{"record_id":"14ad5291-7121-4ebe-b8dd-385c6ce70bac","source_event_group_id":"46107eda-e206-410e-8649-b12c9e35a473","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Home, Hope and Healing, Inc.","state":"ME","individuals_affected":501,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"46107eda-e206-410e-8649-b12c9e35a473","severity_score":30},{"record_id":"f891b5cf-119c-40ca-89bc-467f129b846d","source_event_group_id":"38494686-6088-459c-8a3a-529529416e83","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advantage Capital Holdings LLC","state":"UT","individuals_affected":26343,"breach_submission_date":"2025-12-30","enforcement_action_date":null,"summary":"","event_id":"38494686-6088-459c-8a3a-529529416e83","severity_score":70},{"record_id":"d918c747-f977-4bb6-b43c-69386eca62df","source_event_group_id":"7654e414-d8b1-4e8a-ac6c-b2828eefee59","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health of Maryland, Inc.","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records upon request and failed to cooperate with OCR's investigation.","event_id":"7654e414-d8b1-4e8a-ac6c-b2828eefee59","severity_score":90},{"record_id":"cae216d7-2438-46ab-9a53-ae07f592dcf2","source_event_group_id":"e10d66b6-f7ec-4203-ab53-24f0a3bac9eb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Henry Ford Health System","state":"MI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A patient's medical information was impermissibly accessed and disclosed by an employee.","event_id":"e10d66b6-f7ec-4203-ab53-24f0a3bac9eb","severity_score":65},{"record_id":"c1500465-0c81-436a-b829-400841f952ff","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"General Hospital Corporation (DBA Massachusetts General Hospital)","state":"MA","individuals_affected":19200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massachusetts General Hospital impermissibly disclosed PHI of 19,200 patients when a surgeon’s unencrypted laptop was stolen from a car.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"b455fb8c-95b7-49d1-bb8f-13e9c984374f","source_event_group_id":"37e8f14b-dde5-4e77-b719-f4b50025ffb5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Community Health Network of Indiana, Inc.","state":"IN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Community Health Network failed to redact PHI from billing records before mailing them, affecting one individual.","event_id":"37e8f14b-dde5-4e77-b719-f4b50025ffb5","severity_score":50},{"record_id":"ae8bcea9-5c66-4ceb-9d62-1172a132dfd8","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary (MEEI)","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop containing the ePHI of 3,621 patients was stolen.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"7de27340-d31d-467e-965f-15756ca2df65","source_event_group_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Providence Health & Services","state":"WA","individuals_affected":381000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unencrypted backup tapes containing patient data were stolen from an administrative office.","event_id":"9ed31cbf-2d9f-42b5-8226-e5dd78d094db","severity_score":50},{"record_id":"760283d7-c3fb-4f86-9710-667386a38ac3","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":19200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A surgeon's unencrypted laptop containing patient data was stolen, leading to a breach impacting thousands of individuals.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"6fd68493-33bd-4fbb-97e7-5a5a4a29dd0a","source_event_group_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkadelphia Human Services, Inc.","state":"AR","individuals_affected":750,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Protected health information (PHI) of 750 clients was impermissibly disclosed when disposed of in a public dumpster.","event_id":"40428eae-4ed8-4ac5-9771-c8bec038f881","severity_score":50},{"record_id":"6acd34e4-9f3e-409a-9042-25e8363831ff","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services (DHSS)","state":"AK","individuals_affected":17987,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A portable USB hard drive containing ePHI was stolen, impacting 17,987 individuals.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"5a89d4a8-78a2-4866-8ba9-33509776f062","source_event_group_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"QCA Health Plan, Inc.","state":"AR","individuals_affected":148863,"breach_submission_date":null,"enforcement_action_date":null,"summary":"An unencrypted laptop was stolen from an employee's car, containing ePHI of 148,863 individuals.","event_id":"25ac2c86-c309-49bc-ae47-d3d1f7c86629","severity_score":65},{"record_id":"57b3f59e-79a4-4de1-933e-780d65eae53a","source_event_group_id":"54fb3d76-7c3c-4fef-888d-3de2682e8b45","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Black River Healthcare System","state":"WI","individuals_affected":30,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Black River employee impermissibly accessed the protected health information of 30 patients over 10 years.","event_id":"54fb3d76-7c3c-4fef-888d-3de2682e8b45","severity_score":50},{"record_id":"52d391d8-2943-4ef9-85e2-fdc2eb18fa86","source_event_group_id":"c22e408b-47d6-40a0-8b12-65d16e0b50b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Health System","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Complaint alleging Jackson impermissibly published PHI on its website in response to a patient's complaint.","event_id":"c22e408b-47d6-40a0-8b12-65d16e0b50b8","severity_score":65},{"record_id":"43e599f6-811a-431e-a367-f57eb65e2f36","source_event_group_id":"988de367-fd25-478b-89aa-6d1336401a02","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Affinity Health Plan, Inc.","state":"NY","individuals_affected":344579,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Affinity returned photocopiers to a leasing company without deleting data, exposing the ePHI of 344,579 individuals.","event_id":"988de367-fd25-478b-89aa-6d1336401a02","severity_score":90},{"record_id":"3b4992ca-c5bc-42dc-8eb6-94d306c8e1df","source_event_group_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"WellPoint, Inc.","state":"IN","individuals_affected":612402,"breach_submission_date":null,"enforcement_action_date":null,"summary":"WellPoint failed to implement appropriate technical safeguards to prevent unauthorized access to the ePHI of 612,402 individuals.","event_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","severity_score":90},{"record_id":"33e128bb-1eaa-4d78-a556-0a2270855747","source_event_group_id":"3e9a5cd5-64ea-4ac2-b056-6c8b6674f80f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Paean Health d.b.a. La Clinica de La Mama","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Paean Health failed to notify OCR and affected individuals of a breach of unsecured protected health information.","event_id":"3e9a5cd5-64ea-4ac2-b056-6c8b6674f80f","severity_score":50},{"record_id":"2a8c1b1a-3119-49bd-9e2e-31b3823be3fc","source_event_group_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna, Inc.","state":"CT","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna sent mailings that impermissibly disclosed HIV status and other sensitive information to approximately 12,000 individuals.","event_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","severity_score":80},{"record_id":"25db78bb-f7e9-4b66-bf7c-8f81b5733c4b","source_event_group_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Adult & Pediatric Dermatology, P.C.","state":"MA","individuals_affected":2200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A flash drive containing the ePHI of 2,200 individuals was stolen from an employee's car.","event_id":"8fb738ef-b0a5-454a-bdb6-d68d741a33f6","severity_score":65},{"record_id":"1f91ea12-28f7-459b-ab20-17e330b3a4e6","source_event_group_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County in Washington","state":"WA","individuals_affected":1581,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Protected health information of over 1,500 individuals was impermissibly disclosed due to a server configuration error.","event_id":"cf8fdbef-32fa-42bc-8155-eada4c3f27d3","severity_score":65},{"record_id":"2d1ffe12-ba28-46eb-862f-7443e1a543c6","source_event_group_id":"386368a3-b22d-4a2b-bcf0-860171a83d55","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Builders FirstSource Flex Plan","state":"TX","individuals_affected":1514,"breach_submission_date":"2026-02-18","enforcement_action_date":null,"summary":"","event_id":"386368a3-b22d-4a2b-bcf0-860171a83d55","severity_score":50},{"record_id":"f97d021d-bb5e-4a4b-9250-f5c9dd8b3fe8","source_event_group_id":"2c77cc2f-2fcf-4da8-a159-41803918beb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Option Care Health, Inc.","state":"IL","individuals_affected":2086,"breach_submission_date":"2026-02-20","enforcement_action_date":null,"summary":"","event_id":"2c77cc2f-2fcf-4da8-a159-41803918beb2","severity_score":50},{"record_id":"df20cc78-e047-4377-b65b-4e8af0d3c100","source_event_group_id":"df5e90d4-f73e-45b3-a2db-983e34669fb4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AltaMed Health Services Corporation","state":"CA","individuals_affected":501,"breach_submission_date":"2026-02-26","enforcement_action_date":null,"summary":"","event_id":"df5e90d4-f73e-45b3-a2db-983e34669fb4","severity_score":30},{"record_id":"d546856c-f805-4cb8-bc18-021af0199357","source_event_group_id":"0415c290-368e-45e1-99f1-18f031e72d61","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Axis Healthcare Group P.C.","state":"MD","individuals_affected":3537,"breach_submission_date":"2026-01-28","enforcement_action_date":null,"summary":"","event_id":"0415c290-368e-45e1-99f1-18f031e72d61","severity_score":50},{"record_id":"d398a579-8e3a-401f-8e8d-48b05bd327fe","source_event_group_id":"88d63387-2114-4823-886c-547cfd56a8fa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Baltimore Medical System, Inc.","state":"MA","individuals_affected":501,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"88d63387-2114-4823-886c-547cfd56a8fa","severity_score":30},{"record_id":"d1086174-a09f-48a4-979f-f026a853a74c","source_event_group_id":"df9b0ebf-2678-41b4-8a58-3dc5db7dcb84","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VPS Medical PLLC","state":"PA","individuals_affected":4600,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"df9b0ebf-2678-41b4-8a58-3dc5db7dcb84","severity_score":50},{"record_id":"ca3e592c-c6d3-4307-a64a-cf9fd1c135e6","source_event_group_id":"abb160ba-6afa-40a9-82fc-cef0798b0898","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Communications Workers of America Local 1180 Security Benefits Fund","state":"NY","individuals_affected":18550,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"abb160ba-6afa-40a9-82fc-cef0798b0898","severity_score":70},{"record_id":"c8939260-ceeb-4e25-8125-795de2020bec","source_event_group_id":"98492f9a-289e-4100-84e0-4e9c0c79e422","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Exact Sciences Laboratories LLC","state":"WI","individuals_affected":2658,"breach_submission_date":"2025-12-29","enforcement_action_date":null,"summary":"","event_id":"98492f9a-289e-4100-84e0-4e9c0c79e422","severity_score":50},{"record_id":"b4398da1-610b-49d2-a97e-9d78fc2b310d","source_event_group_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lincoln National Corporation d/b/a/ Lincoln Financial","state":"IN","individuals_affected":998,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","severity_score":30},{"record_id":"b1b5b6f5-3d74-4f04-bf0b-863d579fe1ed","source_event_group_id":"1777419d-3465-4a1a-abf1-4fccba42e429","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wee Care Pediatrics, LLC","state":"UT","individuals_affected":2127,"breach_submission_date":"2026-02-14","enforcement_action_date":null,"summary":"","event_id":"1777419d-3465-4a1a-abf1-4fccba42e429","severity_score":50},{"record_id":"a8b803f9-0b6a-45f9-98be-61f0a5bfcc44","source_event_group_id":"63024c29-df8c-4111-9f5a-d99784fa75e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Center for Advanced Eye Care","state":"ME","individuals_affected":9300,"breach_submission_date":"2026-02-20","enforcement_action_date":null,"summary":"","event_id":"63024c29-df8c-4111-9f5a-d99784fa75e4","severity_score":50},{"record_id":"95a83411-9489-4e87-9103-a3c6bbe3d0e4","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BlueCross BlueShield of Tennessee, Inc.","state":"TN","individuals_affected":780,"breach_submission_date":"2025-12-26","enforcement_action_date":null,"summary":"","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":30},{"record_id":"8641d1a3-b3b8-40ea-a357-a0812643ce9f","source_event_group_id":"c8cd8181-53cf-4ca4-a1fd-30bbb244592c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Texas MHMR Center dba Center for Life Resource","state":"TX","individuals_affected":501,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"c8cd8181-53cf-4ca4-a1fd-30bbb244592c","severity_score":30},{"record_id":"74ae0d76-aec9-4fa1-816f-adb8b08192f6","source_event_group_id":"76abe12d-f2c0-41ed-8140-f8be4a0e1117","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cedar Point Health, LLC","state":"CO","individuals_affected":23114,"breach_submission_date":"2026-02-12","enforcement_action_date":null,"summary":"","event_id":"76abe12d-f2c0-41ed-8140-f8be4a0e1117","severity_score":70},{"record_id":"73d46bdc-8a71-40f0-8b12-4abcdf43bd8a","source_event_group_id":"124b995a-c9a5-4ca1-bcae-9b2514f6fad9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BMG of Kansas, Inc.","state":"KS","individuals_affected":1327,"breach_submission_date":"2026-02-26","enforcement_action_date":null,"summary":"","event_id":"124b995a-c9a5-4ca1-bcae-9b2514f6fad9","severity_score":50},{"record_id":"6421e544-341f-45f7-9e5b-459c08b688f1","source_event_group_id":"931c2950-e0a3-43d7-8065-7e13b16d7980","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health and Hospital Corporation of Marion County","state":"IN","individuals_affected":792,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"931c2950-e0a3-43d7-8065-7e13b16d7980","severity_score":30},{"record_id":"57061d6a-636d-4075-a81f-8b39a5365f14","source_event_group_id":"160392bb-d9c8-4c9b-94f7-57d3c9c295d9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Couve Healthcare Consulting, LLC DBA Evergreen Healthcare Group","state":"WA","individuals_affected":11795,"breach_submission_date":"2026-02-24","enforcement_action_date":null,"summary":"","event_id":"160392bb-d9c8-4c9b-94f7-57d3c9c295d9","severity_score":70},{"record_id":"49653a91-fbd9-4822-b729-97d3f698ad51","source_event_group_id":"42672b4c-a90f-4375-818d-9edfec03c48f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"National Association on Drug Abuse Problems","state":"NY","individuals_affected":90000,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"42672b4c-a90f-4375-818d-9edfec03c48f","severity_score":70},{"record_id":"41a402da-74af-49d4-b9db-9af78330ba0f","source_event_group_id":"d746519b-489c-4c4b-8e4d-5b5940e6bc20","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Florence County Commission on Alcohol & Drug Abuse – dba Circle Park Behavioral Health Services (“Circle Park”)","state":"SC","individuals_affected":7020,"breach_submission_date":"2026-01-14","enforcement_action_date":null,"summary":"","event_id":"d746519b-489c-4c4b-8e4d-5b5940e6bc20","severity_score":50},{"record_id":"3732ba81-2fcc-4d58-93a2-f88464fddc5e","source_event_group_id":"2824da22-9a8a-4453-9d00-c216d22cd9a0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wakefield & Associates, LLC","state":"TN","individuals_affected":31751,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"2824da22-9a8a-4453-9d00-c216d22cd9a0","severity_score":70},{"record_id":"244e5a92-bdb6-4b34-85c8-732a17cf2ae4","source_event_group_id":"fb0adc00-daef-45a1-a3ee-eb82037020e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Resource Corporation of America","state":"TX","individuals_affected":501,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"fb0adc00-daef-45a1-a3ee-eb82037020e7","severity_score":30},{"record_id":"23466d80-6d0f-4772-b5f6-523c66c56dc8","source_event_group_id":"6a4aff93-ef4b-434e-bf8f-60bcf5d91c17","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EXCEL HEALTHCARE RECEIVABLE MANAGEMENT & CONSULTING CORP.","state":"FL","individuals_affected":500,"breach_submission_date":"2026-01-13","enforcement_action_date":null,"summary":"","event_id":"6a4aff93-ef4b-434e-bf8f-60bcf5d91c17","severity_score":30},{"record_id":"1eebf801-c64b-4295-bf53-7b5688cca8ea","source_event_group_id":"8127ea9d-3ee5-4f7d-a4f0-4091c1293a20","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North East Medical Services","state":"CA","individuals_affected":91513,"breach_submission_date":"2025-12-18","enforcement_action_date":null,"summary":"","event_id":"8127ea9d-3ee5-4f7d-a4f0-4091c1293a20","severity_score":70},{"record_id":"f4e81b29-451a-4481-8b16-699fae741e20","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing attack.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":55},{"record_id":"f4e08532-aac2-45e9-b283-047f70a2a1b2","source_event_group_id":"93f96c08-f8a9-4674-a75e-eb7112a24bd5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma Department of Mental Health and Substance Abuse Services","state":"OK","individuals_affected":240000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phishing attack led to unauthorized access to employee email accounts and ePHI.","event_id":"93f96c08-f8a9-4674-a75e-eb7112a24bd5","severity_score":80},{"record_id":"e1561893-d9ce-4e5e-bef3-c928f5de6b7a","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s Medical Center of Dallas","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the loss of unencrypted BlackBerry devices.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":55},{"record_id":"d22d593e-22c0-4fed-a9e0-6770f1db926b","source_event_group_id":"65cc3ec1-828c-4ff9-8143-fd8b3d2f1df8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Jersey Department of Health","state":"NJ","individuals_affected":2000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI due to insecure online portal.","event_id":"65cc3ec1-828c-4ff9-8143-fd8b3d2f1df8","severity_score":65},{"record_id":"ae7c1ecf-a309-4132-8724-3929120b9f56","source_event_group_id":"c5c08c3e-abbe-4b4f-bc1a-9e1590d9b951","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley Anesthesia Associates","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the cyber-attack.","event_id":"c5c08c3e-abbe-4b4f-bc1a-9e1590d9b951","severity_score":55},{"record_id":"abfc5d89-1689-42cc-bb24-cd1501b28b16","source_event_group_id":"03bf503c-7310-4548-9c29-16b9c230d88b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Department of Behavioral Health and Developmental Disabilities","state":"GA","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Misdirected faxes resulted in the impermissible disclosure of PHI.","event_id":"03bf503c-7310-4548-9c29-16b9c230d88b","severity_score":90},{"record_id":"7e54a928-d501-4a42-b79d-40316ec6e440","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Final Civil Money Penalty relating to the 2015 breach, closing out the longstanding case.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":65},{"record_id":"7d967956-6d1f-4b86-9154-fb70b294167d","source_event_group_id":"1a6c142d-2d2a-42db-aff4-4db0598ceab0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Yakima Valley Memorial Hospital","state":"WA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to impermissible disclosure to a third-party vendor.","event_id":"1a6c142d-2d2a-42db-aff4-4db0598ceab0","severity_score":55},{"record_id":"7308ae1f-e5aa-4ac0-bed9-03808264b9b2","source_event_group_id":"7a005624-45bd-4942-aa77-a1437c9ef608","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"American Medical Collection Agency (Business Associate)","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the massive data breach.","event_id":"7a005624-45bd-4942-aa77-a1437c9ef608","severity_score":55},{"record_id":"6a855ea4-2e28-465d-981f-6b1112e021ac","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance","state":"FL","individuals_affected":1100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A cyber-attack resulted in the impermissible disclosure of the PHI of over 1.1 million individuals.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":80},{"record_id":"503c41f4-a048-453f-bb1a-4a8fa7db97d5","source_event_group_id":"b43b2710-b498-419c-9b72-813e01a81ad1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southcross Hospital","state":"TX","individuals_affected":3,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records for multiple patients.","event_id":"b43b2710-b498-419c-9b72-813e01a81ad1","severity_score":65},{"record_id":"346c9e2d-7c4a-4d82-8cb5-a69be7b18177","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to unsecured server configurations.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":55},{"record_id":"052c6c02-a804-4892-9745-fc3a18fe5e05","source_event_group_id":"ecff789b-dba6-4333-a7e6-4557d20585df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shields Health Care Group","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the network server breach.","event_id":"ecff789b-dba6-4333-a7e6-4557d20585df","severity_score":55},{"record_id":"04d2a542-0424-480c-a2f0-f0b9994401d0","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to multiple breaches.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":55},{"record_id":"faea06a3-f19d-4b22-8d5c-09c848bd101f","source_event_group_id":"c5c08c3e-abbe-4b4f-bc1a-9e1590d9b951","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley Anesthesia Associates","state":"AZ","individuals_affected":300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A cyber-attack compromised the ePHI of over 300,000 individuals.","event_id":"c5c08c3e-abbe-4b4f-bc1a-9e1590d9b951","severity_score":50},{"record_id":"f09bd67b-239b-4ec6-ac38-78e610492113","source_event_group_id":"eea5b2a7-8fea-45f9-a7d8-0b34bd83507b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic Surgery","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"eea5b2a7-8fea-45f9-a7d8-0b34bd83507b","severity_score":55},{"record_id":"eb532b93-670f-4427-be77-f365eeb5cdc9","source_event_group_id":"b43b2710-b498-419c-9b72-813e01a81ad1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southcross Hospital","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"b43b2710-b498-419c-9b72-813e01a81ad1","severity_score":55},{"record_id":"e9602ebd-f821-4cbd-a028-5655d55a6b56","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing attack.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":55},{"record_id":"e8db3eb4-08b4-4547-a752-1e5e0aa6673e","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health","state":"UT","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing incident and breach.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":55},{"record_id":"e484bddb-1896-4e56-a6be-682afbcad5a4","source_event_group_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to impermissible employee access of PHI.","event_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","severity_score":55},{"record_id":"e301b759-769c-4834-8032-55aa7bf60c51","source_event_group_id":"9c72904e-cbf4-4ba8-8686-c8ec2432f67a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CMT, P.C. dba Commonwealth Medical","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"9c72904e-cbf4-4ba8-8686-c8ec2432f67a","severity_score":55},{"record_id":"dc4c4b56-c89a-477c-9caa-0b7f1e083668","source_event_group_id":"c6facb28-f6ed-4173-913c-b43018a4b387","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dental Care Alliance","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the cyber-attack.","event_id":"c6facb28-f6ed-4173-913c-b43018a4b387","severity_score":55},{"record_id":"d4958553-834d-48ca-98de-f3c6f7767240","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco","state":"CA","individuals_affected":24000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phishing attack led to unauthorized access to employee email accounts and ePHI.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":80},{"record_id":"d35991af-7485-4f6f-9919-81de8d9c0c30","source_event_group_id":"ad98e6c2-a3a7-480a-aa31-49a5b7d4ff90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice of Dr. Mary King","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"ad98e6c2-a3a7-480a-aa31-49a5b7d4ff90","severity_score":55},{"record_id":"d16f6994-b76e-446a-ad91-ac1fa2a1523a","source_event_group_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forefront Dermatology","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the ransomware attack.","event_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","severity_score":55},{"record_id":"d03d357e-1e90-4140-9531-084606ae2291","source_event_group_id":"ad98e6c2-a3a7-480a-aa31-49a5b7d4ff90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Practice of Dr. Mary King","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"ad98e6c2-a3a7-480a-aa31-49a5b7d4ff90","severity_score":50},{"record_id":"cddcbdc4-3894-48b1-9689-f1ca79fa8845","source_event_group_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Department of Human Services","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing attack.","event_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","severity_score":55},{"record_id":"c36f8bf0-d8af-416c-8b89-74b4760c6254","source_event_group_id":"e81e8525-8f7b-4e9f-8ae9-e9a8fbeaaa29","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care San Antonio","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"e81e8525-8f7b-4e9f-8ae9-e9a8fbeaaa29","severity_score":55},{"record_id":"bf27c651-644e-41ce-a578-f7a163a37aae","source_event_group_id":"e81e8525-8f7b-4e9f-8ae9-e9a8fbeaaa29","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care San Antonio","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"e81e8525-8f7b-4e9f-8ae9-e9a8fbeaaa29","severity_score":65},{"record_id":"bc87197e-9f2c-451f-a5cf-b37e78602f2e","source_event_group_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Regents of the University of California, San Francisco","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing attack.","event_id":"e9ab2aaa-7b99-4139-9db4-0d3d1f96c67f","severity_score":55},{"record_id":"bb48054e-88c4-4308-b5c8-b11846880ff4","source_event_group_id":"7a005624-45bd-4942-aa77-a1437c9ef608","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"American Medical Collection Agency (Business Associate)","state":"NY","individuals_affected":20000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Massive data breach affecting numerous covered entities and millions of individuals due to security failures.","event_id":"7a005624-45bd-4942-aa77-a1437c9ef608","severity_score":65},{"record_id":"b6289899-c216-457f-bd1a-08842626dd33","source_event_group_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forefront Dermatology","state":"WI","individuals_affected":50000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Ransomware attack resulted in the impermissible disclosure of patient information.","event_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","severity_score":65},{"record_id":"b55673d4-4994-433f-9845-a231cd3cc967","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children’s Medical Center of Dallas","state":"TX","individuals_affected":3800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Loss of unencrypted BlackBerry devices containing ePHI.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"9f64a188-e3f1-4681-9a02-0050ad363713","source_event_group_id":"515d7369-110a-43b8-bd38-1cea4b195d22","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Medical Care","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to failure to provide timely access to medical records.","event_id":"515d7369-110a-43b8-bd38-1cea4b195d22","severity_score":55},{"record_id":"915a718b-5ace-4fc5-82c2-bf52e8286aa2","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan, Inc.","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the cyberattack exposing PHI.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":55},{"record_id":"8e651914-a38f-46ae-bd01-ec20c3d79898","source_event_group_id":"9c8b8045-887a-4fef-a2aa-056878965661","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Health","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to improper disposal of PHI.","event_id":"9c8b8045-887a-4fef-a2aa-056878965661","severity_score":55},{"record_id":"891c9426-6cd4-49d7-9eea-a0e9e8c444a9","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MD Anderson Cancer Center","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to lost/stolen unencrypted devices.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":55},{"record_id":"88c36ce2-2c1a-43f9-bff1-68c68515123c","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the 2021 cyberattack.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":55},{"record_id":"87be60ec-9f37-4cb3-ac4b-91c64c3e8689","source_event_group_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Health System","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the stolen unencrypted laptop.","event_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","severity_score":55},{"record_id":"80c6a2cb-0d84-446d-b6bd-2df536b56393","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America Dental","state":"FL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the large data breach.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":55},{"record_id":"80967109-6a0e-4711-80d7-dbe6a67a46f1","source_event_group_id":"f4f3ae38-63f6-4e03-bfc7-24515e638ebb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Aurora Health","state":"IL","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to multiple breaches.","event_id":"f4f3ae38-63f6-4e03-bfc7-24515e638ebb","severity_score":55},{"record_id":"769f22ec-9d3f-4ee7-9965-e11bfcc9229c","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":3700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Further Civil Money Penalty imposed for continued non-compliance following previous actions.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":80},{"record_id":"757b9644-63cd-4a87-9141-694f2c4922e3","source_event_group_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NorthStar Anesthesia, LLC","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the ransomware attack.","event_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","severity_score":55},{"record_id":"6f0ffdc5-2a94-4944-abb8-e5eb50d15cfe","source_event_group_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Washington Medicine","state":"WA","individuals_affected":90000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phishing attack led to unauthorized access to employee email accounts containing ePHI.","event_id":"f5d33c18-8130-4495-8652-df2ed3f7d182","severity_score":65},{"record_id":"6b766ead-2b2f-4f48-b3fb-91a61091d278","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to remove PHI from an old computer hard drive before its disposal, leading to impermissible disclosure.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":90},{"record_id":"60fa707c-e769-4342-9a85-8725869c9969","source_event_group_id":"9c72904e-cbf4-4ba8-8686-c8ec2432f67a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CMT, P.C. dba Commonwealth Medical","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"9c72904e-cbf4-4ba8-8686-c8ec2432f67a","severity_score":50},{"record_id":"52ecadc4-8c65-43ff-a46c-e3a72d072981","source_event_group_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"L.A. Care Health Plan","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to improper disposal of PHI from old computer hard drive.","event_id":"6ed92883-ab94-4b30-8019-8d53993bf8b8","severity_score":55},{"record_id":"4c0dd0ab-53fb-425c-8ecf-56fadf547909","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":3700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Civil Money Penalty imposed related to the 2021 cyberattack due to continued unresolved issues.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"467b8d56-d597-487d-abb8-3e4e879e7ea6","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":33000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement proper security measures, leading to a phishing attack.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":90},{"record_id":"43aef005-4e56-4543-87b9-af10f5c0a093","source_event_group_id":"4c325acf-e48d-4927-ba8b-351a036d0e05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Group Health Cooperative of South Central Wisconsin","state":"WI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing incident.","event_id":"4c325acf-e48d-4927-ba8b-351a036d0e05","severity_score":55},{"record_id":"3ecbde17-e5e4-40e3-a95b-2c59c31f7dca","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Presbyterian Hospital","state":"NY","individuals_affected":63000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unauthorized access to an electronic health record system by an employee.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"38865390-2bbe-489a-918e-1ca0227a41b2","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the impermissible access of PHI.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":55},{"record_id":"33912b90-ff02-4fda-a4bc-94aac94b7cfb","source_event_group_id":"93f96c08-f8a9-4674-a75e-eb7112a24bd5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma Department of Mental Health and Substance Abuse Services","state":"OK","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the phishing attack.","event_id":"93f96c08-f8a9-4674-a75e-eb7112a24bd5","severity_score":55},{"record_id":"3363bdb6-b32e-4edf-9b25-59aa71970bc2","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University - Center for Health Sciences","state":"OK","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the 2020 breach.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":55},{"record_id":"2dee980f-4e7f-4863-a497-f76b1c510472","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Further civil money penalty imposed related to the 2015 breach and continued non-compliance.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"2cf78138-a096-472e-9905-79c8fc89e978","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America Dental","state":"FL","individuals_affected":8900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A large data breach affecting millions of individuals due to a cyberattack.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"2cb59898-c16f-4006-a61a-beda58f509b5","source_event_group_id":"515d7369-110a-43b8-bd38-1cea4b195d22","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Complete Medical Care","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"515d7369-110a-43b8-bd38-1cea4b195d22","severity_score":50},{"record_id":"2932fa75-fe3a-4c19-9c09-ce81f9417078","source_event_group_id":"65cc3ec1-828c-4ff9-8143-fd8b3d2f1df8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Jersey Department of Health","state":"NJ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to impermissible disclosure via insecure online portal.","event_id":"65cc3ec1-828c-4ff9-8143-fd8b3d2f1df8","severity_score":55},{"record_id":"1fc5b687-4787-4d98-9237-b0f3c3c631f4","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to improper social media disclosure by an employee.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":55},{"record_id":"1da6147b-dda0-4fc5-82e7-cb73bc9d7aab","source_event_group_id":"da65a2e0-86d4-4bd4-bfdc-a374e24ebae7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology & Skin Cancer Center","state":"MO","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the ransomware attack.","event_id":"da65a2e0-86d4-4bd4-bfdc-a374e24ebae7","severity_score":55},{"record_id":"10f881af-c54b-4ef9-bfe5-5197aef444d3","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the theft of an unencrypted laptop.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":55},{"record_id":"0f3e02bb-2617-4144-ab09-7d3d6f0f8357","source_event_group_id":"4c325acf-e48d-4927-ba8b-351a036d0e05","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Group Health Cooperative of South Central Wisconsin","state":"WI","individuals_affected":16000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A phishing incident compromised employee email accounts exposing PHI.","event_id":"4c325acf-e48d-4927-ba8b-351a036d0e05","severity_score":50},{"record_id":"0b70cf57-272f-4969-9306-666950514634","source_event_group_id":"1a6c142d-2d2a-42db-aff4-4db0598ceab0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Yakima Valley Memorial Hospital","state":"WA","individuals_affected":40000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of patient information to a third-party vendor without a business associate agreement.","event_id":"1a6c142d-2d2a-42db-aff4-4db0598ceab0","severity_score":65},{"record_id":"0ae3a958-03f7-4cbd-9145-e35dd55203e1","source_event_group_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Children's Hospital","state":"AR","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to improper disposal of PHI.","event_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","severity_score":55},{"record_id":"f7939274-647c-4c92-9f1a-37bb6c8963bd","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering","state":"IN","individuals_affected":3900000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A breach of electronic protected health information (ePHI) due to a hacker accessing their network.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":80},{"record_id":"f5f70b77-620e-4ac5-8f7e-6504eb12e270","source_event_group_id":"4cdae373-fa6b-46bb-aecf-c0de24502cd9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Plan","state":"GA","individuals_affected":15000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to report a breach within 60 days of discovery.","event_id":"4cdae373-fa6b-46bb-aecf-c0de24502cd9","severity_score":65},{"record_id":"cc86a0d3-6eea-4109-b688-1042efe5c9b0","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services","state":"AK","individuals_affected":50000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches over several years, including unencrypted portable devices and server vulnerabilities.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"c0851ab6-46af-4bcf-8f77-8dd3a7d922e0","source_event_group_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services","state":"PA","individuals_affected":13000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple security failures leading to phishing attacks and impermissible disclosures.","event_id":"82d71a86-555e-4b42-a5e0-6bef341e0137","severity_score":80},{"record_id":"b496aedb-1482-4aa8-9b0b-c5d3edc4ad1f","source_event_group_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NorthStar Anesthesia, LLC","state":"TX","individuals_affected":30000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement required security measures, leading to a ransomware attack.","event_id":"532a363f-d30d-4b3d-a54b-6746eaf02e77","severity_score":90},{"record_id":"b1113be7-b954-4ca8-8c7f-beaa66531dbe","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America Dental","state":"FL","individuals_affected":3620000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A dental insurer experienced a cyber-attack that exposed the PHI of millions of patients.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"ad8cd789-589f-4681-8d7a-62dca1532554","source_event_group_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Leaders","state":"NC","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A business associate experienced a ransomware attack leading to a massive data breach.","event_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","severity_score":90},{"record_id":"a07fc4e3-5386-4838-9cde-6ab2be10c107","source_event_group_id":"03bf503c-7310-4548-9c29-16b9c230d88b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Department of Behavioral Health and Developmental Disabilities","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to misdirected faxes.","event_id":"03bf503c-7310-4548-9c29-16b9c230d88b","severity_score":55},{"record_id":"91a3af5f-1ae2-4198-b8a4-d85494133d8c","source_event_group_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Health System","state":"RI","individuals_affected":20600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A laptop containing unencrypted PHI was stolen, impacting thousands of patients.","event_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","severity_score":90},{"record_id":"7fafef42-99ff-4929-9e51-f5ac3ae02bbf","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches over several years, including unencrypted devices and server vulnerabilities.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"6c4da310-d7a1-44c3-9647-4a6ffc77d2fb","source_event_group_id":"ecff789b-dba6-4333-a7e6-4557d20585df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shields Health Care Group","state":"MA","individuals_affected":2000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A network server breach impacting millions of individuals due to security vulnerabilities.","event_id":"ecff789b-dba6-4333-a7e6-4557d20585df","severity_score":90},{"record_id":"661e6403-461b-4476-a7ea-a77d4af59445","source_event_group_id":"eea5b2a7-8fea-45f9-a7d8-0b34bd83507b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Orthopedic Surgery","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to provide timely access to medical records.","event_id":"eea5b2a7-8fea-45f9-a7d8-0b34bd83507b","severity_score":50},{"record_id":"60780711-76ab-4acb-a6b3-cac7bfed127f","source_event_group_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Excellus Health Plan, Inc.","state":"NY","individuals_affected":9300000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cyberattack exposed the PHI of millions of individuals for years.","event_id":"a5c32964-8d8c-42aa-ba88-1ce54e215137","severity_score":90},{"record_id":"5b42800e-2bfa-4ea7-941e-fb6cbb950c6e","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University - Center for Health Sciences","state":"OK","individuals_affected":279000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lack of security measures led to a breach affecting thousands of individuals.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"4d6318a5-ffd5-46ed-8bb9-0232e78bdf4a","source_event_group_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Department of Human Services","state":"AR","individuals_affected":150000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A phishing attack compromised employee email accounts, exposing PHI.","event_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","severity_score":80},{"record_id":"4b459d41-4a39-4fb8-8143-7fa76e2cd41b","source_event_group_id":"da65a2e0-86d4-4bd4-bfdc-a374e24ebae7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology & Skin Cancer Center","state":"MO","individuals_affected":9000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failure to implement HIPAA Security Rule safeguards resulting in a ransomware attack.","event_id":"da65a2e0-86d4-4bd4-bfdc-a374e24ebae7","severity_score":50},{"record_id":"3fce68cf-92ba-46bc-8775-e6cdd1a2afa6","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to the cyberattack and data breach.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":55},{"record_id":"3378d604-aa30-410c-ad8c-ec9d751b3f66","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Imposition of Civil Money Penalty following the 2015 cyberattack.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"2a3a8610-1143-4ac9-acfb-df605de33ba4","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"VA","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Failed to implement proper security measures, leading to a phishing attack and unauthorized access.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":90},{"record_id":"131ca43d-adad-492c-b936-ed7a223379b3","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Presbyterian Hospital","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan related to unauthorized employee access.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":55},{"record_id":"0568d9ea-4328-4fb7-b874-8ae10064966b","source_event_group_id":"4cdae373-fa6b-46bb-aecf-c0de24502cd9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Plan","state":"GA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrective Action Plan issued in addition to the monetary settlement for untimely breach notification.","event_id":"4cdae373-fa6b-46bb-aecf-c0de24502cd9","severity_score":55},{"record_id":"044664f6-157e-49c4-bc01-2f5bc551254e","source_event_group_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Utah Health","state":"UT","individuals_affected":120000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Breach affecting numerous individuals due to a phishing incident.","event_id":"d36ed04f-3758-4879-840e-de2b8bd066cb","severity_score":90},{"record_id":"01cf7161-42a1-4040-82cd-ae1f185d5d44","source_event_group_id":"57876c25-1731-4534-8a8b-92e3aa767118","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Alliance Medical Plans","state":"IL","individuals_affected":40,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI due to an unauthorized snooping incident by an employee.","event_id":"57876c25-1731-4534-8a8b-92e3aa767118","severity_score":65},{"record_id":"e1720a4e-d0f8-45fa-811f-dcc4319a4ab4","source_event_group_id":"78c9e1c4-fd86-4d05-8c0f-e4588826d9e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresno Heart and Surgical Hospital","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresno Heart and Surgical Hospital paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"78c9e1c4-fd86-4d05-8c0f-e4588826d9e2","severity_score":50},{"record_id":"e0762d49-86fe-4482-82a3-c72c53862e50","source_event_group_id":"1a61ac7a-183f-4c56-9e7c-fce9b9057a81","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kornerstone Armory","state":"OR","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kornerstone Armory paid $10,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by posting a patient's information on social media to shame them.","event_id":"1a61ac7a-183f-4c56-9e7c-fce9b9057a81","severity_score":50},{"record_id":"d9aa38bf-67a6-4638-9f84-852bf5da1b01","source_event_group_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Care New England Health System","state":"RI","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Care New England Health System paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"4cddc27d-4713-4261-936d-c09a3e25a9ce","severity_score":50},{"record_id":"c9f5e972-9053-46f8-a873-b92982d5ce2b","source_event_group_id":"1209163e-692c-4455-aac6-ae56fcafe080","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shuler","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shuler paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"1209163e-692c-4455-aac6-ae56fcafe080","severity_score":50},{"record_id":"c1ed1856-5ae4-4fd6-994b-5a604ef32f40","source_event_group_id":"9728d6e2-729e-46af-ab29-d5071cc20647","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Great Expressions Dental Center of Georgia, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Great Expressions Dental Center of Georgia, P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9728d6e2-729e-46af-ab29-d5071cc20647","severity_score":50},{"record_id":"c173fe62-21af-462c-b671-7912b6f26a41","source_event_group_id":"01813f92-1e87-486d-baf2-bb689a22205f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Gary K. Johnson, D.D.S., P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Gary K. Johnson, D.D.S., P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"01813f92-1e87-486d-baf2-bb689a22205f","severity_score":50},{"record_id":"b1db0e90-d6c3-4c3b-895f-6c9fce703a16","source_event_group_id":"19694129-e6ae-48d3-888c-1111c046b8e4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Orlando Health","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Orlando Health paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"19694129-e6ae-48d3-888c-1111c046b8e4","severity_score":50},{"record_id":"aa15daa0-40da-4e37-93d0-30f88d407a3d","source_event_group_id":"9bece4f0-d185-4975-b713-63cd5a148b86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Brockley","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brockley paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"9bece4f0-d185-4975-b713-63cd5a148b86","severity_score":50},{"record_id":"a4d755c9-b21b-4ac7-a594-97cd2892dc30","source_event_group_id":"9bedcbae-5194-4194-a54a-cb2d33317533","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital & Medical Center of Omaha","state":"NE","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital & Medical Center of Omaha paid $100,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9bedcbae-5194-4194-a54a-cb2d33317533","severity_score":50},{"record_id":"a1ab155b-f79e-4986-92b0-cb898a72c1e0","source_event_group_id":"78572707-2935-4307-be4c-a5f4a3c5ef00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David H. Young, D.M.D.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. David H. Young, D.M.D. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"78572707-2935-4307-be4c-a5f4a3c5ef00","severity_score":50},{"record_id":"a10d0e8a-b566-43e4-81b8-ab9ad4a4fc5d","source_event_group_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lahey Hospital and Medical Center","state":"MA","individuals_affected":600,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lahey Hospital and Medical Center paid $850,000 to settle potential HIPAA violations. The case involved the theft of a laptop containing the PHI of 600 individuals and a failure to conduct a thorough risk analysis.","event_id":"3872a5c9-031e-4f6b-bd72-1f20f5c9f49e","severity_score":80},{"record_id":"98ada286-8583-4781-9c6c-cbd0914eab3d","source_event_group_id":"ac9d4510-02fa-4c18-9b4f-c7512693cf4a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UMass Memorial Health Care","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMass Memorial Health Care paid $100,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ac9d4510-02fa-4c18-9b4f-c7512693cf4a","severity_score":50},{"record_id":"982fda72-2c1c-403a-9773-558f77745c98","source_event_group_id":"8e940d80-ceef-4577-9060-e7bc1f104935","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Laura R. Buchsbaum, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Laura R. Buchsbaum, P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"8e940d80-ceef-4577-9060-e7bc1f104935","severity_score":50},{"record_id":"97cf8ae1-cd75-4294-915a-7efadb917f07","source_event_group_id":"c39f996b-fd8f-462a-ac5e-a88cde926e8b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Periodontal Group, P.C.","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Periodontal Group, P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"c39f996b-fd8f-462a-ac5e-a88cde926e8b","severity_score":50},{"record_id":"8c54384d-8c98-4d96-8aca-5a7c21a8c367","source_event_group_id":"b57b1bd5-a704-4232-9612-fc8ad01186da","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Virginia University Hospitals, Inc.","state":"WV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Virginia University Hospitals, Inc. paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by faxing medical records to the wrong recipient, affecting 1 individual.","event_id":"b57b1bd5-a704-4232-9612-fc8ad01186da","severity_score":50},{"record_id":"8102b540-3697-4a06-aae5-a0ef59f35936","source_event_group_id":"6fd88689-5974-4c6f-b2f1-e929977f9182","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lakeland Regional Health","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lakeland Regional Health paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"6fd88689-5974-4c6f-b2f1-e929977f9182","severity_score":50},{"record_id":"7966035e-004e-4495-ad76-6552d6db0542","source_event_group_id":"d6f8cc76-816b-41e2-bd94-6f2ad0994fdf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"TAPESTRY SOLUTIONS, INC.","state":"CA","individuals_affected":4799,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tapestry Solutions, Inc. paid $100,000 to settle potential HIPAA violations. The case involved an impermissible disclosure of PHI due to a breach of their systems, affecting 4,799 individuals.","event_id":"d6f8cc76-816b-41e2-bd94-6f2ad0994fdf","severity_score":50},{"record_id":"770784b6-7d10-4d62-9e69-cd652c4fe428","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MD Anderson Cancer Center","state":"TX","individuals_affected":36300,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MD Anderson Cancer Center was assessed a $4.3 million civil money penalty for HIPAA violations. The case involved three data breaches impacting over 36,000 individuals due to lost or stolen unencrypted devices.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"6aaf12af-24a4-4d81-8cfd-41c538ef7a86","source_event_group_id":"9adff9ff-1a65-469d-80d7-47daa5c6b195","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Diana V. Denney, D.D.S.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Diana V. Denney, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"9adff9ff-1a65-469d-80d7-47daa5c6b195","severity_score":50},{"record_id":"6a4799b0-7a63-4823-923f-5546e9c045fe","source_event_group_id":"8ead20a8-baf6-416d-848a-bb9b338479dd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health Steps","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health Steps paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"8ead20a8-baf6-416d-848a-bb9b338479dd","severity_score":50},{"record_id":"5925b792-b2d1-4d02-ab1e-3b8c2ededdd6","source_event_group_id":"25069796-d418-43cb-ad54-8f8375d8a91c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Robinette & Associates, P.S.","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Robinette & Associates, P.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"25069796-d418-43cb-ad54-8f8375d8a91c","severity_score":50},{"record_id":"38902252-590e-413f-b3a6-62ff4bc74d0d","source_event_group_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Leaders","state":"NC","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Eye Care Leaders paid $1.25 million to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a breach of patient information occurred due to a ransomware attack.","event_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","severity_score":90},{"record_id":"35c22617-c5e3-4cc3-bbee-89212b048c8c","source_event_group_id":"5b44a96e-207e-4410-9104-bac50185c6d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Linda Favilla, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Linda Favilla, P.A. paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5b44a96e-207e-4410-9104-bac50185c6d7","severity_score":50},{"record_id":"358a4fe8-cf66-43bc-904d-ce9556aaf3a0","source_event_group_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Miami Health System","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Miami Health System paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","severity_score":50},{"record_id":"2f2ef028-8699-4a90-9a72-db4a19825dac","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Health Care Network entered into a second corrective action plan alongside its 2016 resolution agreement regarding multiple breaches impacting over 4 million individuals.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":55},{"record_id":"181a117a-5ca6-472e-9204-3239fd005e89","source_event_group_id":"a5ac9e18-421b-4372-8387-367c0e8c529a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Health Care Group of New Mexico P.C.","state":"NM","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Health Care Group of New Mexico P.C. paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a5ac9e18-421b-4372-8387-367c0e8c529a","severity_score":50},{"record_id":"06528fe1-e299-4575-b96d-6f64f1a1319e","source_event_group_id":"0838e1ed-5b07-46df-a004-ad7559352b40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MelroseWakefield Healthcare","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MelroseWakefield Healthcare paid $50,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0838e1ed-5b07-46df-a004-ad7559352b40","severity_score":50},{"record_id":"fc799948-9431-49bb-b449-ed12bd2c53df","source_event_group_id":"765bd0f5-b0bf-44bc-8d1a-667d5dcce5e3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Wake Forest Baptist Medical Center","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Wake Forest Baptist Medical Center paid $150,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"765bd0f5-b0bf-44bc-8d1a-667d5dcce5e3","severity_score":65},{"record_id":"f3e62d42-0cac-4fc8-8e59-374f8850083d","source_event_group_id":"18cc08ab-d88a-4e48-9509-6a3e1c4590df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Dental Care, P.C.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Dental Care, P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"18cc08ab-d88a-4e48-9509-6a3e1c4590df","severity_score":50},{"record_id":"f0a84628-97d6-4c16-ac5f-e234bbf9cce8","source_event_group_id":"461e6735-a59f-4353-94d8-7ebb47188264","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"John Muir Health","state":"CA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"John Muir Health paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"461e6735-a59f-4353-94d8-7ebb47188264","severity_score":50},{"record_id":"ece51c14-166d-49fb-a4a2-5c8fce17eefa","source_event_group_id":"a80a7b8b-42c5-4a70-a24c-5610eacfbf59","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Brian J. Smith, D.D.S., P.C.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Brian J. Smith, D.D.S., P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a80a7b8b-42c5-4a70-a24c-5610eacfbf59","severity_score":50},{"record_id":"ea7e446e-a280-40e9-a726-737f5fc8edf3","source_event_group_id":"5a8ca1e2-8dba-4420-aad7-77a29657b6fc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Comprehensive Health Services, Inc.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Comprehensive Health Services, Inc. paid $50,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5a8ca1e2-8dba-4420-aad7-77a29657b6fc","severity_score":50},{"record_id":"e4cde782-f040-4862-bb61-eea50e514b92","source_event_group_id":"20e2120c-66ff-448f-9408-5be9a170f434","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OptumInsight, Inc.","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OptumInsight, Inc. paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"20e2120c-66ff-448f-9408-5be9a170f434","severity_score":50},{"record_id":"e48647df-faf5-49a2-996e-fb087fbc00c3","source_event_group_id":"e5284e1c-0b14-4f47-8cb8-8a9e5ab06013","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Village Plaza D.B.A. The Village at Manor Park","state":"WI","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Village at Manor Park paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e5284e1c-0b14-4f47-8cb8-8a9e5ab06013","severity_score":50},{"record_id":"e485fd74-7747-4742-9568-c2252d088da2","source_event_group_id":"3512fba8-eb9b-4680-b562-2063124ed597","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Corrigan Minehan Heart Center","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Corrigan Minehan Heart Center paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"3512fba8-eb9b-4680-b562-2063124ed597","severity_score":50},{"record_id":"dd3e9c8b-dd10-460a-bb1e-bd9a409c8562","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet paid $2.6 million to settle potential HIPAA violations. The case involved the theft of an unencrypted laptop containing the PHI of 1,391 individuals and a failure to conduct a thorough risk analysis.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"d5bc9296-cc52-43bc-8f6b-3e7ebc36f0e1","source_event_group_id":"5286d8da-5be0-47de-aec9-aac5d61baba9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Greenway Health, LLC","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Greenway Health, LLC paid $31,000 to settle potential HIPAA violations. The case involved unauthorized access and disclosure of PHI affecting 1,000 individuals due to an unpatched software vulnerability.","event_id":"5286d8da-5be0-47de-aec9-aac5d61baba9","severity_score":50},{"record_id":"d371bcc7-c39c-473d-9a27-b5dbb8385c20","source_event_group_id":"dc026975-d019-4c26-88ee-0c458b135f8d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New Vision Optical Enterprises, LLC","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New Vision Optical Enterprises, LLC paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"dc026975-d019-4c26-88ee-0c458b135f8d","severity_score":50},{"record_id":"d29787c0-a183-4806-9025-fd9485831812","source_event_group_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Westchester Medical Center Health Network","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Westchester Medical Center Health Network paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI due to lost unencrypted backup tapes, affecting 1,000 individuals.","event_id":"52c872ea-d6fd-460c-aa63-eb9771b290b8","severity_score":50},{"record_id":"ca775515-461d-48a1-a2a6-40a47b99eaa4","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health Inc.","state":"IN","individuals_affected":100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health Inc. paid $500,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a breach of patient information occurred and an employee impermissibly accessed patient records.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":65},{"record_id":"c9fece80-e76f-42c4-af68-17d592e9b835","source_event_group_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Department of Human Services","state":"AR","individuals_affected":150000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arkansas Department of Human Services paid $2.15 million to settle potential HIPAA violations. The case involved an impermissible disclosure of the PHI of 150,000 individuals due to a misconfigured server.","event_id":"345afffb-0ce5-4d2d-8a25-24eb5649af35","severity_score":90},{"record_id":"c321f7ca-f955-4c8c-a10e-e9539654f41c","source_event_group_id":"cffe605c-87d2-473b-922a-9dda537f87a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Michael A. Gordon, D.D.S., P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Michael A. Gordon, D.D.S., P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"cffe605c-87d2-473b-922a-9dda537f87a8","severity_score":50},{"record_id":"bcbfdda7-2b25-42a7-8670-51b99570ec35","source_event_group_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Group of the Carolinas","state":"SC","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Group of the Carolinas paid $12,000 to settle potential HIPAA violations related to impermissible PHI disclosure. The case involved the improper disposal of medical records, affecting 1,000 individuals.","event_id":"e131d4ee-5f44-4daa-ba32-bc481576c04d","severity_score":50},{"record_id":"b2951c49-fc85-4959-9a69-2013672715d5","source_event_group_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sharp HealthCare","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sharp HealthCare paid $70,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","severity_score":50},{"record_id":"b1791316-875d-47a5-9d17-36cc21e8dbbc","source_event_group_id":"ddebe1df-c5db-4bf3-ad55-d0d5938e975d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seattle Children's Hospital","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Seattle Children's Hospital paid $150,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"ddebe1df-c5db-4bf3-ad55-d0d5938e975d","severity_score":65},{"record_id":"b0d3c8f4-5da9-4184-a687-f77354d4be0f","source_event_group_id":"6be80dd7-33e9-4cf3-953f-20b66d2f0a0a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology of North Asheville","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology of North Asheville paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"6be80dd7-33e9-4cf3-953f-20b66d2f0a0a","severity_score":50},{"record_id":"aeb2974b-ec65-44e1-bf11-2fe4e463da43","source_event_group_id":"0ad4e99e-86f4-4c0a-8cfa-c5cdcd6d1f5c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Northside Hospital","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Northside Hospital paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"0ad4e99e-86f4-4c0a-8cfa-c5cdcd6d1f5c","severity_score":50},{"record_id":"adf9ce0d-a208-499d-8880-70265f34f56d","source_event_group_id":"0c5a8c3e-ced0-4638-b81c-896798740310","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dermatology on Jessup","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dermatology on Jessup paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"0c5a8c3e-ced0-4638-b81c-896798740310","severity_score":50},{"record_id":"a49586c7-2232-4ab1-a2e4-892396453d5d","source_event_group_id":"0d8b8e45-0788-4d4c-b38d-9d04cffef0e1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"City of New York Department of Health and Mental Hygiene","state":"NY","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The City of New York Department of Health and Mental Hygiene paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"0d8b8e45-0788-4d4c-b38d-9d04cffef0e1","severity_score":50},{"record_id":"9cb94079-6edd-4ca5-bef6-962698f763eb","source_event_group_id":"0e982b79-e653-4e04-b0c6-3c513c3db67e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Susan C. Miller, P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Susan C. Miller, P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0e982b79-e653-4e04-b0c6-3c513c3db67e","severity_score":50},{"record_id":"9a241c35-44fc-4b05-8980-b215d7d82e5b","source_event_group_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Associated Eye Care","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Associated Eye Care paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5a6c3a88-5d03-4004-98c6-8df89fad57cd","severity_score":50},{"record_id":"935d3705-c8fc-49e1-aedc-e8466f32551b","source_event_group_id":"45aedecd-fb79-47e0-985a-b9f2813126a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Data Processing, Inc.","state":"PA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Data Processing, Inc. paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI due to a lack of a business associate agreement, affecting 1,000 individuals.","event_id":"45aedecd-fb79-47e0-985a-b9f2813126a1","severity_score":50},{"record_id":"8bc8c7d4-1167-4f97-9c47-0244d6fca5d4","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Montefiore Medical Center paid $475,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI about a patient to the patient's employer.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":65},{"record_id":"882e43bf-1a56-4736-bdd4-75715d579c6f","source_event_group_id":"1b920298-3edc-46ee-9f2f-458454bf64aa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Georgia Inpatient Services, P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Georgia Inpatient Services, P.C. paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1b920298-3edc-46ee-9f2f-458454bf64aa","severity_score":50},{"record_id":"873c662b-1c82-4f8c-8794-054b944fc687","source_event_group_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Triple-S Management","state":"PR","individuals_affected":398000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Triple-S Management paid $3.5 million to settle potential HIPAA violations. The case involved multiple breaches of unsecured protected health information (PHI), impacting over 398,000 individuals.","event_id":"b0f084b5-b156-4b7d-b391-568d76f5f3a5","severity_score":90},{"record_id":"82e765a5-0a4c-4106-8610-ad95efd5fec5","source_event_group_id":"29e1cf36-af16-4ff7-8b0c-40e0ec05366e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Ronald E. Dubois, D.D.S., P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Ronald E. Dubois, D.D.S., P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"29e1cf36-af16-4ff7-8b0c-40e0ec05366e","severity_score":50},{"record_id":"8177775c-199b-47e4-816b-d828c0136b70","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Center for Children's Digestive Health","state":"IL","individuals_affected":1800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Center for Children's Digestive Health paid $31,000 to settle potential HIPAA violations. The case involved failure to execute a business associate agreement with a vendor for at least three years, affecting 1,800 individuals.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"766cd753-1246-4bbd-8e03-626e8d637bde","source_event_group_id":"0a394292-44de-4388-a445-617a88019053","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baystate Medical Center","state":"MA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baystate Medical Center paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosures of PHI related to two separate breaches, affecting 1,000 individuals.","event_id":"0a394292-44de-4388-a445-617a88019053","severity_score":50},{"record_id":"6e8f808f-f668-4c49-bede-2394a36dcdfc","source_event_group_id":"b6febb1b-801e-4da2-914f-1411974da887","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Ross","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. David Ross's dental practice paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"b6febb1b-801e-4da2-914f-1411974da887","severity_score":50},{"record_id":"65b03a91-071d-4335-8dcf-bce07c8676fe","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metro Community Provider Network paid $400,000 to settle potential HIPAA violations. The case involved a cyber-attack on their Electronic Health Record system, exposing the PHI of over 3,200 individuals.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"64d0b1c1-1d55-4984-b91d-6e460eead1c2","source_event_group_id":"e92aaf9e-9380-4840-9c90-a0d90e228c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. John C. Penner, D.D.S.","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. John C. Penner, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e92aaf9e-9380-4840-9c90-a0d90e228c1f","severity_score":50},{"record_id":"5d2e95d4-4f89-4168-b593-4290f0e21a50","source_event_group_id":"f58a752f-1d5c-4f5d-a14d-114659e8ddf3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"United Rheumatology","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"United Rheumatology paid $25,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f58a752f-1d5c-4f5d-a14d-114659e8ddf3","severity_score":50},{"record_id":"4d055833-780e-435d-8ff2-cc77b556f1ae","source_event_group_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arbour Hospital","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arbour Hospital paid $65,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"cf3a80e3-047a-4f9f-872b-8fecd8f3cf58","severity_score":50},{"record_id":"3af1cfff-ec4c-4274-804d-ad203b6975e2","source_event_group_id":"e3407398-2787-4aaa-a1e1-ba36a61a91b2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. William G. Jones, D.D.S.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. William G. Jones, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e3407398-2787-4aaa-a1e1-ba36a61a91b2","severity_score":50},{"record_id":"363c5c4a-84be-4e98-b202-991b25019f87","source_event_group_id":"4755bf84-0d75-417e-81eb-00a798efe78a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark","state":"RI","individuals_affected":800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark paid $4.5 million to settle potential HIPAA violations related to improper disposal of protected health information. The PHI was found in unsecured trash receptacles outside CVS pharmacies.","event_id":"4755bf84-0d75-417e-81eb-00a798efe78a","severity_score":90},{"record_id":"32acdec7-46f2-4a40-b5b3-104a6c2f9a5b","source_event_group_id":"bddfdcbc-6973-462d-b6ac-bc645fd93ada","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Elizabeth K. Smith, D.M.D., M.D.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Elizabeth K. Smith, D.M.D., M.D. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"bddfdcbc-6973-462d-b6ac-bc645fd93ada","severity_score":50},{"record_id":"31afd335-e6ec-4a5d-a888-0ddccd700edc","source_event_group_id":"2875e015-75c9-4aa7-917a-983968f16f90","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Amy J. King, O.D., P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Amy J. King, O.D., P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2875e015-75c9-4aa7-917a-983968f16f90","severity_score":50},{"record_id":"2d84664f-94dc-4ea3-87b9-10763fed442a","source_event_group_id":"5b11142f-2093-433d-8fbb-7dbea9eba022","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Healthcare of Atlanta","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Healthcare of Atlanta paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"5b11142f-2093-433d-8fbb-7dbea9eba022","severity_score":50},{"record_id":"29f1a263-ebc9-4f72-b581-00085a67bbde","source_event_group_id":"65f2f6c1-6723-47ba-8fbc-45e0a16c3bcd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advent Health","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advent Health paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"65f2f6c1-6723-47ba-8fbc-45e0a16c3bcd","severity_score":50},{"record_id":"26a3b0d2-fa63-43ce-a0b9-cd61b400e37a","source_event_group_id":"1324bc22-c577-4b59-bfef-e46969f66dcb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. William W. Davis, D.M.D., P.A.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. William W. Davis, D.M.D., P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1324bc22-c577-4b59-bfef-e46969f66dcb","severity_score":50},{"record_id":"22dd6681-3913-444b-86a5-1b539ef86c32","source_event_group_id":"842d1da0-b187-4ba0-8451-c14ffe835b50","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Diabetes, Endocrinology & Nutrition Center","state":"CO","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Diabetes, Endocrinology & Nutrition Center paid $12,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"842d1da0-b187-4ba0-8451-c14ffe835b50","severity_score":50},{"record_id":"226b5ab6-1d4d-4cfd-b159-1885eeb17d83","source_event_group_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson & Coker","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson & Coker paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by a business associate due to a lack of a business associate agreement, affecting 1,000 individuals.","event_id":"3e02da6f-e899-4a78-9fe3-2da1d77142bd","severity_score":50},{"record_id":"1d76c7a7-74c0-4838-aee3-c1abcbe2aa99","source_event_group_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Forefront Dermatology, S.C.","state":"WI","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Forefront Dermatology, S.C. paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by a business associate due to a lack of a business associate agreement, affecting 1,000 individuals.","event_id":"bc780815-4b00-4e60-8104-3b1f9c4da6a3","severity_score":50},{"record_id":"0cf16550-9693-4d2b-9866-12d92063464b","source_event_group_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's National Medical Center","state":"DC","individuals_affected":498,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's National Medical Center paid $125,000 to settle potential HIPAA violations. The case involved an impermissible disclosure of PHI by a researcher, affecting 498 individuals.","event_id":"94ce9ec2-28f1-47df-9a95-6eac8481521f","severity_score":65},{"record_id":"0a338e65-1e2c-47bd-974c-b99be1393256","source_event_group_id":"d6f0159e-62d8-4c5b-973d-43157320da04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of New Orleans","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of New Orleans paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"d6f0159e-62d8-4c5b-973d-43157320da04","severity_score":50},{"record_id":"099ae0be-0bb3-4cae-a54a-afd494093349","source_event_group_id":"3aa1a9d9-a0ab-4cb4-841b-17f96471d8f7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas Southwestern Medical Center","state":"TX","individuals_affected":1400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Texas Southwestern Medical Center paid $3.2 million to settle potential HIPAA violations. The case involved the impermissible disclosure of PHI of 1.4 million individuals in an unencrypted manner.","event_id":"3aa1a9d9-a0ab-4cb4-841b-17f96471d8f7","severity_score":90},{"record_id":"07b396dd-8830-469a-ac35-de3acec70281","source_event_group_id":"b97ebac4-24c0-42ec-be2f-a66dbbeabb45","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Urology Associates of North Texas","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Urology Associates of North Texas paid $75,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"b97ebac4-24c0-42ec-be2f-a66dbbeabb45","severity_score":50},{"record_id":"fd8abe7b-3937-45ff-8e65-63afd0d8b98e","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University - Center for Health Sciences","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Oklahoma State University - Center for Health Sciences paid $875,000 to settle potential HIPAA violations. The case involved a cyberattack on a web server, resulting in impermissible disclosure of PHI of 279,865 individuals.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"f8010c48-5ca0-41eb-a5cc-359e840cd74f","source_event_group_id":"e677b99a-956b-46bc-8d32-99d9db58085f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Iowa Hospitals and Clinics","state":"IA","individuals_affected":1933,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The University of Iowa Hospitals and Clinics paid $1.5 million to settle potential HIPAA violations. The case involved impermissible access and disclosure of PHI by an employee, affecting 1,933 individuals.","event_id":"e677b99a-956b-46bc-8d32-99d9db58085f","severity_score":90},{"record_id":"f32775eb-c9da-4d00-be2a-7ebe78774e39","source_event_group_id":"f3201a5c-e246-40ff-b56e-eb095414e224","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Medical Group of Manhattan","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Medical Group of Manhattan paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f3201a5c-e246-40ff-b56e-eb095414e224","severity_score":50},{"record_id":"f09380b1-bf72-4aee-ae04-8a306a95eaf5","source_event_group_id":"3655ffb0-71b9-4b14-b73e-224b36ba09d0","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Steven L. Khemiri, D.D.S.","state":"MD","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Steven L. Khemiri, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"3655ffb0-71b9-4b14-b73e-224b36ba09d0","severity_score":50},{"record_id":"eee93319-292e-431f-9bb0-f9a6a94d3b0b","source_event_group_id":"e07aa778-8873-4f52-8354-0ba3bf6f46df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Piedmont Healthcare","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Piedmont Healthcare paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"e07aa778-8873-4f52-8354-0ba3bf6f46df","severity_score":50},{"record_id":"ec7c521b-258c-49f3-a46f-12422533c17d","source_event_group_id":"054b7705-3321-4b62-acc2-35d906162c1f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Renown Health","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Renown Health paid $75,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"054b7705-3321-4b62-acc2-35d906162c1f","severity_score":50},{"record_id":"eb138c97-6522-408d-a372-0b47c8c457b1","source_event_group_id":"96e7d466-211e-4806-96e9-e62ba0dfb39d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Valley Oaks Medical Group","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Valley Oaks Medical Group paid $35,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"96e7d466-211e-4806-96e9-e62ba0dfb39d","severity_score":50},{"record_id":"ea439f8a-9fe1-408e-839c-c8fc706ee3ce","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System paid $2.4 million to settle potential HIPAA violations. The case involved impermissible disclosure of PHI through a press release identifying a patient, affecting one individual.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":90},{"record_id":"e92d60e5-4854-4646-a650-be54d19fd6d9","source_event_group_id":"80ef01b2-f2c5-45e8-83a0-36e1fc4bc87c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Ben C. Childers, D.M.D.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Ben C. Childers, D.M.D. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"80ef01b2-f2c5-45e8-83a0-36e1fc4bc87c","severity_score":50},{"record_id":"dabbc3d2-5327-4f3f-ba48-6e3dbbf8f278","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Health and Human Services Commission paid $1.6 million to settle potential HIPAA violations. The case involved exposure of PHI of 6,800 individuals through an insecure online portal.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"d7bae28a-b250-42c1-acc0-928566694c35","source_event_group_id":"178c093c-5dd4-4456-bc17-7e8ee4e7faad","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Michael P. Bell, Ph.D., P.C.","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Michael P. Bell, Ph.D., P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"178c093c-5dd4-4456-bc17-7e8ee4e7faad","severity_score":50},{"record_id":"d0ef7f8a-3f09-488e-abcf-fb26248a5ab7","source_event_group_id":"e17f1b92-0ead-4841-b77a-34ce8910dedf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Mark P. Clark, D.D.S.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mark P. Clark, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e17f1b92-0ead-4841-b77a-34ce8910dedf","severity_score":50},{"record_id":"cced6d75-b54d-42d4-8949-244c9f1d1c7a","source_event_group_id":"d6f0159e-62d8-4c5b-973d-43157320da04","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Allergy Associates of New Orleans","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Allergy Associates of New Orleans paid $125,000 to settle potential HIPAA violations. The case involved an impermissible disclosure of PHI by commenting on a patient's social media post, affecting 1 individual.","event_id":"d6f0159e-62d8-4c5b-973d-43157320da04","severity_score":65},{"record_id":"c8d2038f-f274-4044-89d4-c197b2e202ee","source_event_group_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayfront Health St. Petersburg","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayfront Health St. Petersburg paid $85,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"324732c1-e3ae-4b61-bc11-132a86e6aafb","severity_score":50},{"record_id":"bfbd8881-1601-469f-b796-a7c828753d59","source_event_group_id":"028231cc-e085-4888-b255-a90c92933fa9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Tampa General Hospital","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tampa General Hospital paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"028231cc-e085-4888-b255-a90c92933fa9","severity_score":50},{"record_id":"bf9f6158-4e03-411b-9f53-354098474724","source_event_group_id":"876c8218-a1cf-43d4-9b78-4d61b83f5487","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"McFarland Clinic P.C.","state":"IA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"McFarland Clinic P.C. paid $70,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"876c8218-a1cf-43d4-9b78-4d61b83f5487","severity_score":50},{"record_id":"b1c726a1-35ea-4049-9d5e-58b655040aa2","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care paid $100,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":50},{"record_id":"b0255785-076b-4f37-afa9-0608df6ed6db","source_event_group_id":"4eeaeb50-1600-413c-ae0c-3eb2ff97e2b2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. George L. Williams, D.D.S.","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. George L. Williams, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"4eeaeb50-1600-413c-ae0c-3eb2ff97e2b2","severity_score":50},{"record_id":"abc1cf9e-2f57-4245-b710-624b9112ad2a","source_event_group_id":"5e221a4b-ef29-4eaf-baac-4078f359b6df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Mark R. Rosen, D.M.D.","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Mark R. Rosen, D.M.D. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5e221a4b-ef29-4eaf-baac-4078f359b6df","severity_score":50},{"record_id":"a311fd7d-c1ea-4121-ab9c-da9221ff673c","source_event_group_id":"b6f12bb2-1c34-400d-bac6-15c76f1eb371","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health","state":"CO","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health paid $1.1 million to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a breach of patient information occurred due to a misconfigured server.","event_id":"b6f12bb2-1c34-400d-bac6-15c76f1eb371","severity_score":90},{"record_id":"9ad1c03d-a4a5-41f1-8797-7f65292daf16","source_event_group_id":"5518294c-0ab1-4bc0-85b5-2a34109ad324","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Exeter Hospital","state":"NH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Exeter Hospital paid $150,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5518294c-0ab1-4bc0-85b5-2a34109ad324","severity_score":65},{"record_id":"81804b49-18d8-4065-a4a1-bdff07d91cf3","source_event_group_id":"309c274a-2fa4-4356-85d4-6f606728594a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Boston Medical Center","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Boston Medical Center paid $100,000 to settle potential HIPAA violations stemming from an incident where a broadcast television crew filmed a patient without authorization. This led to an impermissible disclosure of PHI.","event_id":"309c274a-2fa4-4356-85d4-6f606728594a","severity_score":50},{"record_id":"814ca46c-8697-42e3-9b14-67eb54526670","source_event_group_id":"c05428b6-b79e-4187-8923-f9ba9450cd89","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Page Hospital","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Page Hospital paid $100,000 to settle potential HIPAA violations. The case involved releasing the PHI of a patient to a local newspaper, leading to an impermissible disclosure.","event_id":"c05428b6-b79e-4187-8923-f9ba9450cd89","severity_score":50},{"record_id":"78be6996-b8a7-43c9-9ea9-7da20d83f6bf","source_event_group_id":"34323621-fbb8-4be1-8dee-d01c33536a61","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Jackson Memorial Hospital","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Jackson Memorial Hospital paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"34323621-fbb8-4be1-8dee-d01c33536a61","severity_score":50},{"record_id":"76a0f1b4-de3c-44fd-9958-703e8ffe29f6","source_event_group_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Connecticut Dental Practice","state":"CT","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A Connecticut Dental Practice paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"6caf96b0-a72f-466a-baeb-c250f9a86d98","severity_score":50},{"record_id":"750590b9-bf44-4bcc-a93e-3a512a84d7d9","source_event_group_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Indiana University Health","state":"IN","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Indiana University Health paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"8a834ca2-51c2-457f-85a5-c2bb5d78a758","severity_score":50},{"record_id":"71b315ae-4294-4bfa-b5ab-f4cbcfaf57a0","source_event_group_id":"e38a95bc-d0d2-45b2-92ec-6a9460e5da41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Guidry Group","state":"LA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Guidry Group paid $15,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e38a95bc-d0d2-45b2-92ec-6a9460e5da41","severity_score":50},{"record_id":"6f6a7e73-919b-4260-98b0-64705c842eb3","source_event_group_id":"0f9277a3-bd3e-48c4-85a3-8ec6ad862807","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"The Women's Health Group","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"The Women's Health Group paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0f9277a3-bd3e-48c4-85a3-8ec6ad862807","severity_score":50},{"record_id":"6b189411-9ea5-4989-a213-ac0259159344","source_event_group_id":"e6dab022-c43a-4089-a781-97a77c575872","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Timothy S. Tracy, D.D.S.","state":"WA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Timothy S. Tracy, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e6dab022-c43a-4089-a781-97a77c575872","severity_score":50},{"record_id":"653488fc-8e63-460a-8841-3ee10a9f911c","source_event_group_id":"85169a2c-faab-4d7c-8e0b-4695c90cff10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Shah","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Shah paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"85169a2c-faab-4d7c-8e0b-4695c90cff10","severity_score":50},{"record_id":"625857fd-1bd0-4d1b-8006-1b7e889ffdd6","source_event_group_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Hermann Health System","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Memorial Hermann Health System paid $240,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1b39e806-c25a-4d7d-a150-460dccfad56d","severity_score":65},{"record_id":"5e54b754-7584-4663-9c05-70c8ca5fab41","source_event_group_id":"5130baa7-67d4-4b91-962b-9198a652a22d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Posture","state":"NV","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Posture paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5130baa7-67d4-4b91-962b-9198a652a22d","severity_score":50},{"record_id":"5af5db16-9d5e-4185-8120-addd48df5c50","source_event_group_id":"1c18ef19-d697-406d-a808-3676e2a8f8f8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. David Lerner & Associates, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. David Lerner & Associates, P.C. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1c18ef19-d697-406d-a808-3676e2a8f8f8","severity_score":50},{"record_id":"599e0a8d-b534-4d24-9b08-15a97ba56e5f","source_event_group_id":"2a75aaf6-2612-44e1-a561-218f4d122b8c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Southwest Surgical Associates","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Southwest Surgical Associates paid $65,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"2a75aaf6-2612-44e1-a561-218f4d122b8c","severity_score":50},{"record_id":"56b5d64b-0c46-4149-80ea-ddedae7f61f7","source_event_group_id":"0f070bed-cfc7-480c-b902-d0dd092a7e36","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"South Broward Hospital District (Memorial Healthcare System)","state":"FL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"South Broward Hospital District (Memorial Healthcare System) paid $150,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"0f070bed-cfc7-480c-b902-d0dd092a7e36","severity_score":65},{"record_id":"547f22a4-5532-4dd6-8432-831aee6144d3","source_event_group_id":"c7673044-9547-4eff-ad18-be19d6257df5","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Western Connecticut Health Network","state":"CT","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Western Connecticut Health Network (now Nuvance Health) paid $75,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"c7673044-9547-4eff-ad18-be19d6257df5","severity_score":50},{"record_id":"4f3ff3b2-d4e7-4b9d-a242-7f076e216e16","source_event_group_id":"2fbc2659-ce18-4862-a42f-9c7533cbd696","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health East","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Catholic Health East paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by faxing medical records to the wrong recipient, affecting 1 individual.","event_id":"2fbc2659-ce18-4862-a42f-9c7533cbd696","severity_score":50},{"record_id":"4dcb82d3-2dbb-42eb-bb80-16639e64fb67","source_event_group_id":"88cd2d99-b8d4-4860-a95c-31162eeae08c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Emory Healthcare","state":"GA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Emory Healthcare paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"88cd2d99-b8d4-4860-a95c-31162eeae08c","severity_score":50},{"record_id":"2f921fa1-5779-4951-95ed-6db4ea489318","source_event_group_id":"32584544-c7ab-4173-a645-17defcc4160f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Seven Hills Women's Health Center","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Seven Hills Women's Health Center paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by posting negative patient information on social media, affecting 1 individual.","event_id":"32584544-c7ab-4173-a645-17defcc4160f","severity_score":50},{"record_id":"2edcad0a-bace-46e2-8588-a4b49b91e173","source_event_group_id":"66b4fda8-e1fd-4170-a49c-65dabb101dea","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Emami","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Emami paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"66b4fda8-e1fd-4170-a49c-65dabb101dea","severity_score":50},{"record_id":"2aa85e91-0365-46ed-bdbe-56dd2240253e","source_event_group_id":"533c9005-df60-497d-ab15-b14e7eed151e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Smile Style Dental","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Smile Style Dental paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"533c9005-df60-497d-ab15-b14e7eed151e","severity_score":50},{"record_id":"2a8871aa-fe19-4208-8188-9df523f1b4f2","source_event_group_id":"c4e22242-07ad-4486-b103-7280ba8aeb82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Children's Hospital","state":"TX","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Texas Children's Hospital paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"c4e22242-07ad-4486-b103-7280ba8aeb82","severity_score":50},{"record_id":"24d3bfe6-2bf3-4b15-8bb3-e91165558a64","source_event_group_id":"f3b1b28f-3a0a-4968-8d5f-4673ec7f3f12","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Michael C. Lowry, D.C., P.A.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Michael C. Lowry, D.C., P.A. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"f3b1b28f-3a0a-4968-8d5f-4673ec7f3f12","severity_score":50},{"record_id":"2262d3aa-1c25-45eb-8b02-a6cc4fb84fa1","source_event_group_id":"1f986e6c-da02-4a03-a058-44d03197d5d7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"P.T. Network Physical Therapy","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"P.T. Network Physical Therapy paid $25,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"1f986e6c-da02-4a03-a058-44d03197d5d7","severity_score":50},{"record_id":"1f939b8c-fa81-4e86-8d65-f9bf728ccde4","source_event_group_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Housing Works, Inc.","state":"NY","individuals_affected":5,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Housing Works, Inc. paid $380,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records for multiple patients.","event_id":"2df6f65e-8b0c-4698-9dae-1f47cd3c1adc","severity_score":65},{"record_id":"1c053a08-0a74-4f13-a0ec-42efa7f7d6f0","source_event_group_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Lifespan Health System","state":"RI","individuals_affected":20000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Lifespan Health System paid $1,040,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a laptop containing the ePHI of over 20,000 individuals was stolen.","event_id":"2e2e7801-b089-4bba-abdb-71c22c8ec7ce","severity_score":90},{"record_id":"1916a823-e111-424a-8415-067b78cbe956","source_event_group_id":"b6af511f-d446-4221-9887-8c5a70c24386","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Thomas R. Jones, D.D.S.","state":"TX","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Thomas R. Jones, D.D.S. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"b6af511f-d446-4221-9887-8c5a70c24386","severity_score":50},{"record_id":"12f6ac8d-d1f7-425c-8ed7-aee9950f2287","source_event_group_id":"f0fb8f77-1a17-4986-a7ce-be9ef4f43311","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Tufts Health Plan","state":"MA","individuals_affected":10255,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Tufts Health Plan paid $3.3 million to settle potential HIPAA violations. The case involved an impermissible disclosure of PHI when over 10,000 health plan members received mailings that exposed other members' PHI.","event_id":"f0fb8f77-1a17-4986-a7ce-be9ef4f43311","severity_score":90},{"record_id":"12cead4b-ada9-4833-a151-4a2cb57b4966","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Banner Health paid $200,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":65},{"record_id":"0f2a6015-e4f2-4b8c-94b0-a92977ff3357","source_event_group_id":"e3ba8677-a177-4795-8185-3add0f437f41","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Peachstate Health Management, LLC, d.b.a. AEON Clinical Laboratories","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Peachstate Health Management, LLC paid $25,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"e3ba8677-a177-4795-8185-3add0f437f41","severity_score":50},{"record_id":"fcd3a78d-f4d4-4ca4-9ae6-1ee4428c4cec","source_event_group_id":"d72d563e-c43c-48a4-878a-ef7499f4ebbf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cofinity","state":"MI","individuals_affected":2700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cofinity, a business associate, reported a breach involving the PHI of 2,700 individuals after unencrypted workstations were stolen. OCR found Cofinity failed to conduct an accurate and thorough risk analysis.","event_id":"d72d563e-c43c-48a4-878a-ef7499f4ebbf","severity_score":80},{"record_id":"f55dba6a-5991-4816-b313-c33d277164f2","source_event_group_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Shasta Regional Medical Center","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Shasta Regional Medical Center impermissibly disclosed PHI by inappropriately discussing patient care with unauthorized individuals.","event_id":"9a9ab2d6-f61a-4fdd-bd7f-af0d5d39ca82","severity_score":65},{"record_id":"f39098a3-086d-41d3-b2ae-b8bfc4229aba","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York-Presbyterian Hospital","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"New York-Presbyterian Hospital impermissibly disclosed the PHI of 6,800 patients to a television film crew and its staff during filming.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"e7081bfe-5fba-4dcb-b590-5e2c7a5f8e59","source_event_group_id":"d181e1d2-d267-4369-83c6-2f8e97362982","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premier Healthcare Services, Inc.","state":"CA","individuals_affected":109069,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Premier Healthcare Services settled after serious and widespread noncompliance with HIPAA Rules following multiple breaches involving the PHI of over 100,000 individuals.","event_id":"d181e1d2-d267-4369-83c6-2f8e97362982","severity_score":90},{"record_id":"d8111990-5063-4142-9864-03ab32c90ff7","source_event_group_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Arkansas Children's Hospital","state":"AR","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Arkansas Children's Hospital paid $215,000 to settle potential HIPAA violations related to a breach of patient information that occurred due to a phishing incident.","event_id":"e437e8c7-5bf1-42e4-b156-5102d513fef4","severity_score":65},{"record_id":"d5cf985e-5db4-4894-9871-4811c37ded75","source_event_group_id":"bb24a56f-841f-4037-969c-7c292745c92f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Moffitt Cancer Center","state":"FL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Moffitt Cancer Center paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"bb24a56f-841f-4037-969c-7c292745c92f","severity_score":50},{"record_id":"d2e2d891-44b5-4eac-8f73-fb6dfeb0dde7","source_event_group_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Erie County Medical Center","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Erie County Medical Center paid $75,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"5bb17c95-6dbc-4048-a66e-9cc1a56a65ed","severity_score":50},{"record_id":"c8741e43-2c4b-415d-a980-e44bc38d86a0","source_event_group_id":"36be35ca-5aef-4af7-b0aa-8e3ad9d36150","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eastern Maine Healthcare Systems","state":"ME","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"EMHS settled after a breach involving an unsupported network application led to the exposure of PHI for over 500 individuals, raising concerns about their security practices.","event_id":"36be35ca-5aef-4af7-b0aa-8e3ad9d36150","severity_score":65},{"record_id":"bf83e374-24e6-4902-b0bf-505685bccffc","source_event_group_id":"58bedd62-a160-4354-b4de-e159d783ad5d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Oncology and Hematology Associates of Iowa","state":"IA","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Medical Oncology and Hematology Associates of Iowa paid $25,000 to settle potential HIPAA violations. The case involved a failure to terminate a former employee's access to patient records, affecting 1,000 individuals.","event_id":"58bedd62-a160-4354-b4de-e159d783ad5d","severity_score":50},{"record_id":"b1cb845d-2f5d-4665-8fe1-1da720575385","source_event_group_id":"ec720041-fde3-48e8-b892-0903352f472f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Columbia University","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Columbia University impermissibly disclosed the PHI of 6,800 patients to a television film crew and its staff during filming.","event_id":"ec720041-fde3-48e8-b892-0903352f472f","severity_score":90},{"record_id":"aebc2549-b7aa-48d4-96e7-0f59d5e3ef2b","source_event_group_id":"ed645d59-970b-495e-8713-a54d073f71df","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A.","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. paid $10,000 to OCR and agreed to a corrective action plan to resolve potential HIPAA Privacy Rule violations after impermissibly disclosing a patient's PHI on a social media website.","event_id":"ed645d59-970b-495e-8713-a54d073f71df","severity_score":50},{"record_id":"ac5ac1b0-c267-48fa-bce8-a1b64e65086b","source_event_group_id":"9c8b8045-887a-4fef-a2aa-056878965661","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Health","state":"RI","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Health paid $195,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for impermissibly disclosing PHI to marketing vendors.","event_id":"9c8b8045-887a-4fef-a2aa-056878965661","severity_score":65},{"record_id":"abffabb3-810b-4923-9b2b-f676ae7fe9cc","source_event_group_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Skagit County EMS","state":"WA","individuals_affected":150,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Skagit County EMS impermissibly disclosed the PHI of 150 patients when billing records were transferred to a new vendor without a business associate agreement.","event_id":"a94e7a8a-13a5-4aaa-8e0e-70d463dd4334","severity_score":65},{"record_id":"a9d8e8d8-3fdf-4e92-b910-6015a71b1b0b","source_event_group_id":"95c78873-7870-48d9-896e-614fb1e5964d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"OhioHealth","state":"OH","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OhioHealth paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"95c78873-7870-48d9-896e-614fb1e5964d","severity_score":50},{"record_id":"a40eadc0-1e39-46e2-8c2a-43c5c11beb0a","source_event_group_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Cincinnati Medical Center","state":"OH","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"University of Cincinnati Medical Center paid $65,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records for one patient.","event_id":"e8ffdb9c-4251-4064-b457-3ecc8a7d4ac9","severity_score":50},{"record_id":"9ca7f8b2-0be6-44ea-82ce-c2254dddff36","source_event_group_id":"a737bedd-274e-4b77-9dd7-e105944e772d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Hospital of Philadelphia","state":"PA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Children's Hospital of Philadelphia (CHOP) paid $75,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"a737bedd-274e-4b77-9dd7-e105944e772d","severity_score":50},{"record_id":"9c0aec19-d603-459f-9dbf-1647a4654d9e","source_event_group_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Concentra Health Services","state":"TX","individuals_affected":870,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Concentra reported the theft of a laptop containing the PHI of 870 individuals. OCR found a failure to encrypt PHI on portable devices and a lack of a comprehensive risk analysis.","event_id":"6c7a2e1a-09b6-47b8-a59a-f645727b82a8","severity_score":90},{"record_id":"9b50b8ba-74e0-400e-81ba-7b0021676d86","source_event_group_id":"df3df722-133e-433f-a365-05894ec1288a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Elite Dental Associates","state":"TX","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Elite Dental Associates impermissibly disclosed patient PHI by responding to patient reviews on Yelp and failed to implement policies and procedures for the uses and disclosures of PHI, which resulted in a $10,000 settlement. ","event_id":"df3df722-133e-433f-a365-05894ec1288a","severity_score":50},{"record_id":"92b494d7-48b2-4cc2-b631-036d3eaa9026","source_event_group_id":"bc3e2eeb-f3ec-44c2-8dc3-3164413786bd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Richard D. Gordon, D.M.D.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Richard D. Gordon, D.M.D. paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"bc3e2eeb-f3ec-44c2-8dc3-3164413786bd","severity_score":50},{"record_id":"8487e15d-57c8-4357-bc20-bf8b70960562","source_event_group_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Elizabeth's Medical Center","state":"MA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Elizabeth's Medical Center experienced several breaches, including lost unencrypted backup tapes and unencrypted laptops. OCR found a pervasive lack of safeguards.","event_id":"d8413253-013b-42c4-ba80-d8f98d5ba509","severity_score":90},{"record_id":"812b8b2b-b1bd-486c-887a-121b19fdb3c4","source_event_group_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts Eye and Ear Infirmary","state":"MA","individuals_affected":3621,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A laptop containing the PHI of 3,621 patients was stolen. OCR found MEEI had not conducted a risk analysis or implemented proper safeguards for portable devices.","event_id":"0e73c10c-4ecb-43d8-a945-84c0ea8f1e2c","severity_score":90},{"record_id":"801e57ec-4313-4a45-9e94-ee1a524dc6a4","source_event_group_id":"f0c46f97-d547-410a-b23d-1bf8bcd5bd37","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Drs. for Patients Only, LLC","state":"GA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Drs. for Patients Only, LLC paid $10,000 to OCR and agreed to a corrective action plan to resolve potential HIPAA Privacy Rule violations after impermissibly disclosing a patient's PHI in response to a negative online review.","event_id":"f0c46f97-d547-410a-b23d-1bf8bcd5bd37","severity_score":50},{"record_id":"7fe0688f-64b4-45c0-8001-e47574c7529a","source_event_group_id":"7842ee2b-bdda-44e4-b7bf-18baffdfe320","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"B. Jackson","state":"AZ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"B. Jackson paid $5,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide a patient with timely access to their medical records.","event_id":"7842ee2b-bdda-44e4-b7bf-18baffdfe320","severity_score":50},{"record_id":"7f13a3a5-9b2d-4ebf-9049-d7cf10b72301","source_event_group_id":"3045f09e-3349-4a40-ab85-a768778712c1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Riverside Psychiatric Associates","state":"CA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Riverside Psychiatric Associates paid $10,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by sharing patient information on social media, affecting 1 individual.","event_id":"3045f09e-3349-4a40-ab85-a768778712c1","severity_score":50},{"record_id":"755c94b2-0665-4567-9b69-70cb01121ee9","source_event_group_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Caremark Corporation","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CVS Caremark impermissibly disposed of protected health information in a manner that violated HIPAA Privacy Rule.","event_id":"be68b8bb-d227-43d1-a9e2-1ccfa234fa86","severity_score":90},{"record_id":"6a3b2b4c-372f-411f-8efa-a3437abddfa4","source_event_group_id":"634212bc-d077-4846-b865-36e4af5fd0e2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"NY Spine Medicine","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"NY Spine Medicine paid $100,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"634212bc-d077-4846-b865-36e4af5fd0e2","severity_score":50},{"record_id":"6712f561-bc77-46f1-85d2-a3fb5ecbcfb5","source_event_group_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Phoenix Cardiac Surgery","state":"AZ","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Phoenix Cardiac Surgery impermissibly disclosed PHI on a publicly accessible calendar and failed to implement adequate policies and procedures and conduct a risk analysis.","event_id":"b0b8395c-36eb-427b-90ad-dd065d8b8244","severity_score":50},{"record_id":"6467b83c-4745-433e-bd7d-a357827a11cb","source_event_group_id":"05f5d911-b7d1-4add-9e63-642bec4e454d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presbyterian Healthcare Services","state":"NM","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presbyterian Healthcare Services paid $150,000 to settle potential HIPAA violations. The case involved an impermissible disclosure of PHI due to an employee accessing patient records without authorization, affecting 1,000 individuals.","event_id":"05f5d911-b7d1-4add-9e63-642bec4e454d","severity_score":65},{"record_id":"62fd4368-bc7a-46af-b91e-54c77973c398","source_event_group_id":"b6f12bb2-1c34-400d-bac6-15c76f1eb371","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Denver Health","state":"CO","individuals_affected":100000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Denver Health paid $1.1 million to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a breach of patient information occurred due to a misconfigured server.","event_id":"b6f12bb2-1c34-400d-bac6-15c76f1eb371","severity_score":90},{"record_id":"562c8de7-2fbd-416e-bee4-c6d4ce57fc1e","source_event_group_id":"17fd2de4-e254-4910-9305-2f3f74a85541","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Massachusetts General Hospital","state":"MA","individuals_affected":192,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A surgeon's unencrypted laptop was stolen, containing the PHI of 192 patients. OCR found a lack of policies and procedures related to mobile devices.","event_id":"17fd2de4-e254-4910-9305-2f3f74a85541","severity_score":80},{"record_id":"53f9b830-138b-4b85-9fc6-441f4f7d12b3","source_event_group_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Spine & Pain Management","state":"MD","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Spine & Pain Management settled with OCR after impermissibly disclosing the PHI of 1,700 individuals by posting patient information on a publicly accessible website.","event_id":"61360932-bf6b-4e21-ae5d-c0081dd1496f","severity_score":65},{"record_id":"52f95862-cb0b-4a0d-b658-6facfd82b50a","source_event_group_id":"db9e916b-5d10-40db-8a08-e9295fffd281","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advanced Healthcare Management, LLC","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advanced Healthcare Management, LLC paid $10,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"db9e916b-5d10-40db-8a08-e9295fffd281","severity_score":50},{"record_id":"4c6d9c0e-8461-4e0a-a89d-4c791a247c6b","source_event_group_id":"28255708-27c6-43ed-9397-22c656e6d021","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metropolitan Community Health Services","state":"NC","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Metropolitan Community Health Services (Metro) paid $25,000 to OCR and agreed to a corrective action plan to settle potential HIPAA Privacy Rule violations for failing to provide timely access to medical records.","event_id":"28255708-27c6-43ed-9397-22c656e6d021","severity_score":50},{"record_id":"4b19f6e3-7751-49d0-85e3-ee8f63bf0e14","source_event_group_id":"a16177bd-bc7c-440f-aeb5-85a1ba337c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Disability","state":"CT","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna Disability paid $500,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations after impermissibly disclosing PHI on the envelopes of sensitive mailings.","event_id":"a16177bd-bc7c-440f-aeb5-85a1ba337c6e","severity_score":65},{"record_id":"4967e000-6407-4c30-8d05-80e14d2a50fd","source_event_group_id":"6b45a2ab-ed8c-441c-8eee-cd77f6535e7e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rite Aid","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rite Aid impermissibly disposed of protected health information in a manner that violated HIPAA Privacy Rule.","event_id":"6b45a2ab-ed8c-441c-8eee-cd77f6535e7e","severity_score":80},{"record_id":"493783e9-368c-46be-9559-9e87f2c115e7","source_event_group_id":"dee00eef-79cc-41b8-9c95-3dd89d1b9b8f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Keith Michelson, D.M.D.","state":"MA","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Keith Michelson, D.M.D. paid $20,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"dee00eef-79cc-41b8-9c95-3dd89d1b9b8f","severity_score":50},{"record_id":"427c594c-75e2-4ea9-ad94-748d32f951f4","source_event_group_id":"f4f3ae38-63f6-4e03-bfc7-24515e638ebb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Aurora Health","state":"WI","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Advocate Aurora Health paid $3.5 million to OCR and agreed to a corrective action plan to settle potential HIPAA violations after a series of phishing incidents compromised employee email accounts.","event_id":"f4f3ae38-63f6-4e03-bfc7-24515e638ebb","severity_score":90},{"record_id":"3d235d41-75a3-49a8-82ed-312764116069","source_event_group_id":"d371274f-fdad-426a-bb37-ac785a561c86","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Magee-Womens Hospital of UPMC","state":"PA","individuals_affected":13,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Magee-Womens Hospital of UPMC paid $1.5 million to OCR and agreed to a corrective action plan to settle potential HIPAA violations arising from the impermissible disclosure of patient information to news reporters.","event_id":"d371274f-fdad-426a-bb37-ac785a561c86","severity_score":90},{"record_id":"36febdc2-1ac2-4b7b-85d4-e37f3deec165","source_event_group_id":"0975d405-ae38-40b1-ba1f-2f65f8dccb25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"LifeBridge Health, Inc.","state":"MD","individuals_affected":500000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"LifeBridge Health paid $1 million to settle potential HIPAA violations after a breach exposed the ePHI of over 500,000 individuals due to an unsecure server.","event_id":"0975d405-ae38-40b1-ba1f-2f65f8dccb25","severity_score":80},{"record_id":"2fbb86b0-93ca-4670-8184-fb396cf60ff2","source_event_group_id":"71421252-df04-486b-85ea-5dc26096d126","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"UCLA Health System","state":"CA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UCLA Health System impermissibly disclosed PHI by allowing unauthorized access to patient information by employees and failing to implement proper access controls.","event_id":"71421252-df04-486b-85ea-5dc26096d126","severity_score":80},{"record_id":"2eb895b8-c5f9-4aa6-8124-2a50e11154a4","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health of Maryland failed to provide patients with access to their medical records and did not cooperate with OCR's investigation.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"28390a20-b440-4477-b9d7-e52eee392565","source_event_group_id":"26603acd-008d-4c07-a184-3f5d2a297a88","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Idaho State University","state":"ID","individuals_affected":17500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Idaho State University impermissibly disclosed the PHI of over 17,000 patients when unencrypted data was left on a public server.","event_id":"26603acd-008d-4c07-a184-3f5d2a297a88","severity_score":65},{"record_id":"27d86ceb-f353-4c99-9a9f-30493380249b","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health","state":"IL","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Center for Children's Digestive Health paid $30,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"275cd375-84c9-4826-8d1e-1edff1327779","source_event_group_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Alaska Department of Health and Social Services","state":"AK","individuals_affected":1700,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A USB drive containing the PHI of 1,700 beneficiaries was stolen. OCR found a failure to conduct a risk analysis and implement encryption.","event_id":"f60e0d07-11ce-4c9f-962f-5dfdb78c8c6e","severity_score":90},{"record_id":"1d49c43b-8a8e-455e-9131-36a66ba92746","source_event_group_id":"8db9621f-89b0-4611-907f-24c84713efff","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pagosa Springs Medical Center","state":"CO","individuals_affected":557,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pagosa Springs Medical Center settled with OCR after impermissibly disclosing the PHI of 557 individuals. The hospital failed to report a breach of unsecured PHI and failed to implement policies and procedures for breach notification.","event_id":"8db9621f-89b0-4611-907f-24c84713efff","severity_score":65},{"record_id":"19bcdad5-38c5-453f-8120-e71147ec35b1","source_event_group_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Blue Cross Blue Shield of Texas & Blue Cross Blue Shield of Illinois","state":"IL","individuals_affected":36224,"breach_submission_date":null,"enforcement_action_date":null,"summary":"BCBSTX and BCBSIL settled with OCR after impermissibly disclosing the PHI of 3500 individuals. 36 unencrypted external hard drives containing the PHI of members were stolen from a vendor's offices.","event_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","severity_score":90},{"record_id":"185643b2-a6a6-4af9-9a39-76a21b5b3b7c","source_event_group_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna Life Insurance Company","state":"CT","individuals_affected":1700000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna Life Insurance Company paid $1,000,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations related to systemic noncompliance affecting over 1,700,000 individuals.","event_id":"ae134a8d-05d2-4fca-bf74-620b0ead13e7","severity_score":80},{"record_id":"0cbf76ec-c06f-4d89-8061-d2a427b36925","source_event_group_id":"a5c02580-eecd-466b-b118-27238c13e5a2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Brookwood Medical Center","state":"AL","individuals_affected":1000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Brookwood Medical Center paid $31,000 to settle potential HIPAA violations. The case involved impermissible disclosure of PHI by leaving patient records in a publicly accessible area, affecting 1,000 individuals.","event_id":"a5c02580-eecd-466b-b118-27238c13e5a2","severity_score":50},{"record_id":"0cbe8598-efcb-4c2f-8b45-7a5d419b3f63","source_event_group_id":"3dc6649d-dbc2-41ec-b43f-3cf0a53aa88e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Distinctive Dental Services, P.C.","state":"NY","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Distinctive Dental Services, P.C. paid $10,000 to OCR and agreed to a corrective action plan to resolve potential HIPAA Privacy Rule violations after impermissibly disclosing a patient's PHI on social media.","event_id":"3dc6649d-dbc2-41ec-b43f-3cf0a53aa88e","severity_score":50},{"record_id":"0330e44c-19fd-471f-b114-ac958488df80","source_event_group_id":"6faf2ba3-9ded-4cef-8dc6-af9f82842b2a","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dr. Barbara Shaw, P.A.","state":"NJ","individuals_affected":1,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dr. Barbara Shaw, P.A. paid $15,000 to OCR and agreed to a corrective action plan to settle potential HIPAA violations for failing to provide timely access to medical records.","event_id":"6faf2ba3-9ded-4cef-8dc6-af9f82842b2a","severity_score":50},{"record_id":"ffba39ee-e61d-4864-9c25-4b2da5985bb8","source_event_group_id":"305137db-cc86-4795-ae62-0eab42e19098","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Parkview Health System, Inc.","state":"IN","individuals_affected":5000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Parkview Health System settled after leaving 71 boxes of patient records unsecured on a doctor's driveway, impermissibly disclosing PHI and demonstrating a failure to safeguard patient information.","event_id":"305137db-cc86-4795-ae62-0eab42e19098","severity_score":80},{"record_id":"fe7d51e8-1bc5-4f27-885f-edf814deee6b","source_event_group_id":"cdf7648a-975e-417f-9c24-045e3174ca40","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"North Memorial Health Care","state":"MN","individuals_affected":94947,"breach_submission_date":null,"enforcement_action_date":null,"summary":"North Memorial Health Care settled after impermissibly disclosing the PHI of 94947 individuals. This occurred after the entity failed to implement a business associate agreement with a vendor.","event_id":"cdf7648a-975e-417f-9c24-045e3174ca40","severity_score":90},{"record_id":"f4cfe753-d9f9-4b23-8ee1-14ea48679c6c","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CHCS settled with OCR after a breach involving the theft of mobile devices containing PHI of 412 individuals, highlighting their failure to conduct a risk analysis and implement security measures.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"f1239b83-112d-401b-8026-f7560232a164","source_event_group_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oklahoma State University – Center for Health Sciences","state":"OK","individuals_affected":279865,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OSU-CHS settled after a server containing the ePHI of over 279,000 individuals was left unsecured and exposed online. This incident highlighted critical failures in their security risk management.","event_id":"21e87120-c9f3-4201-b39c-47b71d0067cf","severity_score":80},{"record_id":"e86b1593-c1a3-4f3f-9d11-24484996e438","source_event_group_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Children's Medical Center of Dallas","state":"TX","individuals_affected":6262,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Two separate incidents involving the loss of an unencrypted Blackberry and USB drive led to the exposure of PHI for over 6,000 individuals, revealing systemic noncompliance.","event_id":"ce2718ce-0a34-426c-8f30-0b55b409ac25","severity_score":90},{"record_id":"e6c77f36-1623-4b7f-a604-c4cc7a95434e","source_event_group_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Sentara Hospitals","state":"VA","individuals_affected":577,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Sentara Hospitals impermissibly disclosed the PHI of 577 individuals by sending an impermissible billing notice, which included patient PHI,  to patients and then failing to report the breach to OCR.","event_id":"b3daf54e-9627-4b1f-9cf9-6e865701cd4c","severity_score":65},{"record_id":"e092b7e4-44aa-4cc6-aff2-facd273a8965","source_event_group_id":"b719ef00-f8bc-40a3-ad79-82a769b045b3","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Personally Identifiable Information","state":"PA","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A HIPAA training website impermissibly disclosed the PHI of its users, including names, email addresses, and completion statuses, due to misconfigured website security.","event_id":"b719ef00-f8bc-40a3-ad79-82a769b045b3","severity_score":50},{"record_id":"df1913ec-118d-4483-8cfc-486954209332","source_event_group_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CardioNet, Inc.","state":"PA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CardioNet, a mobile cardiac outpatient telemetry company, paid a settlement for not conducting a risk analysis and for the impermissible disclosure of PHI when an unencrypted laptop was stolen from an employee's car.","event_id":"752297a9-7b5e-44b0-9260-ac686b8dbde2","severity_score":90},{"record_id":"d389ca49-7085-4f1a-81d8-97529cd92155","source_event_group_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Center for Children's Digestive Health","state":"IL","individuals_affected":18000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"CCD Health settled with OCR after failing to execute a business associate agreement with its billing company, which had unsecured PHI on its server.","event_id":"6c6513c7-6ec8-43e0-9779-bc12bb5a7e00","severity_score":50},{"record_id":"d19fe059-5a68-441c-8b31-e71c2be83a33","source_event_group_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Touchstone Medical Imaging, LLC","state":"TX","individuals_affected":307532,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Touchstone Medical Imaging, LLC settled with OCR after impermissibly disclosing the PHI of 307532 individuals. This occurred due to uncovered server vulnerabilities, which resulted in patients' PHI being accessible on the internet.","event_id":"7e4dbcc1-45a1-4171-98c9-e39e8c29b17e","severity_score":90},{"record_id":"c1f624cd-45f3-4dfa-9e8c-57ab1f891ba3","source_event_group_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical Informatics Engineering, Inc.","state":"IN","individuals_affected":3908819,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MIE, a business associate, settled with OCR after a cyberattack led to the breach of PHI for over 3.9 million individuals. This high-impact breach exposed significant failures in their security posture.","event_id":"0f8d5f51-7cbd-43b3-aed7-de7b5fa17606","severity_score":90},{"record_id":"c1be6270-3c7d-42f0-98f8-c8700b3a9107","source_event_group_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Presence Health","state":"IL","individuals_affected":836,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Presence Health reported a breach involving the theft of paper operating room schedules containing PHI of over 800 individuals. OCR’s investigation revealed that Presence Health impermissibly disclosed PHI and failed to have a written Business Associate Agreement with an outside vendor.","event_id":"ac181b86-f88c-4ac0-8eee-0298ce9607f9","severity_score":65},{"record_id":"af884e68-d2c4-45ca-82be-653b9c3da9a6","source_event_group_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"West Georgia Ambulance, Inc.","state":"GA","individuals_affected":500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"West Georgia Ambulance settled with OCR after impermissibly disclosing the PHI of 500 individuals by leaving patient manifests unsecured and accessible to the public.","event_id":"af31a88e-f39f-4dd7-869e-360e2eec8b20","severity_score":50},{"record_id":"952e8b31-5437-4b72-82ba-dc4c0f6018ee","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Anthem's enterprise-wide IT system was hacked, compromising the PHI of nearly 79 million people. This incident highlighted significant security rule violations.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"84fd3734-ce3a-4aaa-bd5c-2bdd0110ddac","source_event_group_id":"24214ab0-3298-4445-be47-66cdb61a36d9","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Massachusetts Amherst","state":"MA","individuals_affected":1670,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMass Amherst settled after a workstation was infected with malware, leading to a breach of PHI for over 1,600 individuals, underscoring inadequate security measures.","event_id":"24214ab0-3298-4445-be47-66cdb61a36d9","severity_score":80},{"record_id":"7b50874b-54f9-48e3-b205-b726279bcf73","source_event_group_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Managed Care of North America, Inc. (MCNA) Dental","state":"FL","individuals_affected":3617,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MCNA Dental settled after impermissibly disclosing the PHI of 3500 individuals. An employee impermissibly accessed the protected health information of patients in violation of HIPAA and company policy.","event_id":"44bc13c1-b3a5-47e2-9a7c-adbe0ae0ed85","severity_score":90},{"record_id":"7217f3f3-1c08-4e98-872d-276faac50945","source_event_group_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Oregon Health & Science University","state":"OR","individuals_affected":3040,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OHSU settled with OCR after impermissibly disclosing the PHI of 3,040 individuals. There was a lack of a business associate agreement between OHSU and its vendor, OHSU failed to implement appropriate safeguards for its databases, and failed to conduct an accurate risk analysis.","event_id":"a57acdc9-20fa-4ed2-8f8f-adaea20a9e25","severity_score":90},{"record_id":"6d5a7ff1-3acc-4094-acee-0348e744a164","source_event_group_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cottage Health","state":"CA","individuals_affected":62500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cottage Health settled after two data breaches exposed the PHI of over 62,000 individuals due to unsecured servers. This highlighted a failure to conduct proper risk analyses and implement necessary safeguards.","event_id":"1e5829c9-4a5b-48e3-b2a4-8828a2e4c512","severity_score":90},{"record_id":"6ca730b5-d1c8-4b89-96af-5fb0a05157b7","source_event_group_id":"04982a19-0d88-43b1-b743-dc1aaf98bfe7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Pathology Consultants of New Mexico","state":"NM","individuals_affected":14100,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Pathology Consultants of New Mexico settled after disclosing the PHI of over 14,000 individuals without a business associate agreement, highlighting deficiencies in their third-party vendor management.","event_id":"04982a19-0d88-43b1-b743-dc1aaf98bfe7","severity_score":50},{"record_id":"69217db7-7915-4055-aef3-040b75a7948f","source_event_group_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Baylor Scott & White Health","state":"TX","individuals_affected":1957,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Baylor Scott & White Health settled after impermissibly disclosing the PHI of 1,957 patients by placing patient names, diagnoses, and other information on the internet.","event_id":"abc3f5c5-27a8-4e84-87de-5a0cdb8c11b6","severity_score":80},{"record_id":"68d87f24-b6b0-4194-b692-d55b40b1d03a","source_event_group_id":"e685299a-0ed1-4c19-8949-95d22d773493","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Fresenius Medical Care North America","state":"MA","individuals_affected":105979,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Fresenius Medical Care North America was investigated after five separate breach reports, which involved failures to conduct an accurate and thorough risk analysis, and impermissible disclosures of PHI through lost/stolen unencrypted devices.","event_id":"e685299a-0ed1-4c19-8949-95d22d773493","severity_score":90},{"record_id":"62d2f89a-7cdd-445c-9b76-fa2590a572b9","source_event_group_id":"23eaa281-d6bd-476b-a0a4-f13f56074ace","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"ConnectiCare, Inc.","state":"CT","individuals_affected":47208,"breach_submission_date":null,"enforcement_action_date":null,"summary":"ConnectiCare settled after impermissibly disclosing the PHI of 47,208 individuals in a mailing error.","event_id":"23eaa281-d6bd-476b-a0a4-f13f56074ace","severity_score":90},{"record_id":"5febe856-1bc1-49b1-b809-c059c280fec1","source_event_group_id":"c248da49-ec95-4cd1-bfcb-6e6f57eb427c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Bayshore Community Hospital","state":"NJ","individuals_affected":799,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Bayshore Community Hospital settled after impermissibly disclosing the PHI of 799 individuals to a third-party vendor without a business associate agreement.","event_id":"c248da49-ec95-4cd1-bfcb-6e6f57eb427c","severity_score":80},{"record_id":"56d4fca7-1af6-4905-88c8-ecfb453d049c","source_event_group_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Rodeo Family Physicians, P.C.","state":"CA","individuals_affected":2179,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Rodeo Family Physicians settled after impermissibly disclosing the PHI of 2,179 patients to a marketing firm without a business associate agreement, violating patient privacy.","event_id":"cd1a5437-50d4-4b15-b626-44b804fccfa8","severity_score":50},{"record_id":"4da6f5de-1a22-48d1-ad76-25a96156e978","source_event_group_id":"7429d97f-f772-426a-8b06-eaf07b259eaa","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Family Health Care Network","state":"CA","individuals_affected":1391,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Family Health Care Network settled after an unencrypted portable device containing the PHI of over 1,300 patients was stolen, exposing serious security vulnerabilities.","event_id":"7429d97f-f772-426a-8b06-eaf07b259eaa","severity_score":65},{"record_id":"47fdbd94-9876-4ff5-9718-42818be447f4","source_event_group_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Cignet Health","state":"MD","individuals_affected":41,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cignet Health failed to provide 41 patients with access to their medical records despite repeated requests and ignored OCR's demands to produce the records.","event_id":"2a2fb170-9aad-48b3-b8b5-187c275e810b","severity_score":90},{"record_id":"2f97dea9-0258-4b3a-ab09-6017d289f5e5","source_event_group_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Metro Community Provider Network","state":"CO","individuals_affected":3200,"breach_submission_date":null,"enforcement_action_date":null,"summary":"A phishing incident compromised the ePHI of over 3,000 individuals, leading to a settlement with MCPN due to failures in conducting a thorough risk analysis and implementing adequate security measures.","event_id":"d75d8f85-aefb-48c3-87b5-04c8f95b9e4c","severity_score":65},{"record_id":"2cde702e-37b1-4e7f-bcad-26f32830947c","source_event_group_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"MAPFRE Life Insurance Company of Puerto Rico","state":"PR","individuals_affected":2209,"breach_submission_date":null,"enforcement_action_date":null,"summary":"MAPFRE settled after mailing a policyholder's PHI to the wrong address, exposing sensitive information in violation of HIPAA's privacy rule.","event_id":"1eb7924e-7ae9-4a3c-b246-5e792da28dbd","severity_score":90},{"record_id":"2a1d8245-2de8-407e-b580-28607110f296","source_event_group_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health","state":"AZ","individuals_affected":6857,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Dignity Health settled for $1.1 million after impermissibly disclosing the PHI of 6,857 individuals. The hospital failed to notify patients after impermissibly disclosing PHI to a third-party vendor without a business associate agreement.","event_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","severity_score":90},{"record_id":"08e9714a-8f45-4503-bf1a-6134747df8c1","source_event_group_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"St. Luke's-Roosevelt Hospital Center","state":"NY","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"St. Luke's-Roosevelt Hospital Center settled with OCR for failing to safeguard patient PHI after an impermissible disclosure of appointment schedules when they were thrown into a dumpster.","event_id":"af6c6249-7d7e-44ec-9911-cbec7620017f","severity_score":90},{"record_id":"06b0a469-3d06-42d4-b7e4-bc9d45a16e4b","source_event_group_id":"e2b3fa12-ee14-4de2-9c37-1a433bc9bd68","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Kroger Co.","state":"TX","individuals_affected":145,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Kroger Co. impermissibly disclosed the PHI of 145 patients when pharmacists left prescription refills and other patients' appointment information on voicemail.","event_id":"e2b3fa12-ee14-4de2-9c37-1a433bc9bd68","severity_score":65},{"record_id":"04b52a93-b94e-449b-a55d-49c436187126","source_event_group_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Mississippi Medical Center","state":"MS","individuals_affected":10000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"UMMC settled after a stolen laptop exposed the PHI of over 10,000 patients, highlighting deficiencies in its security risk management and audit controls.","event_id":"6ebec89e-8c5e-4870-ad87-05bad9d4f2cc","severity_score":90},{"record_id":"d18bac76-f306-438e-9ba0-6e2c19c8b58d","source_event_group_id":"407c28ca-fdc9-48a4-82d5-977228194e14","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"New York Presbyterian Hospital","state":"NY","individuals_affected":6800,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR found that the hospital impermissibly disclosed the ePHI of 6,800 patients to a television film crew and staff during the filming of a reality TV series.","event_id":"407c28ca-fdc9-48a4-82d5-977228194e14","severity_score":90},{"record_id":"ba93557d-f8aa-4251-9764-8d276b7acdf3","source_event_group_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Texas MD Anderson Cancer Center","state":"TX","individuals_affected":33500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR imposed a civil money penalty for the impermissible disclosure of ePHI of over 33,500 individuals. The disclosure was due to the theft of an unencrypted laptop and USB drives.","event_id":"4dd422da-c85a-41a6-b33a-3eff8e36aa4d","severity_score":90},{"record_id":"b37492b6-ae01-4b40-af82-ecc73d78ac6b","source_event_group_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Dignity Health","state":"CA","individuals_affected":641000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Breach of unsecured ePHI due to a misconfigured server, affecting 641,000 individuals.","event_id":"d59cfb52-777f-472a-85c1-e603dbc1559f","severity_score":90},{"record_id":"a4689a72-7fbf-4c88-afee-292fc22c49d5","source_event_group_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS)","state":"PA","individuals_affected":412,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR entered into a resolution agreement after identifying systemic noncompliance with HIPAA Rules. This stemmed from the theft of an unencrypted iPhone containing the ePHI of 412 individuals.","event_id":"bd982462-e9cd-4c93-9679-18142c1b39a1","severity_score":80},{"record_id":"a23f9415-faac-4871-a206-cd5a363e6216","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":3347,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Impermissible disclosure of PHI due to an exposed file on a public server, affecting 3,347 individuals.","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":90},{"record_id":"995bcb27-c36f-48b4-8401-992ab49611f6","source_event_group_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Banner Health","state":"AZ","individuals_affected":2810000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Cyberattack impacting 2.81 million individuals across 27 facilities.","event_id":"bc84b6fa-3fa9-453b-bd16-d654ae51d6c8","severity_score":90},{"record_id":"8687ddbb-8657-4e41-94e9-017697b6f633","source_event_group_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Advocate Health Care Network","state":"IL","individuals_affected":4000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches affecting over 4 million individuals, primarily due to theft of unencrypted laptops.","event_id":"92ff5d56-a5c7-4d8b-9954-92340d01cb76","severity_score":90},{"record_id":"8485caf4-8359-4f51-bd24-d1c9955595b9","source_event_group_id":"07a221be-7018-41c0-83d6-61298acd1eeb","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Memorial Healthcare System","state":"FL","individuals_affected":115150,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Compromise of employee login credentials for an electronic health record system, exposing the PHI of 115,150 individuals. OCR found failures in access controls, impermissible disclosures, and lack of an adequate risk analysis.","event_id":"07a221be-7018-41c0-83d6-61298acd1eeb","severity_score":90},{"record_id":"786b3279-0845-4402-8929-348d3a655fce","source_event_group_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Montefiore Medical Center","state":"NY","individuals_affected":12500,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Unauthorized access to patient medical records by a former employee, affecting 12,500 individuals.","event_id":"74619fea-9e67-4f6f-a45e-4d43a0538a2d","severity_score":65},{"record_id":"765436c8-2963-47d3-935b-4766647ce6db","source_event_group_id":"4635e713-d016-4984-9aa2-b005fb15ee30","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Medical University of South Carolina","state":"SC","individuals_affected":204653,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Breach involving a compromised email account, impacting over 200,000 individuals.","event_id":"4635e713-d016-4984-9aa2-b005fb15ee30","severity_score":65},{"record_id":"6363a448-8bb2-4e3d-8535-bf6ff90e4c59","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem, Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Largest health data breach in history, impacting nearly 79 million individuals. OCR found Anthem failed to conduct an adequate risk analysis, implement sufficient information system activity review processes, or identify and respond to known security incidents appropriately.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"39e1616f-c6ab-4fd6-a140-5809dfb6ea0c","source_event_group_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Eye Care Leaders","state":"NC","individuals_affected":3000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches stemming from an unpatched server vulnerability, affecting over 3 million individuals.","event_id":"6f2981d5-0df3-49d1-8d1c-d37df1eb4f10","severity_score":90},{"record_id":"39c1ca88-9dcc-42ad-bb73-83db831b14a2","source_event_group_id":"262c04d2-d035-43e2-89bb-06d3e7544105","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of California, Los Angeles Health System (UCLA Health)","state":"CA","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"OCR agreement with UCLA Health to settle potential HIPAA violations resulting from an impermissible disclosure of the PHI of 1 million patients. The breach was due to a series of phishing attacks.","event_id":"262c04d2-d035-43e2-89bb-06d3e7544105","severity_score":90},{"record_id":"0fc1622e-b8d0-4168-867e-a5b5a21679dd","source_event_group_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Aetna","state":"CT","individuals_affected":12000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Aetna impermissibly disclosed the protected health information of its members when it sent mailings to approximately 12,000 members that revealed their HIV status through a clear window on the envelopes.","event_id":"2ca76b3d-0ef7-42ea-9c4c-7332359b4a9e","severity_score":80},{"record_id":"06542c06-f8e0-4a27-be8b-02b214b9aa44","source_event_group_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"CVS Pharmacy, Inc.","state":"RI","individuals_affected":null,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Improper disposal of protected health information (PHI) in dumpsters, visible to the public. OCR found widespread non-compliance across numerous CVS locations.","event_id":"01984a06-03d7-4c2d-9b4a-25e383a653fe","severity_score":90},{"record_id":"8fc8b4eb-1eb6-4b72-82cc-abf10f28e5c7","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"University of Rochester Medical Center","state":"NY","individuals_affected":1000000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Multiple breaches involving unencrypted devices, affecting approximately 1 million individuals.","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":90},{"record_id":"a484a876-43b4-4c58-8a93-33a1818b11ac","source_event_group_id":"f692a3e7-e832-473f-8d77-0aec4630d481","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Premera Blue Cross","state":"WA","individuals_affected":10400000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Large cyberattack exposing the PHI of over 10.4 million individuals.","event_id":"f692a3e7-e832-473f-8d77-0aec4630d481","severity_score":90},{"record_id":"b93ec1a0-750d-48a0-afa4-955aef94e018","source_event_group_id":"580f348c-b5e8-44b3-a945-006941806198","record_class":"regulatory_action","source_type":"ocr_enforcement","entity_name":"Anthem Inc.","state":"IN","individuals_affected":78800000,"breach_submission_date":null,"enforcement_action_date":null,"summary":"Largest health data breach in history, affecting nearly 79 million individuals.","event_id":"580f348c-b5e8-44b3-a945-006941806198","severity_score":90},{"record_id":"8f9913b5-d3fe-4dac-b7e2-47ca180ed70c","source_event_group_id":"b0d56b7f-9c96-41d6-b55d-ff48acf0be4c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Steel Encounters, Inc.","state":"UT","individuals_affected":959,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"b0d56b7f-9c96-41d6-b55d-ff48acf0be4c","severity_score":30},{"record_id":"636ec9fa-f9fb-477d-b1b6-948aef04df42","source_event_group_id":"2150e4c2-57e7-4b04-a0e1-a966f04c4db8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BAYADA Home Health Care, Inc.","state":"NJ","individuals_affected":9526,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"2150e4c2-57e7-4b04-a0e1-a966f04c4db8","severity_score":50},{"record_id":"e47fe871-6031-4e62-823a-413be34edd7e","source_event_group_id":"3f65f469-ff6a-4ca0-a719-4e29d6249686","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ABKSW PREFERRED HEALTH PARTNERS, PLLC d/b/a NORTH TEXAS PREFERRED HEALTH PARTNERS","state":"TX","individuals_affected":2074,"breach_submission_date":"2026-01-08","enforcement_action_date":null,"summary":"","event_id":"3f65f469-ff6a-4ca0-a719-4e29d6249686","severity_score":50},{"record_id":"7278f907-ba94-4ee7-a11e-7b1d2444f204","source_event_group_id":"55a5f951-a518-48f4-9f0b-ac108b51c459","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pafford Medical Services","state":"AR","individuals_affected":1000,"breach_submission_date":"2026-02-02","enforcement_action_date":null,"summary":"","event_id":"55a5f951-a518-48f4-9f0b-ac108b51c459","severity_score":30},{"record_id":"6b0e7352-b59d-444e-9ae7-744eab8fb18f","source_event_group_id":"4753f830-6f2e-4758-a772-5b059022c97e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sheppard Pratt","state":"MD","individuals_affected":753,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"4753f830-6f2e-4758-a772-5b059022c97e","severity_score":30},{"record_id":"c6464ba0-e55f-426b-be79-429943a88b53","source_event_group_id":"ef54ec79-c83f-4535-bbfa-d060b38338d9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mindoula Health, Inc.","state":"MD","individuals_affected":626,"breach_submission_date":"2026-02-02","enforcement_action_date":null,"summary":"","event_id":"ef54ec79-c83f-4535-bbfa-d060b38338d9","severity_score":30},{"record_id":"275e1ba5-9109-4232-ad5e-5917b1c662e5","source_event_group_id":"62f8dbb0-d797-4f83-8c19-b0f8b7bc6a29","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WIRX Pharmacy","state":"PA","individuals_affected":20047,"breach_submission_date":"2026-02-05","enforcement_action_date":null,"summary":"","event_id":"62f8dbb0-d797-4f83-8c19-b0f8b7bc6a29","severity_score":70},{"record_id":"a1a3903a-6cfb-415c-9963-bd7ff204fe74","source_event_group_id":"79fbb0a5-1e51-4d2e-8823-ffc9c79b5dce","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"La Pine Community Health Center","state":"OR","individuals_affected":1190,"breach_submission_date":"2026-02-05","enforcement_action_date":null,"summary":"","event_id":"79fbb0a5-1e51-4d2e-8823-ffc9c79b5dce","severity_score":50},{"record_id":"87d33c0a-2682-4037-92a9-fb1ef5a95e81","source_event_group_id":"7503a616-cd13-4290-a0d8-96a398668909","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cottage Hospital","state":"NH","individuals_affected":1005,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"7503a616-cd13-4290-a0d8-96a398668909","severity_score":50},{"record_id":"189fc00f-baf7-42e2-802a-468514e818ab","source_event_group_id":"b7a00a0e-a85a-47ce-9849-cde7e0aa3ac9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Utah Valley Pediatrics LC","state":"UT","individuals_affected":9958,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"b7a00a0e-a85a-47ce-9849-cde7e0aa3ac9","severity_score":50},{"record_id":"b01ce1e4-61f9-4214-8123-363f0fc405b7","source_event_group_id":"e6c12335-f96a-49cf-8be9-ba214af706e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Triad Radiology Associates","state":"NC","individuals_affected":11011,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"e6c12335-f96a-49cf-8be9-ba214af706e7","severity_score":70},{"record_id":"76e0c3fd-676c-4db0-b4e2-0e45b87ab599","source_event_group_id":"1064a5a4-21b0-41fc-92b1-61f54a4bf5fe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Apex Spine & Neurosurgery, LLC","state":"GA","individuals_affected":2500,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"1064a5a4-21b0-41fc-92b1-61f54a4bf5fe","severity_score":50},{"record_id":"a8df85b6-8031-4294-8232-20a061b2a891","source_event_group_id":"03669da3-3197-4d4e-a4bc-04603a61d993","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marin Cancer Care","state":"CA","individuals_affected":501,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"03669da3-3197-4d4e-a4bc-04603a61d993","severity_score":30},{"record_id":"71a5366c-ac3a-42f2-97f1-f4e1dea6e0ea","source_event_group_id":"12acd2bd-88f0-404a-9204-19e98cc36a63","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vikor Scientific, LLC.","state":"SC","individuals_affected":139964,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"12acd2bd-88f0-404a-9204-19e98cc36a63","severity_score":85},{"record_id":"7c41661e-6b89-457e-af7a-dbbf9bc63d1b","source_event_group_id":"ea9ce376-dc1c-4236-b303-b05c00d8c778","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carolina Foot & Ankle Associates","state":"NC","individuals_affected":501,"breach_submission_date":"2026-02-09","enforcement_action_date":null,"summary":"","event_id":"ea9ce376-dc1c-4236-b303-b05c00d8c778","severity_score":30},{"record_id":"3d4e9cc7-780a-49bc-a44c-a27eed8fd8e1","source_event_group_id":"cb4e1f3f-401b-4329-9583-6dfb8b137723","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Counseling Center of Wayne & Holmes Counties","state":"OH","individuals_affected":83354,"breach_submission_date":"2026-02-09","enforcement_action_date":null,"summary":"","event_id":"cb4e1f3f-401b-4329-9583-6dfb8b137723","severity_score":70},{"record_id":"79badcd7-c88a-4bea-8f18-bb5a1b0f7df8","source_event_group_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BlueCross BlueShield of Tennessee, Inc.","state":"TN","individuals_affected":1670,"breach_submission_date":"2026-02-11","enforcement_action_date":null,"summary":"","event_id":"1f43f5fe-b8da-4766-8fb7-ba68f48dc1fc","severity_score":50},{"record_id":"bc06bbb6-5a22-4cbe-98cb-0e0c45bba1d6","source_event_group_id":"65381ed0-e059-4d96-b00a-9a01a41fca31","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University Spine Center","state":"NJ","individuals_affected":582,"breach_submission_date":"2026-02-12","enforcement_action_date":null,"summary":"","event_id":"65381ed0-e059-4d96-b00a-9a01a41fca31","severity_score":30},{"record_id":"81bec985-cca6-4bca-88bd-a1ceadc7e30a","source_event_group_id":"03ef4078-23ce-4b25-9e69-d38ea530cf46","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ConvenientMD LLC","state":"NH","individuals_affected":1332,"breach_submission_date":"2025-12-02","enforcement_action_date":null,"summary":"","event_id":"03ef4078-23ce-4b25-9e69-d38ea530cf46","severity_score":50},{"record_id":"5aabd752-0e19-4a1c-87df-34af4b60f653","source_event_group_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bay Area Community Health","state":"CA","individuals_affected":9912,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","severity_score":50},{"record_id":"c5ade895-f00c-4ea7-b32c-dacad39f83a3","source_event_group_id":"5e6e9288-9198-4f5b-95f7-23eca4873d38","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chattanooga C.A.R.E.S. d/b/a Cempa Community Care","state":"TN","individuals_affected":1341,"breach_submission_date":"2026-01-30","enforcement_action_date":null,"summary":"","event_id":"5e6e9288-9198-4f5b-95f7-23eca4873d38","severity_score":50},{"record_id":"c9bea751-63aa-43ea-9e20-440d4c9da7be","source_event_group_id":"fed2d842-0c04-43d0-ad27-4f802b1da588","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Issaqueena Pediatric Dentistry PA","state":"SC","individuals_affected":501,"breach_submission_date":"2026-02-04","enforcement_action_date":null,"summary":"","event_id":"fed2d842-0c04-43d0-ad27-4f802b1da588","severity_score":30},{"record_id":"a91b42f3-8de6-400f-938e-2d0b373a8f3c","source_event_group_id":"bffb835e-2c13-4025-826f-2df879749d3e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advanced Homecare Management, LLC DBA Enhabit Home Health & Hospice","state":"TX","individuals_affected":22552,"breach_submission_date":"2026-02-05","enforcement_action_date":null,"summary":"","event_id":"bffb835e-2c13-4025-826f-2df879749d3e","severity_score":70},{"record_id":"cedfc481-720e-4418-a428-0adead3b7221","source_event_group_id":"eb5d56a2-d830-4aa1-81c1-7c13d96dd325","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Excellent Home Care Services, LLC","state":"NY","individuals_affected":16278,"breach_submission_date":"2025-12-17","enforcement_action_date":null,"summary":"","event_id":"eb5d56a2-d830-4aa1-81c1-7c13d96dd325","severity_score":70},{"record_id":"d4ad9a94-4173-44b3-bce6-d35ffcc931db","source_event_group_id":"a2ba72e8-3245-495a-afde-d2ac33dbe2b3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Santa Cruz Community Health","state":"CA","individuals_affected":1487,"breach_submission_date":"2026-01-12","enforcement_action_date":null,"summary":"","event_id":"a2ba72e8-3245-495a-afde-d2ac33dbe2b3","severity_score":50},{"record_id":"3ea8b641-2b23-49fc-9695-f27d2684d137","source_event_group_id":"1cc21874-ae6b-4b16-85f7-e43f536cbc9e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Clinics, Inc. dba Terry Reilly Health Services","state":"ID","individuals_affected":5421,"breach_submission_date":"2026-01-15","enforcement_action_date":null,"summary":"","event_id":"1cc21874-ae6b-4b16-85f7-e43f536cbc9e","severity_score":50},{"record_id":"1edce3cd-e4b0-4de4-a0d4-5e011a18c441","source_event_group_id":"f73d3ebc-aeab-442d-b1e4-a782526dd600","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Benton County Health","state":"OR","individuals_affected":1476,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"f73d3ebc-aeab-442d-b1e4-a782526dd600","severity_score":50},{"record_id":"1641c6f4-777e-45ce-8506-ce1a661d316a","source_event_group_id":"42448e2d-7964-4c84-bfc7-2f0f768f2e4c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Personalis, Inc.","state":"CA","individuals_affected":650,"breach_submission_date":"2026-02-04","enforcement_action_date":null,"summary":"","event_id":"42448e2d-7964-4c84-bfc7-2f0f768f2e4c","severity_score":30},{"record_id":"cfec01a2-0466-430a-8a82-787d0d6d35c7","source_event_group_id":"30b17605-096a-4bd5-b5c7-b22f8becc5e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Spindletop Center","state":"TX","individuals_affected":88863,"breach_submission_date":"2025-11-28","enforcement_action_date":null,"summary":"","event_id":"30b17605-096a-4bd5-b5c7-b22f8becc5e6","severity_score":70},{"record_id":"719ee6b1-e7c6-4389-b956-799d1bef6d10","source_event_group_id":"01d6a5b3-2d63-4033-8184-89e48b6c8f28","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ko-Kwel Wellness Center","state":"OR","individuals_affected":543,"breach_submission_date":"2026-02-03","enforcement_action_date":null,"summary":"","event_id":"01d6a5b3-2d63-4033-8184-89e48b6c8f28","severity_score":30},{"record_id":"e648755c-e7c8-400f-81c6-be74673814ac","source_event_group_id":"e60b7018-eeec-48d8-9735-4c1a2ff21ae0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Deschutes County Health Services","state":"OR","individuals_affected":1305,"breach_submission_date":"2026-01-22","enforcement_action_date":null,"summary":"","event_id":"e60b7018-eeec-48d8-9735-4c1a2ff21ae0","severity_score":50},{"record_id":"9a0667f1-18e9-49ea-a6cd-5572061fc89a","source_event_group_id":"6a3cde14-d3dc-4ea5-92fb-a28b98e5fe2c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EyeCare Partners, LLC, including The Ophthalmology Group, Ophthalmology Consultants, and Ophthalmology Associates.","state":"MO","individuals_affected":17110,"breach_submission_date":"2026-02-03","enforcement_action_date":null,"summary":"","event_id":"6a3cde14-d3dc-4ea5-92fb-a28b98e5fe2c","severity_score":70},{"record_id":"984c142f-81c7-46b5-885d-8238660fb137","source_event_group_id":"042eaa19-dc2a-4487-a88d-55fffd9ab238","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ApolloMD Business Services, LLC","state":"GA","individuals_affected":626540,"breach_submission_date":"2026-02-10","enforcement_action_date":null,"summary":"","event_id":"042eaa19-dc2a-4487-a88d-55fffd9ab238","severity_score":95},{"record_id":"87624020-a735-44ed-8668-587d43aed444","source_event_group_id":"bb231412-5a33-4ead-989f-44d37255bf6e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clinic Service Corporation","state":"CO","individuals_affected":82331,"breach_submission_date":"2026-01-28","enforcement_action_date":null,"summary":"","event_id":"bb231412-5a33-4ead-989f-44d37255bf6e","severity_score":70},{"record_id":"e2ca2fd0-ce64-42a4-9f78-df822e51b3ad","source_event_group_id":"30a67892-2cdc-47e0-9501-80dfdb13db2e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alleghany Health","state":"NC","individuals_affected":2203,"breach_submission_date":"2025-11-26","enforcement_action_date":null,"summary":"","event_id":"30a67892-2cdc-47e0-9501-80dfdb13db2e","severity_score":50},{"record_id":"20893861-aaa7-4e0a-b1e0-93964bfe3c8a","source_event_group_id":"5184d481-7221-4502-84bc-48c22d724523","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Baltimore City Health Department","state":"MD","individuals_affected":2597,"breach_submission_date":"2026-01-28","enforcement_action_date":null,"summary":"","event_id":"5184d481-7221-4502-84bc-48c22d724523","severity_score":50},{"record_id":"3637988b-00bc-425d-88f5-e4002ef76e68","source_event_group_id":"5d09c7f5-3745-4924-b129-0080b28467cb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Howard Brown Health","state":"IL","individuals_affected":8357,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"5d09c7f5-3745-4924-b129-0080b28467cb","severity_score":50},{"record_id":"25516a25-3813-43c9-9342-64cb2ccbd412","source_event_group_id":"905bad57-8211-4912-a464-582fdb867052","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Precipio, Inc.","state":"CT","individuals_affected":501,"breach_submission_date":"2026-01-23","enforcement_action_date":null,"summary":"","event_id":"905bad57-8211-4912-a464-582fdb867052","severity_score":30},{"record_id":"65adfaee-36aa-46fd-9a39-32e950cf4bbd","source_event_group_id":"506625aa-5a0d-47e5-998b-e31b6a095d0b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pecan Tree Dental, PLLC","state":"TX","individuals_affected":13300,"breach_submission_date":"2026-01-26","enforcement_action_date":null,"summary":"","event_id":"506625aa-5a0d-47e5-998b-e31b6a095d0b","severity_score":70},{"record_id":"cb2d4e8c-6496-4615-b3cd-3eba5b4cfec4","source_event_group_id":"5aac739b-8f75-4ab8-9d82-9d5c3e7d4556","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WindRose Health Network","state":"IN","individuals_affected":691,"breach_submission_date":"2026-01-27","enforcement_action_date":null,"summary":"","event_id":"5aac739b-8f75-4ab8-9d82-9d5c3e7d4556","severity_score":30},{"record_id":"3ee37845-09cd-4df2-94be-10b87f92f044","source_event_group_id":"45e78068-2bb7-4850-ad6b-2e65374e1327","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dr. Michael Kaplan DO PC DBA Long Island Weight Loss Institute","state":"NY","individuals_affected":3426,"breach_submission_date":"2025-11-20","enforcement_action_date":null,"summary":"","event_id":"45e78068-2bb7-4850-ad6b-2e65374e1327","severity_score":50},{"record_id":"faa048c3-da1f-4293-b6a7-73da62e8fd82","source_event_group_id":"fe3a530a-39e4-43a4-bab9-455656e9f34f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jefferson-Blount-St. Clair Mental Health Authority","state":"AL","individuals_affected":30434,"breach_submission_date":"2026-01-23","enforcement_action_date":null,"summary":"","event_id":"fe3a530a-39e4-43a4-bab9-455656e9f34f","severity_score":70},{"record_id":"891c82d0-e0ca-4c33-bece-de4bfbdf8875","source_event_group_id":"e60b167d-8f29-451c-b154-936ce0b72e7b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arthritis & Rheumatology","state":"PA","individuals_affected":6000,"breach_submission_date":"2025-12-18","enforcement_action_date":null,"summary":"","event_id":"e60b167d-8f29-451c-b154-936ce0b72e7b","severity_score":50},{"record_id":"ec22586b-f178-4237-a35e-6a184db2aa83","source_event_group_id":"8cb4ff72-a2c9-4c36-b3c0-ed175be09289","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anesthesiology & Pain Consultants, LLC","state":"LA","individuals_affected":538,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"8cb4ff72-a2c9-4c36-b3c0-ed175be09289","severity_score":30},{"record_id":"261bcf67-36cd-4bab-bde6-0b4420118c06","source_event_group_id":"d0d3c6a7-8f60-4150-94df-a0e48ca21140","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Artemis Healthcare Inc.","state":"TN","individuals_affected":45867,"breach_submission_date":"2025-12-23","enforcement_action_date":null,"summary":"","event_id":"d0d3c6a7-8f60-4150-94df-a0e48ca21140","severity_score":70},{"record_id":"15c576fb-b32a-4080-9290-0ecfbf443391","source_event_group_id":"18a98b1b-8248-4385-b454-cd3c118708df","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marrs Ear, Nose & Throat, PA","state":"FL","individuals_affected":6376,"breach_submission_date":"2025-11-18","enforcement_action_date":null,"summary":"","event_id":"18a98b1b-8248-4385-b454-cd3c118708df","severity_score":50},{"record_id":"baf73756-d20f-4e3c-b3ce-4444d2082f97","source_event_group_id":"93c8844d-25fe-495c-8d25-448bafb8812b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pit River Health Service Inc.","state":"CA","individuals_affected":1800,"breach_submission_date":"2026-01-06","enforcement_action_date":null,"summary":"","event_id":"93c8844d-25fe-495c-8d25-448bafb8812b","severity_score":50},{"record_id":"754177e0-5374-4904-b1b1-1e198c33b691","source_event_group_id":"4179824f-09c9-4dce-be05-bba0a3059b06","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chicago Cosmetic Surgery and Dermatology","state":"IL","individuals_affected":700,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"4179824f-09c9-4dce-be05-bba0a3059b06","severity_score":30},{"record_id":"1cec07ab-e639-4357-92ec-d8838454ac28","source_event_group_id":"51e6a057-a504-4525-ace3-2f0d3ae624bc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Riverland Community Health","state":"MN","individuals_affected":940,"breach_submission_date":"2025-12-23","enforcement_action_date":null,"summary":"","event_id":"51e6a057-a504-4525-ace3-2f0d3ae624bc","severity_score":30},{"record_id":"0d1a1694-1813-4ac8-ab95-18b88029947f","source_event_group_id":"110cb6dc-da4b-41f6-8c4e-25ac9f52b39f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Illinois Department of Human Services","state":"IL","individuals_affected":705017,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"110cb6dc-da4b-41f6-8c4e-25ac9f52b39f","severity_score":95},{"record_id":"a17d1470-df12-4ea6-9c1b-04cc62d6e872","source_event_group_id":"7c8dcb1b-ed49-4a0b-bf2f-ae3c835e8da7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Iroquois Memorial Hospital","state":"IL","individuals_affected":621,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"7c8dcb1b-ed49-4a0b-bf2f-ae3c835e8da7","severity_score":30},{"record_id":"aff8c901-5ea6-4a87-ad16-38a01a7ee1c3","source_event_group_id":"ef6e950d-ae36-42be-af15-dacd0e286953","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TMG Health, Inc.","state":"TX","individuals_affected":2076,"breach_submission_date":"2026-01-13","enforcement_action_date":null,"summary":"","event_id":"ef6e950d-ae36-42be-af15-dacd0e286953","severity_score":50},{"record_id":"b79b8a9c-57d3-4e9d-b0ee-366b6029598b","source_event_group_id":"10990ffc-1274-485e-b8c5-ed3fab281dac","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Administrators of the Tulane Educational Fund d/b/a Tulane University Medical Group","state":"LA","individuals_affected":6530,"breach_submission_date":"2026-01-15","enforcement_action_date":null,"summary":"","event_id":"10990ffc-1274-485e-b8c5-ed3fab281dac","severity_score":50},{"record_id":"6df20f39-0d8b-4384-bdbc-c516b7e39471","source_event_group_id":"fe7ab67b-169c-4599-8317-cce1d110dcc0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Middlesex Sheriff's Office","state":"MA","individuals_affected":501,"breach_submission_date":"2026-01-20","enforcement_action_date":null,"summary":"","event_id":"fe7ab67b-169c-4599-8317-cce1d110dcc0","severity_score":30},{"record_id":"abd7097e-404d-486a-b3f8-2a232fe5bf23","source_event_group_id":"69639a9c-a6a8-490c-8829-df12e1b779f4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Center for Neuropsychology and Learning, PC","state":"MI","individuals_affected":3722,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"69639a9c-a6a8-490c-8829-df12e1b779f4","severity_score":50},{"record_id":"9c9d3d56-1b3a-46b8-9fb6-e0dafb7744d1","source_event_group_id":"d4a67d8c-44ee-4498-9d1b-af46fc67720f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Expert MRI","state":"CA","individuals_affected":209560,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"","event_id":"d4a67d8c-44ee-4498-9d1b-af46fc67720f","severity_score":85},{"record_id":"ad83b7b3-e197-4f54-bd32-e289e5720253","source_event_group_id":"33baf92f-6b60-4781-9f95-3f6e140def96","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cerenade","state":"CA","individuals_affected":987,"breach_submission_date":"2025-11-30","enforcement_action_date":null,"summary":"","event_id":"33baf92f-6b60-4781-9f95-3f6e140def96","severity_score":30},{"record_id":"959fdbbc-fa35-48a4-8116-4b437f202a77","source_event_group_id":"6e2a4a21-3466-4c5f-93e7-eaed1f0fe1cb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"FullBeauty Brands, Inc. Associate Benefits Plan","state":"NY","individuals_affected":4725,"breach_submission_date":"2026-01-13","enforcement_action_date":null,"summary":"","event_id":"6e2a4a21-3466-4c5f-93e7-eaed1f0fe1cb","severity_score":50},{"record_id":"856f1c54-1cbf-4136-9a18-d4755d8f2a8d","source_event_group_id":"d4da0597-80ab-4f36-bccc-7d744209c1aa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AdventHealth Daytona Beach","state":"FL","individuals_affected":821,"breach_submission_date":"2026-01-20","enforcement_action_date":null,"summary":"","event_id":"d4da0597-80ab-4f36-bccc-7d744209c1aa","severity_score":30},{"record_id":"7d02c85b-0340-4854-80e1-122bfc9f38ec","source_event_group_id":"44d1e466-d9c4-4926-b40b-c75eb065d259","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Ozarks Medical Center","state":"MO","individuals_affected":11818,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"44d1e466-d9c4-4926-b40b-c75eb065d259","severity_score":70},{"record_id":"53a7798c-7109-42c9-9b46-7c1d35c5a744","source_event_group_id":"238a5176-8a85-43b1-b480-b57af0986635","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwest Radiologists, Inc./Mount Baker Imaging","state":"WA","individuals_affected":362713,"breach_submission_date":"2025-10-28","enforcement_action_date":null,"summary":"","event_id":"238a5176-8a85-43b1-b480-b57af0986635","severity_score":85},{"record_id":"0b48c2e5-f02c-48b4-8896-a41481b4fa15","source_event_group_id":"ccc4967d-1ddb-4820-90fa-4cadd6bd835b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Judson Center","state":"MI","individuals_affected":976,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"","event_id":"ccc4967d-1ddb-4820-90fa-4cadd6bd835b","severity_score":30},{"record_id":"719b8b2b-ed0a-443c-bfbf-f0c5b56520f1","source_event_group_id":"f4db5f8f-1fda-407a-99af-7469c6623022","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Centric Health","state":"CA","individuals_affected":6855,"breach_submission_date":"2025-12-10","enforcement_action_date":null,"summary":"","event_id":"f4db5f8f-1fda-407a-99af-7469c6623022","severity_score":50},{"record_id":"d490a2f5-c9c5-44c6-8f19-ce10cc6087a7","source_event_group_id":"5272ae91-d9a4-4aaa-ae98-14227b7cd7b3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advanced Healthcare Professionals","state":"TX","individuals_affected":800,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"5272ae91-d9a4-4aaa-ae98-14227b7cd7b3","severity_score":30},{"record_id":"6db94d2b-a3a1-4f31-ab3d-dc02f8218c5b","source_event_group_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Axis Community Health","state":"CA","individuals_affected":3579,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","severity_score":50},{"record_id":"9e6a8647-792e-40e2-a3ae-259ed77ba856","source_event_group_id":"efb72ec5-60aa-480b-aa08-7aac84d575c0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Immediate Care, LLC","state":"AL","individuals_affected":7447,"breach_submission_date":"2026-01-15","enforcement_action_date":null,"summary":"","event_id":"efb72ec5-60aa-480b-aa08-7aac84d575c0","severity_score":50},{"record_id":"b39d8ac6-934e-467c-8cd6-c24409e5345c","source_event_group_id":"b5e289de-3feb-41a5-adc9-0e9b77a4223d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Methodist Homes of Alabama and Northwest Florida","state":"AL","individuals_affected":1406,"breach_submission_date":"2026-01-06","enforcement_action_date":null,"summary":"","event_id":"b5e289de-3feb-41a5-adc9-0e9b77a4223d","severity_score":50},{"record_id":"d4ebd9af-bfa5-42e9-b9a4-cd48a9a73cd9","source_event_group_id":"0942cd28-f81e-4c9c-86ef-d99b0e61c508","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Med Atlantic, Inc.","state":"VA","individuals_affected":500,"breach_submission_date":"2025-11-21","enforcement_action_date":null,"summary":"","event_id":"0942cd28-f81e-4c9c-86ef-d99b0e61c508","severity_score":30},{"record_id":"080204fc-9f27-47af-b060-4bc062290b6a","source_event_group_id":"93ed39db-1263-4998-b119-4f37cda6a321","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AllerVie Health","state":"TX","individuals_affected":80521,"breach_submission_date":"2025-12-23","enforcement_action_date":null,"summary":"","event_id":"93ed39db-1263-4998-b119-4f37cda6a321","severity_score":70},{"record_id":"050abd5d-ddb2-487e-bfc6-95084725005e","source_event_group_id":"0d71098a-58af-4b61-8738-4bd001beecc1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Foundation Health Partners","state":"AK","individuals_affected":523,"breach_submission_date":"2026-01-09","enforcement_action_date":null,"summary":"","event_id":"0d71098a-58af-4b61-8738-4bd001beecc1","severity_score":30},{"record_id":"1f010047-f63d-4b78-a4f8-28b5d598b0df","source_event_group_id":"d22c2ade-45fa-41c8-8825-ce2f05a85de4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"360 Dental PC","state":"PA","individuals_affected":11273,"breach_submission_date":"2026-01-15","enforcement_action_date":null,"summary":"","event_id":"d22c2ade-45fa-41c8-8825-ce2f05a85de4","severity_score":70},{"record_id":"d646d8c9-ed86-4be3-8f24-a36b243aa7e7","source_event_group_id":"2ae99843-7787-49f6-82a4-6008b96484e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"True RCM, a Rapid Care Transcription, Inc., Company","state":"MD","individuals_affected":1247,"breach_submission_date":"2026-01-20","enforcement_action_date":null,"summary":"","event_id":"2ae99843-7787-49f6-82a4-6008b96484e9","severity_score":50},{"record_id":"2a776eb5-2cd7-4eab-baae-f4cc50dcb8c8","source_event_group_id":"0198db7b-8fd6-4eab-baee-d28f6db77717","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HAP (Health Alliance Plan)","state":"MI","individuals_affected":1059,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"0198db7b-8fd6-4eab-baee-d28f6db77717","severity_score":50},{"record_id":"33c97b6c-cd22-49c1-89f4-538909d1ef80","source_event_group_id":"cce97b5c-fa01-42c6-8537-5369f778bb01","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CareOregon","state":"OR","individuals_affected":5473,"breach_submission_date":"2025-12-26","enforcement_action_date":null,"summary":"","event_id":"cce97b5c-fa01-42c6-8537-5369f778bb01","severity_score":50},{"record_id":"f0faefcb-6895-4e56-b2ea-0781abfbb475","source_event_group_id":"b1232983-3927-473d-be6d-4502cfa03220","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NAHGA Claim Services","state":"ME","individuals_affected":26906,"breach_submission_date":"2025-11-19","enforcement_action_date":null,"summary":"","event_id":"b1232983-3927-473d-be6d-4502cfa03220","severity_score":70},{"record_id":"00833d66-f1d9-49bb-97a0-f2bd45a8faa9","source_event_group_id":"0dc957c1-79b0-480b-b379-7876075a2c3a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Reproductive Medicine Associates of Michigan","state":"MI","individuals_affected":501,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"0dc957c1-79b0-480b-b379-7876075a2c3a","severity_score":30},{"record_id":"25cb6339-55c0-45d1-8bc5-a13dc49a5932","source_event_group_id":"cf11285c-cf89-4559-82a8-8134fd14f4c9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Glendale Obstetrics & Gynecology PCA","state":"AZ","individuals_affected":501,"breach_submission_date":"2025-12-24","enforcement_action_date":null,"summary":"","event_id":"cf11285c-cf89-4559-82a8-8134fd14f4c9","severity_score":30},{"record_id":"700227d2-344f-48c3-bd6b-0f063103c85b","source_event_group_id":"d1c4804b-066b-4c0c-8a29-9e60785f936c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Open Door Community Health Centers","state":"CA","individuals_affected":6633,"breach_submission_date":"2026-01-08","enforcement_action_date":null,"summary":"","event_id":"d1c4804b-066b-4c0c-8a29-9e60785f936c","severity_score":50},{"record_id":"1d94d116-d4e5-499b-8729-c2de471649c5","source_event_group_id":"58492c0e-2194-43d7-b94c-9135401d8d65","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minnesota Department of Human Services","state":"MN","individuals_affected":303965,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"58492c0e-2194-43d7-b94c-9135401d8d65","severity_score":85},{"record_id":"4eb66d66-e415-4cc3-942e-4ac97ca67a9c","source_event_group_id":"82a7661f-96c1-4ea2-9d3c-2954506d0346","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medical Center, LLP","state":"GA","individuals_affected":32090,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"82a7661f-96c1-4ea2-9d3c-2954506d0346","severity_score":70},{"record_id":"58f2d743-b5ef-47f8-9372-619067f2c3ff","source_event_group_id":"3e757aa7-b191-40ab-8009-2ba5cd34bb91","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advocates for a Healthy Community dba Jordan Valley Community Health Center","state":"MO","individuals_affected":8842,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"3e757aa7-b191-40ab-8009-2ba5cd34bb91","severity_score":50},{"record_id":"688eb9ee-00a0-421e-91c0-a6477a0a884b","source_event_group_id":"d41cf732-64f8-43f5-8e0c-25c431b41e6f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mendocino Community Health Clinic Inc.","state":"CA","individuals_affected":3538,"breach_submission_date":"2025-12-29","enforcement_action_date":null,"summary":"","event_id":"d41cf732-64f8-43f5-8e0c-25c431b41e6f","severity_score":50},{"record_id":"8f5a912a-3b32-459f-89fd-05c5042ba88e","source_event_group_id":"fb488964-b1d4-43e0-94d7-3048a34b32e1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Columbia Medical Practice","state":"MD","individuals_affected":3000,"breach_submission_date":"2025-12-05","enforcement_action_date":null,"summary":"","event_id":"fb488964-b1d4-43e0-94d7-3048a34b32e1","severity_score":50},{"record_id":"1f5dcd61-bf5d-4b64-986f-2271cea845f3","source_event_group_id":"57e23e63-8034-46fe-8944-307f52bd60c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jewish Family and Community Services- East Bay","state":"CA","individuals_affected":987,"breach_submission_date":"2025-12-10","enforcement_action_date":null,"summary":"","event_id":"57e23e63-8034-46fe-8944-307f52bd60c4","severity_score":30},{"record_id":"50295e54-3a0f-4898-a7d9-5f2211d0bb17","source_event_group_id":"67a9ea49-87db-46f0-b250-3d71d7d0476b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Friends of Family Health Center","state":"CA","individuals_affected":2256,"breach_submission_date":"2025-12-16","enforcement_action_date":null,"summary":"","event_id":"67a9ea49-87db-46f0-b250-3d71d7d0476b","severity_score":50},{"record_id":"6cf340ae-cbda-47dc-b393-37f43531b7c7","source_event_group_id":"615ee369-d36c-47dd-904b-7671759e924d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mitchell County Department of Social Services","state":"NC","individuals_affected":501,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"615ee369-d36c-47dd-904b-7671759e924d","severity_score":30},{"record_id":"eb94bc7e-4bdb-43db-86c5-3f0cb1609d36","source_event_group_id":"e6e87a72-4bd2-4d12-a719-b7b50240285f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gold Coast Health Plan","state":"CA","individuals_affected":540,"breach_submission_date":"2025-12-30","enforcement_action_date":null,"summary":"","event_id":"e6e87a72-4bd2-4d12-a719-b7b50240285f","severity_score":30},{"record_id":"23a2d4cc-7512-4663-aade-c50611d60353","source_event_group_id":"2a038177-9fe2-4f19-bd24-74e290effad5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Avosina Healthcare Solutions","state":"VA","individuals_affected":44425,"breach_submission_date":"2026-01-10","enforcement_action_date":null,"summary":"","event_id":"2a038177-9fe2-4f19-bd24-74e290effad5","severity_score":70},{"record_id":"6c466c70-3e3d-41dc-8571-9f5d6f8cbcdb","source_event_group_id":"64a12793-1393-4bd6-bbc2-d8b0dca77e75","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HealthPoint Family Care","state":"KY","individuals_affected":7990,"breach_submission_date":"2026-01-05","enforcement_action_date":null,"summary":"","event_id":"64a12793-1393-4bd6-bbc2-d8b0dca77e75","severity_score":50},{"record_id":"c332eba5-40e9-4f03-a910-7d5cbd7f213f","source_event_group_id":"4f630862-f7dd-451e-8d13-9e8df742b5dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Harbor","state":"OH","individuals_affected":216000,"breach_submission_date":"2025-09-30","enforcement_action_date":null,"summary":"","event_id":"4f630862-f7dd-451e-8d13-9e8df742b5dc","severity_score":85},{"record_id":"0add6574-a861-40f1-a930-4ec3f315112d","source_event_group_id":"2acbc86b-8e82-4219-874b-0cce1456b34a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Indian Health Board of Minneapolis","state":"MN","individuals_affected":503,"breach_submission_date":"2025-12-15","enforcement_action_date":null,"summary":"","event_id":"2acbc86b-8e82-4219-874b-0cce1456b34a","severity_score":30},{"record_id":"794d0a75-9662-4b1d-8a42-96a8e19f262c","source_event_group_id":"e64ed994-b892-4b69-9eb6-6e870d21d8ab","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TriCity Family Services","state":"IL","individuals_affected":2511,"breach_submission_date":"2025-12-08","enforcement_action_date":null,"summary":"","event_id":"e64ed994-b892-4b69-9eb6-6e870d21d8ab","severity_score":50},{"record_id":"d2020d71-4cb6-495b-8510-91c975ee6e44","source_event_group_id":"07fbbe2f-8e54-4067-aab3-72565bcabaf6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Affiliates of Nexion Health, Inc.","state":"MD","individuals_affected":1027,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"07fbbe2f-8e54-4067-aab3-72565bcabaf6","severity_score":50},{"record_id":"51a77958-72d4-49e0-bc5c-ea767ef183bc","source_event_group_id":"1dd804d5-1543-4c42-b290-9f88ad48f797","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Absentee Shawnee Tribal Health Authority, Inc.","state":"OK","individuals_affected":1112,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"1dd804d5-1543-4c42-b290-9f88ad48f797","severity_score":50},{"record_id":"95b7c407-0026-47d7-b2c3-004ed5535800","source_event_group_id":"7bd07c26-86dc-4ed0-9b8e-ab551f59fd29","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid Michigan Medical Billing Service, Inc.","state":"MI","individuals_affected":28185,"breach_submission_date":"2026-01-05","enforcement_action_date":null,"summary":"","event_id":"7bd07c26-86dc-4ed0-9b8e-ab551f59fd29","severity_score":70},{"record_id":"f0568265-f670-4141-acd5-35bd58747c5c","source_event_group_id":"9d0225df-c69c-4a33-b6f4-551cac998591","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asian Americans for Community Involvement","state":"CA","individuals_affected":521,"breach_submission_date":"2026-01-05","enforcement_action_date":null,"summary":"","event_id":"9d0225df-c69c-4a33-b6f4-551cac998591","severity_score":30},{"record_id":"9af6bd62-33df-474b-923e-17f29738c71b","source_event_group_id":"130677a3-68a9-4d20-953b-68ca40d915e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Valley Family Health Care","state":"ID","individuals_affected":4300,"breach_submission_date":"2026-01-12","enforcement_action_date":null,"summary":"","event_id":"130677a3-68a9-4d20-953b-68ca40d915e6","severity_score":50},{"record_id":"edb23f25-6f5d-4d60-b972-f4cc61ca15e8","source_event_group_id":"34c5e860-dd30-4785-b550-09bfa64e3c90","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anchorage Neighborhood Health Center","state":"AK","individuals_affected":70555,"breach_submission_date":"2025-11-19","enforcement_action_date":null,"summary":"","event_id":"34c5e860-dd30-4785-b550-09bfa64e3c90","severity_score":70},{"record_id":"ff3ace11-4efa-4d5c-b104-a41f63f28422","source_event_group_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"One Community Health","state":"CA","individuals_affected":4309,"breach_submission_date":"2026-01-02","enforcement_action_date":null,"summary":"","event_id":"741d3847-26cc-4b9a-8433-4692fbe62e57","severity_score":50},{"record_id":"4fd167e0-ae68-4944-bd00-1b085d8ef70a","source_event_group_id":"22b158b2-f68b-4e75-9500-c738d1c751a1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Coalesce, LLC dba Benefitelect","state":"AZ","individuals_affected":501,"breach_submission_date":"2025-10-15","enforcement_action_date":null,"summary":"","event_id":"22b158b2-f68b-4e75-9500-c738d1c751a1","severity_score":30},{"record_id":"8ae56b87-cc98-42c5-8e7f-ec270aae5058","source_event_group_id":"3302af79-3e96-4ec6-bf91-00930295b787","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tampa Bay Treatment Associates","state":"FL","individuals_affected":3682,"breach_submission_date":"2025-11-05","enforcement_action_date":null,"summary":"","event_id":"3302af79-3e96-4ec6-bf91-00930295b787","severity_score":50},{"record_id":"476865f8-6b36-4569-8f40-d89f7a0f1c07","source_event_group_id":"ebadbd2e-e494-46a5-870a-a4f96e0e440d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Variety Care","state":"OK","individuals_affected":17163,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"ebadbd2e-e494-46a5-870a-a4f96e0e440d","severity_score":70},{"record_id":"d02e0fc3-3e87-47e4-9c1c-fbbc020e74bf","source_event_group_id":"c078c682-360b-4996-92d6-c715fc9a90ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Oncology Care","state":"WY","individuals_affected":5615,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"c078c682-360b-4996-92d6-c715fc9a90ec","severity_score":50},{"record_id":"e3015dd2-d856-40cb-bf98-220eac1b452a","source_event_group_id":"383e3830-0a7c-4d5c-9c9d-6505b5cd7ef7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Modernizing Medicine, Inc.","state":"FL","individuals_affected":198795,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"383e3830-0a7c-4d5c-9c9d-6505b5cd7ef7","severity_score":85},{"record_id":"d6852154-fd11-454b-85fb-77c6f572ef29","source_event_group_id":"fb3a0b99-504d-49db-9d11-fe86a4a91699","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gardner Health Services","state":"CA","individuals_affected":6197,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"fb3a0b99-504d-49db-9d11-fe86a4a91699","severity_score":50},{"record_id":"ff3b37dd-2b59-4054-91cd-7ae72e3c1a0c","source_event_group_id":"0bc42f3a-107e-45cc-bfb0-cdd0e62087e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Share Ourselves","state":"CA","individuals_affected":2864,"breach_submission_date":"2025-12-26","enforcement_action_date":null,"summary":"","event_id":"0bc42f3a-107e-45cc-bfb0-cdd0e62087e7","severity_score":50},{"record_id":"b744688b-9aeb-47c1-85c2-0db6f28a2df0","source_event_group_id":"3601e86c-06bb-46dd-b001-1d0f56f10776","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Yamhill Community Care Organization (YCCO)","state":"OR","individuals_affected":1251,"breach_submission_date":"2025-10-22","enforcement_action_date":null,"summary":"","event_id":"3601e86c-06bb-46dd-b001-1d0f56f10776","severity_score":50},{"record_id":"aa6f96a4-34a3-4fcd-8094-02513b64ee26","source_event_group_id":"d754ca88-b9e1-4ebb-9832-55734533ec40","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Docs Medical Group, Inc. dba Pulse Urgent Care","state":"CA","individuals_affected":4035,"breach_submission_date":"2025-12-28","enforcement_action_date":null,"summary":"","event_id":"d754ca88-b9e1-4ebb-9832-55734533ec40","severity_score":50},{"record_id":"4fcc1b79-2b7d-4ad3-acba-564aab1b05f6","source_event_group_id":"cdfdc1f2-c706-4a1f-bbb5-da68a104fe6e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Associated Radiologists of the Finger Lakes, P.C.","state":"NY","individuals_affected":501,"breach_submission_date":"2025-12-29","enforcement_action_date":null,"summary":"","event_id":"cdfdc1f2-c706-4a1f-bbb5-da68a104fe6e","severity_score":30},{"record_id":"99aa8d4b-1fdb-4d4f-ae79-69ee52ca3bc5","source_event_group_id":"756523f3-e04a-4534-bca1-d16e9ecf1226","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hale Makua Health Services","state":"HI","individuals_affected":500,"breach_submission_date":"2025-10-29","enforcement_action_date":null,"summary":"","event_id":"756523f3-e04a-4534-bca1-d16e9ecf1226","severity_score":30},{"record_id":"9657bcc4-aa17-456a-8ce8-041f5ba69068","source_event_group_id":"d74c8e9a-c422-48a7-82e7-a0c878c8f577","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"County of Catawba","state":"NC","individuals_affected":500,"breach_submission_date":"2025-11-19","enforcement_action_date":null,"summary":"","event_id":"d74c8e9a-c422-48a7-82e7-a0c878c8f577","severity_score":30},{"record_id":"8106ec99-26e2-4ff7-b71e-b7defba84c40","source_event_group_id":"7a973f75-fa0d-46e0-97ff-b8219f109486","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Andover Eye Associates","state":"MA","individuals_affected":1638,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"7a973f75-fa0d-46e0-97ff-b8219f109486","severity_score":50},{"record_id":"f69a49ad-b077-4c0e-9843-a1211e8e6f98","source_event_group_id":"730f2a6e-369c-434f-95a8-b7c4414197bd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dermatology Associates","state":"KY","individuals_affected":501,"breach_submission_date":"2025-10-03","enforcement_action_date":null,"summary":"","event_id":"730f2a6e-369c-434f-95a8-b7c4414197bd","severity_score":30},{"record_id":"d053595f-797c-4012-b8d3-c7ae56e6c2ae","source_event_group_id":"bc780edf-339c-44c1-9794-d192c6f95ee7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Space Coast Vascular","state":"FL","individuals_affected":18819,"breach_submission_date":"2025-10-06","enforcement_action_date":null,"summary":"","event_id":"bc780edf-339c-44c1-9794-d192c6f95ee7","severity_score":70},{"record_id":"d45dec4a-29b1-4941-ae0d-b7defb5a6879","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":93921,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":70},{"record_id":"8a3b81b6-8011-4bbc-a8dd-dff563f0b8c2","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":607,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":30},{"record_id":"83a48674-95d5-4944-81fa-64bc677bde69","source_event_group_id":"ecafa2e6-5003-4381-a83e-2a5155125643","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fieldtex Products, Inc.","state":"NY","individuals_affected":104071,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"ecafa2e6-5003-4381-a83e-2a5155125643","severity_score":85},{"record_id":"972e0db6-564b-4fe6-b276-b41818e2f30a","source_event_group_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wellpoint, Inc.","state":"IN","individuals_affected":579,"breach_submission_date":"2025-10-07","enforcement_action_date":null,"summary":"","event_id":"0185fc77-32cc-4b40-ba0e-9146aef20168","severity_score":30},{"record_id":"4111979d-46c4-40bf-a2c0-e1829e8d89f7","source_event_group_id":"59cc6bbf-4e94-435a-bc6d-4dc7d92dc234","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mission Neighborhood Health Center","state":"CA","individuals_affected":3741,"breach_submission_date":"2025-12-19","enforcement_action_date":null,"summary":"","event_id":"59cc6bbf-4e94-435a-bc6d-4dc7d92dc234","severity_score":50},{"record_id":"4fede0ba-cb3c-457e-84c7-47cccb5c3de5","source_event_group_id":"e32ea220-edab-4c1b-8dcc-35486bd82dbb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Florida Health Sciences Center, Inc","state":"FL","individuals_affected":896,"breach_submission_date":"2025-10-03","enforcement_action_date":null,"summary":"","event_id":"e32ea220-edab-4c1b-8dcc-35486bd82dbb","severity_score":30},{"record_id":"394d7b90-d99e-49fc-9560-9542f7a9f655","source_event_group_id":"f620a562-6083-437f-aa23-817f318ec181","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OB-GYN Associates, Ltd. dba OBGYN Associates","state":"NV","individuals_affected":62238,"breach_submission_date":"2025-10-06","enforcement_action_date":null,"summary":"","event_id":"f620a562-6083-437f-aa23-817f318ec181","severity_score":70},{"record_id":"b350d4e4-b229-4d09-95e7-1d64c5ed7866","source_event_group_id":"1354dec0-e92e-45e3-a859-f4c074d47412","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Beverly Hills Oncology Medical Group","state":"CA","individuals_affected":57655,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"","event_id":"1354dec0-e92e-45e3-a859-f4c074d47412","severity_score":70},{"record_id":"27b478bf-6bf1-492b-9819-c349c03ec109","source_event_group_id":"a9a6029b-1227-4e58-a045-f3d4bf0f30e0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Steven J. Pearlman MD PC","state":"NY","individuals_affected":11764,"breach_submission_date":"2025-11-09","enforcement_action_date":null,"summary":"","event_id":"a9a6029b-1227-4e58-a045-f3d4bf0f30e0","severity_score":70},{"record_id":"f5f5f305-2c07-4443-94cd-e3834dcaef72","source_event_group_id":"a28d022e-6ffb-4e8a-a4c2-9e23cfe982cb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"FPMCM LLC","state":"TN","individuals_affected":2072,"breach_submission_date":"2025-12-15","enforcement_action_date":null,"summary":"","event_id":"a28d022e-6ffb-4e8a-a4c2-9e23cfe982cb","severity_score":50},{"record_id":"127f3008-94e5-4c64-ae6b-1627c61e888d","source_event_group_id":"0257dbe7-782e-49c5-ad46-9e163da534d5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"York Hospital","state":"ME","individuals_affected":1259,"breach_submission_date":"2025-12-23","enforcement_action_date":null,"summary":"","event_id":"0257dbe7-782e-49c5-ad46-9e163da534d5","severity_score":50},{"record_id":"2d81bfed-7f4f-43ca-9739-d98cb124f5a1","source_event_group_id":"9cf28f31-560b-4424-995f-3a983f0219fc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Denton MHMR Center","state":"TX","individuals_affected":108967,"breach_submission_date":"2025-11-05","enforcement_action_date":null,"summary":"","event_id":"9cf28f31-560b-4424-995f-3a983f0219fc","severity_score":85},{"record_id":"3a1c1dd4-ed48-47b5-83dc-101503f925a9","source_event_group_id":"687ff2f1-e862-4ee9-9f3e-126b35bd2ec0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Greater St. Louis Oral & Maxillofacial Surgery PC","state":"MO","individuals_affected":501,"breach_submission_date":"2025-12-04","enforcement_action_date":null,"summary":"","event_id":"687ff2f1-e862-4ee9-9f3e-126b35bd2ec0","severity_score":30},{"record_id":"b4d58d21-b22a-41ce-b012-17b8de84f57a","source_event_group_id":"a56eb1a5-ca3c-4ce4-b6d7-df6d7a9b802e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Express Canna Cards, LLC","state":"FL","individuals_affected":5000,"breach_submission_date":"2025-10-20","enforcement_action_date":null,"summary":"","event_id":"a56eb1a5-ca3c-4ce4-b6d7-df6d7a9b802e","severity_score":50},{"record_id":"cb186c62-70e4-40c5-815f-c3f7c507ef2a","source_event_group_id":"26602666-ca73-4e1d-a0aa-c1eaf8a05e75","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nura PLLC","state":"MN","individuals_affected":5207,"breach_submission_date":"2025-11-21","enforcement_action_date":null,"summary":"","event_id":"26602666-ca73-4e1d-a0aa-c1eaf8a05e75","severity_score":50},{"record_id":"4f017289-d0ec-4222-a5b7-c2f7e103b8be","source_event_group_id":"db02aed9-e1cc-4989-904c-4b0bcd3927e5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Oregon Neurosurgical and Spine Associates, PC","state":"OR","individuals_affected":1000,"breach_submission_date":"2025-12-09","enforcement_action_date":null,"summary":"","event_id":"db02aed9-e1cc-4989-904c-4b0bcd3927e5","severity_score":30},{"record_id":"873cea73-91ac-4d0a-b247-413610703354","source_event_group_id":"da40e438-07de-4fb5-a5e6-4ccd2812a55d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"St. John’s Riverside Hospital","state":"NY","individuals_affected":2238,"breach_submission_date":"2025-11-14","enforcement_action_date":null,"summary":"","event_id":"da40e438-07de-4fb5-a5e6-4ccd2812a55d","severity_score":50},{"record_id":"9dc47a39-d8bb-40b4-877d-dba9ea4d436d","source_event_group_id":"be8b52c6-9976-4141-be45-77e7f7352c23","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sturgis Hospital","state":"MI","individuals_affected":77771,"breach_submission_date":"2025-09-18","enforcement_action_date":null,"summary":"","event_id":"be8b52c6-9976-4141-be45-77e7f7352c23","severity_score":70},{"record_id":"d470d40a-0751-49b3-a3e7-804f0cf457c6","source_event_group_id":"c894a6ff-f754-4edc-8660-8d73a4626b52","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Iowa Health Care","state":"IA","individuals_affected":101875,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"c894a6ff-f754-4edc-8660-8d73a4626b52","severity_score":85},{"record_id":"614e30d3-e488-4c48-9a4e-83747120efa3","source_event_group_id":"1e10cf68-a74f-4cb2-b5c3-59a4b981d050","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Retina Group of Florida","state":"FL","individuals_affected":152691,"breach_submission_date":"2025-09-03","enforcement_action_date":null,"summary":"","event_id":"1e10cf68-a74f-4cb2-b5c3-59a4b981d050","severity_score":85},{"record_id":"12e42c8c-c4fa-4b79-9bc7-e8d8cdba996d","source_event_group_id":"67139153-7a34-464b-ba3b-c717a47d183d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Center for Infectious Disease Associates","state":"TX","individuals_affected":1236,"breach_submission_date":"2025-09-10","enforcement_action_date":null,"summary":"","event_id":"67139153-7a34-464b-ba3b-c717a47d183d","severity_score":50},{"record_id":"becfe449-24e8-4f42-b42b-72cf2d19b4a2","source_event_group_id":"c0cd76b4-b18e-477d-80fb-f8ee9232d34a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hampton Regional Medical Center","state":"SC","individuals_affected":501,"breach_submission_date":"2025-09-12","enforcement_action_date":null,"summary":"","event_id":"c0cd76b4-b18e-477d-80fb-f8ee9232d34a","severity_score":30},{"record_id":"987b49d0-6785-414e-ad2d-5b8a0dc6f313","source_event_group_id":"cc63e85b-50f1-4fb4-9ad2-574f48e84a15","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Goshen Medical Center","state":"NC","individuals_affected":456385,"breach_submission_date":"2025-09-17","enforcement_action_date":null,"summary":"","event_id":"cc63e85b-50f1-4fb4-9ad2-574f48e84a15","severity_score":85},{"record_id":"85e6c8de-87c3-48aa-8fcf-dd57638036d2","source_event_group_id":"adc38a90-f9f2-47e8-b0f1-8f6cde6a9bb9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"People Encouraging People","state":"MD","individuals_affected":13083,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"","event_id":"adc38a90-f9f2-47e8-b0f1-8f6cde6a9bb9","severity_score":70},{"record_id":"5f46e617-f685-47d9-83d4-b7585efd4474","source_event_group_id":"0f4556e2-90dd-42a5-9b89-02c77f87c29a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Intercommunity Action Inc.","state":"PA","individuals_affected":2680,"breach_submission_date":"2025-09-26","enforcement_action_date":null,"summary":"","event_id":"0f4556e2-90dd-42a5-9b89-02c77f87c29a","severity_score":50},{"record_id":"64cd6e5e-959d-4f4c-b9ab-dd0307435f8c","source_event_group_id":"f7f0dda0-a6ac-4b46-b96b-1702171b5e6a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Carolina Department of Health and Human Services","state":"NC","individuals_affected":3437,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"f7f0dda0-a6ac-4b46-b96b-1702171b5e6a","severity_score":50},{"record_id":"b8fb2b64-a961-4a56-90c4-80033ef32fd2","source_event_group_id":"00a87e58-b664-4291-b1b3-ff072d65111f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sierra Vista Hospital & Clinics","state":"NM","individuals_affected":75054,"breach_submission_date":"2025-10-06","enforcement_action_date":null,"summary":"","event_id":"00a87e58-b664-4291-b1b3-ff072d65111f","severity_score":70},{"record_id":"1f0179bd-ed01-4c16-ad20-70079d7d43c4","source_event_group_id":"f7301274-0c1e-4988-b24b-c19224633768","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Atlantic States Carpenters Health Benefits Fund","state":"MA","individuals_affected":501,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"f7301274-0c1e-4988-b24b-c19224633768","severity_score":30},{"record_id":"f96ee897-77e0-4269-a0b8-eeef2ea85733","source_event_group_id":"48e9b706-993b-4f0c-9dfb-e83e677a9d19","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Legacy Health, LLC","state":"TX","individuals_affected":6547,"breach_submission_date":"2025-10-23","enforcement_action_date":null,"summary":"","event_id":"48e9b706-993b-4f0c-9dfb-e83e677a9d19","severity_score":50},{"record_id":"9290b6df-d562-4a12-aae6-57eb59882eff","source_event_group_id":"e687abd3-cffb-47d0-b215-0c376a7378aa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Physicians to Children & Adolescents","state":"KY","individuals_affected":9536,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"e687abd3-cffb-47d0-b215-0c376a7378aa","severity_score":50},{"record_id":"e161cfa6-1b4b-4b69-9248-604c5920d2e7","source_event_group_id":"c894a6ff-f754-4edc-8660-8d73a4626b52","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Iowa Community Home Care","state":"IA","individuals_affected":109029,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"c894a6ff-f754-4edc-8660-8d73a4626b52","severity_score":85},{"record_id":"d263c2d9-116b-4fa7-b166-0fe9e2450d0f","source_event_group_id":"74535add-aee4-4280-9107-e2aca97df3a1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Twin Cities Pain Clinic","state":"MN","individuals_affected":3572,"breach_submission_date":"2025-09-04","enforcement_action_date":null,"summary":"","event_id":"74535add-aee4-4280-9107-e2aca97df3a1","severity_score":50},{"record_id":"a557928f-d075-46dc-8453-ebda495fadb6","source_event_group_id":"0402bd71-21f9-449d-9b50-18428755663b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PGA Development, Inc.","state":"PA","individuals_affected":23899,"breach_submission_date":"2025-09-10","enforcement_action_date":null,"summary":"","event_id":"0402bd71-21f9-449d-9b50-18428755663b","severity_score":70},{"record_id":"01b7d2e8-1b78-41da-a9b5-c96101d7c2c7","source_event_group_id":"691d5121-017d-4c0a-8d94-d23ce568be9c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cookeville Regional Medical Center","state":"TN","individuals_affected":500,"breach_submission_date":"2025-09-12","enforcement_action_date":null,"summary":"","event_id":"691d5121-017d-4c0a-8d94-d23ce568be9c","severity_score":30},{"record_id":"f1b2f50f-e97f-48be-98ff-4c811f638592","source_event_group_id":"be8b52c6-9976-4141-be45-77e7f7352c23","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sturgis Hospital","state":"MI","individuals_affected":77771,"breach_submission_date":"2025-09-18","enforcement_action_date":null,"summary":"","event_id":"be8b52c6-9976-4141-be45-77e7f7352c23","severity_score":70},{"record_id":"1d8f8a40-f3a8-4c1f-b724-866e024aca73","source_event_group_id":"2ea43a03-dc05-4c85-a191-e9801b54f710","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UNC Hospitals","state":"NC","individuals_affected":6377,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"","event_id":"2ea43a03-dc05-4c85-a191-e9801b54f710","severity_score":50},{"record_id":"120afd1d-38f2-4bd7-8235-a1c0474575fc","source_event_group_id":"2a382d3a-26c8-4b3d-84e3-eb69bdd46c5f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gainwell Technologies LLC","state":"TX","individuals_affected":912,"breach_submission_date":"2025-09-26","enforcement_action_date":null,"summary":"","event_id":"2a382d3a-26c8-4b3d-84e3-eb69bdd46c5f","severity_score":30},{"record_id":"d7eadbfc-4f30-402a-b6b0-5f97ad8ec221","source_event_group_id":"ed26f323-f14b-48b9-8395-e6ff982a303d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Innovative Physical Therapy","state":"IL","individuals_affected":2023,"breach_submission_date":"2025-10-02","enforcement_action_date":null,"summary":"","event_id":"ed26f323-f14b-48b9-8395-e6ff982a303d","severity_score":50},{"record_id":"78c0a3c4-f419-48ab-a2eb-cb8d59017129","source_event_group_id":"9704f6a8-f773-4399-9417-533956efa5f8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Conduent Business Services LLC","state":"NJ","individuals_affected":42616,"breach_submission_date":"2025-10-08","enforcement_action_date":null,"summary":"","event_id":"9704f6a8-f773-4399-9417-533956efa5f8","severity_score":70},{"record_id":"86afee08-b613-4a4c-b49e-87d60f2dc6d1","source_event_group_id":"1cae4a6f-1a57-423d-ba16-aa43a50849e1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sapphire Community Health","state":"MT","individuals_affected":5617,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"1cae4a6f-1a57-423d-ba16-aa43a50849e1","severity_score":50},{"record_id":"31e952c3-8009-440b-beb8-ebc0c1d1f784","source_event_group_id":"6e252a05-bf66-4a66-a130-6fa3099e4ae0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Michael R. Schwartz, MD Inc.","state":"CA","individuals_affected":9080,"breach_submission_date":"2025-10-23","enforcement_action_date":null,"summary":"","event_id":"6e252a05-bf66-4a66-a130-6fa3099e4ae0","severity_score":50},{"record_id":"c2908699-8104-4686-b419-3bbc00afa62b","source_event_group_id":"f2ed1e2d-3d94-4d6f-8b17-262f7c5a7ce8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VirMedice, LLC","state":"AZ","individuals_affected":1000,"breach_submission_date":"2025-10-25","enforcement_action_date":null,"summary":"","event_id":"f2ed1e2d-3d94-4d6f-8b17-262f7c5a7ce8","severity_score":30},{"record_id":"dd5ca3db-74e6-4f0f-b221-7c4b2e40411b","source_event_group_id":"68ce3d28-0db1-45ce-a037-b38332566f01","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carrollton Ear, Nose and Throat, PC","state":"GA","individuals_affected":3569,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"68ce3d28-0db1-45ce-a037-b38332566f01","severity_score":50},{"record_id":"ba3afbea-a22e-4b13-999e-0d1ee087384f","source_event_group_id":"fdf49864-d318-4806-96f5-d3564f0ac8b1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"La Perouse, LLC","state":"NV","individuals_affected":501,"breach_submission_date":"2025-09-02","enforcement_action_date":null,"summary":"","event_id":"fdf49864-d318-4806-96f5-d3564f0ac8b1","severity_score":30},{"record_id":"2fc2ee1e-4f1a-4bd1-9968-dcfcb5dc0634","source_event_group_id":"7b6bffb1-1353-4e6c-8de6-f6c582fc0f2d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Somerset County Children and Youth Services","state":"PA","individuals_affected":2251,"breach_submission_date":"2025-09-05","enforcement_action_date":null,"summary":"","event_id":"7b6bffb1-1353-4e6c-8de6-f6c582fc0f2d","severity_score":50},{"record_id":"0e13e491-8988-426e-a022-14cc076d52a6","source_event_group_id":"93272b5f-8d00-4378-8d27-22f151ea96c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Franklin Dermatology Group, PLC","state":"TN","individuals_affected":2457,"breach_submission_date":"2025-09-11","enforcement_action_date":null,"summary":"","event_id":"93272b5f-8d00-4378-8d27-22f151ea96c4","severity_score":50},{"record_id":"df94e21c-db4f-43f2-9c15-62d9c19fbae4","source_event_group_id":"249af074-73d7-4c8a-9c2b-12db26d6d4e1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Munson Healthcare","state":"MI","individuals_affected":1186,"breach_submission_date":"2025-09-17","enforcement_action_date":null,"summary":"","event_id":"249af074-73d7-4c8a-9c2b-12db26d6d4e1","severity_score":50},{"record_id":"d5e9f1c5-f841-4878-93e2-2b5d64f99edd","source_event_group_id":"19190a2d-fe0e-4c4f-bd5a-cdaf9c71e336","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health & Palliative Services of the Treasure Coast, Inc d/b/a Treasure Coast Hospice  (“Treasure Health ”)","state":"FL","individuals_affected":13234,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"","event_id":"19190a2d-fe0e-4c4f-bd5a-cdaf9c71e336","severity_score":70},{"record_id":"eda3bf81-4c7a-41d5-b98a-4785cd55c11e","source_event_group_id":"40fa4e69-9f57-44a3-add9-b7bb857db27e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Healthcare Interactive","state":"MD","individuals_affected":501,"breach_submission_date":"2025-09-22","enforcement_action_date":null,"summary":"","event_id":"40fa4e69-9f57-44a3-add9-b7bb857db27e","severity_score":30},{"record_id":"879a9af8-6eed-4eae-9eb9-3ca35f32242b","source_event_group_id":"6205a8af-58e7-4a1a-a24d-9c366f35be10","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Susan B. Allen Memorial Hospital","state":"KS","individuals_affected":12097,"breach_submission_date":"2025-09-25","enforcement_action_date":null,"summary":"","event_id":"6205a8af-58e7-4a1a-a24d-9c366f35be10","severity_score":70},{"record_id":"579532fd-22d9-4f40-a4f9-1152601a6f89","source_event_group_id":"8c84de97-6faf-48df-8864-fc23126849e0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Superior Vision Services, Inc.","state":"NY","individuals_affected":25341,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"8c84de97-6faf-48df-8864-fc23126849e0","severity_score":70},{"record_id":"91565db7-8687-4784-82da-cbacdaa68ef9","source_event_group_id":"538a053f-50f2-4d69-ace9-1d049270e282","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Harris County Hospital District d/b/a Harris Health","state":"TX","individuals_affected":5357,"breach_submission_date":"2025-10-03","enforcement_action_date":null,"summary":"","event_id":"538a053f-50f2-4d69-ace9-1d049270e282","severity_score":50},{"record_id":"eb4fac0d-6473-4e50-81e7-184729f364a2","source_event_group_id":"8f4ed0d8-4e12-4344-a67d-ba74c2ed8690","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McElroy & Associates, Inc.","state":"OK","individuals_affected":6633,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"8f4ed0d8-4e12-4344-a67d-ba74c2ed8690","severity_score":50},{"record_id":"f4feaad5-f350-4c44-8636-bceb0ea7872a","source_event_group_id":"8fb58dcd-da82-4a41-b651-a23a8fae952e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"George E. Weems Memorial Hospital","state":"FL","individuals_affected":2607,"breach_submission_date":"2025-10-20","enforcement_action_date":null,"summary":"","event_id":"8fb58dcd-da82-4a41-b651-a23a8fae952e","severity_score":50},{"record_id":"881d3511-4418-4c2b-909e-52f94eb9aaa4","source_event_group_id":"da1fd246-ff3c-4a9f-8aa5-a4ded248d32f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southwest Urology","state":"OH","individuals_affected":1310,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"da1fd246-ff3c-4a9f-8aa5-a4ded248d32f","severity_score":50},{"record_id":"4edb7d53-914d-4809-8451-f4f948b83baf","source_event_group_id":"be3b586f-5e71-4583-a51a-ef5deeba14ef","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tri Century Eye Care PC","state":"PA","individuals_affected":200000,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"","event_id":"be3b586f-5e71-4583-a51a-ef5deeba14ef","severity_score":85},{"record_id":"49c3e8b0-0fea-4443-a66c-703f7f9dc54f","source_event_group_id":"b62bff24-8d08-4360-a887-4c67bdd59533","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Meridian Valley Laboratories, Inc.","state":"WA","individuals_affected":501,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"b62bff24-8d08-4360-a887-4c67bdd59533","severity_score":30},{"record_id":"20ac3b6b-0bbd-4bfa-8de1-a2b333f12fda","source_event_group_id":"01b2e3f7-6b0b-4289-ba16-b34bddd9219d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Teamsters Union 25 Health Services & Insurance Plan","state":"MA","individuals_affected":19231,"breach_submission_date":"2025-09-03","enforcement_action_date":null,"summary":"","event_id":"01b2e3f7-6b0b-4289-ba16-b34bddd9219d","severity_score":70},{"record_id":"6769d21c-41f8-46da-9928-d51685e3e0db","source_event_group_id":"16049c64-e2e1-468b-a5d7-315312f78d5a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Coos County Family Health Services","state":"NH","individuals_affected":501,"breach_submission_date":"2025-09-05","enforcement_action_date":null,"summary":"","event_id":"16049c64-e2e1-468b-a5d7-315312f78d5a","severity_score":30},{"record_id":"68b3cad8-66a8-4189-8ed9-9ad36c24288e","source_event_group_id":"2718d9df-0144-45af-8575-4d250f9ecc86","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Roush Fenway Keselowski Racing, LLC","state":"NC","individuals_affected":2160,"breach_submission_date":"2025-09-12","enforcement_action_date":null,"summary":"","event_id":"2718d9df-0144-45af-8575-4d250f9ecc86","severity_score":50},{"record_id":"b5d66a89-a5bd-4e9c-80f7-adde72729d1d","source_event_group_id":"ec6f99b0-1a64-4687-90b2-c5accde6bdd8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trusteed Plan Services Corporation","state":"WA","individuals_affected":7977,"breach_submission_date":"2025-09-17","enforcement_action_date":null,"summary":"","event_id":"ec6f99b0-1a64-4687-90b2-c5accde6bdd8","severity_score":50},{"record_id":"a90fed3a-5e69-4ac0-956f-34f1948b453d","source_event_group_id":"aad26c86-cddb-4412-87dc-243d117a4e5b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The University of North Carolina at Chapel Hill - School of Medicine","state":"NC","individuals_affected":799,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"","event_id":"aad26c86-cddb-4412-87dc-243d117a4e5b","severity_score":30},{"record_id":"3b05a3d8-2605-491f-8e62-394ec71a2cf5","source_event_group_id":"fdf1ddfd-1fb9-45c5-aaed-b49ad6aa2417","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Doctors Imaging Group","state":"FL","individuals_affected":171862,"breach_submission_date":"2025-09-24","enforcement_action_date":null,"summary":"","event_id":"fdf1ddfd-1fb9-45c5-aaed-b49ad6aa2417","severity_score":85},{"record_id":"afff5f7d-6b19-495a-be3b-e35d8be55964","source_event_group_id":"120672fc-ae50-46a0-9e8f-1d9ebd08dcd4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rockhill Women’s Care","state":"MO","individuals_affected":70129,"breach_submission_date":"2025-09-25","enforcement_action_date":null,"summary":"","event_id":"120672fc-ae50-46a0-9e8f-1d9ebd08dcd4","severity_score":70},{"record_id":"9ae47781-c337-46ba-a759-2d50b0417b8b","source_event_group_id":"36017cd3-9d6d-479b-a61f-de9062f598c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Belkorp Ag, LLC","state":"CA","individuals_affected":942,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"36017cd3-9d6d-479b-a61f-de9062f598c4","severity_score":30},{"record_id":"aabc0797-5a9f-4c04-a237-feb17e96c78d","source_event_group_id":"afae5946-6121-4474-be3a-178eb3d490b3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arizona Health Care Cost Containment System- State Medicaid Agency","state":"AZ","individuals_affected":3177,"breach_submission_date":"2025-10-03","enforcement_action_date":null,"summary":"","event_id":"afae5946-6121-4474-be3a-178eb3d490b3","severity_score":50},{"record_id":"bb110897-03b1-4ae9-9b9f-74d5368b90fa","source_event_group_id":"7568519b-1b5e-4fbb-b205-8071d3bb527f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Jersey Medical Center","state":"NJ","individuals_affected":88000,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"7568519b-1b5e-4fbb-b205-8071d3bb527f","severity_score":70},{"record_id":"17505651-3a54-4395-b3b1-3fd4a20cbd18","source_event_group_id":"f7615bbd-1372-4af3-b535-4cb60508267c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sedgebrook OpCo SL VII LLC","state":"IL","individuals_affected":7382,"breach_submission_date":"2025-10-23","enforcement_action_date":null,"summary":"","event_id":"f7615bbd-1372-4af3-b535-4cb60508267c","severity_score":50},{"record_id":"d3844362-fc76-4185-bc47-b394ed68f834","source_event_group_id":"65433c44-56fa-4b18-b4a2-1868daae613f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Saint Mary’s Home of Erie","state":"PA","individuals_affected":501,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"65433c44-56fa-4b18-b4a2-1868daae613f","severity_score":30},{"record_id":"0a25cbeb-2648-44ec-bd76-e8f8df5c24b8","source_event_group_id":"909fcb12-4510-425b-9600-06c26cc316a3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Synergy Advanced Healthcare LLC","state":"CT","individuals_affected":1260,"breach_submission_date":"2025-11-04","enforcement_action_date":null,"summary":"","event_id":"909fcb12-4510-425b-9600-06c26cc316a3","severity_score":50},{"record_id":"7271df57-8798-411b-b477-bad081f681e8","source_event_group_id":"a9b0dec3-2417-45ae-b8c5-45e277e3edc3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Adapt Integrated Health Care","state":"OR","individuals_affected":2908,"breach_submission_date":"2026-02-09","enforcement_action_date":null,"summary":"","event_id":"a9b0dec3-2417-45ae-b8c5-45e277e3edc3","severity_score":50},{"record_id":"c67e6b8d-f752-4f8a-8b54-fe507b9c4bf3","source_event_group_id":"6cf89ee9-e7c4-4d0a-a4c1-aebacb1fadbb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Reimagine Network","state":"CA","individuals_affected":4799,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"6cf89ee9-e7c4-4d0a-a4c1-aebacb1fadbb","severity_score":50},{"record_id":"01a584cc-847a-4e69-b3bf-81df7e21f408","source_event_group_id":"4d565970-9386-463a-a05b-f6a2aafd55cc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Oaks Health System","state":"LA","individuals_affected":6243,"breach_submission_date":"2025-09-02","enforcement_action_date":null,"summary":"","event_id":"4d565970-9386-463a-a05b-f6a2aafd55cc","severity_score":50},{"record_id":"7720b35b-cd2f-4b47-9782-61d2fbe80d68","source_event_group_id":"1641cfdf-1ea9-4603-b2d1-f10c090d314e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medical Associates of Brevard, LLC","state":"FL","individuals_affected":246711,"breach_submission_date":"2025-09-05","enforcement_action_date":null,"summary":"","event_id":"1641cfdf-1ea9-4603-b2d1-f10c090d314e","severity_score":85},{"record_id":"b0fadd71-cac9-441f-8d70-98bb983ccddc","source_event_group_id":"5b41f50a-1199-4c4c-9ec6-8750023adc5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Western Skies Wellness LLC","state":"OR","individuals_affected":1700,"breach_submission_date":"2025-09-11","enforcement_action_date":null,"summary":"","event_id":"5b41f50a-1199-4c4c-9ec6-8750023adc5e","severity_score":50},{"record_id":"0f109868-968d-4d86-aca0-8c1213b3d897","source_event_group_id":"673c16aa-5666-4f87-84cc-cae29a183789","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Saint Anthony Hospital","state":"IL","individuals_affected":6679,"breach_submission_date":"2025-09-12","enforcement_action_date":null,"summary":"","event_id":"673c16aa-5666-4f87-84cc-cae29a183789","severity_score":50},{"record_id":"77d8e78d-a078-48bb-b0b7-1149baf50700","source_event_group_id":"7cbc98f8-4e2a-4db6-9506-e4cda5b9185a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sun Valley Surgery Center","state":"NV","individuals_affected":27001,"breach_submission_date":"2025-09-18","enforcement_action_date":null,"summary":"","event_id":"7cbc98f8-4e2a-4db6-9506-e4cda5b9185a","severity_score":70},{"record_id":"98fa4ad9-4617-456e-9aad-44f484409c25","source_event_group_id":"76b9f594-2f65-449f-bd02-05b128eb2291","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of St. Joseph, MO Health Department","state":"MO","individuals_affected":11538,"breach_submission_date":"2025-09-22","enforcement_action_date":null,"summary":"","event_id":"76b9f594-2f65-449f-bd02-05b128eb2291","severity_score":70},{"record_id":"71a66a95-2dda-49b1-ab8b-2dc591c7e340","source_event_group_id":"d798d997-90a6-4bed-9063-f85a55086f38","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Thomas Davies, DPM","state":"NY","individuals_affected":14581,"breach_submission_date":"2025-09-29","enforcement_action_date":null,"summary":"","event_id":"d798d997-90a6-4bed-9063-f85a55086f38","severity_score":70},{"record_id":"d822cd9b-d60f-47d2-9e02-2757c7ac6060","source_event_group_id":"7c6d5160-1d4f-4aad-af2a-ab534a97ca76","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Revere Health, PC","state":"UT","individuals_affected":10800,"breach_submission_date":"2025-10-02","enforcement_action_date":null,"summary":"","event_id":"7c6d5160-1d4f-4aad-af2a-ab534a97ca76","severity_score":70},{"record_id":"8c34436e-eff1-4aa8-8c4b-9a4d60ba9a52","source_event_group_id":"0eed927c-758b-482c-bbb7-e21137f27e10","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Houston Methodist Specialty Physician Group","state":"TX","individuals_affected":2329,"breach_submission_date":"2025-10-10","enforcement_action_date":null,"summary":"","event_id":"0eed927c-758b-482c-bbb7-e21137f27e10","severity_score":50},{"record_id":"5a2a9d21-5345-4643-9cc8-010668bda654","source_event_group_id":"ea82982e-0245-4c9b-9370-f33b907e2f27","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heartland Health Center","state":"NE","individuals_affected":43728,"breach_submission_date":"2025-10-17","enforcement_action_date":null,"summary":"","event_id":"ea82982e-0245-4c9b-9370-f33b907e2f27","severity_score":70},{"record_id":"3b136168-e46b-464c-8dd1-2336333d4674","source_event_group_id":"cadaf600-1c3a-41b4-8a10-3b5379d7cd6e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fairbanks Urology","state":"AK","individuals_affected":1446,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"cadaf600-1c3a-41b4-8a10-3b5379d7cd6e","severity_score":50},{"record_id":"5f49ccae-01cc-4918-baf6-3017bd33e4cb","source_event_group_id":"a6c9f28d-c0b4-443d-8679-0c6b743dac80","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"REACH, Inc","state":"AK","individuals_affected":1195,"breach_submission_date":"2025-10-27","enforcement_action_date":null,"summary":"","event_id":"a6c9f28d-c0b4-443d-8679-0c6b743dac80","severity_score":50},{"record_id":"668e7268-01db-4373-a08c-60f9a281a565","source_event_group_id":"60d6e700-daaa-4970-a93a-561ff2858488","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Loving and Living Center, PC dba Awakenings Center","state":"NC","individuals_affected":17800,"breach_submission_date":"2025-11-07","enforcement_action_date":null,"summary":"","event_id":"60d6e700-daaa-4970-a93a-561ff2858488","severity_score":70},{"record_id":"4a7a409f-39e7-4d48-bda4-a4b78fe09580","source_event_group_id":"0cc1de68-d030-4641-8701-f344dba1853c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chase Affiliated Companies","state":"NM","individuals_affected":2165,"breach_submission_date":"2025-11-06","enforcement_action_date":null,"summary":"","event_id":"0cc1de68-d030-4641-8701-f344dba1853c","severity_score":50},{"record_id":"6f077bdd-7557-400e-8f1d-d8f429e4e39e","source_event_group_id":"36f72109-35de-4de3-ae22-92b543cdea2a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marshfield Clinic Health System","state":"WI","individuals_affected":35952,"breach_submission_date":"2025-11-07","enforcement_action_date":null,"summary":"","event_id":"36f72109-35de-4de3-ae22-92b543cdea2a","severity_score":70},{"record_id":"355bfc26-f029-46ec-8209-cff3989ededc","source_event_group_id":"c47844e2-079f-4b30-b2e3-2de2292b94d9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Healthcare Therapy Services, Inc.","state":"IN","individuals_affected":15027,"breach_submission_date":"2025-11-08","enforcement_action_date":null,"summary":"","event_id":"c47844e2-079f-4b30-b2e3-2de2292b94d9","severity_score":70},{"record_id":"26fcb8dc-a489-4624-9188-dcb87583974c","source_event_group_id":"4dd5557e-ac40-48b7-a64f-7a9f426228ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Morton Drug Company","state":"WI","individuals_affected":40051,"breach_submission_date":"2025-11-10","enforcement_action_date":null,"summary":"","event_id":"4dd5557e-ac40-48b7-a64f-7a9f426228ee","severity_score":70},{"record_id":"aa656e35-04a2-42b3-863d-9db8a8872644","source_event_group_id":"0186cce0-8f6b-493b-9b07-37a03e8b5557","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"West Suburban Eye Surgery Center LLC","state":"MA","individuals_affected":500,"breach_submission_date":"2025-11-11","enforcement_action_date":null,"summary":"","event_id":"0186cce0-8f6b-493b-9b07-37a03e8b5557","severity_score":30},{"record_id":"5643fa3b-7a23-45bf-9c73-2f224d241062","source_event_group_id":"369a325e-ac97-4fcf-be74-2fdeeed844d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wisconsin Department of Corrections","state":"WI","individuals_affected":1723,"breach_submission_date":"2025-11-12","enforcement_action_date":null,"summary":"","event_id":"369a325e-ac97-4fcf-be74-2fdeeed844d3","severity_score":50},{"record_id":"ee20e78d-e6e2-493f-9444-b751ccefcf34","source_event_group_id":"43dcc85f-b97f-41f2-9079-ae78938d8087","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Adventist HealthCare","state":"MD","individuals_affected":1300,"breach_submission_date":"2025-11-13","enforcement_action_date":null,"summary":"","event_id":"43dcc85f-b97f-41f2-9079-ae78938d8087","severity_score":50},{"record_id":"d308acba-bdf6-4bb1-b3cb-310f2895f0d5","source_event_group_id":"d01da27f-de31-464d-a2ed-00e559d695f2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Optum Financial Services","state":"MN","individuals_affected":2124,"breach_submission_date":"2025-11-13","enforcement_action_date":null,"summary":"","event_id":"d01da27f-de31-464d-a2ed-00e559d695f2","severity_score":50},{"record_id":"4e19f136-e4b0-44de-b462-f3f6e4c0295f","source_event_group_id":"350aef60-c381-4578-955e-9b2c83a75b43","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Personic Management Company LLC","state":"VA","individuals_affected":10929,"breach_submission_date":"2025-11-19","enforcement_action_date":null,"summary":"","event_id":"350aef60-c381-4578-955e-9b2c83a75b43","severity_score":70},{"record_id":"537dba9b-b84b-46fa-8136-e115911a7e2e","source_event_group_id":"ecafa2e6-5003-4381-a83e-2a5155125643","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fieldtex Products, Inc.","state":"NY","individuals_affected":238615,"breach_submission_date":"2025-11-20","enforcement_action_date":null,"summary":"","event_id":"ecafa2e6-5003-4381-a83e-2a5155125643","severity_score":85},{"record_id":"7fba140e-ad5f-4dbc-b3f3-248029cc2284","source_event_group_id":"f9a540b9-7676-4192-9c77-4e72c0e1c184","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Delta Dental of Virginia","state":"VA","individuals_affected":126953,"breach_submission_date":"2025-11-21","enforcement_action_date":null,"summary":"","event_id":"f9a540b9-7676-4192-9c77-4e72c0e1c184","severity_score":85},{"record_id":"294185a1-2ad2-47e0-87fd-1fe7d144137f","source_event_group_id":"d659fff3-8476-421e-9a75-4616d61da0e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NS Support, LLC","state":"ID","individuals_affected":92845,"breach_submission_date":"2025-11-21","enforcement_action_date":null,"summary":"","event_id":"d659fff3-8476-421e-9a75-4616d61da0e9","severity_score":70},{"record_id":"e713617a-bc97-4d98-b470-f06fc305130b","source_event_group_id":"fd56af67-4a3e-4a77-8b2f-9fd42dd050b0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Millcreek Pediatrics","state":"DE","individuals_affected":14095,"breach_submission_date":"2025-11-21","enforcement_action_date":null,"summary":"","event_id":"fd56af67-4a3e-4a77-8b2f-9fd42dd050b0","severity_score":70},{"record_id":"6894847a-179d-479a-ab6a-bec66d6b147f","source_event_group_id":"2529222a-1bda-40a8-93b9-cb37c9d88ca1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SomnoSleep Consultants, LLC","state":"VA","individuals_affected":913,"breach_submission_date":"2025-11-24","enforcement_action_date":null,"summary":"","event_id":"2529222a-1bda-40a8-93b9-cb37c9d88ca1","severity_score":30},{"record_id":"1260831a-d4ff-4b8f-80e7-7d9583ade3d7","source_event_group_id":"8b080c53-2fca-4fba-a584-fc240413ba39","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VITAS Hospice Services, LLC","state":"FL","individuals_affected":319177,"breach_submission_date":"2025-11-24","enforcement_action_date":null,"summary":"","event_id":"8b080c53-2fca-4fba-a584-fc240413ba39","severity_score":85},{"record_id":"931d9ffc-5281-48c1-852a-7217d997d87e","source_event_group_id":"bf0165c1-a74f-4523-8063-4f2ee8d303ba","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Davies, McFarland & Carroll LLC","state":"PA","individuals_affected":54712,"breach_submission_date":"2025-11-24","enforcement_action_date":null,"summary":"","event_id":"bf0165c1-a74f-4523-8063-4f2ee8d303ba","severity_score":70},{"record_id":"44bad837-a89b-4e58-8195-8dd4130de448","source_event_group_id":"4ebd663f-7608-49ae-93b7-4abbb02b3626","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Center for Urologic Care of Berks CO","state":"PA","individuals_affected":543,"breach_submission_date":"2025-11-26","enforcement_action_date":null,"summary":"","event_id":"4ebd663f-7608-49ae-93b7-4abbb02b3626","severity_score":30},{"record_id":"9a9c41a3-cab4-478c-abf7-fbc66c899076","source_event_group_id":"1d685072-8ede-4e51-ba7e-1caf11cf9a11","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Keystone Alliance, Inc.","state":"IL","individuals_affected":1021,"breach_submission_date":"2025-11-26","enforcement_action_date":null,"summary":"","event_id":"1d685072-8ede-4e51-ba7e-1caf11cf9a11","severity_score":50},{"record_id":"0fa9edb9-8863-4e63-8c4e-87a4cfa7b79d","source_event_group_id":"b199d3f5-099d-4d4e-b954-f80a4e9e91d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Persante Health Care","state":"NJ","individuals_affected":111815,"breach_submission_date":"2025-11-26","enforcement_action_date":null,"summary":"","event_id":"b199d3f5-099d-4d4e-b954-f80a4e9e91d2","severity_score":85},{"record_id":"c89a1bcc-baab-405c-98d1-8b9965d42726","source_event_group_id":"e10d66b6-f7ec-4203-ab53-24f0a3bac9eb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Henry Ford Health","state":"MI","individuals_affected":1984,"breach_submission_date":"2025-11-26","enforcement_action_date":null,"summary":"","event_id":"e10d66b6-f7ec-4203-ab53-24f0a3bac9eb","severity_score":50},{"record_id":"ac2ae633-ed1f-47a9-9bb8-38c2784c7ec3","source_event_group_id":"76c367af-1624-4b7c-bc40-7ad5203f28df","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Richmond Behavioral Health Authority","state":"VA","individuals_affected":113232,"breach_submission_date":"2025-11-28","enforcement_action_date":null,"summary":"","event_id":"76c367af-1624-4b7c-bc40-7ad5203f28df","severity_score":85},{"record_id":"207617d0-16e0-483d-af8c-6f5535febe0b","source_event_group_id":"a4b01e7e-8861-4076-890b-f0f8b9768b6c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sports Medicine & Orthopaedics","state":"RI","individuals_affected":4000,"breach_submission_date":"2025-11-30","enforcement_action_date":null,"summary":"","event_id":"a4b01e7e-8861-4076-890b-f0f8b9768b6c","severity_score":50},{"record_id":"57c3f027-e6c1-458f-ba0f-1f40f912814e","source_event_group_id":"7cc14ca0-e331-42ba-a29f-a38b6ece9e5f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"FedEx Corporation Group Health Plan","state":"TN","individuals_affected":1066,"breach_submission_date":"2025-12-01","enforcement_action_date":null,"summary":"","event_id":"7cc14ca0-e331-42ba-a29f-a38b6ece9e5f","severity_score":50},{"record_id":"404ba481-1a92-4a4b-abe7-976f0e03796a","source_event_group_id":"21225239-4e35-4aeb-8524-e78dad4d6ed7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Madison Healthcare Services","state":"MN","individuals_affected":500,"breach_submission_date":"2025-12-02","enforcement_action_date":null,"summary":"","event_id":"21225239-4e35-4aeb-8524-e78dad4d6ed7","severity_score":30},{"record_id":"cb665b63-2b7d-4e1a-9b21-508a4dd0fd7f","source_event_group_id":"ecafa2e6-5003-4381-a83e-2a5155125643","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fieldtex Products, Inc.","state":"NY","individuals_affected":5901,"breach_submission_date":"2025-12-03","enforcement_action_date":null,"summary":"","event_id":"ecafa2e6-5003-4381-a83e-2a5155125643","severity_score":50},{"record_id":"f0d90cbe-cf91-472a-b335-a202ff94194f","source_event_group_id":"ac9b6c86-0671-45b7-8ef8-a6b125765b4f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health First Health Plans","state":"FL","individuals_affected":1036,"breach_submission_date":"2025-12-05","enforcement_action_date":null,"summary":"","event_id":"ac9b6c86-0671-45b7-8ef8-a6b125765b4f","severity_score":50},{"record_id":"1a933dc7-dc42-404a-a722-2ead303cccf3","source_event_group_id":"f994dd50-ff43-4a67-9062-452d7199c23f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NCH Corporation Employee Benefits Plan","state":"TX","individuals_affected":3098,"breach_submission_date":"2025-12-05","enforcement_action_date":null,"summary":"","event_id":"f994dd50-ff43-4a67-9062-452d7199c23f","severity_score":50},{"record_id":"65a6d412-7cf7-4a92-9ac0-3f0ffc48b74d","source_event_group_id":"5f94ebc4-2914-4b77-ad9a-bb5a71b28465","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ochsner LSU Health – Regional Urology","state":"LA","individuals_affected":4519,"breach_submission_date":"2025-12-09","enforcement_action_date":null,"summary":"","event_id":"5f94ebc4-2914-4b77-ad9a-bb5a71b28465","severity_score":50},{"record_id":"251ccc67-557e-4558-a5d6-8a234308e52d","source_event_group_id":"2108b329-e1f0-4158-987d-32f3c0d20d1c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heart of Texas Behavioral Health Network","state":"TX","individuals_affected":1309,"breach_submission_date":"2025-12-10","enforcement_action_date":null,"summary":"","event_id":"2108b329-e1f0-4158-987d-32f3c0d20d1c","severity_score":50},{"record_id":"d68ddfee-00b7-4cbf-998e-3bf0529c6ccd","source_event_group_id":"cecfa839-6077-4e58-b5ef-73afe2d9fa2d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OCAT, LLC dba Evoke Wellness at Hilliard","state":"OH","individuals_affected":1629,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"cecfa839-6077-4e58-b5ef-73afe2d9fa2d","severity_score":50},{"record_id":"946257cc-e9a7-4cb7-bb18-0b9f2c35a75e","source_event_group_id":"d5e1c1a4-fa74-45cb-b511-2527428901e5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cedar Valley Services","state":"MN","individuals_affected":501,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"d5e1c1a4-fa74-45cb-b511-2527428901e5","severity_score":30},{"record_id":"5ce7f8f2-68be-481e-9083-619092b3a21a","source_event_group_id":"0c75c2fb-1a3c-43a3-b271-e481e906c5e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AHS Management Company, Inc.","state":"TN","individuals_affected":23686,"breach_submission_date":"2024-01-22","enforcement_action_date":null,"summary":"","event_id":"0c75c2fb-1a3c-43a3-b271-e481e906c5e4","severity_score":70},{"record_id":"4e6b6806-748e-49e7-9768-77ae2f9f9c75","source_event_group_id":"10f36e34-d693-4237-a910-ea27490febc9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"INTEGRIS Health","state":"OK","individuals_affected":2385646,"breach_submission_date":"2024-01-26","enforcement_action_date":null,"summary":"","event_id":"10f36e34-d693-4237-a910-ea27490febc9","severity_score":95},{"record_id":"c7dd2be5-4f65-4323-9372-aeb9f8b27216","source_event_group_id":"251995b3-2cc2-4d6c-824a-732df1e59057","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CNO ACE","state":"IN","individuals_affected":65295,"breach_submission_date":"2024-01-26","enforcement_action_date":null,"summary":"","event_id":"251995b3-2cc2-4d6c-824a-732df1e59057","severity_score":70},{"record_id":"6182347a-d5f6-4b2b-b389-ea5e990abb1e","source_event_group_id":"8c2dda5b-b220-48c9-81c2-bac7862a0295","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bloom Health Centers","state":"MD","individuals_affected":1954,"breach_submission_date":"2024-02-01","enforcement_action_date":null,"summary":"","event_id":"8c2dda5b-b220-48c9-81c2-bac7862a0295","severity_score":50},{"record_id":"0afbfe6b-1577-4ce9-b3e7-3b3c296d82c3","source_event_group_id":"6cd65a65-e9fd-4cea-8e01-57629a864668","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bradford Health Services, LLC","state":"AL","individuals_affected":28543,"breach_submission_date":"2024-02-06","enforcement_action_date":null,"summary":"","event_id":"6cd65a65-e9fd-4cea-8e01-57629a864668","severity_score":70},{"record_id":"037d38e2-81b3-4ec0-a169-66397035be75","source_event_group_id":"9d4d6ed5-4fab-4654-99d2-06cdcf422259","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lexington Health, Inc.","state":"SC","individuals_affected":1994,"breach_submission_date":"2024-02-12","enforcement_action_date":null,"summary":"","event_id":"9d4d6ed5-4fab-4654-99d2-06cdcf422259","severity_score":50},{"record_id":"26364378-1cfb-4533-85cb-edbcf0c71b5e","source_event_group_id":"a8ad478c-dfcf-4116-b607-e94d984381b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Biomatrix Specialty Pharmacy, LLC","state":"FL","individuals_affected":3640,"breach_submission_date":"2024-02-13","enforcement_action_date":null,"summary":"","event_id":"a8ad478c-dfcf-4116-b607-e94d984381b8","severity_score":50},{"record_id":"38bccf1c-e212-42f9-904b-fa1c7b8eda19","source_event_group_id":"4d80835c-2e60-40a1-b5f2-631d6a832213","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lena Pope Home Inc.","state":"TX","individuals_affected":3954,"breach_submission_date":"2024-02-15","enforcement_action_date":null,"summary":"","event_id":"4d80835c-2e60-40a1-b5f2-631d6a832213","severity_score":50},{"record_id":"7e036a71-0468-4ad7-8f81-ccc793430279","source_event_group_id":"3d8d67ca-d788-4495-919c-c7dfa3ec9cb6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Amin Radiology d/b/a Citrus Diagnostic Center","state":"FL","individuals_affected":1273,"breach_submission_date":"2024-02-15","enforcement_action_date":null,"summary":"","event_id":"3d8d67ca-d788-4495-919c-c7dfa3ec9cb6","severity_score":50},{"record_id":"06a104e4-12ba-4a09-b317-a71c448faa3a","source_event_group_id":"75c2930c-84e5-43f5-b7d0-768564c64935","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mental Health Center of North Central Alabama, Inc.","state":"AL","individuals_affected":75667,"breach_submission_date":"2024-02-16","enforcement_action_date":null,"summary":"","event_id":"75c2930c-84e5-43f5-b7d0-768564c64935","severity_score":70},{"record_id":"0d07097d-bbc4-476a-8063-6c73c7ed6406","source_event_group_id":"58f3f41c-71d8-47fe-b52f-0fd8d640884d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hospice of Huntington","state":"WV","individuals_affected":9013,"breach_submission_date":"2024-02-16","enforcement_action_date":null,"summary":"","event_id":"58f3f41c-71d8-47fe-b52f-0fd8d640884d","severity_score":50},{"record_id":"a9b86aee-cb5d-4b55-874f-d0eef58bd43f","source_event_group_id":"bae2dff3-3e80-4b71-bd7e-ce3507877132","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"interventional Pain and Regenerative Medicine","state":"TX","individuals_affected":2843,"breach_submission_date":"2024-02-21","enforcement_action_date":null,"summary":"","event_id":"bae2dff3-3e80-4b71-bd7e-ce3507877132","severity_score":50},{"record_id":"bbe6de8d-5cf4-4274-b8c4-cee39c13032e","source_event_group_id":"6b0371e7-5625-48bf-84ac-9c0d4b686af6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prague Regional Memorial Hospital","state":"OK","individuals_affected":1347,"breach_submission_date":"2024-02-22","enforcement_action_date":null,"summary":"","event_id":"6b0371e7-5625-48bf-84ac-9c0d4b686af6","severity_score":50},{"record_id":"724999db-e123-4ed6-8a9f-4c979e71c048","source_event_group_id":"fa989673-c4ff-493f-beae-871e04af3230","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UNITE HERE","state":"NY","individuals_affected":95797,"breach_submission_date":"2024-02-23","enforcement_action_date":null,"summary":"","event_id":"fa989673-c4ff-493f-beae-871e04af3230","severity_score":70},{"record_id":"0ea21780-0c41-4f7d-bd5f-5687b0aa6a6b","source_event_group_id":"2c610d4b-cf3c-4bdb-8e38-cc3de26f3fd8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vail Summit Orthopaedics, LLC (“VSON”)","state":"CO","individuals_affected":1138,"breach_submission_date":"2024-03-04","enforcement_action_date":null,"summary":"","event_id":"2c610d4b-cf3c-4bdb-8e38-cc3de26f3fd8","severity_score":50},{"record_id":"cbac045f-d5f9-49cc-920b-13aa5c980a08","source_event_group_id":"0bbf42bc-2e2b-4979-9461-b3761c81889d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Academic Urology & Urogynecology of Arizona","state":"AZ","individuals_affected":73281,"breach_submission_date":"2026-02-13","enforcement_action_date":null,"summary":"","event_id":"0bbf42bc-2e2b-4979-9461-b3761c81889d","severity_score":70},{"record_id":"c4c43306-7043-435d-8827-de0d970eafc7","source_event_group_id":"3ed94a53-b5a7-47e8-aac0-0012afffbd45","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Shady Lane Nursing Home","state":"NJ","individuals_affected":566,"breach_submission_date":"2023-02-17","enforcement_action_date":null,"summary":"","event_id":"3ed94a53-b5a7-47e8-aac0-0012afffbd45","severity_score":30},{"record_id":"4af54d8e-dd0e-49e0-bd78-9189218e7587","source_event_group_id":"ca562ae8-51e9-4758-9076-bd2705dc1452","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TAG Urgent Care Support Services, LLC","state":"NY","individuals_affected":516985,"breach_submission_date":"2023-08-18","enforcement_action_date":null,"summary":"","event_id":"ca562ae8-51e9-4758-9076-bd2705dc1452","severity_score":95},{"record_id":"7fa1dc8d-ba62-433a-acd4-ae6f0666702f","source_event_group_id":"0e372c70-1063-468d-b239-dc5a09036e02","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aspen Dental Management, Inc.","state":"NY","individuals_affected":62183,"breach_submission_date":"2023-08-18","enforcement_action_date":null,"summary":"","event_id":"0e372c70-1063-468d-b239-dc5a09036e02","severity_score":70},{"record_id":"90562c0f-a6ea-468b-a8e9-4432d46c88f2","source_event_group_id":"03553227-edcb-47e0-adad-058531668026","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Premier Health Partners and wholly owned covered entities listed in description section below","state":"OH","individuals_affected":10833,"breach_submission_date":"2023-10-12","enforcement_action_date":null,"summary":"","event_id":"03553227-edcb-47e0-adad-058531668026","severity_score":70},{"record_id":"5cb695c9-23f3-481b-ad02-b04b2ccc0085","source_event_group_id":"bfe4451c-0af1-4b04-904a-92aaebd40d73","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Claxton-Hepburn Medical Center","state":"NY","individuals_affected":757,"breach_submission_date":"2023-11-02","enforcement_action_date":null,"summary":"","event_id":"bfe4451c-0af1-4b04-904a-92aaebd40d73","severity_score":30},{"record_id":"7a766d99-b1e9-4772-8b77-2c3dd6edf180","source_event_group_id":"906ce87f-f109-4be8-b36e-1212288d5b7f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Dental","state":"ME","individuals_affected":1523,"breach_submission_date":"2023-11-17","enforcement_action_date":null,"summary":"","event_id":"906ce87f-f109-4be8-b36e-1212288d5b7f","severity_score":50},{"record_id":"1cd9c3f6-33c6-424d-a383-ee93aacb3614","source_event_group_id":"466a02d9-bf32-45b6-ac7a-2ae7ddf9e94c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marathon County Special Education","state":"WI","individuals_affected":10079,"breach_submission_date":"2023-12-20","enforcement_action_date":null,"summary":"","event_id":"466a02d9-bf32-45b6-ac7a-2ae7ddf9e94c","severity_score":70},{"record_id":"e03f55c7-64cc-4c27-88c8-906de6c65fec","source_event_group_id":"23dbe0a9-d799-4b43-a6de-894abdf22054","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Electrostim Medical Services, Inc. d/b/A EMSI","state":"FL","individuals_affected":542990,"breach_submission_date":"2023-12-28","enforcement_action_date":null,"summary":"","event_id":"23dbe0a9-d799-4b43-a6de-894abdf22054","severity_score":95},{"record_id":"4720d4c1-07ac-433a-91c2-032383feb24c","source_event_group_id":"4a57ca32-cbd2-4fdf-941d-1471f951a992","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ConsensioHealth, LLC","state":"WI","individuals_affected":60871,"breach_submission_date":"2024-01-04","enforcement_action_date":null,"summary":"","event_id":"4a57ca32-cbd2-4fdf-941d-1471f951a992","severity_score":70},{"record_id":"f403cd0c-a1bd-4134-bde8-fb9afa85e96d","source_event_group_id":"f91e8dc0-b55d-42bd-bf4b-e9d7c1584a26","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cooper Clinic, P.A.","state":"TX","individuals_affected":124341,"breach_submission_date":"2024-01-05","enforcement_action_date":null,"summary":"","event_id":"f91e8dc0-b55d-42bd-bf4b-e9d7c1584a26","severity_score":85},{"record_id":"500fc69f-ba3c-49dd-bb7a-8f52e7b75c07","source_event_group_id":"9c23412d-e8ea-4b3a-bcb2-9a74efc5615c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Catholic Heath Initiative Trinity Medical Center","state":"OH","individuals_affected":797,"breach_submission_date":"2024-01-08","enforcement_action_date":null,"summary":"","event_id":"9c23412d-e8ea-4b3a-bcb2-9a74efc5615c","severity_score":30},{"record_id":"c300f32c-880e-4156-aaa1-18b715caf03a","source_event_group_id":"966cf03b-424a-408e-841e-151b48d956ad","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Psychological Holdings, PLLC d/b/a Senior PsychCare","state":"TX","individuals_affected":75349,"breach_submission_date":"2024-01-08","enforcement_action_date":null,"summary":"","event_id":"966cf03b-424a-408e-841e-151b48d956ad","severity_score":70},{"record_id":"15d373c0-20a0-4d0b-a435-aa362483a816","source_event_group_id":"10669ba8-cca1-4b3e-9f38-30ff34d27820","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"InHealth Technologies","state":"CA","individuals_affected":12143,"breach_submission_date":"2024-01-09","enforcement_action_date":null,"summary":"","event_id":"10669ba8-cca1-4b3e-9f38-30ff34d27820","severity_score":70},{"record_id":"c1ec7781-edf1-46e0-b2ef-8670b4246b56","source_event_group_id":"24261a63-d0c3-414a-a754-6027a1657ffc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Healthcare Center","state":"ND","individuals_affected":6457,"breach_submission_date":"2024-01-11","enforcement_action_date":null,"summary":"","event_id":"24261a63-d0c3-414a-a754-6027a1657ffc","severity_score":50},{"record_id":"63ac1444-d290-4b3b-8d1d-eaaa919c421c","source_event_group_id":"4f2eaff0-cc44-4889-b31f-448d5d5d0063","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Covenant Care California, LLC","state":"CA","individuals_affected":501,"breach_submission_date":"2024-01-12","enforcement_action_date":null,"summary":"","event_id":"4f2eaff0-cc44-4889-b31f-448d5d5d0063","severity_score":30},{"record_id":"172c29c4-3b97-4567-a8e4-104579069d04","source_event_group_id":"78bd3362-f8ba-4458-b293-959ef48406ba","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Azura Vascular Care","state":"PA","individuals_affected":348000,"breach_submission_date":"2024-01-13","enforcement_action_date":null,"summary":"","event_id":"78bd3362-f8ba-4458-b293-959ef48406ba","severity_score":85},{"record_id":"e57ba494-ae1a-4b84-9a54-bf7bd21ffe6d","source_event_group_id":"e95fec60-6632-45df-a29a-c8e98529c00f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HORNE, LLP","state":"MS","individuals_affected":170052,"breach_submission_date":"2024-01-13","enforcement_action_date":null,"summary":"","event_id":"e95fec60-6632-45df-a29a-c8e98529c00f","severity_score":85},{"record_id":"0139eda7-7f3f-4d29-a60c-3a363106fff7","source_event_group_id":"e9e38841-067c-4671-aafe-22302dee4044","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dickinson County Health Department","state":"KS","individuals_affected":1063,"breach_submission_date":"2024-01-17","enforcement_action_date":null,"summary":"","event_id":"e9e38841-067c-4671-aafe-22302dee4044","severity_score":50},{"record_id":"71bdd9f3-0c29-4ca6-b9a4-00144029cab9","source_event_group_id":"ef92f7bb-7fe7-4e35-b17f-b852aee39fb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"1st Choice Home Care","state":"AR","individuals_affected":1600,"breach_submission_date":"2024-05-08","enforcement_action_date":null,"summary":"","event_id":"ef92f7bb-7fe7-4e35-b17f-b852aee39fb2","severity_score":50},{"record_id":"f562f193-f3bf-4b01-99f3-cda41f145374","source_event_group_id":"36af28c6-9230-4751-85ed-b6fe11ff4aff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WebTPA Employer Services, LLC (“WebTPA”)","state":"TX","individuals_affected":2518533,"breach_submission_date":"2024-05-08","enforcement_action_date":null,"summary":"","event_id":"36af28c6-9230-4751-85ed-b6fe11ff4aff","severity_score":95},{"record_id":"7bc9bd0e-e6c7-4dbe-8048-f979887b26d7","source_event_group_id":"9099ced3-0405-4c7d-977a-b3eb05a9025f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Superior Air-Ground Ambulance Service, Inc.","state":"IL","individuals_affected":1039972,"breach_submission_date":"2024-05-10","enforcement_action_date":null,"summary":"","event_id":"9099ced3-0405-4c7d-977a-b3eb05a9025f","severity_score":95},{"record_id":"072e7e49-49d8-4e4f-b014-1f6649cb09b4","source_event_group_id":"606c3a30-a952-41c4-807e-322cea92157f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hypertension-Nephrology Associates, P.C.","state":"PA","individuals_affected":39491,"breach_submission_date":"2024-05-14","enforcement_action_date":null,"summary":"","event_id":"606c3a30-a952-41c4-807e-322cea92157f","severity_score":70},{"record_id":"e9d31231-0356-42f0-9608-f4c6752ed8f0","source_event_group_id":"a7db67c9-f627-4854-81ab-da105d3b5c34","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pope & Conner Consulting, Inc.","state":"WI","individuals_affected":1035,"breach_submission_date":"2024-05-15","enforcement_action_date":null,"summary":"","event_id":"a7db67c9-f627-4854-81ab-da105d3b5c34","severity_score":50},{"record_id":"ea33ab8c-172b-47c4-80d5-bed7054ba6d4","source_event_group_id":"53e08379-4020-401f-80d2-6ccd07c1c7a4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Victoria Eye Center/Victoria Surgery Center/Victoria Vision Center","state":"TX","individuals_affected":80000,"breach_submission_date":"2024-05-17","enforcement_action_date":null,"summary":"","event_id":"53e08379-4020-401f-80d2-6ccd07c1c7a4","severity_score":70},{"record_id":"8b7ee43c-11d1-45fc-ad12-3db29cda8c67","source_event_group_id":"a054c35c-abb5-43be-806a-ac07d254d214","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gastroenterology Associates of Central Florida, P.A./ Center for Digestive Health","state":"FL","individuals_affected":121693,"breach_submission_date":"2024-05-17","enforcement_action_date":null,"summary":"","event_id":"a054c35c-abb5-43be-806a-ac07d254d214","severity_score":85},{"record_id":"ee19315e-e2e1-4872-99be-63b57239d9ff","source_event_group_id":"32e81716-8c35-4ac8-885d-d38acbae83ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Archer Health","state":"CA","individuals_affected":4285,"breach_submission_date":"2025-11-06","enforcement_action_date":null,"summary":"","event_id":"32e81716-8c35-4ac8-885d-d38acbae83ee","severity_score":50},{"record_id":"1bb06441-2259-45aa-9702-2ad1cc1a5cdd","source_event_group_id":"800f8973-f534-4f8b-b300-41122bed4dc4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Seaglass Chiropractic","state":"NJ","individuals_affected":650,"breach_submission_date":"2024-03-06","enforcement_action_date":null,"summary":"","event_id":"800f8973-f534-4f8b-b300-41122bed4dc4","severity_score":30},{"record_id":"9a4ff148-2381-4eeb-9de4-abd78b3ff7ea","source_event_group_id":"50ee4133-1a69-4b0a-9476-7cc2b03f9e60","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dental Group of Amarillo","state":"TX","individuals_affected":3821,"breach_submission_date":"2024-03-06","enforcement_action_date":null,"summary":"","event_id":"50ee4133-1a69-4b0a-9476-7cc2b03f9e60","severity_score":50},{"record_id":"96125237-01f9-4fc4-9b31-d833e18420cd","source_event_group_id":"e821c707-a52a-43f0-8bc3-6f6dcc872f72","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Orsini Pharmaceutical Services, LLC","state":"IL","individuals_affected":1433,"breach_submission_date":"2024-03-08","enforcement_action_date":null,"summary":"","event_id":"e821c707-a52a-43f0-8bc3-6f6dcc872f72","severity_score":50},{"record_id":"4682f4a0-e44a-47ad-96e4-d69cab22f18e","source_event_group_id":"ccdae08f-0b21-45f8-8002-337cd907923b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Access TeleCare","state":"TX","individuals_affected":65466,"breach_submission_date":"2024-03-08","enforcement_action_date":null,"summary":"","event_id":"ccdae08f-0b21-45f8-8002-337cd907923b","severity_score":70},{"record_id":"8482ed1c-f7f7-4604-a081-5c72d13525b9","source_event_group_id":"1b23e65e-e844-4919-814f-b6c46a34a2fc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CCM Health","state":"MN","individuals_affected":84329,"breach_submission_date":"2024-03-12","enforcement_action_date":null,"summary":"","event_id":"1b23e65e-e844-4919-814f-b6c46a34a2fc","severity_score":70},{"record_id":"109263ae-b730-4c00-b55c-22133b303ea6","source_event_group_id":"aa856405-d06f-4a97-aa78-d52752294a88","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lindsay Municipal Hospital","state":"OK","individuals_affected":500,"breach_submission_date":"2024-03-13","enforcement_action_date":null,"summary":"","event_id":"aa856405-d06f-4a97-aa78-d52752294a88","severity_score":30},{"record_id":"a2b3846c-eb23-4806-9d2a-fc2fa0d12af1","source_event_group_id":"fac87075-06ed-410f-a586-44d592b2a51e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"A5 PHARMACY INC.","state":"NY","individuals_affected":3000,"breach_submission_date":"2024-03-13","enforcement_action_date":null,"summary":"","event_id":"fac87075-06ed-410f-a586-44d592b2a51e","severity_score":50},{"record_id":"dd5f8ed5-81df-40e3-9328-2cdccac2d3be","source_event_group_id":"e5eca1ab-ef96-4db0-94dd-bd4152c11b0f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bronson Healthcare Group","state":"MI","individuals_affected":1597,"breach_submission_date":"2024-03-13","enforcement_action_date":null,"summary":"","event_id":"e5eca1ab-ef96-4db0-94dd-bd4152c11b0f","severity_score":50},{"record_id":"34e002bc-8772-46ef-be9a-47207281f17b","source_event_group_id":"0fd1daae-dcfd-4d31-b31c-9c52f6aa2837","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sycamore Rehabilitation Services, Inc.","state":"IN","individuals_affected":3414,"breach_submission_date":"2024-03-18","enforcement_action_date":null,"summary":"","event_id":"0fd1daae-dcfd-4d31-b31c-9c52f6aa2837","severity_score":50},{"record_id":"781970ae-3626-44d1-92de-691894f863a5","source_event_group_id":"d7a34e88-453c-4dc9-b1dc-385959df5cbc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"M&D Capital Premier Billing LLC","state":"NY","individuals_affected":284326,"breach_submission_date":"2024-03-21","enforcement_action_date":null,"summary":"","event_id":"d7a34e88-453c-4dc9-b1dc-385959df5cbc","severity_score":85},{"record_id":"b396ff1f-44aa-4b3b-b505-ec878eafe75f","source_event_group_id":"7b70a18c-92f7-4479-910e-688390050d87","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mary H. Makhlouf, DMD, MS, PA","state":"NC","individuals_affected":1797,"breach_submission_date":"2024-03-22","enforcement_action_date":null,"summary":"","event_id":"7b70a18c-92f7-4479-910e-688390050d87","severity_score":50},{"record_id":"cbbe6888-8d18-4077-94a4-1309c76df4ab","source_event_group_id":"da09e709-a42e-48b7-8db2-5909830c5be9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Health Center","state":"MI","individuals_affected":33240,"breach_submission_date":"2024-03-24","enforcement_action_date":null,"summary":"","event_id":"da09e709-a42e-48b7-8db2-5909830c5be9","severity_score":70},{"record_id":"c88566d1-98d6-4edf-ab2f-687f4c43caa2","source_event_group_id":"450cf00a-be28-47e0-aed2-c7a6ae60b591","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Strive Holdco, LLC","state":"TX","individuals_affected":51477,"breach_submission_date":"2024-03-28","enforcement_action_date":null,"summary":"","event_id":"450cf00a-be28-47e0-aed2-c7a6ae60b591","severity_score":70},{"record_id":"c525171f-5b6d-4753-810a-86b30ee5e414","source_event_group_id":"508fcebd-ab8e-4b6d-8360-e68bbede427c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Delta Health System","state":"MS","individuals_affected":216532,"breach_submission_date":"2024-03-29","enforcement_action_date":null,"summary":"","event_id":"508fcebd-ab8e-4b6d-8360-e68bbede427c","severity_score":85},{"record_id":"0d422243-3b1c-445e-abed-54ec8ec2ea0a","source_event_group_id":"77490b49-eb89-4df4-86f1-ab4badc75adf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northern Virginia Oral, Maxillofacial & Implant Surgery","state":"VA","individuals_affected":4333,"breach_submission_date":"2024-03-29","enforcement_action_date":null,"summary":"","event_id":"77490b49-eb89-4df4-86f1-ab4badc75adf","severity_score":50},{"record_id":"ecfb34e6-9526-4b61-8799-c09e8a3dde92","source_event_group_id":"2ea43a03-dc05-4c85-a191-e9801b54f710","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UNC Hospitals","state":"NC","individuals_affected":3142,"breach_submission_date":"2024-04-02","enforcement_action_date":null,"summary":"","event_id":"2ea43a03-dc05-4c85-a191-e9801b54f710","severity_score":50},{"record_id":"aab146ca-e973-43c0-9dda-8e4b39eb579d","source_event_group_id":"b46aa811-a088-43c5-a54d-a2a932e19419","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gaia Software, LLC","state":"CO","individuals_affected":56676,"breach_submission_date":"2024-04-05","enforcement_action_date":null,"summary":"","event_id":"b46aa811-a088-43c5-a54d-a2a932e19419","severity_score":70},{"record_id":"8ee0a1f7-e9c0-4ed7-9051-9bb35903c04c","source_event_group_id":"46df463b-1454-4e5a-a235-76e6208ff90f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sleep Management Institute","state":"OH","individuals_affected":500,"breach_submission_date":"2024-04-05","enforcement_action_date":null,"summary":"","event_id":"46df463b-1454-4e5a-a235-76e6208ff90f","severity_score":30},{"record_id":"f11169b9-da36-46e6-91b1-f38c015c0573","source_event_group_id":"cc3a3118-d145-45fb-8cd2-c44926673ebc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rebound Orthopedics & Neurosurgery","state":"WA","individuals_affected":426536,"breach_submission_date":"2024-04-10","enforcement_action_date":null,"summary":"","event_id":"cc3a3118-d145-45fb-8cd2-c44926673ebc","severity_score":85},{"record_id":"4f682f87-a175-405d-8721-3b648f524a04","source_event_group_id":"6039a369-196f-4391-b289-71e045b4f7ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kaiser Foundation Health Plan, Inc.","state":"CA","individuals_affected":13400000,"breach_submission_date":"2024-04-12","enforcement_action_date":null,"summary":"","event_id":"6039a369-196f-4391-b289-71e045b4f7ee","severity_score":95},{"record_id":"ddacfee2-d546-434d-ab03-c46edba140f9","source_event_group_id":"30684e9c-7f90-4d90-ba6c-9503e52541e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hospice of the Bluegrass, Inc. dba Bluegrass Care Navigators","state":"KY","individuals_affected":2282,"breach_submission_date":"2024-04-17","enforcement_action_date":null,"summary":"","event_id":"30684e9c-7f90-4d90-ba6c-9503e52541e4","severity_score":50},{"record_id":"d61317b0-9a78-4f2d-98f3-c69225ce1810","source_event_group_id":"991647e6-be2d-445e-9e89-7c9b33f1cd5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bridgeway Center, Inc.","state":"FL","individuals_affected":36353,"breach_submission_date":"2024-04-19","enforcement_action_date":null,"summary":"","event_id":"991647e6-be2d-445e-9e89-7c9b33f1cd5e","severity_score":70},{"record_id":"bcb05465-c82f-4177-8c24-223fdd0ad719","source_event_group_id":"96973114-1595-4d7d-970a-a4086d4dbd91","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cumberland Heights Foundation, Inc.","state":"TN","individuals_affected":5078,"breach_submission_date":"2024-04-19","enforcement_action_date":null,"summary":"","event_id":"96973114-1595-4d7d-970a-a4086d4dbd91","severity_score":50},{"record_id":"8ecf9e53-383b-43ef-a174-9de4a9e3326b","source_event_group_id":"3d88160d-05c7-488d-b79d-eb33cb170ea1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"South Texas Oncology and Hematology, PLLC","state":"TX","individuals_affected":175195,"breach_submission_date":"2024-04-19","enforcement_action_date":null,"summary":"","event_id":"3d88160d-05c7-488d-b79d-eb33cb170ea1","severity_score":85},{"record_id":"fcee8547-a8f3-4eb0-82e8-7790943e2f27","source_event_group_id":"eef71c69-c322-466c-919b-72812f11bc3d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NorthBay Healthcare Corporation","state":"CA","individuals_affected":569012,"breach_submission_date":"2024-04-23","enforcement_action_date":null,"summary":"","event_id":"eef71c69-c322-466c-919b-72812f11bc3d","severity_score":95},{"record_id":"68279139-b15d-4fe9-994d-3d289d514708","source_event_group_id":"6a804a6c-0411-4ad3-a477-b9814bf5b4ef","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medical Billing Specialists, Inc.","state":"MA","individuals_affected":43673,"breach_submission_date":"2024-04-24","enforcement_action_date":null,"summary":"","event_id":"6a804a6c-0411-4ad3-a477-b9814bf5b4ef","severity_score":70},{"record_id":"c9e7cea0-28d3-467f-9244-2e65811aecd3","source_event_group_id":"ba352967-487d-4c22-bf51-a9ba13f0089e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kootenai Health","state":"ID","individuals_affected":464088,"breach_submission_date":"2024-04-24","enforcement_action_date":null,"summary":"","event_id":"ba352967-487d-4c22-bf51-a9ba13f0089e","severity_score":85},{"record_id":"27e33ccf-e9d2-4845-85f9-80457b2f1aab","source_event_group_id":"1c357a33-02c1-4394-b947-96b30c35d1f0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Therapeutic Health Services","state":"WA","individuals_affected":501,"breach_submission_date":"2024-04-25","enforcement_action_date":null,"summary":"","event_id":"1c357a33-02c1-4394-b947-96b30c35d1f0","severity_score":30},{"record_id":"6469bc0c-fde5-4a7f-b13d-e9a0b099e368","source_event_group_id":"e076020b-1084-4dde-990e-320b7480f2d0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Empath-Stratum Inc. doing business as  Empath Health","state":"FL","individuals_affected":5545,"breach_submission_date":"2024-04-25","enforcement_action_date":null,"summary":"","event_id":"e076020b-1084-4dde-990e-320b7480f2d0","severity_score":50},{"record_id":"29890228-17d2-4fb9-b525-4a3bafe5335b","source_event_group_id":"442ad04b-412b-449e-9768-ff2198c0455a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Signature Healthcare Services LLC","state":"CA","individuals_affected":14696,"breach_submission_date":"2024-04-27","enforcement_action_date":null,"summary":"","event_id":"442ad04b-412b-449e-9768-ff2198c0455a","severity_score":70},{"record_id":"b9e7133b-c272-4637-ba1c-43812adacef9","source_event_group_id":"260be521-1ac9-48ca-ac9e-ef6b38a424da","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AMERICAN RENAL MANAGEMENT","state":"TN","individuals_affected":501,"breach_submission_date":"2024-04-29","enforcement_action_date":null,"summary":"","event_id":"260be521-1ac9-48ca-ac9e-ef6b38a424da","severity_score":30},{"record_id":"88408231-4de2-477a-a798-a17dd05e0f12","source_event_group_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Seating and Mobility, L.L.C., d/b/a Numotion","state":"TN","individuals_affected":602265,"breach_submission_date":"2024-05-01","enforcement_action_date":null,"summary":"","event_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","severity_score":95},{"record_id":"5eb7d2a8-ffb3-4a93-a326-4f57ad127fd4","source_event_group_id":"b1dd8058-3817-4189-afef-e48437532a10","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medical Express Ambulance Inc.  D/B/A Medex Ambulance","state":"IL","individuals_affected":121190,"breach_submission_date":"2024-05-02","enforcement_action_date":null,"summary":"","event_id":"b1dd8058-3817-4189-afef-e48437532a10","severity_score":85},{"record_id":"efe9d30d-7b25-40b5-9e86-e574eb4772bc","source_event_group_id":"f82b4e7b-1ce0-4150-bc4b-cdfdf13a212f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kenneth Young Center","state":"IL","individuals_affected":6842,"breach_submission_date":"2024-05-06","enforcement_action_date":null,"summary":"","event_id":"f82b4e7b-1ce0-4150-bc4b-cdfdf13a212f","severity_score":50},{"record_id":"cfb41fe9-b971-44a2-aa7a-1197ba62e213","source_event_group_id":"38a44a5d-36ab-4ca1-ac37-99469af6604d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Watson Clinic","state":"FL","individuals_affected":280278,"breach_submission_date":"2024-05-08","enforcement_action_date":null,"summary":"","event_id":"38a44a5d-36ab-4ca1-ac37-99469af6604d","severity_score":85},{"record_id":"8d8ce231-85a5-45d1-b564-2bd08ffc5068","source_event_group_id":"3ab1a1ec-c440-482c-abb9-ab4b73ecb6c2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alabama Cardiovascular Group","state":"AL","individuals_affected":280534,"breach_submission_date":"2024-08-02","enforcement_action_date":null,"summary":"","event_id":"3ab1a1ec-c440-482c-abb9-ab4b73ecb6c2","severity_score":85},{"record_id":"be8662e7-fd4f-4935-a1fc-ddbb97312eef","source_event_group_id":"045c16d8-6a8f-4a66-8073-7faa39de1220","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Calibrated Healthcare, LLC","state":"CA","individuals_affected":6890,"breach_submission_date":"2024-08-02","enforcement_action_date":null,"summary":"","event_id":"045c16d8-6a8f-4a66-8073-7faa39de1220","severity_score":50},{"record_id":"a307c37c-82ae-46f4-a724-f14cb2a5786d","source_event_group_id":"9ced5063-73c6-48b2-8dbb-c08218e8db9d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pocahontas Medical Clinic, PA","state":"AR","individuals_affected":31216,"breach_submission_date":"2024-08-06","enforcement_action_date":null,"summary":"","event_id":"9ced5063-73c6-48b2-8dbb-c08218e8db9d","severity_score":70},{"record_id":"529c8e45-511e-4513-a10b-19a4c5622455","source_event_group_id":"e7fa22d1-68a3-4e0f-9032-bfd5e1d7bca7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pemiscot Memorial Health System","state":"MO","individuals_affected":33279,"breach_submission_date":"2024-08-09","enforcement_action_date":null,"summary":"","event_id":"e7fa22d1-68a3-4e0f-9032-bfd5e1d7bca7","severity_score":70},{"record_id":"376ff622-fa4f-4e68-95f2-c878a2e12b27","source_event_group_id":"2edfd447-e426-4719-b328-48c89965fa00","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gramercy Surgery Center, Inc.","state":"NY","individuals_affected":52372,"breach_submission_date":"2024-08-09","enforcement_action_date":null,"summary":"","event_id":"2edfd447-e426-4719-b328-48c89965fa00","severity_score":70},{"record_id":"a581d2c0-d046-41a0-a516-97c2f9ff8b81","source_event_group_id":"9201143d-4324-4316-88ac-26dd008e8409","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HealthEquity, Inc.","state":"UT","individuals_affected":4300000,"breach_submission_date":"2024-08-09","enforcement_action_date":null,"summary":"","event_id":"9201143d-4324-4316-88ac-26dd008e8409","severity_score":95},{"record_id":"00308824-66ed-4add-83d3-39d31fe0e093","source_event_group_id":"303075a2-84ff-4d3f-b315-9305f4c6fc13","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Turning Point of Central California, Inc.","state":"CA","individuals_affected":53737,"breach_submission_date":"2024-08-09","enforcement_action_date":null,"summary":"","event_id":"303075a2-84ff-4d3f-b315-9305f4c6fc13","severity_score":70},{"record_id":"a165506a-6153-48bd-aeb6-efb35b561f2e","source_event_group_id":"e9575516-97dc-4e65-9917-9721da1cbac0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"siParadigm LLC","state":"NJ","individuals_affected":501,"breach_submission_date":"2024-08-09","enforcement_action_date":null,"summary":"","event_id":"e9575516-97dc-4e65-9917-9721da1cbac0","severity_score":30},{"record_id":"4a2f1cb7-439a-465e-aaae-d4f163ace31d","source_event_group_id":"31e2327a-f24f-4885-a277-b25d3090d76b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Specialty Networks, Inc.","state":"TN","individuals_affected":411037,"breach_submission_date":"2024-08-15","enforcement_action_date":null,"summary":"","event_id":"31e2327a-f24f-4885-a277-b25d3090d76b","severity_score":85},{"record_id":"b07d9f4a-b95e-4d18-a678-6c17203255f7","source_event_group_id":"f5c79e3e-8347-47e5-a50f-aa409800fe8f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kerber, Eck & Braeckel LLP","state":"IL","individuals_affected":134918,"breach_submission_date":"2024-08-16","enforcement_action_date":null,"summary":"","event_id":"f5c79e3e-8347-47e5-a50f-aa409800fe8f","severity_score":85},{"record_id":"c6a80309-5d6a-4022-8563-e3ff5f66e822","source_event_group_id":"dd442957-bab6-4e2d-b3e8-2371e791f852","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Contents Trader, Inc.","state":"TX","individuals_affected":27329,"breach_submission_date":"2024-08-20","enforcement_action_date":null,"summary":"","event_id":"dd442957-bab6-4e2d-b3e8-2371e791f852","severity_score":70},{"record_id":"5ecc1c98-0dd9-4d0d-a4ab-a6d7eae93afe","source_event_group_id":"33aa7a96-8609-4918-a4c5-06bf5a8b59a6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Acadian Ambulance Service, Inc.","state":"LA","individuals_affected":2896985,"breach_submission_date":"2024-08-20","enforcement_action_date":null,"summary":"","event_id":"33aa7a96-8609-4918-a4c5-06bf5a8b59a6","severity_score":95},{"record_id":"72b3d5f6-5165-455b-b1cc-2da777e81e63","source_event_group_id":"e84ff74f-e659-4134-8d00-64183d86bd40","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Omni Healthcare Financial Holdings","state":"NC","individuals_affected":16852,"breach_submission_date":"2024-05-18","enforcement_action_date":null,"summary":"","event_id":"e84ff74f-e659-4134-8d00-64183d86bd40","severity_score":70},{"record_id":"febd5f59-90ea-45d8-a6a3-bc4e43a3e111","source_event_group_id":"9ec2a037-f901-4250-9f52-d43c227ec211","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Trionfo Solutions, LLC","state":"IL","individuals_affected":81588,"breach_submission_date":"2024-05-22","enforcement_action_date":null,"summary":"","event_id":"9ec2a037-f901-4250-9f52-d43c227ec211","severity_score":70},{"record_id":"6421dd44-1f07-430d-b4b8-738b1df0b798","source_event_group_id":"0c16b462-e8f5-43bb-9982-3acc97ea5669","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tri-City Healthcare District","state":"CA","individuals_affected":108149,"breach_submission_date":"2024-05-23","enforcement_action_date":null,"summary":"","event_id":"0c16b462-e8f5-43bb-9982-3acc97ea5669","severity_score":85},{"record_id":"92596cd8-6e12-4de3-b58a-958fd74b107e","source_event_group_id":"2b8ffd34-7142-4b4b-a84f-966310f255ef","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of St. Cloud","state":"FL","individuals_affected":2273,"breach_submission_date":"2024-05-24","enforcement_action_date":null,"summary":"","event_id":"2b8ffd34-7142-4b4b-a84f-966310f255ef","severity_score":50},{"record_id":"e3707e64-85c1-4190-a69d-75e923ff0162","source_event_group_id":"b824f712-4297-4b08-b926-c1ae0de1a6a2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"A&A Services d/b/a Sav-Rx","state":"NE","individuals_affected":2812336,"breach_submission_date":"2024-05-24","enforcement_action_date":null,"summary":"","event_id":"b824f712-4297-4b08-b926-c1ae0de1a6a2","severity_score":95},{"record_id":"dbdf2858-f6eb-40da-ae51-a7c8ff178e15","source_event_group_id":"3dd8385e-b054-4dcf-acab-880da2e60454","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AmerisourceBergen Specialty Group, LLC","state":"PA","individuals_affected":252214,"breach_submission_date":"2024-05-24","enforcement_action_date":null,"summary":"","event_id":"3dd8385e-b054-4dcf-acab-880da2e60454","severity_score":85},{"record_id":"7f1271f3-1b48-4a9c-835f-83d0532227b3","source_event_group_id":"3dd8385e-b054-4dcf-acab-880da2e60454","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AmerisourceBergen Specialty Group, LLC","state":"PA","individuals_affected":3102,"breach_submission_date":"2024-05-31","enforcement_action_date":null,"summary":"","event_id":"3dd8385e-b054-4dcf-acab-880da2e60454","severity_score":50},{"record_id":"cc65888a-f08d-4106-a85c-dfb3f40737c3","source_event_group_id":"59ea6e06-47b5-4f9f-b5bd-7e6e7e8a5c82","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Easterseals Central Illinois","state":"IL","individuals_affected":500,"breach_submission_date":"2024-05-31","enforcement_action_date":null,"summary":"","event_id":"59ea6e06-47b5-4f9f-b5bd-7e6e7e8a5c82","severity_score":30},{"record_id":"66279b34-c550-47b6-ba75-665863502748","source_event_group_id":"e43a31cc-9319-45d8-a49c-40cb201937d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wilson & Company, Inc., Engineers & Architects Health and Welfare Benefit Plan","state":"NM","individuals_affected":1867,"breach_submission_date":"2024-06-04","enforcement_action_date":null,"summary":"","event_id":"e43a31cc-9319-45d8-a49c-40cb201937d2","severity_score":50},{"record_id":"c8e964ff-1b21-4fa6-b819-de4bb039ba74","source_event_group_id":"324e9894-ed8c-4eb0-b15c-a92887b67f97","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Panorama Eyecare","state":"CO","individuals_affected":377911,"breach_submission_date":"2024-06-05","enforcement_action_date":null,"summary":"","event_id":"324e9894-ed8c-4eb0-b15c-a92887b67f97","severity_score":85},{"record_id":"6cc3f489-6997-468d-93e8-774f67cee776","source_event_group_id":"dcdf450e-9f52-476c-936b-87e5667ef276","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Insurance ACE/Humana Inc.","state":"KY","individuals_affected":15003,"breach_submission_date":"2024-06-05","enforcement_action_date":null,"summary":"","event_id":"dcdf450e-9f52-476c-936b-87e5667ef276","severity_score":70},{"record_id":"6aea633b-b937-4c16-bf3f-d3e2d62f9c6c","source_event_group_id":"a3e307ff-6270-41ce-a351-748f4a834549","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Alliance Rehabilitation Services","state":"NE","individuals_affected":10750,"breach_submission_date":"2024-06-07","enforcement_action_date":null,"summary":"","event_id":"a3e307ff-6270-41ce-a351-748f4a834549","severity_score":70},{"record_id":"85aca803-f7a4-4f89-b0d2-39e465493bb2","source_event_group_id":"c522d92d-b5a4-47e5-a52c-fd862eeaf1fe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Signature Performance, Inc.","state":"NE","individuals_affected":130228,"breach_submission_date":"2024-06-10","enforcement_action_date":null,"summary":"","event_id":"c522d92d-b5a4-47e5-a52c-fd862eeaf1fe","severity_score":85},{"record_id":"e4b69078-1ba0-4456-a84e-c689238bcc78","source_event_group_id":"c9d46f17-e5c5-4c94-a3f9-1826f95c8964","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ASBESTOS WORKERS LOCAL 42 WELFARE PLAN","state":"GA","individuals_affected":520,"breach_submission_date":"2024-06-11","enforcement_action_date":null,"summary":"","event_id":"c9d46f17-e5c5-4c94-a3f9-1826f95c8964","severity_score":30},{"record_id":"5a71e36d-30c0-4cb3-88e2-f31c70540a32","source_event_group_id":"f9dddf12-5374-4226-af5e-bfd8d12ad7ea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"IBEW LOCAL 236 WELFARE FUND","state":"CT","individuals_affected":3217,"breach_submission_date":"2024-06-11","enforcement_action_date":null,"summary":"","event_id":"f9dddf12-5374-4226-af5e-bfd8d12ad7ea","severity_score":50},{"record_id":"aaf895fe-404b-4205-9341-39d4bcfce474","source_event_group_id":"ad7f1e4d-9475-4890-8097-b82e23d2d268","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Neurobehavioral Medicine Consultants, P.C.","state":"OH","individuals_affected":18182,"breach_submission_date":"2024-06-14","enforcement_action_date":null,"summary":"","event_id":"ad7f1e4d-9475-4890-8097-b82e23d2d268","severity_score":70},{"record_id":"9eef4203-c171-4b47-b196-18059c31af69","source_event_group_id":"a8f9bd9e-1d9d-4d46-8650-cc305d1e308a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiology and Imaging Specialists","state":"FL","individuals_affected":37210,"breach_submission_date":"2024-06-17","enforcement_action_date":null,"summary":"","event_id":"a8f9bd9e-1d9d-4d46-8650-cc305d1e308a","severity_score":70},{"record_id":"b352bde9-edd0-4798-b5fc-8fbfbe461d6c","source_event_group_id":"47a05359-34e3-4b5d-84cc-62a26e417244","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Lash Group, LLC","state":"PA","individuals_affected":15196,"breach_submission_date":"2024-06-21","enforcement_action_date":null,"summary":"","event_id":"47a05359-34e3-4b5d-84cc-62a26e417244","severity_score":70},{"record_id":"1c9daf47-48a7-46fc-b393-aeda62267c77","source_event_group_id":"39decb8c-c5eb-4383-a60a-8d14f00f9a4a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Retina Associates","state":"TX","individuals_affected":312867,"breach_submission_date":"2024-06-21","enforcement_action_date":null,"summary":"","event_id":"39decb8c-c5eb-4383-a60a-8d14f00f9a4a","severity_score":85},{"record_id":"c27974f4-5d29-4f41-9c18-ab1e15f22c05","source_event_group_id":"1b37dcef-8456-4b1e-878e-24bfa8050a36","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Geisinger","state":"PA","individuals_affected":1276026,"breach_submission_date":"2024-06-21","enforcement_action_date":null,"summary":"","event_id":"1b37dcef-8456-4b1e-878e-24bfa8050a36","severity_score":95},{"record_id":"fb96b478-89cf-44f4-8a92-cad3c6001ec3","source_event_group_id":"41422fb9-d6e9-4777-ad83-93cc1b82fb32","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Georgia Kidney Associates, Inc.","state":"GA","individuals_affected":9940,"breach_submission_date":"2024-06-28","enforcement_action_date":null,"summary":"","event_id":"41422fb9-d6e9-4777-ad83-93cc1b82fb32","severity_score":50},{"record_id":"c7bf99fc-d873-4ad7-a1b8-dea0ea2916c6","source_event_group_id":"bbf54b22-dee1-482b-8915-81ec82dcbda8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regional Obstetrical Consultants PC","state":"TN","individuals_affected":25650,"breach_submission_date":"2024-07-02","enforcement_action_date":null,"summary":"","event_id":"bbf54b22-dee1-482b-8915-81ec82dcbda8","severity_score":70},{"record_id":"f5c73843-95ad-4fcf-be4b-fd07014e88ff","source_event_group_id":"98e14095-23a0-4f2f-956c-7acd1d7f5396","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Atlanta Perinatal Consultants, LLP","state":"GA","individuals_affected":1508,"breach_submission_date":"2024-07-02","enforcement_action_date":null,"summary":"","event_id":"98e14095-23a0-4f2f-956c-7acd1d7f5396","severity_score":50},{"record_id":"8013f4be-05e8-4596-9c22-063d00a65d56","source_event_group_id":"7b816843-99fe-49f1-b48e-f0f21ade7229","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DaVita Inc.","state":"CO","individuals_affected":67443,"breach_submission_date":"2024-07-03","enforcement_action_date":null,"summary":"","event_id":"7b816843-99fe-49f1-b48e-f0f21ade7229","severity_score":70},{"record_id":"b2e8726c-4c90-4fcb-b76f-fabb67d80d80","source_event_group_id":"e8dcd8ae-22dc-46ab-a1ff-efda6ac82767","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ascension Health","state":"MO","individuals_affected":5466931,"breach_submission_date":"2024-07-03","enforcement_action_date":null,"summary":"","event_id":"e8dcd8ae-22dc-46ab-a1ff-efda6ac82767","severity_score":95},{"record_id":"1cb570d4-d698-4a5d-92aa-9140cea6974e","source_event_group_id":"5e3ed774-90ef-4103-b406-0033a615900b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Palomar Health Medical Group","state":"CA","individuals_affected":1140221,"breach_submission_date":"2024-07-03","enforcement_action_date":null,"summary":"","event_id":"5e3ed774-90ef-4103-b406-0033a615900b","severity_score":95},{"record_id":"cdaf5734-4e87-4a11-857e-3232d7a88301","source_event_group_id":"b5d513f3-7dd8-4df0-9be7-05823d4f2a00","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"School Employees' Benefit Trust","state":"IN","individuals_affected":1371,"breach_submission_date":"2024-07-05","enforcement_action_date":null,"summary":"","event_id":"b5d513f3-7dd8-4df0-9be7-05823d4f2a00","severity_score":50},{"record_id":"e3f45429-4efb-4d81-a4a1-4c11a7bc4351","source_event_group_id":"e670eebe-7325-428d-8e94-7b3adeca82f2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Smith, Gambrell & Russell LLP","state":"GA","individuals_affected":3370,"breach_submission_date":"2024-07-09","enforcement_action_date":null,"summary":"","event_id":"e670eebe-7325-428d-8e94-7b3adeca82f2","severity_score":50},{"record_id":"90c49da2-2c6f-4590-862a-a2f8b6b8e0f6","source_event_group_id":"a96b1b34-920d-4dea-82aa-aa8bfcdb21f5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fairfax Radiological Consultants","state":"VA","individuals_affected":3512,"breach_submission_date":"2024-07-12","enforcement_action_date":null,"summary":"","event_id":"a96b1b34-920d-4dea-82aa-aa8bfcdb21f5","severity_score":50},{"record_id":"6096174d-1676-4947-9ed6-87c9ff789635","source_event_group_id":"f083b383-39f4-45fd-9c6a-216ba1fd5f8a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Change Healthcare, Inc.","state":"MN","individuals_affected":192700000,"breach_submission_date":"2024-07-19","enforcement_action_date":null,"summary":"","event_id":"f083b383-39f4-45fd-9c6a-216ba1fd5f8a","severity_score":95},{"record_id":"49e32f55-b538-446d-8daa-627f7e9cebfe","source_event_group_id":"29ac55c7-70c0-42ac-b7b7-8ce063c08055","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Counseling of Bristol County, Inc.","state":"MA","individuals_affected":44991,"breach_submission_date":"2024-07-19","enforcement_action_date":null,"summary":"","event_id":"29ac55c7-70c0-42ac-b7b7-8ce063c08055","severity_score":70},{"record_id":"7e92ebba-720f-4c21-bf97-1f258096535d","source_event_group_id":"35828e31-3b0e-4a83-b790-c1cbb342a543","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sun City Pediatrics, PA","state":"TX","individuals_affected":4500,"breach_submission_date":"2024-07-19","enforcement_action_date":null,"summary":"","event_id":"35828e31-3b0e-4a83-b790-c1cbb342a543","severity_score":50},{"record_id":"49cfa915-40f6-424d-948e-3605e2b06b4a","source_event_group_id":"fe1acb9f-59cb-44c7-8857-631b0b242b2d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Barrett Eye Care","state":"IN","individuals_affected":4648,"breach_submission_date":"2024-07-19","enforcement_action_date":null,"summary":"","event_id":"fe1acb9f-59cb-44c7-8857-631b0b242b2d","severity_score":50},{"record_id":"b69e42b2-b0eb-4814-bd6f-f47a45e0084c","source_event_group_id":"dd8b4a0b-84f4-4224-b949-991813c82984","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EMS Department for the Kansas City, Kansas Fire Department","state":"KS","individuals_affected":501,"breach_submission_date":"2024-07-20","enforcement_action_date":null,"summary":"","event_id":"dd8b4a0b-84f4-4224-b949-991813c82984","severity_score":30},{"record_id":"1ef65c7e-037b-4343-9796-956d1778b19b","source_event_group_id":"5fa8769f-e8d3-4be8-8bc5-424a062e9378","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sutton Dental Arts","state":"OR","individuals_affected":4109,"breach_submission_date":"2024-07-22","enforcement_action_date":null,"summary":"","event_id":"5fa8769f-e8d3-4be8-8bc5-424a062e9378","severity_score":50},{"record_id":"476aee48-fe30-4f9a-ac1a-2d790a617e82","source_event_group_id":"16dd6298-def0-4ce4-83b9-a2b5bee8bc88","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Surgery Center of Mid Florida","state":"FL","individuals_affected":48684,"breach_submission_date":"2024-07-24","enforcement_action_date":null,"summary":"","event_id":"16dd6298-def0-4ce4-83b9-a2b5bee8bc88","severity_score":70},{"record_id":"0db71a39-c239-4a72-a5c3-4ef0acfbe27e","source_event_group_id":"c9afad76-707a-4096-bf7a-4e3eb1ab0233","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United of Omaha Life Insurance Company","state":"NE","individuals_affected":107894,"breach_submission_date":"2024-07-26","enforcement_action_date":null,"summary":"","event_id":"c9afad76-707a-4096-bf7a-4e3eb1ab0233","severity_score":85},{"record_id":"4e961394-6057-4cea-909f-dffb17aa6989","source_event_group_id":"329a2392-c25c-44e8-b866-dd9f28999325","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Delta County Memorial Hospital District (Delta Health)","state":"CO","individuals_affected":148363,"breach_submission_date":"2024-07-29","enforcement_action_date":null,"summary":"","event_id":"329a2392-c25c-44e8-b866-dd9f28999325","severity_score":85},{"record_id":"abf5c936-8f4b-420f-adf8-1e4a0f6cf585","source_event_group_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Special Health Resources of Texas, Inc.","state":"TX","individuals_affected":500,"breach_submission_date":"2024-07-30","enforcement_action_date":null,"summary":"","event_id":"f10af9e0-2fda-4bca-8050-a89b9a60b300","severity_score":30},{"record_id":"66d0e08d-9c84-47ec-8eba-52705c236edb","source_event_group_id":"383246aa-ac82-4752-8319-5560be8fdd84","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Deer Oaks Behavioral Health","state":"TX","individuals_affected":171871,"breach_submission_date":"2024-07-31","enforcement_action_date":null,"summary":"","event_id":"383246aa-ac82-4752-8319-5560be8fdd84","severity_score":85},{"record_id":"92f688fa-a839-45b2-a350-7c1dff4a3eaa","source_event_group_id":"567f7f19-26cc-4a06-a0d3-2c73586b0932","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Frilot L.L.C.","state":"LA","individuals_affected":501,"breach_submission_date":"2024-08-01","enforcement_action_date":null,"summary":"","event_id":"567f7f19-26cc-4a06-a0d3-2c73586b0932","severity_score":30},{"record_id":"e3e85a38-53ab-4c47-aabf-3c64c3292111","source_event_group_id":"596f26af-919f-4f7b-b130-0ed270358474","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Roseland Community Hospital Association","state":"IL","individuals_affected":500,"breach_submission_date":"2024-08-01","enforcement_action_date":null,"summary":"","event_id":"596f26af-919f-4f7b-b130-0ed270358474","severity_score":30},{"record_id":"3668e542-4daf-4d0a-9ad8-09f92e5b8610","source_event_group_id":"fe4b4b49-2654-4556-a651-1ae75931691b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wayne Memorial Hospital","state":"GA","individuals_affected":2500,"breach_submission_date":"2024-08-02","enforcement_action_date":null,"summary":"","event_id":"fe4b4b49-2654-4556-a651-1ae75931691b","severity_score":50},{"record_id":"36e8d93d-529f-467c-b7cd-ad88e53754b0","source_event_group_id":"073ef6b2-c2b1-4466-b895-67aded5106de","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Detroit Wayne Integrated Health Network","state":"MI","individuals_affected":3347,"breach_submission_date":"2024-10-18","enforcement_action_date":null,"summary":"","event_id":"073ef6b2-c2b1-4466-b895-67aded5106de","severity_score":50},{"record_id":"960f5ffe-8cf7-460a-815c-1d83be9a222b","source_event_group_id":"b4c57ad5-51a0-4c80-807f-3226906bd299","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Advanced Recovery Equipment & Supplies, LLC","state":"NY","individuals_affected":56000,"breach_submission_date":"2024-10-18","enforcement_action_date":null,"summary":"","event_id":"b4c57ad5-51a0-4c80-807f-3226906bd299","severity_score":70},{"record_id":"602ef4ab-b313-411c-93b3-607b2d3e0937","source_event_group_id":"64459e8a-e00e-42b8-a5c0-04778a3980cc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clay Platte Family Medicine","state":"MO","individuals_affected":53916,"breach_submission_date":"2024-10-18","enforcement_action_date":null,"summary":"","event_id":"64459e8a-e00e-42b8-a5c0-04778a3980cc","severity_score":70},{"record_id":"62999c18-2350-4b92-bca7-fc7ac6e7f4b9","source_event_group_id":"8eb391f4-ee32-41dd-a249-849032489edb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Smiles in the Pines","state":"NC","individuals_affected":1800,"breach_submission_date":"2024-10-21","enforcement_action_date":null,"summary":"","event_id":"8eb391f4-ee32-41dd-a249-849032489edb","severity_score":50},{"record_id":"da3a895d-de98-4630-99a2-09128062a686","source_event_group_id":"39fe6d19-7d30-49b1-92e9-9fff6586495b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arkansas Blue Cross and Blue Shield","state":"AR","individuals_affected":633,"breach_submission_date":"2024-10-22","enforcement_action_date":null,"summary":"","event_id":"39fe6d19-7d30-49b1-92e9-9fff6586495b","severity_score":30},{"record_id":"106e98cd-1b7c-4208-9312-81ac68e17121","source_event_group_id":"aebda371-f065-4be1-b3c9-fddf78fc6cfa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mystic Valley Elder Services - Business Associate","state":"MA","individuals_affected":2402,"breach_submission_date":"2024-10-22","enforcement_action_date":null,"summary":"","event_id":"aebda371-f065-4be1-b3c9-fddf78fc6cfa","severity_score":50},{"record_id":"ef023279-5257-4001-acae-918338409b6d","source_event_group_id":"aecb29a6-c12b-4404-b291-8cedadc1db70","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Positive Behavior Supports Corporation","state":"FL","individuals_affected":2247,"breach_submission_date":"2024-10-24","enforcement_action_date":null,"summary":"","event_id":"aecb29a6-c12b-4404-b291-8cedadc1db70","severity_score":50},{"record_id":"e7dcf70b-a324-41e5-8b07-a12a975117e5","source_event_group_id":"f7e10976-4b9a-46ca-a82e-d85227cddc03","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northeast Spine and Sports Medicine, LLC","state":"NJ","individuals_affected":6300,"breach_submission_date":"2024-10-24","enforcement_action_date":null,"summary":"","event_id":"f7e10976-4b9a-46ca-a82e-d85227cddc03","severity_score":50},{"record_id":"7410c7af-2e8d-4e3c-8db1-56396be41cfa","source_event_group_id":"70abb5a6-4d39-4e2f-a774-ad025d4ea61b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gandara Mental Health Center","state":"MA","individuals_affected":20024,"breach_submission_date":"2024-10-24","enforcement_action_date":null,"summary":"","event_id":"70abb5a6-4d39-4e2f-a774-ad025d4ea61b","severity_score":70},{"record_id":"81b21b0d-2bd0-42be-b982-03da2759fe93","source_event_group_id":"8d262b24-8ae7-4696-9357-6f53c7419fbb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"St. Anthony Regional Hospital","state":"IA","individuals_affected":501,"breach_submission_date":"2024-10-25","enforcement_action_date":null,"summary":"","event_id":"8d262b24-8ae7-4696-9357-6f53c7419fbb","severity_score":30},{"record_id":"12c842a9-46c2-4a0a-b332-a3a3db175bef","source_event_group_id":"7086f139-c70f-4d92-ba99-e7e7d738b421","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hawaii Radiologic Associates, Ltd.","state":"HI","individuals_affected":23205,"breach_submission_date":"2024-10-25","enforcement_action_date":null,"summary":"","event_id":"7086f139-c70f-4d92-ba99-e7e7d738b421","severity_score":70},{"record_id":"6b77d73a-2fdf-459a-b833-111ad56b83c6","source_event_group_id":"d7e991e6-56fc-41d8-b076-9e0ce0e1bf69","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Boatright Inc.","state":"IN","individuals_affected":746,"breach_submission_date":"2024-10-29","enforcement_action_date":null,"summary":"","event_id":"d7e991e6-56fc-41d8-b076-9e0ce0e1bf69","severity_score":30},{"record_id":"5dee9fbf-da46-49d5-91ae-82412e4b9fea","source_event_group_id":"e4e14d19-a144-4b9f-942b-da5f5544e937","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Medical Center","state":"MD","individuals_affected":2100,"breach_submission_date":"2024-10-29","enforcement_action_date":null,"summary":"","event_id":"e4e14d19-a144-4b9f-942b-da5f5544e937","severity_score":50},{"record_id":"5c07a3f2-1e0c-4d9c-bfa8-d61e2ffc978a","source_event_group_id":"c30bd6b3-b258-4795-99ca-87f7d8af3655","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rockford Gastroenterology Associates","state":"IL","individuals_affected":147253,"breach_submission_date":"2024-10-30","enforcement_action_date":null,"summary":"","event_id":"c30bd6b3-b258-4795-99ca-87f7d8af3655","severity_score":85},{"record_id":"2a880bd7-2dac-4946-b78b-593e760f4807","source_event_group_id":"70e63c54-18c7-41e2-936e-1632c5aa7f0c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kaiser Foundation Hospitals","state":"CA","individuals_affected":44600,"breach_submission_date":"2024-11-01","enforcement_action_date":null,"summary":"","event_id":"70e63c54-18c7-41e2-936e-1632c5aa7f0c","severity_score":70},{"record_id":"1dd5f880-1aec-4f99-a917-be91b522dd93","source_event_group_id":"c12cb672-351e-418f-a0ba-72591ce4b1ff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Brain & Eye Connection Vision Clinic, PC","state":"OK","individuals_affected":2207,"breach_submission_date":"2024-11-01","enforcement_action_date":null,"summary":"","event_id":"c12cb672-351e-418f-a0ba-72591ce4b1ff","severity_score":50},{"record_id":"fec24e6f-145a-4344-99dd-990f76d1e13d","source_event_group_id":"4b98ebdf-5597-4f5f-9e7a-0c0eb7aa7fc5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northeast Professional Home Care, Inc.","state":"OH","individuals_affected":648,"breach_submission_date":"2024-11-01","enforcement_action_date":null,"summary":"","event_id":"4b98ebdf-5597-4f5f-9e7a-0c0eb7aa7fc5","severity_score":30},{"record_id":"3703fbe4-1bb6-4688-9496-15ad796a4d6c","source_event_group_id":"899f1032-d952-40f5-ad02-58ffd268d331","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid-Ohio Psychological Services Inc.","state":"OH","individuals_affected":40345,"breach_submission_date":"2024-11-01","enforcement_action_date":null,"summary":"","event_id":"899f1032-d952-40f5-ad02-58ffd268d331","severity_score":70},{"record_id":"8161fd6e-ede0-49d0-bd8f-ff8e3aaa26e4","source_event_group_id":"59679af8-e472-4ba8-96c4-c1b4fde11c68","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mohawk Valley Cardiology, P.C.","state":"NY","individuals_affected":4973,"breach_submission_date":"2024-11-04","enforcement_action_date":null,"summary":"","event_id":"59679af8-e472-4ba8-96c4-c1b4fde11c68","severity_score":50},{"record_id":"c33b0fba-f906-4f2b-a624-b8616ba9b8ae","source_event_group_id":"f1517492-3ce3-42ed-a815-8aee7cfbdaaf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Thompson Coburn LLP","state":"MO","individuals_affected":305088,"breach_submission_date":"2024-11-04","enforcement_action_date":null,"summary":"","event_id":"f1517492-3ce3-42ed-a815-8aee7cfbdaaf","severity_score":85},{"record_id":"cee38ff8-dca0-463d-b876-dbe30aa400ad","source_event_group_id":"0be3ba52-f45c-43f8-b5e6-88cc1a2ffc15","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oklahoma Spine Hospital","state":"OK","individuals_affected":38945,"breach_submission_date":"2024-11-05","enforcement_action_date":null,"summary":"","event_id":"0be3ba52-f45c-43f8-b5e6-88cc1a2ffc15","severity_score":70},{"record_id":"ac418490-74bc-48ae-99d3-9906ac634b0f","source_event_group_id":"7404a82c-cf5b-4d01-aec0-6d7e1774929c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Great Plains Regional Medical Center","state":"OK","individuals_affected":133149,"breach_submission_date":"2024-11-07","enforcement_action_date":null,"summary":"","event_id":"7404a82c-cf5b-4d01-aec0-6d7e1774929c","severity_score":85},{"record_id":"3093fa0f-a9f7-4304-ab0b-eac1221b6c0a","source_event_group_id":"209c11dc-3405-4c2a-8a6d-506f61befdcb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"South West Family Medicine Associates, PA","state":"TX","individuals_affected":36959,"breach_submission_date":"2024-11-07","enforcement_action_date":null,"summary":"","event_id":"209c11dc-3405-4c2a-8a6d-506f61befdcb","severity_score":70},{"record_id":"d6deb112-791a-477f-9823-a0a0a23b5307","source_event_group_id":"736bd4d1-230d-4e9c-b3f2-cf4fbc14ffb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Huron Inc. Health Plan","state":"MI","individuals_affected":750,"breach_submission_date":"2024-11-08","enforcement_action_date":null,"summary":"","event_id":"736bd4d1-230d-4e9c-b3f2-cf4fbc14ffb2","severity_score":30},{"record_id":"10f40835-bebd-4d43-b046-1b0062b96ece","source_event_group_id":"69be79fa-f1e8-446b-9470-6910f46e4587","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid-Minnesota Management Services d/b/a Central Resources","state":"IL","individuals_affected":1232,"breach_submission_date":"2024-11-08","enforcement_action_date":null,"summary":"","event_id":"69be79fa-f1e8-446b-9470-6910f46e4587","severity_score":50},{"record_id":"70205b79-c84b-4747-afab-fd84cf357469","source_event_group_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Seating and Mobility, LLC dba Numotion","state":"TN","individuals_affected":2319,"breach_submission_date":"2024-11-11","enforcement_action_date":null,"summary":"","event_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","severity_score":50},{"record_id":"d09e4d00-6239-4a14-9005-90a6d723b38a","source_event_group_id":"73475c43-aa52-47ee-b332-bf8bc79d302a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Humboldt Independent Practice Association (Humboldt IPA)","state":"CA","individuals_affected":500,"breach_submission_date":"2024-11-11","enforcement_action_date":null,"summary":"","event_id":"73475c43-aa52-47ee-b332-bf8bc79d302a","severity_score":30},{"record_id":"b39ae011-aef8-4472-aa48-a5ead4d2d656","source_event_group_id":"519f38f4-d2e1-49df-ab62-f267dc816503","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiologic Medical Services, P.C.","state":"IA","individuals_affected":56902,"breach_submission_date":"2024-11-12","enforcement_action_date":null,"summary":"","event_id":"519f38f4-d2e1-49df-ab62-f267dc816503","severity_score":70},{"record_id":"bf4a8adb-e02a-4d9e-a514-668f0c87ffce","source_event_group_id":"5b190193-1465-40ab-826f-2ba1c4a4939c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Gastroenterology Associates PLLC","state":"CO","individuals_affected":366491,"breach_submission_date":"2024-11-13","enforcement_action_date":null,"summary":"","event_id":"5b190193-1465-40ab-826f-2ba1c4a4939c","severity_score":85},{"record_id":"408886e1-9125-4dd7-98fb-cad62712ed2d","source_event_group_id":"c99b0496-dcab-461b-aa9e-227641409143","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Physicians' Primary Care of Southwest Florida","state":"FL","individuals_affected":500,"breach_submission_date":"2024-11-14","enforcement_action_date":null,"summary":"","event_id":"c99b0496-dcab-461b-aa9e-227641409143","severity_score":30},{"record_id":"e7f5d00a-9d56-446c-b5f4-62993776abd3","source_event_group_id":"d73dc534-44ed-4498-bc29-64b55a3eabf5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Western Montana Mental Health Center","state":"MT","individuals_affected":86758,"breach_submission_date":"2024-11-14","enforcement_action_date":null,"summary":"","event_id":"d73dc534-44ed-4498-bc29-64b55a3eabf5","severity_score":70},{"record_id":"3a67a974-705e-4792-ac5d-5cb95634cefb","source_event_group_id":"6545643a-3100-4b18-b283-3bc11f44293c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ASPEN HEALTHCARE SERVICES INC","state":"TX","individuals_affected":7195,"breach_submission_date":"2024-11-15","enforcement_action_date":null,"summary":"","event_id":"6545643a-3100-4b18-b283-3bc11f44293c","severity_score":50},{"record_id":"e2c25974-54fa-4f96-86c1-fe250d2d02f9","source_event_group_id":"878e353f-4782-430d-8c7c-c1eeeabf1957","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VPS of MI PLLC","state":"MI","individuals_affected":20604,"breach_submission_date":"2024-11-15","enforcement_action_date":null,"summary":"","event_id":"878e353f-4782-430d-8c7c-c1eeeabf1957","severity_score":70},{"record_id":"07bd585b-cd69-4d68-80ac-b78c5ca27a3e","source_event_group_id":"0a61bd2a-0672-4b5d-b50f-96e5e7fbdf15","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Maternal Fetal Medicine Associates, PLLC, Carnegie Hill Imaging for Women, and Carnegie Women’s Health (collectively, “the Practices”)","state":"NY","individuals_affected":501,"breach_submission_date":"2024-11-15","enforcement_action_date":null,"summary":"","event_id":"0a61bd2a-0672-4b5d-b50f-96e5e7fbdf15","severity_score":30},{"record_id":"8b1befb5-aa06-4e65-b705-74fe36c513db","source_event_group_id":"73631726-c797-46f7-a43d-b2c9570fc258","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ESHA, Inc.","state":"TX","individuals_affected":76922,"breach_submission_date":"2024-11-15","enforcement_action_date":null,"summary":"","event_id":"73631726-c797-46f7-a43d-b2c9570fc258","severity_score":70},{"record_id":"3422f46d-bd05-4aee-b802-f7369f179386","source_event_group_id":"f32d294a-01e2-491a-9ee9-f3a8c36e33ab","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HealthFund Solutions, LLC","state":"FL","individuals_affected":5198,"breach_submission_date":"2024-11-15","enforcement_action_date":null,"summary":"","event_id":"f32d294a-01e2-491a-9ee9-f3a8c36e33ab","severity_score":50},{"record_id":"704ab605-bae8-406d-a359-f149448eaca9","source_event_group_id":"e5bd50a6-8ac1-44d4-9284-560dd28ae738","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dolton Nursing & Rehab, LLC","state":"IL","individuals_affected":1559,"breach_submission_date":"2024-11-18","enforcement_action_date":null,"summary":"","event_id":"e5bd50a6-8ac1-44d4-9284-560dd28ae738","severity_score":50},{"record_id":"b67acba6-a7dd-4df8-ada1-32ad69da6e8d","source_event_group_id":"37099e2b-ae49-4da9-9977-32f48f248c43","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Terrace of Hialeah","state":"FL","individuals_affected":1177,"breach_submission_date":"2024-11-18","enforcement_action_date":null,"summary":"","event_id":"37099e2b-ae49-4da9-9977-32f48f248c43","severity_score":50},{"record_id":"344b9c83-6253-487e-9bdc-4c77044b9ba9","source_event_group_id":"d01a4a1f-3c45-4f31-8a96-5b8afcc04e87","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AuthoraCare Collective","state":"NC","individuals_affected":57944,"breach_submission_date":"2024-11-19","enforcement_action_date":null,"summary":"","event_id":"d01a4a1f-3c45-4f31-8a96-5b8afcc04e87","severity_score":70},{"record_id":"4441df12-b76e-42af-b700-2d08aa550d66","source_event_group_id":"e6221c68-4607-4ed1-b302-4d92ca47bd0f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Laboratory Services Cooperative","state":"WA","individuals_affected":501,"breach_submission_date":"2024-11-20","enforcement_action_date":null,"summary":"","event_id":"e6221c68-4607-4ed1-b302-4d92ca47bd0f","severity_score":30},{"record_id":"f2083bff-4b4f-493a-ab75-1c343a339564","source_event_group_id":"b8760b24-6bf7-4e40-b95f-d008d9d287d9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"York County","state":"PA","individuals_affected":841,"breach_submission_date":"2024-11-20","enforcement_action_date":null,"summary":"","event_id":"b8760b24-6bf7-4e40-b95f-d008d9d287d9","severity_score":30},{"record_id":"52e724bf-ef2f-4cc0-83af-b46f007fb732","source_event_group_id":"4d456571-4b09-4444-93f2-9b94185b531d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"East Central Missouri Behavioral Health Services, Inc.","state":"MO","individuals_affected":20000,"breach_submission_date":"2024-11-21","enforcement_action_date":null,"summary":"","event_id":"4d456571-4b09-4444-93f2-9b94185b531d","severity_score":70},{"record_id":"732143be-99ce-400c-bc1e-1b8bebdf5b91","source_event_group_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lubbock County Hospital District","state":"TX","individuals_affected":1461776,"breach_submission_date":"2024-11-22","enforcement_action_date":null,"summary":"","event_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","severity_score":95},{"record_id":"fe787f0b-a647-4201-8c54-9a2be0465f9f","source_event_group_id":"5ee37ac0-13be-4827-b4ef-237a26593ff6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Conceptions Reproductive Associates of Colorado","state":"CO","individuals_affected":80000,"breach_submission_date":"2024-11-25","enforcement_action_date":null,"summary":"","event_id":"5ee37ac0-13be-4827-b4ef-237a26593ff6","severity_score":70},{"record_id":"6dfd3db6-e04b-49bb-b239-20cb78109290","source_event_group_id":"cc67795b-0f86-4099-bf2a-f9466e9bbebf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"American Addiction Centers, Inc.","state":"TN","individuals_affected":410747,"breach_submission_date":"2024-11-25","enforcement_action_date":null,"summary":"","event_id":"cc67795b-0f86-4099-bf2a-f9466e9bbebf","severity_score":85},{"record_id":"f1faf6b3-81a2-43e7-8ae9-055ae3d5bc8c","source_event_group_id":"ddfb11b9-f854-4485-b69d-9005c82f30c3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Citadel of Northbrook","state":"IL","individuals_affected":2155,"breach_submission_date":"2024-11-25","enforcement_action_date":null,"summary":"","event_id":"ddfb11b9-f854-4485-b69d-9005c82f30c3","severity_score":50},{"record_id":"56361c0e-8feb-448f-b7dc-dfe04ed9fe53","source_event_group_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Tech University Health Sciences Center","state":"TX","individuals_affected":650000,"breach_submission_date":"2024-11-25","enforcement_action_date":null,"summary":"","event_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","severity_score":95},{"record_id":"92e89801-0e85-4298-a142-a68b01be4aab","source_event_group_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Tech University Health Sciences Center El Paso","state":"TX","individuals_affected":815000,"breach_submission_date":"2024-11-25","enforcement_action_date":null,"summary":"","event_id":"a3dbbb27-a689-49b4-9383-c85be6a5792a","severity_score":95},{"record_id":"21ebd6c8-a302-4481-a627-5789e8df7aac","source_event_group_id":"8c4190f1-82d7-495e-88df-df03d390bd57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Atrium Health","state":"NC","individuals_affected":585959,"breach_submission_date":"2024-12-02","enforcement_action_date":null,"summary":"","event_id":"8c4190f1-82d7-495e-88df-df03d390bd57","severity_score":95},{"record_id":"ab696453-57fe-47e2-82da-ba7dd28e121e","source_event_group_id":"e60dcc31-046a-42ad-b3e9-45f0a0fac48a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SAG-AFTRA Health Plan","state":"CA","individuals_affected":98474,"breach_submission_date":"2024-12-02","enforcement_action_date":null,"summary":"","event_id":"e60dcc31-046a-42ad-b3e9-45f0a0fac48a","severity_score":70},{"record_id":"b60d4fa1-f95a-4ddc-a28d-0933b9427651","source_event_group_id":"991bbbe2-779f-4d13-b2b2-84c0ebdcba39","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VeriSource Services, Inc.","state":"TX","individuals_affected":112726,"breach_submission_date":"2024-08-20","enforcement_action_date":null,"summary":"","event_id":"991bbbe2-779f-4d13-b2b2-84c0ebdcba39","severity_score":85},{"record_id":"efa79cfd-7c69-4695-a46a-e636dbffaf19","source_event_group_id":"b39a6af1-4f32-48a4-81a8-a7a197ef77a7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Excelsior Orthopaedics, LLC","state":"NY","individuals_affected":292913,"breach_submission_date":"2024-08-21","enforcement_action_date":null,"summary":"","event_id":"b39a6af1-4f32-48a4-81a8-a7a197ef77a7","severity_score":85},{"record_id":"db634979-eb0d-40a7-8212-bfe4504e58d6","source_event_group_id":"5e4425d7-0d34-4ecb-b8b5-00d5e782bac6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pomona Community Health Center dba ParkTree Community Health Center","state":"CA","individuals_affected":40964,"breach_submission_date":"2024-08-21","enforcement_action_date":null,"summary":"","event_id":"5e4425d7-0d34-4ecb-b8b5-00d5e782bac6","severity_score":70},{"record_id":"80eeab0d-314e-409c-bcbb-3f2293d6324a","source_event_group_id":"0d302952-d641-4f9f-827c-5641c80ea13c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross and Blue Shield of North Carolina","state":"NC","individuals_affected":972,"breach_submission_date":"2024-08-27","enforcement_action_date":null,"summary":"","event_id":"0d302952-d641-4f9f-827c-5641c80ea13c","severity_score":30},{"record_id":"b1cc3dbf-2de6-4321-988d-139c3faa78dc","source_event_group_id":"7cc2c62b-e344-477c-b47a-c9ee8307efe2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CODAC Inc dba CODAC Behavioral Health and CODAC Healthcare, LLC","state":"RI","individuals_affected":9592,"breach_submission_date":"2024-08-27","enforcement_action_date":null,"summary":"","event_id":"7cc2c62b-e344-477c-b47a-c9ee8307efe2","severity_score":50},{"record_id":"32e53f64-31a5-42be-85eb-342a95eb5d27","source_event_group_id":"58492c0e-2194-43d7-b94c-9135401d8d65","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minnesota Department of Human Services","state":"MN","individuals_affected":4329,"breach_submission_date":"2024-08-30","enforcement_action_date":null,"summary":"","event_id":"58492c0e-2194-43d7-b94c-9135401d8d65","severity_score":50},{"record_id":"3db516ba-0921-4802-9285-51e92157c2e5","source_event_group_id":"dab7151b-83e8-4ed5-bc69-c02bbccb2d92","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EngageMED, Inc","state":"AR","individuals_affected":249297,"breach_submission_date":"2024-08-30","enforcement_action_date":null,"summary":"","event_id":"dab7151b-83e8-4ed5-bc69-c02bbccb2d92","severity_score":85},{"record_id":"275ca327-492a-4922-b8dc-744b6f3f709b","source_event_group_id":"00088475-bfd2-455a-9cfd-6e889c3353f4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Welcome Health","state":"CA","individuals_affected":597,"breach_submission_date":"2024-09-06","enforcement_action_date":null,"summary":"","event_id":"00088475-bfd2-455a-9cfd-6e889c3353f4","severity_score":30},{"record_id":"04a5f6de-1d74-42f2-b1d4-43e2ff980717","source_event_group_id":"4c5cffc3-1a52-4fa1-b12e-c11b82c309c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nationwide Recovery Services, Inc.","state":"GA","individuals_affected":501,"breach_submission_date":"2024-09-09","enforcement_action_date":null,"summary":"","event_id":"4c5cffc3-1a52-4fa1-b12e-c11b82c309c4","severity_score":30},{"record_id":"75ebd8a5-bd78-403d-882e-ca7d49fddc1b","source_event_group_id":"e628529d-e9dd-4f78-b822-724528b57581","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Chambers Co Public Hospital District No1 dba Chambers Health","state":"TX","individuals_affected":85531,"breach_submission_date":"2024-09-13","enforcement_action_date":null,"summary":"","event_id":"e628529d-e9dd-4f78-b822-724528b57581","severity_score":70},{"record_id":"639c24db-ae1f-4ae6-9250-05adb22f7a76","source_event_group_id":"8c4190f1-82d7-495e-88df-df03d390bd57","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Atrium Health","state":"NC","individuals_affected":32120,"breach_submission_date":"2024-09-13","enforcement_action_date":null,"summary":"","event_id":"8c4190f1-82d7-495e-88df-df03d390bd57","severity_score":70},{"record_id":"f2729383-8581-46a0-99f1-7bf86cf95203","source_event_group_id":"a5e0509d-72fe-423c-960f-112fa7b0f125","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Maryville Academy","state":"IL","individuals_affected":500,"breach_submission_date":"2024-09-13","enforcement_action_date":null,"summary":"","event_id":"a5e0509d-72fe-423c-960f-112fa7b0f125","severity_score":30},{"record_id":"eeaab780-749d-4a1c-bc48-2f1cc5869b38","source_event_group_id":"a60d16e1-d058-4e4c-bf24-f4ad9d646033","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"JTaylor & Associates LLC","state":"TX","individuals_affected":22315,"breach_submission_date":"2024-09-16","enforcement_action_date":null,"summary":"","event_id":"a60d16e1-d058-4e4c-bf24-f4ad9d646033","severity_score":70},{"record_id":"14f63f44-2f07-4cd7-8017-a4e964f232b7","source_event_group_id":"a41dd1a0-357f-43c5-94d4-f8861dfc38b3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rim Country Health and Rehabilitation","state":"AZ","individuals_affected":721,"breach_submission_date":"2024-09-16","enforcement_action_date":null,"summary":"","event_id":"a41dd1a0-357f-43c5-94d4-f8861dfc38b3","severity_score":30},{"record_id":"acbe9d5d-d5cd-42bb-a0b3-cf6c7a3674d0","source_event_group_id":"3ccaf147-c19f-45d9-a79a-e6f5ce22a9dd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Bone & Joint Specialists, PA (“Southern Bone”)","state":"MS","individuals_affected":7162,"breach_submission_date":"2024-09-17","enforcement_action_date":null,"summary":"","event_id":"3ccaf147-c19f-45d9-a79a-e6f5ce22a9dd","severity_score":50},{"record_id":"32877f7e-0760-499d-8583-e72d3582545a","source_event_group_id":"463a2b16-40b3-4875-b4cf-5c0c740da3a9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jacobsen Construction Co., Inc. Health Plan","state":"UT","individuals_affected":2127,"breach_submission_date":"2024-09-20","enforcement_action_date":null,"summary":"","event_id":"463a2b16-40b3-4875-b4cf-5c0c740da3a9","severity_score":50},{"record_id":"99d524a0-2bd8-47a0-9b87-27f79c6d0dce","source_event_group_id":"5a4f08bc-8061-43ab-b0ed-4c6a93a122e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Muskogee City County Enhanced 911 Trust Authority","state":"OK","individuals_affected":180000,"breach_submission_date":"2024-09-20","enforcement_action_date":null,"summary":"","event_id":"5a4f08bc-8061-43ab-b0ed-4c6a93a122e7","severity_score":85},{"record_id":"413e6ec7-0f44-45b9-abef-0e0db695943b","source_event_group_id":"db79971b-0a0b-47e1-8c90-e38d142e4fa2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asheville Arthritis and Osteoporosis Center, P.A.","state":"NC","individuals_affected":58251,"breach_submission_date":"2024-09-20","enforcement_action_date":null,"summary":"","event_id":"db79971b-0a0b-47e1-8c90-e38d142e4fa2","severity_score":70},{"record_id":"e7bd677b-6d46-42b8-9a41-b3f2f9190792","source_event_group_id":"48b48c37-a067-4e2c-bf1a-2154c677c8b4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DAP Health, Inc.","state":"CA","individuals_affected":129048,"breach_submission_date":"2024-09-24","enforcement_action_date":null,"summary":"","event_id":"48b48c37-a067-4e2c-bf1a-2154c677c8b4","severity_score":85},{"record_id":"b859491c-d663-4618-b5a3-f33d5a61ac94","source_event_group_id":"70069ada-b991-4cfc-8287-245b5eabd4af","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Michigan/Michigan Medicine","state":"MI","individuals_affected":57891,"breach_submission_date":"2024-09-26","enforcement_action_date":null,"summary":"","event_id":"70069ada-b991-4cfc-8287-245b5eabd4af","severity_score":70},{"record_id":"ea03fefa-afcb-4f75-ab8a-a41312404dfe","source_event_group_id":"d4707c7e-2f53-4628-aded-aca6242d4a32","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Clinic of Maui, Inc. dba Malama I Ke Ola Health Center","state":"HI","individuals_affected":123816,"breach_submission_date":"2024-09-26","enforcement_action_date":null,"summary":"","event_id":"d4707c7e-2f53-4628-aded-aca6242d4a32","severity_score":85},{"record_id":"0a852ff4-09a9-4030-87b8-2a7fea1228d2","source_event_group_id":"f1db10a3-57ee-4141-a0eb-72ce0cb6fd20","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Spine Consultants, PLLC","state":"TX","individuals_affected":8048,"breach_submission_date":"2024-09-26","enforcement_action_date":null,"summary":"","event_id":"f1db10a3-57ee-4141-a0eb-72ce0cb6fd20","severity_score":50},{"record_id":"c1c01f88-f798-45d5-893f-35ede5211e97","source_event_group_id":"54889e2b-e4f3-403e-a839-e5caa206256f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Walgreen Co.","state":"IL","individuals_affected":1915,"breach_submission_date":"2024-10-01","enforcement_action_date":null,"summary":"","event_id":"54889e2b-e4f3-403e-a839-e5caa206256f","severity_score":50},{"record_id":"b7319364-3cf6-4cd2-aa30-5b32e9fbe7ce","source_event_group_id":"87e96b77-aa8e-4c20-adc3-c15093ba562c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dr. Daniel J. Leeman, M.D.","state":"TX","individuals_affected":50000,"breach_submission_date":"2024-10-04","enforcement_action_date":null,"summary":"","event_id":"87e96b77-aa8e-4c20-adc3-c15093ba562c","severity_score":70},{"record_id":"c081db03-d7fe-49f3-a86d-0caca593b9ff","source_event_group_id":"47458822-5081-47ec-82bd-c182688a3718","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Omni Family Health","state":"CA","individuals_affected":468344,"breach_submission_date":"2024-10-04","enforcement_action_date":null,"summary":"","event_id":"47458822-5081-47ec-82bd-c182688a3718","severity_score":85},{"record_id":"ad78edf6-8ba5-45c3-b5f4-d84e667ebb25","source_event_group_id":"26a2c8d7-7212-4aeb-8949-4a9745625229","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ATSG, Inc","state":"NY","individuals_affected":909469,"breach_submission_date":"2024-10-04","enforcement_action_date":null,"summary":"","event_id":"26a2c8d7-7212-4aeb-8949-4a9745625229","severity_score":95},{"record_id":"8fa1a7d8-6c92-433b-8447-8cadb084fdf3","source_event_group_id":"17dbe732-7baf-41da-96c2-7116082b3447","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ciox Health LLC, d/b/a Datavant Group","state":"AZ","individuals_affected":320702,"breach_submission_date":"2024-10-07","enforcement_action_date":null,"summary":"","event_id":"17dbe732-7baf-41da-96c2-7116082b3447","severity_score":85},{"record_id":"aaf336f8-2c68-4c8c-b9ec-f94777fd0caf","source_event_group_id":"3eb6b2da-fee5-4ce2-80d4-bcf291ecda62","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Schneider Regional Medical Center","state":"","individuals_affected":1570,"breach_submission_date":"2024-10-07","enforcement_action_date":null,"summary":"","event_id":"3eb6b2da-fee5-4ce2-80d4-bcf291ecda62","severity_score":50},{"record_id":"71595e1f-e47d-445c-a495-14d5c6fcaaf9","source_event_group_id":"90a36bbc-214e-4915-95c5-9d0abdf599b3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TheraCom, L.L.C.","state":"PA","individuals_affected":9271,"breach_submission_date":"2024-10-08","enforcement_action_date":null,"summary":"","event_id":"90a36bbc-214e-4915-95c5-9d0abdf599b3","severity_score":50},{"record_id":"6ede181e-b836-43a9-88d9-6bc73b0176b8","source_event_group_id":"91aadaba-5c68-48aa-8217-6471557d172a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Visionworks of America, Inc.","state":"TX","individuals_affected":39825,"breach_submission_date":"2024-10-10","enforcement_action_date":null,"summary":"","event_id":"91aadaba-5c68-48aa-8217-6471557d172a","severity_score":70},{"record_id":"5012c8ff-ddc2-4d49-baf9-8476e634a61e","source_event_group_id":"a7e840cb-cab9-481f-b8df-8d5439be9443","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gryphon Healthcare, LLC","state":"TX","individuals_affected":393358,"breach_submission_date":"2024-10-11","enforcement_action_date":null,"summary":"","event_id":"a7e840cb-cab9-481f-b8df-8d5439be9443","severity_score":85},{"record_id":"19792b7e-b1bc-4c9f-a57f-58a668c4699b","source_event_group_id":"f7c6d444-c536-437c-8450-c71a4783fd0d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wilmington Community Clinic","state":"CA","individuals_affected":11601,"breach_submission_date":"2024-10-11","enforcement_action_date":null,"summary":"","event_id":"f7c6d444-c536-437c-8450-c71a4783fd0d","severity_score":70},{"record_id":"c81e514b-06e2-4ebd-aef8-8d57e445c99c","source_event_group_id":"fdea3057-e2f7-4278-9505-feba4cc5757b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ad Valorem Records, Inc.","state":"TN","individuals_affected":590,"breach_submission_date":"2024-10-11","enforcement_action_date":null,"summary":"","event_id":"fdea3057-e2f7-4278-9505-feba4cc5757b","severity_score":30},{"record_id":"9a504fe9-7b9f-47b9-8a0b-0d71ca884827","source_event_group_id":"c9c74abe-1e84-499c-81b9-78a7f24f62fe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tri County Medical Supply And Respiratory Services Inc.","state":"AR","individuals_affected":8000,"breach_submission_date":"2024-10-16","enforcement_action_date":null,"summary":"","event_id":"c9c74abe-1e84-499c-81b9-78a7f24f62fe","severity_score":50},{"record_id":"b460c805-1a96-44a7-86ed-51642e75b5ad","source_event_group_id":"208dc800-ddd3-4c05-a6d6-3df521b34b4d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jacksonville Children's Multispecialty Clinics/Atlantic Medical Management","state":"NC","individuals_affected":2224,"breach_submission_date":"2024-10-17","enforcement_action_date":null,"summary":"","event_id":"208dc800-ddd3-4c05-a6d6-3df521b34b4d","severity_score":50},{"record_id":"017c3c57-de7b-4fab-aea7-a6a537510544","source_event_group_id":"0d0d9607-e1ee-4f7d-a7c3-f630a37b6c56","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Valleygate Dental Surgery Centers of Charlotte, Fayetteville, and the West, LLC.","state":"NC","individuals_affected":14589,"breach_submission_date":"2024-10-17","enforcement_action_date":null,"summary":"","event_id":"0d0d9607-e1ee-4f7d-a7c3-f630a37b6c56","severity_score":70},{"record_id":"cc03dd15-1c34-4d1c-acf7-95b531d0099a","source_event_group_id":"d88c0adf-b69a-48ec-802f-eac26871adf1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Summit Pathology and Summit Pathology Laboratories, Inc.","state":"CO","individuals_affected":1813538,"breach_submission_date":"2024-10-18","enforcement_action_date":null,"summary":"","event_id":"d88c0adf-b69a-48ec-802f-eac26871adf1","severity_score":95},{"record_id":"fccf185f-f82a-43c0-9ca6-e00ce0bfb568","source_event_group_id":"e3150f9b-9f41-4933-8745-63c951067cd2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"RRCA Accounts Management Inc.","state":"IL","individuals_affected":115837,"breach_submission_date":"2024-10-18","enforcement_action_date":null,"summary":"","event_id":"e3150f9b-9f41-4933-8745-63c951067cd2","severity_score":85},{"record_id":"68ab1a98-21df-42d5-810b-ff1256fdc946","source_event_group_id":"17c3bd06-de19-44f7-8515-51daa354cc5d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Village of Elm Grove","state":"WI","individuals_affected":668,"breach_submission_date":"2024-12-02","enforcement_action_date":null,"summary":"","event_id":"17c3bd06-de19-44f7-8515-51daa354cc5d","severity_score":30},{"record_id":"1d753e5d-18b0-4dfb-a587-3dc30079de9f","source_event_group_id":"aba961df-b9ed-4a95-b7cd-9af98e7a0545","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rumpke Consolidated Companies, Inc. & Affiliates Benefits Plan","state":"OH","individuals_affected":16946,"breach_submission_date":"2024-12-10","enforcement_action_date":null,"summary":"","event_id":"aba961df-b9ed-4a95-b7cd-9af98e7a0545","severity_score":70},{"record_id":"b5ecadec-d468-4576-9327-8b88502b6e71","source_event_group_id":"9f164355-f2bb-4c0e-966f-57503771a7db","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"River Region Cardiology","state":"AL","individuals_affected":48600,"breach_submission_date":"2024-12-11","enforcement_action_date":null,"summary":"","event_id":"9f164355-f2bb-4c0e-966f-57503771a7db","severity_score":70},{"record_id":"061993dc-d505-48fc-b62a-a26f460716a8","source_event_group_id":"6d0f0989-a20d-4000-bdb8-bad1d122bf62","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Connections","state":"DC","individuals_affected":18949,"breach_submission_date":"2024-12-11","enforcement_action_date":null,"summary":"","event_id":"6d0f0989-a20d-4000-bdb8-bad1d122bf62","severity_score":70},{"record_id":"468152a0-6ff1-4780-ab8d-cd7039760451","source_event_group_id":"05f91633-3726-4c4a-aab7-d9b2a4e6c581","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"El Paso Healthcare System, Ltd. d/b/a Las Palmas Del Sol Healthcare","state":"TX","individuals_affected":1854,"breach_submission_date":"2024-12-11","enforcement_action_date":null,"summary":"","event_id":"05f91633-3726-4c4a-aab7-d9b2a4e6c581","severity_score":50},{"record_id":"8deba36f-ea01-4817-a9b2-b7a0ca3b194b","source_event_group_id":"2672080a-1c4d-46f0-b685-43e2b0b4a0f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwest Asthma and Allergy Center","state":"WA","individuals_affected":1000,"breach_submission_date":"2024-12-12","enforcement_action_date":null,"summary":"","event_id":"2672080a-1c4d-46f0-b685-43e2b0b4a0f9","severity_score":30},{"record_id":"def3ff6a-56dc-4751-ba7b-28602ef1f01c","source_event_group_id":"c9d26e20-3208-4f5c-bd5e-c1562ea58e38","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Summit Medical Group, PLLC","state":"TN","individuals_affected":464159,"breach_submission_date":"2024-12-13","enforcement_action_date":null,"summary":"","event_id":"c9d26e20-3208-4f5c-bd5e-c1562ea58e38","severity_score":85},{"record_id":"7bb43fbd-cb01-46d7-be1b-1e0bf73ac374","source_event_group_id":"d95bbc57-9e5c-4325-9042-cca9b98d9bac","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Teton Orthopaedics","state":"PA","individuals_affected":13409,"breach_submission_date":"2024-12-16","enforcement_action_date":null,"summary":"","event_id":"d95bbc57-9e5c-4325-9042-cca9b98d9bac","severity_score":70},{"record_id":"766fae95-41bd-4233-92e9-8377c7fa1625","source_event_group_id":"c8ed2580-385e-49d9-b55d-0f676202696f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Inlet Health dba Communicare","state":"KY","individuals_affected":3771,"breach_submission_date":"2025-01-22","enforcement_action_date":null,"summary":"","event_id":"c8ed2580-385e-49d9-b55d-0f676202696f","severity_score":50},{"record_id":"f53053ae-669a-43f1-932c-ee027aa235de","source_event_group_id":"f3605ec2-18dd-49ca-81bc-c0d88b0ff0f1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aprendamos Intervention Team, P.A.","state":"NM","individuals_affected":1916,"breach_submission_date":"2025-01-23","enforcement_action_date":null,"summary":"","event_id":"f3605ec2-18dd-49ca-81bc-c0d88b0ff0f1","severity_score":50},{"record_id":"21bb599e-8252-4cbc-89d4-dd1d0d0017d9","source_event_group_id":"85723927-0e8f-43c9-b2e2-c8bd5ac71c77","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Benefits Management Group, Inc.","state":"IL","individuals_affected":501,"breach_submission_date":"2025-01-24","enforcement_action_date":null,"summary":"","event_id":"85723927-0e8f-43c9-b2e2-c8bd5ac71c77","severity_score":30},{"record_id":"adc04e7a-b5e0-495b-96d0-10cc6c3da8e9","source_event_group_id":"10009ade-ce49-4678-94d2-36eefd4e82eb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OrthoMinds, LLC","state":"GA","individuals_affected":501,"breach_submission_date":"2025-01-24","enforcement_action_date":null,"summary":"","event_id":"10009ade-ce49-4678-94d2-36eefd4e82eb","severity_score":30},{"record_id":"8c645f1b-c0d1-4957-9ecb-476c81b562b6","source_event_group_id":"4ee23f6e-465e-4701-b155-eb8f2d1e2741","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Spring River Mental Health & Wellness","state":"KS","individuals_affected":3250,"breach_submission_date":"2025-01-24","enforcement_action_date":null,"summary":"","event_id":"4ee23f6e-465e-4701-b155-eb8f2d1e2741","severity_score":50},{"record_id":"dde8f023-b037-443e-bc94-e8ed9f1ca8c6","source_event_group_id":"6344ce91-17b1-4bf9-96f1-31edce85958a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cardiology of Virginia, Inc.","state":"VA","individuals_affected":21085,"breach_submission_date":"2025-01-28","enforcement_action_date":null,"summary":"","event_id":"6344ce91-17b1-4bf9-96f1-31edce85958a","severity_score":70},{"record_id":"810e9bc0-ee57-412b-94ef-d6fee94f84c6","source_event_group_id":"0c7f1b04-24ca-4ee4-8a2c-6d1c514b55c2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Center, Inc.","state":"CT","individuals_affected":1060936,"breach_submission_date":"2025-01-30","enforcement_action_date":null,"summary":"","event_id":"0c7f1b04-24ca-4ee4-8a2c-6d1c514b55c2","severity_score":95},{"record_id":"0ee6ab26-d330-4779-8f4d-e60b34e88fb9","source_event_group_id":"d1b50175-d61f-4b29-a9c0-8895a232ee09","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ZI NEUROSCIENCES","state":"NJ","individuals_affected":1000,"breach_submission_date":"2025-01-30","enforcement_action_date":null,"summary":"","event_id":"d1b50175-d61f-4b29-a9c0-8895a232ee09","severity_score":30},{"record_id":"2aa5e3dd-10c1-4c82-967c-67be66c311c1","source_event_group_id":"b5e289de-3feb-41a5-adc9-0e9b77a4223d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Methodist Homes of Alabama and Northwest Florida","state":"AL","individuals_affected":908,"breach_submission_date":"2025-01-30","enforcement_action_date":null,"summary":"","event_id":"b5e289de-3feb-41a5-adc9-0e9b77a4223d","severity_score":30},{"record_id":"bad0176d-c6c3-4dfd-a6a0-72604e9b5cf4","source_event_group_id":"db2fe9bc-c3e7-4bb8-b602-a52bb1b9a2e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mental Health Association Inc.","state":"MA","individuals_affected":12633,"breach_submission_date":"2025-01-31","enforcement_action_date":null,"summary":"","event_id":"db2fe9bc-c3e7-4bb8-b602-a52bb1b9a2e6","severity_score":70},{"record_id":"f645a56b-3bb4-45b9-b074-a4a7b0493ac0","source_event_group_id":"f1f21ef8-7904-4698-8fa4-8df931ebade2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regence BlueShield","state":"OR","individuals_affected":783,"breach_submission_date":"2025-01-31","enforcement_action_date":null,"summary":"","event_id":"f1f21ef8-7904-4698-8fa4-8df931ebade2","severity_score":30},{"record_id":"f440e747-f013-48df-95f6-aff2abf5eacd","source_event_group_id":"af32e52d-8183-453d-8c89-42850d2941ff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Primary Health Services Center, Inc.","state":"LA","individuals_affected":17202,"breach_submission_date":"2025-02-02","enforcement_action_date":null,"summary":"","event_id":"af32e52d-8183-453d-8c89-42850d2941ff","severity_score":70},{"record_id":"3397fe7a-cd95-439e-af5f-409834bc29aa","source_event_group_id":"ab8ca41d-0b66-4e56-8c3c-83f456fbccc9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ARC Community Services, Inc.","state":"WI","individuals_affected":501,"breach_submission_date":"2025-02-02","enforcement_action_date":null,"summary":"","event_id":"ab8ca41d-0b66-4e56-8c3c-83f456fbccc9","severity_score":30},{"record_id":"9b7c1458-2167-464f-9456-581b4b81ae51","source_event_group_id":"e53e98da-9557-43aa-9e33-bd6036b9eccc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of McKinney","state":"TX","individuals_affected":17751,"breach_submission_date":"2025-02-03","enforcement_action_date":null,"summary":"","event_id":"e53e98da-9557-43aa-9e33-bd6036b9eccc","severity_score":70},{"record_id":"4966da71-63b8-44b9-a907-610d3fbf846e","source_event_group_id":"7879c29e-6f9b-4b37-b8e3-e3e3bfbc258a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VectraRx Mail Pharmacy Services, LLC","state":"AZ","individuals_affected":109383,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"","event_id":"7879c29e-6f9b-4b37-b8e3-e3e3bfbc258a","severity_score":85},{"record_id":"e3c8d9f9-84c5-4090-bd51-1b1e06d9c399","source_event_group_id":"171ded00-d08a-4696-858e-6d1479b49245","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"St. Marys NDS LLC","state":"AZ","individuals_affected":11715,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"","event_id":"171ded00-d08a-4696-858e-6d1479b49245","severity_score":70},{"record_id":"44ec953c-739f-4e06-8c64-73cef53c2c32","source_event_group_id":"b665148e-19bb-44d1-87af-34b6a86fe246","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Primary Health-SMMPP, L.C.","state":"AZ","individuals_affected":67567,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"","event_id":"b665148e-19bb-44d1-87af-34b6a86fe246","severity_score":70},{"record_id":"280198fb-c065-4a5e-a7b7-e21baa7e8a82","source_event_group_id":"c256babb-cdbb-41c4-9d2c-68b603cdaf22","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"U.S. HEALTHWORKS-SMMPP, L.C.","state":"AZ","individuals_affected":10673,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"","event_id":"c256babb-cdbb-41c4-9d2c-68b603cdaf22","severity_score":70},{"record_id":"9130d7cd-7220-4120-ac89-6a1767b0f3dd","source_event_group_id":"7fd8fce2-8479-4868-b180-ad0e1402a7f6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue & Co., LLC","state":"IN","individuals_affected":2787,"breach_submission_date":"2025-02-07","enforcement_action_date":null,"summary":"","event_id":"7fd8fce2-8479-4868-b180-ad0e1402a7f6","severity_score":50},{"record_id":"f6e8b453-4ee3-47e1-945e-e9dc9ecf0963","source_event_group_id":"a643832a-38bb-4b5b-ace4-785245fe2fcf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Authority of the City of Bainbridge and Decatur County (“Memorial Hospital & Manor”)","state":"GA","individuals_affected":120085,"breach_submission_date":"2025-02-08","enforcement_action_date":null,"summary":"","event_id":"a643832a-38bb-4b5b-ace4-785245fe2fcf","severity_score":85},{"record_id":"ac277412-eb6c-489a-bd7b-ae3bbe5b88df","source_event_group_id":"64612994-e9c2-48de-92f7-b10a61107eff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CPS Solutions, LLC","state":"OH","individuals_affected":500,"breach_submission_date":"2025-02-10","enforcement_action_date":null,"summary":"","event_id":"64612994-e9c2-48de-92f7-b10a61107eff","severity_score":30},{"record_id":"bd4c2643-6f41-423a-b21d-373ae94341bc","source_event_group_id":"40d62b49-c48f-41da-85ac-45d674806000","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Columbus Division of Fire","state":"OH","individuals_affected":736,"breach_submission_date":"2025-02-10","enforcement_action_date":null,"summary":"","event_id":"40d62b49-c48f-41da-85ac-45d674806000","severity_score":30},{"record_id":"4ec748ec-6758-4d2d-8068-5041d7298d9c","source_event_group_id":"654dbc6f-1c54-45a8-b2f4-cfdb5e469092","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"New Era Life Insurance Companies","state":"TX","individuals_affected":335506,"breach_submission_date":"2025-02-11","enforcement_action_date":null,"summary":"","event_id":"654dbc6f-1c54-45a8-b2f4-cfdb5e469092","severity_score":85},{"record_id":"63e7cee0-45ed-44c3-93d0-6eb5089a0def","source_event_group_id":"18750999-96cc-48d0-8e28-bd2537667799","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UNITED BACKCARE PS dba Pacific Rehabilitation Centers","state":"WA","individuals_affected":18900,"breach_submission_date":"2025-02-11","enforcement_action_date":null,"summary":"","event_id":"18750999-96cc-48d0-8e28-bd2537667799","severity_score":70},{"record_id":"00b145b1-d30c-4bcf-8ff4-8fd9261d13eb","source_event_group_id":"ba7d325d-24b4-4497-acbe-0c14bdd2ae07","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ottawa Family Physicians","state":"KS","individuals_affected":501,"breach_submission_date":"2025-02-13","enforcement_action_date":null,"summary":"","event_id":"ba7d325d-24b4-4497-acbe-0c14bdd2ae07","severity_score":30},{"record_id":"cc971353-822b-4e51-a5ae-9a2c10cc83b3","source_event_group_id":"c7d4540a-cdef-49f5-b2d6-2013b836ebbc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Somnia, Inc.","state":"NY","individuals_affected":19069,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"","event_id":"c7d4540a-cdef-49f5-b2d6-2013b836ebbc","severity_score":70},{"record_id":"7a11b050-754b-4152-830b-f6baef4d8a6c","source_event_group_id":"ff4fd287-bb99-46f0-b12f-f48678eceffe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Children's Dental Center at Preston Trail, P.C. d/b/a Park Place Pediatric Dentistry (Arlington, TX)","state":"TN","individuals_affected":1690,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"","event_id":"ff4fd287-bb99-46f0-b12f-f48678eceffe","severity_score":50},{"record_id":"2c2ae8d1-75fa-47ac-9da7-b7127a831885","source_event_group_id":"2a87b8fa-4006-40dd-aa86-29d83548a62e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CDS in Texas","state":"TX","individuals_affected":566,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"","event_id":"2a87b8fa-4006-40dd-aa86-29d83548a62e","severity_score":30},{"record_id":"d52b03f3-5f03-4a5d-ad53-1a8942efa9c2","source_event_group_id":"54b28473-dc25-4f27-a6f9-ccb8c7ce0314","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Restorix Health, Inc.","state":"LA","individuals_affected":38553,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"","event_id":"54b28473-dc25-4f27-a6f9-ccb8c7ce0314","severity_score":70},{"record_id":"50817945-b197-4c62-8284-a5afa2a0aade","source_event_group_id":"1c121761-f858-4660-a19e-ff82afe09510","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Spring Management OK, LLC","state":"OK","individuals_affected":2494,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"","event_id":"1c121761-f858-4660-a19e-ff82afe09510","severity_score":50},{"record_id":"929ca4f1-1169-4410-8f66-ef672c381202","source_event_group_id":"b2097277-4f2e-405e-8b0c-b951ade8a521","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Consultants in Pain Medicine","state":"TX","individuals_affected":1124,"breach_submission_date":"2025-02-16","enforcement_action_date":null,"summary":"","event_id":"b2097277-4f2e-405e-8b0c-b951ade8a521","severity_score":50},{"record_id":"27a3632e-34a1-48ad-9255-8b0fe27eda8e","source_event_group_id":"4bcf3bc8-1c73-4709-9551-884a56e514ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Artistic Family Dental","state":"IN","individuals_affected":3915,"breach_submission_date":"2025-02-25","enforcement_action_date":null,"summary":"","event_id":"4bcf3bc8-1c73-4709-9551-884a56e514ec","severity_score":50},{"record_id":"32bd8d66-5088-440a-88a8-de203c6e87c3","source_event_group_id":"c7869ce0-1b2b-48dd-9f3e-27e30200f0e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lake Washington Vascular","state":"WA","individuals_affected":21534,"breach_submission_date":"2025-02-25","enforcement_action_date":null,"summary":"","event_id":"c7869ce0-1b2b-48dd-9f3e-27e30200f0e6","severity_score":70},{"record_id":"d1732574-0b66-4277-9b0a-716e3aa6385b","source_event_group_id":"e3246486-2588-42fd-8f8f-72da05b7c1f2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Palmetto Operating LLC d/b/a Palmetto Subacute Care Center (‘Palmetto’)","state":"FL","individuals_affected":2746,"breach_submission_date":"2025-02-26","enforcement_action_date":null,"summary":"","event_id":"e3246486-2588-42fd-8f8f-72da05b7c1f2","severity_score":50},{"record_id":"104bc797-9d5d-4cea-8b93-a2535284e4fa","source_event_group_id":"a315d4f7-efa6-4826-9337-ecea62a4fefe","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SMC Corporation of America","state":"IN","individuals_affected":6566,"breach_submission_date":"2025-02-27","enforcement_action_date":null,"summary":"","event_id":"a315d4f7-efa6-4826-9337-ecea62a4fefe","severity_score":50},{"record_id":"7bc705cc-7910-41f9-8528-6fd43c7f7bff","source_event_group_id":"1aab0c8d-a7df-4a48-ba3f-8f9c268901f3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carolina Arthritis Associates","state":"NC","individuals_affected":36961,"breach_submission_date":"2025-02-27","enforcement_action_date":null,"summary":"","event_id":"1aab0c8d-a7df-4a48-ba3f-8f9c268901f3","severity_score":70},{"record_id":"91500830-ed4f-4fea-81c0-c6983aa2936c","source_event_group_id":"0c28ca57-7aaa-4e18-81dc-1b67e33f02cd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"East Hawaii Rehab, Inc. DBA Lehua Physical Therapy and Rehab","state":"HI","individuals_affected":8472,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"0c28ca57-7aaa-4e18-81dc-1b67e33f02cd","severity_score":50},{"record_id":"fdadf5d3-b8f2-4b2d-988a-1b8c0296d71c","source_event_group_id":"8d94f497-e39e-415e-af62-6b26b4031983","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NVW Newco, LLC","state":"AZ","individuals_affected":3232,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"8d94f497-e39e-415e-af62-6b26b4031983","severity_score":50},{"record_id":"daababc0-0f44-418c-9832-10305a12b89e","source_event_group_id":"99df9fe6-6d5c-4bfc-bacf-08d48707b1e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CEI Vision Partners, LLC","state":"MO","individuals_affected":10841,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"99df9fe6-6d5c-4bfc-bacf-08d48707b1e9","severity_score":70},{"record_id":"4c93a427-ca5f-4c91-8b3a-3af94a1c37c8","source_event_group_id":"48841e52-58dd-4ac2-8bc5-5b369d0e4ef8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Legacy Professionals, LLP","state":"IL","individuals_affected":216752,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"48841e52-58dd-4ac2-8bc5-5b369d0e4ef8","severity_score":85},{"record_id":"7d58c819-e05e-49da-90ac-7b401462fd0a","source_event_group_id":"faf406ba-921a-48f9-a1b2-28472d3b7bed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kronick Moskovitz Tiedemann & Girard","state":"CA","individuals_affected":2511,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"faf406ba-921a-48f9-a1b2-28472d3b7bed","severity_score":50},{"record_id":"bc96986b-d2fe-473a-96ac-09211211ba13","source_event_group_id":"b73c5679-1f14-4e78-83c2-b426ef9c88dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southeast Series of Lockton Companies, LLC (Lockton)","state":"GA","individuals_affected":1124727,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"b73c5679-1f14-4e78-83c2-b426ef9c88dc","severity_score":95},{"record_id":"a5abe947-1626-4a5b-b7fb-1612f7af9557","source_event_group_id":"9fd0c08e-b8fb-42d7-8c28-85a7aeb9b41a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Total Medical Imaging","state":"FL","individuals_affected":27000,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"9fd0c08e-b8fb-42d7-8c28-85a7aeb9b41a","severity_score":70},{"record_id":"ef454bd7-face-4600-b969-04244a2604f0","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":624,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":30},{"record_id":"6f4e9914-5d05-47dd-8252-32247c0a2cea","source_event_group_id":"f8b8565c-6682-4ce3-986a-69b1f7aaad85","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Care Alliance","state":"RI","individuals_affected":114975,"breach_submission_date":"2025-03-01","enforcement_action_date":null,"summary":"","event_id":"f8b8565c-6682-4ce3-986a-69b1f7aaad85","severity_score":85},{"record_id":"77c9dc4c-b055-4b08-8737-ff1298831c0f","source_event_group_id":"1490045f-e62e-4a68-b97d-3b297fdea90a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Manchester Rehabilitation and Healthcare Center","state":"CT","individuals_affected":5415,"breach_submission_date":"2025-03-03","enforcement_action_date":null,"summary":"","event_id":"1490045f-e62e-4a68-b97d-3b297fdea90a","severity_score":50},{"record_id":"d11e6d76-1692-4bc2-8963-2d705ddab3ba","source_event_group_id":"76d6c397-8d94-4a48-9d68-9cb0f4a1fa30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kitsap Mental Health Services","state":"WA","individuals_affected":500,"breach_submission_date":"2024-12-16","enforcement_action_date":null,"summary":"","event_id":"76d6c397-8d94-4a48-9d68-9cb0f4a1fa30","severity_score":30},{"record_id":"249dd9fb-745e-423c-a35b-c8fb10652c63","source_event_group_id":"91af1621-babe-4eda-9419-c81f76f4f0f3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"California Correctional Health Care Services","state":"CA","individuals_affected":1416,"breach_submission_date":"2024-12-17","enforcement_action_date":null,"summary":"","event_id":"91af1621-babe-4eda-9419-c81f76f4f0f3","severity_score":50},{"record_id":"821cbf35-7ff7-4a03-ba6e-ef7561d35e43","source_event_group_id":"b4e28dd5-d73b-4591-9a44-d5183a55dc05","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regional Care, Inc.","state":"NE","individuals_affected":225728,"breach_submission_date":"2024-12-17","enforcement_action_date":null,"summary":"","event_id":"b4e28dd5-d73b-4591-9a44-d5183a55dc05","severity_score":85},{"record_id":"04ba2692-d2c0-4fae-88c1-f86301eac077","source_event_group_id":"8ed0818e-6d4e-4fce-891e-da83a1f7c288","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PracticeSuite, Inc.","state":"FL","individuals_affected":13000,"breach_submission_date":"2024-12-17","enforcement_action_date":null,"summary":"","event_id":"8ed0818e-6d4e-4fce-891e-da83a1f7c288","severity_score":70},{"record_id":"e1cee29c-ea9a-4972-adac-b5272b9ae1a0","source_event_group_id":"023cb003-209e-46be-addd-5f44121258b9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CHCM, Inc. dba College Hospital Costa Mesa","state":"CA","individuals_affected":38695,"breach_submission_date":"2024-12-18","enforcement_action_date":null,"summary":"","event_id":"023cb003-209e-46be-addd-5f44121258b9","severity_score":70},{"record_id":"a7b85cc1-7552-45bd-a707-c86ab6823130","source_event_group_id":"45d43e69-7ebb-4ce3-952b-0cb410515605","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Golden Age Home Health Inc.","state":"OK","individuals_affected":2280,"breach_submission_date":"2024-12-18","enforcement_action_date":null,"summary":"","event_id":"45d43e69-7ebb-4ce3-952b-0cb410515605","severity_score":50},{"record_id":"1d7d7626-b9e1-49b1-b31a-9a14b6d4f7dc","source_event_group_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Richmond University Medical Center","state":"NY","individuals_affected":674033,"breach_submission_date":"2024-12-19","enforcement_action_date":null,"summary":"","event_id":"eec72acb-10ae-4733-b98c-58c3414ad7b6","severity_score":95},{"record_id":"83a196b3-b4e6-42e6-90cd-ea9c8a52d433","source_event_group_id":"4fa7b0c5-153e-4fd7-a3fd-1c75bcbaf1fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BCBS of TX","state":"IL","individuals_affected":1028,"breach_submission_date":"2024-12-20","enforcement_action_date":null,"summary":"","event_id":"4fa7b0c5-153e-4fd7-a3fd-1c75bcbaf1fb","severity_score":50},{"record_id":"0715b245-5e9a-4e6f-8bdc-8de9ced873c6","source_event_group_id":"607e7711-ddd7-46cf-99f9-51de4e21a95a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Youth Eastside Services","state":"WA","individuals_affected":501,"breach_submission_date":"2024-12-20","enforcement_action_date":null,"summary":"","event_id":"607e7711-ddd7-46cf-99f9-51de4e21a95a","severity_score":30},{"record_id":"4543d83d-34dd-4638-9c55-4c9fe01807fa","source_event_group_id":"9201143d-4324-4316-88ac-26dd008e8409","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HealthEquity, Inc.","state":"UT","individuals_affected":1549,"breach_submission_date":"2024-12-20","enforcement_action_date":null,"summary":"","event_id":"9201143d-4324-4316-88ac-26dd008e8409","severity_score":50},{"record_id":"093062f9-b6a4-4add-ba45-fd64ec7f4ded","source_event_group_id":"5b31ad66-49b8-4595-8aa3-cbdc7d639394","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"In-Home Attendant Services Ltd.","state":"TX","individuals_affected":22000,"breach_submission_date":"2024-12-20","enforcement_action_date":null,"summary":"","event_id":"5b31ad66-49b8-4595-8aa3-cbdc7d639394","severity_score":70},{"record_id":"827cab69-7f1f-4304-9ec7-33dc49c36cd3","source_event_group_id":"b66e7788-8beb-4095-907e-adca999bec61","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Effortless Office Enterprises, LLC","state":"NV","individuals_affected":3112,"breach_submission_date":"2024-12-20","enforcement_action_date":null,"summary":"","event_id":"b66e7788-8beb-4095-907e-adca999bec61","severity_score":50},{"record_id":"099bcc8f-d121-4a65-b359-746313a818f3","source_event_group_id":"59e0b5d8-af53-4761-8bf4-bfdfb4ee1008","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Khalil Foundation (DBA Khalil Center)","state":"IL","individuals_affected":1153,"breach_submission_date":"2024-12-22","enforcement_action_date":null,"summary":"","event_id":"59e0b5d8-af53-4761-8bf4-bfdfb4ee1008","severity_score":50},{"record_id":"d22f8ef0-1f11-4e18-a221-cd7ad46258be","source_event_group_id":"3d53787b-4b97-4217-b0ef-5ffe03ab43f0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Word & Brown Insurance Administrators, Inc.","state":"CA","individuals_affected":3223,"breach_submission_date":"2024-12-23","enforcement_action_date":null,"summary":"","event_id":"3d53787b-4b97-4217-b0ef-5ffe03ab43f0","severity_score":50},{"record_id":"a5802819-e321-4761-bdb3-fccfde6087b4","source_event_group_id":"c52551bd-fd1c-4de0-934b-10916e9d8e5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dragonfly Health","state":"AZ","individuals_affected":501,"breach_submission_date":"2024-12-27","enforcement_action_date":null,"summary":"","event_id":"c52551bd-fd1c-4de0-934b-10916e9d8e5e","severity_score":30},{"record_id":"d8176ba1-876f-43a7-8270-10ca4d636764","source_event_group_id":"a0d463e3-1d11-4d07-bb6e-c7373bd695f4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Omaha Surgical Center","state":"NE","individuals_affected":1110,"breach_submission_date":"2024-12-30","enforcement_action_date":null,"summary":"","event_id":"a0d463e3-1d11-4d07-bb6e-c7373bd695f4","severity_score":50},{"record_id":"aa239c87-5a72-4be6-88a2-ddd0f803f1e7","source_event_group_id":"752069bf-f6d8-487b-8362-e6dd2dadd0bf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Youngs Counseling, PLLC","state":"TX","individuals_affected":790,"breach_submission_date":"2024-12-30","enforcement_action_date":null,"summary":"","event_id":"752069bf-f6d8-487b-8362-e6dd2dadd0bf","severity_score":30},{"record_id":"ead9770b-56aa-46ed-9868-d964f541d078","source_event_group_id":"47cb7f1a-4010-49b0-a0e9-161bdf9a6a73","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tycon Medical Systems, Inc.","state":"VA","individuals_affected":112847,"breach_submission_date":"2024-12-30","enforcement_action_date":null,"summary":"","event_id":"47cb7f1a-4010-49b0-a0e9-161bdf9a6a73","severity_score":85},{"record_id":"fc67f19f-1334-4537-a974-3d3974ed93bc","source_event_group_id":"cf19cfc6-0954-4482-9a83-b9441af58a13","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Legacy Treatment Services, Inc.","state":"NJ","individuals_affected":29898,"breach_submission_date":"2024-12-31","enforcement_action_date":null,"summary":"","event_id":"cf19cfc6-0954-4482-9a83-b9441af58a13","severity_score":70},{"record_id":"781fcf8d-4b89-4d4d-a5c3-769cc38d4f88","source_event_group_id":"2c42f284-6d1d-4fef-ac7d-b700fb16f6e1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Watsonville Community Hospital","state":"CA","individuals_affected":30312,"breach_submission_date":"2024-12-31","enforcement_action_date":null,"summary":"","event_id":"2c42f284-6d1d-4fef-ac7d-b700fb16f6e1","severity_score":70},{"record_id":"2c747cd7-df72-414b-946b-7875cdf69458","source_event_group_id":"471dfd29-acc0-4347-9df5-3b679281e83d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Plastic Surgery Center","state":"NJ","individuals_affected":64813,"breach_submission_date":"2025-01-03","enforcement_action_date":null,"summary":"","event_id":"471dfd29-acc0-4347-9df5-3b679281e83d","severity_score":70},{"record_id":"c78531c5-bb64-496e-9462-28799bf95714","source_event_group_id":"c3563a7e-7298-4dc4-b7b8-fccdb66e1123","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Buffalo Surgery Center","state":"NY","individuals_affected":64000,"breach_submission_date":"2025-01-04","enforcement_action_date":null,"summary":"","event_id":"c3563a7e-7298-4dc4-b7b8-fccdb66e1123","severity_score":70},{"record_id":"03ebbccc-5fcb-4a78-8e14-d39867d565c7","source_event_group_id":"541261dd-3e0b-4fb6-96a1-9d5a44235b5d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ingham County Medical Care Facility, d/b/a Dobie Road","state":"MI","individuals_affected":3078,"breach_submission_date":"2025-01-05","enforcement_action_date":null,"summary":"","event_id":"541261dd-3e0b-4fb6-96a1-9d5a44235b5d","severity_score":50},{"record_id":"54a4adb1-92e0-455e-b370-23c9ab36e509","source_event_group_id":"7647017e-20a2-46f6-810b-807e1b9f85ca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Los Angeles County Regional Center","state":"CA","individuals_affected":500,"breach_submission_date":"2025-01-06","enforcement_action_date":null,"summary":"","event_id":"7647017e-20a2-46f6-810b-807e1b9f85ca","severity_score":30},{"record_id":"a1f58f90-07f7-4b8c-af84-15597c2b671b","source_event_group_id":"5d3968de-536e-455b-9457-d85b254a2217","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pediatric Home Respiratory Services, LLC d/b/a Pediatric Home Service","state":"MN","individuals_affected":41792,"breach_submission_date":"2025-01-06","enforcement_action_date":null,"summary":"","event_id":"5d3968de-536e-455b-9457-d85b254a2217","severity_score":70},{"record_id":"df0c0c70-69ca-461d-9384-031d1e7bb797","source_event_group_id":"603d7a8e-09bd-4af3-bea8-de0fa60a097e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DentaQuest","state":"WI","individuals_affected":868,"breach_submission_date":"2025-01-06","enforcement_action_date":null,"summary":"","event_id":"603d7a8e-09bd-4af3-bea8-de0fa60a097e","severity_score":30},{"record_id":"c2c882cc-7189-4006-b9f9-952398a277fd","source_event_group_id":"f08eb5b0-ccd7-4412-815d-1e14c23d7aea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Medusind Inc.","state":"FL","individuals_affected":701475,"breach_submission_date":"2025-01-07","enforcement_action_date":null,"summary":"","event_id":"f08eb5b0-ccd7-4412-815d-1e14c23d7aea","severity_score":95},{"record_id":"e032e66e-f802-4668-946f-1dde1ff8ac59","source_event_group_id":"41fed799-07ef-4aaa-b7a4-a4253c6cc709","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Eastern Idaho Public Health","state":"ID","individuals_affected":759,"breach_submission_date":"2025-01-07","enforcement_action_date":null,"summary":"","event_id":"41fed799-07ef-4aaa-b7a4-a4253c6cc709","severity_score":30},{"record_id":"b282c54d-0d8a-4b16-88f5-8a3410d761a4","source_event_group_id":"0e82f5b6-0383-49b4-aa38-54230a144ea2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McNall & Associates, P.C.","state":"AK","individuals_affected":10175,"breach_submission_date":"2025-01-08","enforcement_action_date":null,"summary":"","event_id":"0e82f5b6-0383-49b4-aa38-54230a144ea2","severity_score":70},{"record_id":"1af5dd1b-4851-41c9-b67e-cd7325f5d01a","source_event_group_id":"395a8c77-0100-44cf-856a-673a8fccc6d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"BayMark Health Services, Inc.","state":"TX","individuals_affected":3170,"breach_submission_date":"2025-01-08","enforcement_action_date":null,"summary":"","event_id":"395a8c77-0100-44cf-856a-673a8fccc6d8","severity_score":50},{"record_id":"8c7b6d5f-4711-4482-abbe-53e8d63c88db","source_event_group_id":"15855034-f704-44b7-ac8e-d658a0388180","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Samaritan Counseling Center of the Fox Valley","state":"WI","individuals_affected":956,"breach_submission_date":"2025-01-10","enforcement_action_date":null,"summary":"","event_id":"15855034-f704-44b7-ac8e-d658a0388180","severity_score":30},{"record_id":"c7ab209b-5e32-443e-bc52-33ad5c73c698","source_event_group_id":"50db00d8-6ef7-44ab-b324-5c5ff9b8ea71","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Newport Harbor Pathology Medical Group, Inc.","state":"CA","individuals_affected":119341,"breach_submission_date":"2025-01-10","enforcement_action_date":null,"summary":"","event_id":"50db00d8-6ef7-44ab-b324-5c5ff9b8ea71","severity_score":85},{"record_id":"c19410fa-948e-4d2a-be84-edaaf5826043","source_event_group_id":"ed505947-2034-46ed-afa1-d3ef07eb847c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid America Physician Services","state":"KS","individuals_affected":104513,"breach_submission_date":"2025-01-13","enforcement_action_date":null,"summary":"","event_id":"ed505947-2034-46ed-afa1-d3ef07eb847c","severity_score":85},{"record_id":"bfaf0702-17fc-4436-8247-3216582842a7","source_event_group_id":"eb405b19-4c0e-419e-ad6f-28f8a9914dc4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alliant Health Plans","state":"GA","individuals_affected":695,"breach_submission_date":"2025-01-16","enforcement_action_date":null,"summary":"","event_id":"eb405b19-4c0e-419e-ad6f-28f8a9914dc4","severity_score":30},{"record_id":"23dd15d1-1e5f-4f62-9093-243c380cd875","source_event_group_id":"314562f9-2084-4c1b-9aba-4b876129c26d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Treatment Solutions","state":"NJ","individuals_affected":950,"breach_submission_date":"2025-01-16","enforcement_action_date":null,"summary":"","event_id":"314562f9-2084-4c1b-9aba-4b876129c26d","severity_score":30},{"record_id":"4a572392-10cc-410d-bd05-3e0b4663625a","source_event_group_id":"5eb99eb7-0519-412f-9aef-6188092468c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Health and Human Services Commission","state":"TX","individuals_affected":61104,"breach_submission_date":"2025-01-16","enforcement_action_date":null,"summary":"","event_id":"5eb99eb7-0519-412f-9aef-6188092468c7","severity_score":70},{"record_id":"a2b79154-fc87-45f7-9b2c-f015d5c8f097","source_event_group_id":"00f99441-4ea4-4d33-b320-c76dd19780b7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Asheville Eye Associates, PLLC","state":"NC","individuals_affected":204984,"breach_submission_date":"2025-01-17","enforcement_action_date":null,"summary":"","event_id":"00f99441-4ea4-4d33-b320-c76dd19780b7","severity_score":85},{"record_id":"20da1df2-4a5e-40bf-b1a0-87a01826833c","source_event_group_id":"42340c4a-16c4-4d33-8a94-7e8fc85bfb77","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Allegheny Health Network Home Medical Equipment LLC and Allegheny Health Network Home Infusion LLC","state":"PA","individuals_affected":292773,"breach_submission_date":"2025-01-17","enforcement_action_date":null,"summary":"","event_id":"42340c4a-16c4-4d33-8a94-7e8fc85bfb77","severity_score":85},{"record_id":"3638f6c9-b2fe-49b2-9437-64894b05346c","source_event_group_id":"28d512a7-b7bc-4d82-a560-3183b921d5e5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Behavioral Health Resources","state":"WA","individuals_affected":49213,"breach_submission_date":"2025-01-17","enforcement_action_date":null,"summary":"","event_id":"28d512a7-b7bc-4d82-a560-3183b921d5e5","severity_score":70},{"record_id":"478efda3-18aa-4cac-b508-749a3d4dfcee","source_event_group_id":"1f132a1d-5a86-4098-b00e-728800735b30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Holdrege Memorial Homes, Inc.","state":"NE","individuals_affected":1446,"breach_submission_date":"2025-01-20","enforcement_action_date":null,"summary":"","event_id":"1f132a1d-5a86-4098-b00e-728800735b30","severity_score":50},{"record_id":"f3c6bcfa-d2a4-4885-9751-fc1f904ba7a3","source_event_group_id":"94c8b73b-7b78-4b68-b913-951a15e21d02","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University Diagnostic Medical Imaging, PC","state":"NY","individuals_affected":138080,"breach_submission_date":"2025-01-21","enforcement_action_date":null,"summary":"","event_id":"94c8b73b-7b78-4b68-b913-951a15e21d02","severity_score":85},{"record_id":"5b112c6a-2f52-48bb-8dc8-772148015894","source_event_group_id":"39afdb0c-e6d2-4e45-a598-ac7862cc53be","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Apex Custom Software","state":"TX","individuals_affected":1500,"breach_submission_date":"2025-01-22","enforcement_action_date":null,"summary":"","event_id":"39afdb0c-e6d2-4e45-a598-ac7862cc53be","severity_score":50},{"record_id":"00b1a8af-38fd-4080-9261-7814dbaebcae","source_event_group_id":"5bf24714-8695-43f5-a65b-8b0cc9e4625f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vision Upright MRI","state":"CA","individuals_affected":23031,"breach_submission_date":"2025-03-10","enforcement_action_date":null,"summary":"","event_id":"5bf24714-8695-43f5-a65b-8b0cc9e4625f","severity_score":70},{"record_id":"de2dc3fc-f3ad-402b-9b82-941d29ed7855","source_event_group_id":"9ee48df1-a8bf-4014-8206-f0a4e791bb03","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nice Healthcare Management Company, Inc","state":"MN","individuals_affected":10000,"breach_submission_date":"2025-03-10","enforcement_action_date":null,"summary":"","event_id":"9ee48df1-a8bf-4014-8206-f0a4e791bb03","severity_score":50},{"record_id":"68d5fb2b-9bfc-441a-9cd9-997c53f72edc","source_event_group_id":"730e3ce7-f121-45a6-ab39-4b6262c0345b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OCH Regional Medical Center, MS","state":"MS","individuals_affected":51266,"breach_submission_date":"2025-03-11","enforcement_action_date":null,"summary":"","event_id":"730e3ce7-f121-45a6-ab39-4b6262c0345b","severity_score":70},{"record_id":"adfcd6c4-2c21-41d8-828c-d124965e0660","source_event_group_id":"d2779ec6-3373-4705-acf0-2884e9458f90","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PACE Greater New Orleans","state":"LA","individuals_affected":715,"breach_submission_date":"2025-03-13","enforcement_action_date":null,"summary":"","event_id":"d2779ec6-3373-4705-acf0-2884e9458f90","severity_score":30},{"record_id":"4b985e9a-5fe8-46ce-929b-9b58b1d1f710","source_event_group_id":"9088e4ae-d74f-449c-97d3-04cbc696c3cd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Topy America Inc.","state":"KY","individuals_affected":1827,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"9088e4ae-d74f-449c-97d3-04cbc696c3cd","severity_score":50},{"record_id":"ef7458eb-7fe9-4439-834e-0e547f403ce0","source_event_group_id":"8d0f277e-6a80-4da0-a575-489e2b04e64d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Liberty Resources, Inc.","state":"NY","individuals_affected":103711,"breach_submission_date":"2025-03-04","enforcement_action_date":null,"summary":"","event_id":"8d0f277e-6a80-4da0-a575-489e2b04e64d","severity_score":85},{"record_id":"953f7ffc-2a0e-4cf4-b1a8-1d8e95d9b421","source_event_group_id":"c221b5de-5e43-4e56-bf15-582ec8c210b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hillcrest Convalescent Center, Inc.","state":"NC","individuals_affected":106194,"breach_submission_date":"2025-03-04","enforcement_action_date":null,"summary":"","event_id":"c221b5de-5e43-4e56-bf15-582ec8c210b8","severity_score":85},{"record_id":"3be29fc1-8684-449f-a906-6f613ccda4c1","source_event_group_id":"3a3ca254-37c9-45f8-8f02-52b6d534a34f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Madison County, MS","state":"MS","individuals_affected":6082,"breach_submission_date":"2025-03-05","enforcement_action_date":null,"summary":"","event_id":"3a3ca254-37c9-45f8-8f02-52b6d534a34f","severity_score":50},{"record_id":"4749f4fa-cb42-40b1-b1cd-e3ae1e3549e1","source_event_group_id":"aa84afb3-ab61-4005-a170-eb452e9cc65a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SCLARC","state":"CA","individuals_affected":722,"breach_submission_date":"2025-03-06","enforcement_action_date":null,"summary":"","event_id":"aa84afb3-ab61-4005-a170-eb452e9cc65a","severity_score":30},{"record_id":"3e9586dc-f907-4e28-80a7-6f53f07e09f7","source_event_group_id":"ff69310b-442b-49c1-afc6-561e106b4a07","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Altior Healthcare, LLC","state":"CA","individuals_affected":1002,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"ff69310b-442b-49c1-afc6-561e106b4a07","severity_score":50},{"record_id":"718c2b12-8e62-42d9-8938-48e10a4ac1ef","source_event_group_id":"82adcb3d-f749-4fa0-b814-09aba20766ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Whitman County Public Hospital District No. 3","state":"WA","individuals_affected":63453,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"82adcb3d-f749-4fa0-b814-09aba20766ec","severity_score":70},{"record_id":"b79d9a82-72c1-41c8-86d4-9266bdba7a42","source_event_group_id":"9ee64484-f7ce-46bb-bb7c-821cc3b5ce88","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Summit Healthcare Medical Associates","state":"AZ","individuals_affected":1861,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"9ee64484-f7ce-46bb-bb7c-821cc3b5ce88","severity_score":50},{"record_id":"5105291c-faa5-4ecf-9988-4f133ee8894c","source_event_group_id":"4db1500c-8643-435d-9254-2dcbbe17c43f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross and Blue Shield of Illinois","state":"IL","individuals_affected":6903,"breach_submission_date":"2025-04-13","enforcement_action_date":null,"summary":"","event_id":"4db1500c-8643-435d-9254-2dcbbe17c43f","severity_score":50},{"record_id":"5a7610e9-f5ef-4a8e-a61f-75efcea89f28","source_event_group_id":"4db1500c-8643-435d-9254-2dcbbe17c43f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross and Blue Shield of Oklahoma","state":"IL","individuals_affected":1020,"breach_submission_date":"2025-04-13","enforcement_action_date":null,"summary":"","event_id":"4db1500c-8643-435d-9254-2dcbbe17c43f","severity_score":50},{"record_id":"65bc59ff-fdca-4379-ab7f-e9fb95aa0777","source_event_group_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross and Blue Shield of Texas","state":"IL","individuals_affected":12086,"breach_submission_date":"2025-04-13","enforcement_action_date":null,"summary":"","event_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","severity_score":70},{"record_id":"187be8e3-c0ff-4c07-adfe-c0837ba62935","source_event_group_id":"4ab8188e-7bdf-4873-be29-6145bb6bef83","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health Care Service Corporation","state":"IL","individuals_affected":2944,"breach_submission_date":"2025-04-13","enforcement_action_date":null,"summary":"","event_id":"4ab8188e-7bdf-4873-be29-6145bb6bef83","severity_score":50},{"record_id":"f94bc644-5242-409c-8a5a-41b0214b80ce","source_event_group_id":"2aa2d948-2cc3-4e91-9f17-0658f9c68951","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AHS Sherman LLC dba AHS Sherman Medical Center","state":"TX","individuals_affected":908,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"","event_id":"2aa2d948-2cc3-4e91-9f17-0658f9c68951","severity_score":30},{"record_id":"fbe81c64-e9a9-474e-a440-a0a3848f7b0d","source_event_group_id":"7ce98fa7-311e-45ed-af2c-fb1caa5c7fdb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bell Ambulance, Inc.","state":"WI","individuals_affected":114000,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"","event_id":"7ce98fa7-311e-45ed-af2c-fb1caa5c7fdb","severity_score":85},{"record_id":"48efdea1-f9bc-4ceb-bc5b-ff86ad92bb58","source_event_group_id":"6d1c2ca4-9afb-4560-b3e5-c6a90607b93b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Scharnhorst Ast Kennard Griffin PC","state":"MO","individuals_affected":639,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"","event_id":"6d1c2ca4-9afb-4560-b3e5-c6a90607b93b","severity_score":30},{"record_id":"09479997-20f0-4128-8f03-5721b79d8554","source_event_group_id":"1e3609e8-43eb-4995-a140-78d8722067f1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The City of Long Beach, CA","state":"CA","individuals_affected":258191,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"","event_id":"1e3609e8-43eb-4995-a140-78d8722067f1","severity_score":85},{"record_id":"07892ba2-94a0-4186-91f0-d81d3b795775","source_event_group_id":"34c061ad-4526-45d5-8150-f32e27981112","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Magnolia Manor Inc.","state":"GA","individuals_affected":960,"breach_submission_date":"2025-04-15","enforcement_action_date":null,"summary":"","event_id":"34c061ad-4526-45d5-8150-f32e27981112","severity_score":30},{"record_id":"d5283363-bfe1-4b74-b038-9e9701c97223","source_event_group_id":"d495db69-7375-464b-81a0-293ed6515eb6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"44North","state":"MI","individuals_affected":2158,"breach_submission_date":"2026-02-16","enforcement_action_date":null,"summary":"","event_id":"d495db69-7375-464b-81a0-293ed6515eb6","severity_score":50},{"record_id":"ece97495-8b6a-4f32-8745-aada473b3371","source_event_group_id":"b7257073-2159-4d24-8694-be0dbf9bade9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Thrive Physical Therapy Partners","state":"IL","individuals_affected":986,"breach_submission_date":"2025-04-16","enforcement_action_date":null,"summary":"","event_id":"b7257073-2159-4d24-8694-be0dbf9bade9","severity_score":30},{"record_id":"59e8d1ab-1fd5-4f93-b063-2d55f698b0be","source_event_group_id":"bccbc660-d096-420a-8dcc-7ca0fdb14c61","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Recovery Epicenter Foundation","state":"FL","individuals_affected":800,"breach_submission_date":"2025-04-16","enforcement_action_date":null,"summary":"","event_id":"bccbc660-d096-420a-8dcc-7ca0fdb14c61","severity_score":30},{"record_id":"b05083ee-bf39-448c-9a0d-dced117e44c8","source_event_group_id":"7493ed14-8984-472e-9552-43f97f52cd07","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HEALTH AND WELLNESS OF TEXAS","state":"TX","individuals_affected":500,"breach_submission_date":"2025-04-16","enforcement_action_date":null,"summary":"","event_id":"7493ed14-8984-472e-9552-43f97f52cd07","severity_score":30},{"record_id":"0f6eabe0-0622-43b5-af34-db587e5ff8ee","source_event_group_id":"4463a23b-3357-4f14-8d2b-2d60c8ce982f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cardiology Associates of Fredericksburg","state":"VA","individuals_affected":75476,"breach_submission_date":"2025-04-17","enforcement_action_date":null,"summary":"","event_id":"4463a23b-3357-4f14-8d2b-2d60c8ce982f","severity_score":70},{"record_id":"8fba3f16-1716-42af-a526-2257e89bfc25","source_event_group_id":"48e498f2-47b2-413f-9ce2-72e924c2eec4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"90 Degree Benefits, Inc. – St. Paul","state":"WI","individuals_affected":1268,"breach_submission_date":"2025-04-18","enforcement_action_date":null,"summary":"","event_id":"48e498f2-47b2-413f-9ce2-72e924c2eec4","severity_score":50},{"record_id":"209465fe-0a90-43cd-94bf-3a39b1524c7d","source_event_group_id":"77280d05-b2b4-4896-954d-4a0c20360586","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Onsite Mammography","state":"MA","individuals_affected":357265,"breach_submission_date":"2025-04-21","enforcement_action_date":null,"summary":"","event_id":"77280d05-b2b4-4896-954d-4a0c20360586","severity_score":85},{"record_id":"dddd28c2-b006-4726-9b5e-325e601e640d","source_event_group_id":"c39d3b30-3bdf-4960-8acd-ecf770870d30","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Charleston Fire Department","state":"WV","individuals_affected":2583,"breach_submission_date":"2025-04-22","enforcement_action_date":null,"summary":"","event_id":"c39d3b30-3bdf-4960-8acd-ecf770870d30","severity_score":50},{"record_id":"6992a666-f1de-401f-9ab5-b9fa12565bde","source_event_group_id":"c219473d-75ba-4464-be8c-2a5c9f64e4b9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Icon Family Healthcare LLC","state":"CA","individuals_affected":1800,"breach_submission_date":"2025-04-22","enforcement_action_date":null,"summary":"","event_id":"c219473d-75ba-4464-be8c-2a5c9f64e4b9","severity_score":50},{"record_id":"d454e9ce-28ff-4af7-9e8b-0b4bce124cb5","source_event_group_id":"1ab6fd8f-92d8-416a-9e81-b758ff27b5be","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marc Irwin Sharfman, M.D., P.A.","state":"FL","individuals_affected":650,"breach_submission_date":"2025-04-23","enforcement_action_date":null,"summary":"","event_id":"1ab6fd8f-92d8-416a-9e81-b758ff27b5be","severity_score":30},{"record_id":"1e4514f0-557f-43a8-9e14-531f45c90155","source_event_group_id":"07575899-3901-4d4f-a305-51a2fdfc9e31","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Orthopaedic Specialists of Connecticut","state":"CT","individuals_affected":22541,"breach_submission_date":"2025-04-23","enforcement_action_date":null,"summary":"","event_id":"07575899-3901-4d4f-a305-51a2fdfc9e31","severity_score":70},{"record_id":"2f327528-ba7f-4171-9dd2-ec3174a73933","source_event_group_id":"a550edaf-60d4-4fce-a4cb-15beb39b5762","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cache Valley Ear Nose & Throat","state":"UT","individuals_affected":26469,"breach_submission_date":"2025-04-24","enforcement_action_date":null,"summary":"","event_id":"a550edaf-60d4-4fce-a4cb-15beb39b5762","severity_score":70},{"record_id":"14d00cf1-ae7b-48f1-a32b-f65b973e69bb","source_event_group_id":"45267360-a4ac-4ea3-a3fd-b14b8fe2f92c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Drug and Alcohol Treatment Services, Inc.","state":"PA","individuals_affected":22215,"breach_submission_date":"2025-04-24","enforcement_action_date":null,"summary":"","event_id":"45267360-a4ac-4ea3-a3fd-b14b8fe2f92c","severity_score":70},{"record_id":"63ec29fd-36b6-4f85-8f37-f7d50f68d3a2","source_event_group_id":"c9413242-618e-46bd-abbb-991a2950a7d0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Palo Verde Hospital","state":"CA","individuals_affected":594,"breach_submission_date":"2025-04-24","enforcement_action_date":null,"summary":"","event_id":"c9413242-618e-46bd-abbb-991a2950a7d0","severity_score":30},{"record_id":"56286ac4-c834-422b-b89c-72b762462816","source_event_group_id":"0d00f6cd-453f-4cac-8721-675eaac9c561","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Brainard Surgery Center LLC","state":"OH","individuals_affected":501,"breach_submission_date":"2025-04-24","enforcement_action_date":null,"summary":"","event_id":"0d00f6cd-453f-4cac-8721-675eaac9c561","severity_score":30},{"record_id":"5cd2f2b6-74f1-443c-b0b5-f8eef4b51524","source_event_group_id":"e9abe289-6260-4dfe-b8db-286d8430376a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Carlton County Public Health and Human Services","state":"MN","individuals_affected":3502,"breach_submission_date":"2025-04-25","enforcement_action_date":null,"summary":"","event_id":"e9abe289-6260-4dfe-b8db-286d8430376a","severity_score":50},{"record_id":"3affe2a1-bef5-4af6-83f2-97bd3d266c0b","source_event_group_id":"7d2383ed-17ad-4e5d-b277-e25120e57329","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Maximus, Inc.","state":"VA","individuals_affected":4529,"breach_submission_date":"2025-04-25","enforcement_action_date":null,"summary":"","event_id":"7d2383ed-17ad-4e5d-b277-e25120e57329","severity_score":50},{"record_id":"73adbc51-cc98-4167-9114-b9d478003a56","source_event_group_id":"e8dcd8ae-22dc-46ab-a1ff-efda6ac82767","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ascension Health","state":"MO","individuals_affected":437329,"breach_submission_date":"2025-04-28","enforcement_action_date":null,"summary":"","event_id":"e8dcd8ae-22dc-46ab-a1ff-efda6ac82767","severity_score":85},{"record_id":"a3549a1f-79a7-48eb-8263-cab0b02ec7ff","source_event_group_id":"66af0bc4-cf11-4612-b027-ad3878de2e80","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Physician Wound Solutions, LLC dba Apollo Medical Supply","state":"FL","individuals_affected":3561,"breach_submission_date":"2025-04-29","enforcement_action_date":null,"summary":"","event_id":"66af0bc4-cf11-4612-b027-ad3878de2e80","severity_score":50},{"record_id":"e84d9899-3a7d-4c0b-a9b4-bbd6656f7e32","source_event_group_id":"315a2762-6a4e-4f54-b942-9360b8e20782","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Christian Health Center","state":"IL","individuals_affected":12500,"breach_submission_date":"2025-04-30","enforcement_action_date":null,"summary":"","event_id":"315a2762-6a4e-4f54-b942-9360b8e20782","severity_score":70},{"record_id":"f64d6952-5f08-4625-b291-5c2168b3701e","source_event_group_id":"2fda27b9-041e-43c6-b05f-883ecc542290","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Berkeley Research Group, LLC","state":"CA","individuals_affected":500,"breach_submission_date":"2025-04-30","enforcement_action_date":null,"summary":"","event_id":"2fda27b9-041e-43c6-b05f-883ecc542290","severity_score":30},{"record_id":"b16ca9b2-96dd-4806-8092-691b18330714","source_event_group_id":"788e188c-3363-4536-b218-e81bc9f5558f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Canby Clinic","state":"OR","individuals_affected":549,"breach_submission_date":"2025-04-30","enforcement_action_date":null,"summary":"","event_id":"788e188c-3363-4536-b218-e81bc9f5558f","severity_score":30},{"record_id":"4c288c01-b41d-49ba-806e-3d2c3edd2b66","source_event_group_id":"5fd85bc8-6b5b-42b4-8d82-efd2974010cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sonrisas Dental Health","state":"CA","individuals_affected":15644,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"5fd85bc8-6b5b-42b4-8d82-efd2974010cf","severity_score":70},{"record_id":"d783920d-93be-4631-aa54-eb49d5a16708","source_event_group_id":"29a42c4a-3dde-4761-a310-56358fb41a1e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Shelby Dermatology d.b.a Dermatologists of Birmingham","state":"AL","individuals_affected":86414,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"29a42c4a-3dde-4761-a310-56358fb41a1e","severity_score":70},{"record_id":"5cae254a-22f6-4503-a7d8-040dd3e001bc","source_event_group_id":"8d09b476-0514-4ab3-90f5-97df4e7ef3e5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anesthesia Associates of Morristown, P.A.","state":"NJ","individuals_affected":501,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"8d09b476-0514-4ab3-90f5-97df4e7ef3e5","severity_score":30},{"record_id":"057e427d-ac1f-4784-9a7e-14a87d8da9ec","source_event_group_id":"ad343af9-ce4f-411b-a646-f4825a9eba9f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arizona Arthritis and Rheumatology Associates, P.C.","state":"AZ","individuals_affected":5509,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"ad343af9-ce4f-411b-a646-f4825a9eba9f","severity_score":50},{"record_id":"d40b3b45-3745-4b02-ba23-e6cf0c79a510","source_event_group_id":"84bcd6a7-e80d-464e-818f-e388c2251f4f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DermCare Management","state":"FL","individuals_affected":501,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"84bcd6a7-e80d-464e-818f-e388c2251f4f","severity_score":30},{"record_id":"fb9fdb71-4e2b-4e34-9df2-5c8a97d6975c","source_event_group_id":"57ce78a6-2122-4471-b2f1-eeeecd71382b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Absolute Dental Group, LLC","state":"NV","individuals_affected":501,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"","event_id":"57ce78a6-2122-4471-b2f1-eeeecd71382b","severity_score":30},{"record_id":"308ef173-ddd3-47fb-b193-b071b6f1174c","source_event_group_id":"ce95da8b-f2b5-4a54-bdff-ab0b7c744c88","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CardioVascular Health Clinic","state":"OK","individuals_affected":501,"breach_submission_date":"2025-05-03","enforcement_action_date":null,"summary":"","event_id":"ce95da8b-f2b5-4a54-bdff-ab0b7c744c88","severity_score":30},{"record_id":"39748a33-3fd3-4102-976e-16ee9928fbe1","source_event_group_id":"42865956-6df1-4bdc-9056-b6690bdf209e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Monongalia Health System, Inc.","state":"WV","individuals_affected":4895,"breach_submission_date":"2025-05-03","enforcement_action_date":null,"summary":"","event_id":"42865956-6df1-4bdc-9056-b6690bdf209e","severity_score":50},{"record_id":"702bfbf1-d766-4e51-9fbc-23459ff9e2c3","source_event_group_id":"b60c1874-2dee-42bc-8520-d653166021dd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minnesota Orthodontics and Dentofacial Orthopedics, P.A.","state":"MN","individuals_affected":501,"breach_submission_date":"2025-05-05","enforcement_action_date":null,"summary":"","event_id":"b60c1874-2dee-42bc-8520-d653166021dd","severity_score":30},{"record_id":"c3906a90-dd67-41f9-bcc3-a423e407bc58","source_event_group_id":"b86760b4-26e7-46a6-9852-67386d4a9e7d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Columbia Eye Clinic","state":"SC","individuals_affected":500,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"b86760b4-26e7-46a6-9852-67386d4a9e7d","severity_score":30},{"record_id":"7c22e4ef-b43e-44ee-83c5-b5accea4e850","source_event_group_id":"e0ffffe3-2fd1-4c82-bcbe-38114c44caf9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Baylor Scott & White Texas Spine & Joint Hospital","state":"TX","individuals_affected":1640,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"e0ffffe3-2fd1-4c82-bcbe-38114c44caf9","severity_score":50},{"record_id":"7b8bea96-8157-4c69-8565-9bbf973e4186","source_event_group_id":"f5a5e5bb-8003-4ff7-8f42-061403d59dcd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CDHA Management, LLC and Spark DSO, LLC dba Chord Specialty Dental Partners","state":"TN","individuals_affected":173430,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"f5a5e5bb-8003-4ff7-8f42-061403d59dcd","severity_score":85},{"record_id":"b2838616-5bc1-46a0-8585-8fc4a5fcfc54","source_event_group_id":"206e299f-5fc2-46a7-8256-3123312bb97b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Welts, White, & Fontaine PC","state":"NH","individuals_affected":500,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"206e299f-5fc2-46a7-8256-3123312bb97b","severity_score":30},{"record_id":"e05af23c-10ec-4d45-9a4f-97c2321e80ae","source_event_group_id":"a8a19f64-aa10-4724-9227-a1f425b5c4a9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Klickitat Valley Health","state":"WA","individuals_affected":26339,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"a8a19f64-aa10-4724-9227-a1f425b5c4a9","severity_score":70},{"record_id":"ede86039-55ba-401a-bb72-56042eae6fd4","source_event_group_id":"4d80835c-2e60-40a1-b5f2-631d6a832213","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lena Pope Home Inc.","state":"TX","individuals_affected":3523,"breach_submission_date":"2025-03-17","enforcement_action_date":null,"summary":"","event_id":"4d80835c-2e60-40a1-b5f2-631d6a832213","severity_score":50},{"record_id":"e9133908-a8cb-4e0d-8bd8-1b6787e51dfc","source_event_group_id":"414e5d4a-5db7-4822-9a43-eb8ad8d945a6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heart to Heart Hospice Holdings, LLC","state":"TX","individuals_affected":19034,"breach_submission_date":"2025-03-18","enforcement_action_date":null,"summary":"","event_id":"414e5d4a-5db7-4822-9a43-eb8ad8d945a6","severity_score":70},{"record_id":"a213fcc0-eebd-477d-b217-161b9e3c7a46","source_event_group_id":"da649bb6-4174-44c8-87f3-a6bf2724d366","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Presbyterian Health Plan","state":"NM","individuals_affected":7100,"breach_submission_date":"2025-03-18","enforcement_action_date":null,"summary":"","event_id":"da649bb6-4174-44c8-87f3-a6bf2724d366","severity_score":50},{"record_id":"404c956b-aa9b-4c7d-afb7-7a8f87522947","source_event_group_id":"0c19cd61-5213-4f97-b008-3fd2be4ca663","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dove Healthcare","state":"WI","individuals_affected":16255,"breach_submission_date":"2025-03-18","enforcement_action_date":null,"summary":"","event_id":"0c19cd61-5213-4f97-b008-3fd2be4ca663","severity_score":70},{"record_id":"d1e64f71-8bd9-4590-a1a7-34374cda1b3a","source_event_group_id":"2e213f4d-cdcf-4162-b94e-39c7c0243411","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Pavilion at HealthPark, LLC dba Park Royal Hospital","state":"FL","individuals_affected":9349,"breach_submission_date":"2025-03-18","enforcement_action_date":null,"summary":"","event_id":"2e213f4d-cdcf-4162-b94e-39c7c0243411","severity_score":50},{"record_id":"c174978e-81b0-48cb-9627-c847c589e5b9","source_event_group_id":"e6c12335-f96a-49cf-8be9-ba214af706e7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pinehurst Radiology Associates","state":"NC","individuals_affected":8682,"breach_submission_date":"2025-03-19","enforcement_action_date":null,"summary":"","event_id":"e6c12335-f96a-49cf-8be9-ba214af706e7","severity_score":50},{"record_id":"01a7db04-7573-4637-a94f-0340d9b2f1d1","source_event_group_id":"7b962052-a180-4813-9980-56a45bc4b57e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Millennium Home Health Care","state":"OK","individuals_affected":4743,"breach_submission_date":"2025-03-19","enforcement_action_date":null,"summary":"","event_id":"7b962052-a180-4813-9980-56a45bc4b57e","severity_score":50},{"record_id":"f65d9088-9a46-4aeb-a3d3-61fd3d29463a","source_event_group_id":"28770d78-7b8b-4c34-acef-81705d7a12f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AmeriHealth Caritas Louisiana","state":"LA","individuals_affected":1552,"breach_submission_date":"2025-03-21","enforcement_action_date":null,"summary":"","event_id":"28770d78-7b8b-4c34-acef-81705d7a12f9","severity_score":50},{"record_id":"797b2dd6-8a89-467b-801a-a267b80f1d38","source_event_group_id":"2edebccb-7783-4327-9297-9c1bddc35be2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid Florida Primary Care, PA","state":"FL","individuals_affected":16435,"breach_submission_date":"2025-03-21","enforcement_action_date":null,"summary":"","event_id":"2edebccb-7783-4327-9297-9c1bddc35be2","severity_score":70},{"record_id":"8fed8198-e07d-4166-a9cc-51f3667592ce","source_event_group_id":"b0cf7d4a-aab4-4d6c-b0d4-4c53154378ff","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MedicareCompareUSA","state":"WA","individuals_affected":5782,"breach_submission_date":"2025-03-21","enforcement_action_date":null,"summary":"","event_id":"b0cf7d4a-aab4-4d6c-b0d4-4c53154378ff","severity_score":50},{"record_id":"46d68c74-d532-46f5-8b1b-52f975ce8191","source_event_group_id":"91c9626c-385d-499f-88f9-d05d0469d057","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bigfork Valley Hospital","state":"MN","individuals_affected":8496,"breach_submission_date":"2025-03-25","enforcement_action_date":null,"summary":"","event_id":"91c9626c-385d-499f-88f9-d05d0469d057","severity_score":50},{"record_id":"88209518-8bcb-4ac7-977b-8fe4d96eb981","source_event_group_id":"89c775c8-c4c0-4976-a020-1b13092cf192","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Concord Orthopaedics","state":"NH","individuals_affected":72815,"breach_submission_date":"2025-03-25","enforcement_action_date":null,"summary":"","event_id":"89c775c8-c4c0-4976-a020-1b13092cf192","severity_score":70},{"record_id":"0c525c76-abcb-44af-aff2-eb18cc8e58f4","source_event_group_id":"10a8c3bd-a79f-4d35-a6e7-ca08e3364a8e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Western Wayne Family Physicians","state":"MI","individuals_affected":62000,"breach_submission_date":"2025-03-26","enforcement_action_date":null,"summary":"","event_id":"10a8c3bd-a79f-4d35-a6e7-ca08e3364a8e","severity_score":70},{"record_id":"16331cf8-f4ae-4fe3-9593-4dfd307f772d","source_event_group_id":"5dc54939-c5a8-453f-90c6-9fc64a9059cb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mercer County Joint Township Community Hospital","state":"OH","individuals_affected":88541,"breach_submission_date":"2025-03-26","enforcement_action_date":null,"summary":"","event_id":"5dc54939-c5a8-453f-90c6-9fc64a9059cb","severity_score":70},{"record_id":"c0bfec57-f60f-4d8b-8941-883060f338a7","source_event_group_id":"82b7c182-ba49-4779-819e-94a68fb851b0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SimonMed Imaging","state":"AZ","individuals_affected":500,"breach_submission_date":"2025-03-27","enforcement_action_date":null,"summary":"","event_id":"82b7c182-ba49-4779-819e-94a68fb851b0","severity_score":30},{"record_id":"5c6ee4db-051e-4a8e-b3b4-b13b3e435970","source_event_group_id":"f3239e8e-2de8-43ae-8660-eb635fa66890","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Frederick Health","state":"MD","individuals_affected":934326,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"","event_id":"f3239e8e-2de8-43ae-8660-eb635fa66890","severity_score":95},{"record_id":"f814da88-ba09-484d-b486-fd667e18877e","source_event_group_id":"ab12029d-576c-44a2-9eef-c0073ceb1970","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mayo Clinic","state":"MN","individuals_affected":1869,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"","event_id":"ab12029d-576c-44a2-9eef-c0073ceb1970","severity_score":50},{"record_id":"3319483e-133f-4746-b230-cf4c5796f5c1","source_event_group_id":"4c5c3ede-11df-4bb5-aec9-50e6b15ca9d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Dental Care, Inc.","state":"MN","individuals_affected":134903,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"","event_id":"4c5c3ede-11df-4bb5-aec9-50e6b15ca9d3","severity_score":85},{"record_id":"ce952b82-a7e4-4d99-8eb3-ed5cf5c8caf8","source_event_group_id":"25ea2ce1-d488-4f03-9a97-05c464b8ead0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Hudson Community Action Corporation","state":"NJ","individuals_affected":501,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"","event_id":"25ea2ce1-d488-4f03-9a97-05c464b8ead0","severity_score":30},{"record_id":"f0cf6bbf-53a2-496b-9208-444ee0377610","source_event_group_id":"7cc16351-ea13-48c9-8c69-9c02569d1c0a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Black Hills Regional Eye Institute","state":"SD","individuals_affected":106763,"breach_submission_date":"2025-03-31","enforcement_action_date":null,"summary":"","event_id":"7cc16351-ea13-48c9-8c69-9c02569d1c0a","severity_score":85},{"record_id":"d55a3c33-dfcf-4cf5-bd7a-04e70c4463b5","source_event_group_id":"6a41ca68-09fd-48f9-9548-405dc798027f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Centers, Inc.","state":"CT","individuals_affected":501,"breach_submission_date":"2025-03-31","enforcement_action_date":null,"summary":"","event_id":"6a41ca68-09fd-48f9-9548-405dc798027f","severity_score":30},{"record_id":"061e1f6d-c8a2-4628-9576-96e932096219","source_event_group_id":"37741720-7d48-4be7-8b02-9c83466f9f0f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central District Health Department of Nebraska","state":"NE","individuals_affected":58519,"breach_submission_date":"2025-04-01","enforcement_action_date":null,"summary":"","event_id":"37741720-7d48-4be7-8b02-9c83466f9f0f","severity_score":70},{"record_id":"70854f31-335d-45fc-b88a-6af5b269acd0","source_event_group_id":"fb3a0b99-504d-49db-9d11-fe86a4a91699","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gardner Health Services","state":"CA","individuals_affected":26000,"breach_submission_date":"2025-04-01","enforcement_action_date":null,"summary":"","event_id":"fb3a0b99-504d-49db-9d11-fe86a4a91699","severity_score":70},{"record_id":"058ba6cd-f9a5-4a1a-9106-c0dffa9ecca8","source_event_group_id":"931f1a09-4c28-4456-ae6b-2ae9d4be68f3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health Services LLC","state":"OH","individuals_affected":75906,"breach_submission_date":"2025-04-01","enforcement_action_date":null,"summary":"","event_id":"931f1a09-4c28-4456-ae6b-2ae9d4be68f3","severity_score":70},{"record_id":"3a4b2e27-685e-4128-bf9b-3b49a2314453","source_event_group_id":"06321d9d-17eb-444b-ac40-485d2e23336f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"True Dental Care For Kids and Adults LLC","state":"PA","individuals_affected":17640,"breach_submission_date":"2025-04-02","enforcement_action_date":null,"summary":"","event_id":"06321d9d-17eb-444b-ac40-485d2e23336f","severity_score":70},{"record_id":"5a4a7dda-a9dc-4a93-af2c-18d744a6a3b5","source_event_group_id":"fdb72c43-e413-4d0d-9314-96d5be62ce9f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Allegany Council on Alcoholism & Substance Abuse, Inc.","state":"NY","individuals_affected":696,"breach_submission_date":"2025-04-02","enforcement_action_date":null,"summary":"","event_id":"fdb72c43-e413-4d0d-9314-96d5be62ce9f","severity_score":30},{"record_id":"8bf85bd1-8ae5-4b90-bd49-977e954f2dee","source_event_group_id":"8589c6c8-2c76-4055-871d-b718d7a12436","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dameron Hospital","state":"CA","individuals_affected":210706,"breach_submission_date":"2025-04-02","enforcement_action_date":null,"summary":"","event_id":"8589c6c8-2c76-4055-871d-b718d7a12436","severity_score":85},{"record_id":"77845246-0bab-476b-97c7-87048331857b","source_event_group_id":"06abffaf-4781-43f5-b54c-fb3085b6afca","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hamilton County Government","state":"TN","individuals_affected":14081,"breach_submission_date":"2025-04-03","enforcement_action_date":null,"summary":"","event_id":"06abffaf-4781-43f5-b54c-fb3085b6afca","severity_score":70},{"record_id":"94bd49bb-8fc2-4852-a8a4-293b54c839d7","source_event_group_id":"2ef5ec68-2f8d-49f0-bc2b-1aefd636d4b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dallas County MHMR dba Metrocare Services","state":"TX","individuals_affected":553,"breach_submission_date":"2025-04-03","enforcement_action_date":null,"summary":"","event_id":"2ef5ec68-2f8d-49f0-bc2b-1aefd636d4b8","severity_score":30},{"record_id":"d939db7b-7c6e-43e8-b7b2-8ee768956ad5","source_event_group_id":"1d87c452-9985-4921-a523-c51011fd91a6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Newburgh Healthcare Residential Center, Inc.","state":"IN","individuals_affected":700,"breach_submission_date":"2025-04-04","enforcement_action_date":null,"summary":"","event_id":"1d87c452-9985-4921-a523-c51011fd91a6","severity_score":30},{"record_id":"7273dad3-7fab-40d6-9c42-0f31d51a8a59","source_event_group_id":"4ea96cb1-4786-4524-811f-5d283f1ab3d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Loretto Hospital","state":"IL","individuals_affected":501,"breach_submission_date":"2025-04-04","enforcement_action_date":null,"summary":"","event_id":"4ea96cb1-4786-4524-811f-5d283f1ab3d8","severity_score":30},{"record_id":"bae15dcb-c04b-4f9e-b2c5-67b069d26b27","source_event_group_id":"91a38184-b833-4b73-bcf0-d77ec920852d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Friendship House, Inc.","state":"NE","individuals_affected":501,"breach_submission_date":"2025-04-04","enforcement_action_date":null,"summary":"","event_id":"91a38184-b833-4b73-bcf0-d77ec920852d","severity_score":30},{"record_id":"25679f7a-65e6-4344-88ff-da442311a4b4","source_event_group_id":"87b33746-351f-411c-bea2-bea9a7512f05","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alabama Ophthalmology Associates","state":"AL","individuals_affected":131576,"breach_submission_date":"2025-04-08","enforcement_action_date":null,"summary":"","event_id":"87b33746-351f-411c-bea2-bea9a7512f05","severity_score":85},{"record_id":"2f70a64d-cab7-4d87-9323-3d4f347ec7f6","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":4700000,"breach_submission_date":"2025-04-09","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":95},{"record_id":"0317c7ac-1675-4ff0-98f3-47c8eaad0816","source_event_group_id":"ba349bc8-317d-48bf-b9f9-6af50745b162","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kelly & Associates Insurance Group, Inc.","state":"MD","individuals_affected":553332,"breach_submission_date":"2025-04-09","enforcement_action_date":null,"summary":"","event_id":"ba349bc8-317d-48bf-b9f9-6af50745b162","severity_score":95},{"record_id":"61579e3f-7c03-45f2-b9ff-4767842b2265","source_event_group_id":"aa62c6ec-a8ac-4c2b-a028-927da81adf7e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cabot Medical Care","state":"AR","individuals_affected":21467,"breach_submission_date":"2025-04-10","enforcement_action_date":null,"summary":"","event_id":"aa62c6ec-a8ac-4c2b-a028-927da81adf7e","severity_score":70},{"record_id":"ce27b6fd-24bb-4117-9e55-8344e4cab3d1","source_event_group_id":"f6250e3b-cc88-47a1-8438-353898584729","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jacksonville Medical Care","state":"AR","individuals_affected":6262,"breach_submission_date":"2025-04-10","enforcement_action_date":null,"summary":"","event_id":"f6250e3b-cc88-47a1-8438-353898584729","severity_score":50},{"record_id":"6c513f6b-3511-4c7f-ab71-b0fbae3b46d8","source_event_group_id":"28e81b30-26a5-4195-8898-0fb6e11ae9d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Parc Provence Memory Care Facility","state":"MO","individuals_affected":13954,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"28e81b30-26a5-4195-8898-0fb6e11ae9d3","severity_score":70},{"record_id":"d8bb3174-51ce-4418-8006-dc1e89736cc0","source_event_group_id":"60b04aa9-a48e-49e4-a1f6-49bf449e1ab7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Gatesworth Senior Living St. Louis","state":"MO","individuals_affected":31124,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"60b04aa9-a48e-49e4-a1f6-49bf449e1ab7","severity_score":70},{"record_id":"516d809b-2c74-402d-97ab-94e97d2b3c7e","source_event_group_id":"e5d72e15-0344-499e-8514-743f1cd6897b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Endue Software","state":"ME","individuals_affected":118028,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"","event_id":"e5d72e15-0344-499e-8514-743f1cd6897b","severity_score":85},{"record_id":"773ddca3-ce0f-44be-b704-de5b21d72bd2","source_event_group_id":"4755bf84-0d75-417e-81eb-00a798efe78a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CVS Caremark","state":"RI","individuals_affected":2599,"breach_submission_date":"2025-05-13","enforcement_action_date":null,"summary":"","event_id":"4755bf84-0d75-417e-81eb-00a798efe78a","severity_score":50},{"record_id":"333d65b4-1193-40fe-b238-ca54e4e17c03","source_event_group_id":"7b6bffb1-1353-4e6c-8de6-f6c582fc0f2d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Union County Children and Youth Services","state":"PA","individuals_affected":501,"breach_submission_date":"2025-05-13","enforcement_action_date":null,"summary":"","event_id":"7b6bffb1-1353-4e6c-8de6-f6c582fc0f2d","severity_score":30},{"record_id":"804a3b90-584f-4e75-b87d-55b69dcf6816","source_event_group_id":"1d6c4d4f-585e-472f-a95d-5a64018b34c6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Doctors Hospital at Renaissance, LTD","state":"TX","individuals_affected":501,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"1d6c4d4f-585e-472f-a95d-5a64018b34c6","severity_score":30},{"record_id":"e27e6df7-85dc-49b8-9707-acc5928285c1","source_event_group_id":"de93eb15-5bfa-4125-b7d1-d67b0312a168","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anne Arundel County Department of Health","state":"MD","individuals_affected":500,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"de93eb15-5bfa-4125-b7d1-d67b0312a168","severity_score":30},{"record_id":"3681b065-2924-4453-b67f-cd31da1f2782","source_event_group_id":"03908a9b-e223-4626-805e-b8f4d9c81d8c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hunter Health Clinic","state":"KS","individuals_affected":28431,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"03908a9b-e223-4626-805e-b8f4d9c81d8c","severity_score":70},{"record_id":"e9ee61b9-c4a7-48dd-bd50-e47634851516","source_event_group_id":"b35c9a7f-1e66-4e38-bb9d-b9e18261fb61","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CareNexa, LLC, doing business as Molecular Testing Labs","state":"WA","individuals_affected":7711,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"b35c9a7f-1e66-4e38-bb9d-b9e18261fb61","severity_score":50},{"record_id":"7b9e710d-2fd2-4946-9631-d1ae0efe8c0d","source_event_group_id":"fd832c86-b6b2-4e4b-843b-01bc6faf2f99","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HopeHealth, Inc.","state":"SC","individuals_affected":5823,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"fd832c86-b6b2-4e4b-843b-01bc6faf2f99","severity_score":50},{"record_id":"2ae94189-c311-4567-b327-10dda4af547c","source_event_group_id":"7b62b953-9bea-4357-9312-8da672fc7b80","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Weiser Valley Hospital District dba Weiser Memorial Hospital","state":"ID","individuals_affected":59990,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"","event_id":"7b62b953-9bea-4357-9312-8da672fc7b80","severity_score":70},{"record_id":"f3ac9c1b-2d71-4659-bbf6-af3d0e216da1","source_event_group_id":"50947985-0ba6-4367-9e9d-9194c90bb529","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Harbin Clinic, LLC","state":"GA","individuals_affected":176149,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"","event_id":"50947985-0ba6-4367-9e9d-9194c90bb529","severity_score":85},{"record_id":"83fcc9dc-d228-4cc1-b4e0-60b2b5af5906","source_event_group_id":"b52604af-d83b-4cb6-b3ab-99dd0a4f5c69","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Compassion Health Care, Inc.","state":"NC","individuals_affected":23282,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"","event_id":"b52604af-d83b-4cb6-b3ab-99dd0a4f5c69","severity_score":70},{"record_id":"0d977beb-b2dc-4c90-b8a7-c6a19aad8b09","source_event_group_id":"f97690b3-a4cb-4939-9017-b7f5edb353aa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mercy Surgical Dressing Group, Inc.","state":"PA","individuals_affected":4159,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"","event_id":"f97690b3-a4cb-4939-9017-b7f5edb353aa","severity_score":50},{"record_id":"5b13a3bb-1199-44bd-8c7b-e4630a5b612f","source_event_group_id":"83f1495c-406b-4634-bcaf-ab512dda2e11","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Insulet Corporation","state":"MA","individuals_affected":841,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"","event_id":"83f1495c-406b-4634-bcaf-ab512dda2e11","severity_score":30},{"record_id":"28a8b9d4-df34-40ad-a163-b890fe774fc7","source_event_group_id":"f8fa1a8e-b726-4ac3-8c89-ac5e31bfdd58","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Hospital of Anaconda","state":"MT","individuals_affected":21243,"breach_submission_date":"2025-05-19","enforcement_action_date":null,"summary":"","event_id":"f8fa1a8e-b726-4ac3-8c89-ac5e31bfdd58","severity_score":70},{"record_id":"0a7c3618-22ff-46c0-9253-2b219ab6da72","source_event_group_id":"467d927e-85a1-41a5-8b4f-e441ccbf7f70","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Instituto de Ojos de Puerto Rico","state":"","individuals_affected":50000,"breach_submission_date":"2025-05-19","enforcement_action_date":null,"summary":"","event_id":"467d927e-85a1-41a5-8b4f-e441ccbf7f70","severity_score":70},{"record_id":"d929e154-6d2c-4c95-8a78-dd69092cb19c","source_event_group_id":"f00e7533-9a20-4e1c-a5c9-4205f4bc53ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HopeWay Foundation","state":"NC","individuals_affected":3523,"breach_submission_date":"2025-05-20","enforcement_action_date":null,"summary":"","event_id":"f00e7533-9a20-4e1c-a5c9-4205f4bc53ec","severity_score":50},{"record_id":"e8692078-ba40-449f-8d6d-cd0591058f90","source_event_group_id":"7c3c7a7a-8299-4153-ac55-cf5b8a7a6588","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Family Health Services, Inc.","state":"NE","individuals_affected":4040,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"7c3c7a7a-8299-4153-ac55-cf5b8a7a6588","severity_score":50},{"record_id":"0130f615-c2a0-41c9-acf1-e968a2a455d4","source_event_group_id":"1e2d135c-11ae-480b-bf0f-b5c2a0b6aa70","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Connections for Kids","state":"ME","individuals_affected":938,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"1e2d135c-11ae-480b-bf0f-b5c2a0b6aa70","severity_score":30},{"record_id":"d05a3bb1-819a-4c79-a170-ee5e784d1d1e","source_event_group_id":"db7a55bb-45c2-45f9-b73a-14b657c8fd1d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Access2Day Health","state":"LA","individuals_affected":4908,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"db7a55bb-45c2-45f9-b73a-14b657c8fd1d","severity_score":50},{"record_id":"1b3c7020-548b-4d37-a732-f0c47612d3e7","source_event_group_id":"9d06b8fa-d9ea-478d-a435-86bfef15c7fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Cooper Health System","state":"NJ","individuals_affected":57412,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"9d06b8fa-d9ea-478d-a435-86bfef15c7fb","severity_score":70},{"record_id":"04e5342b-4e63-4413-98e4-5e82095c17d3","source_event_group_id":"4eefe45e-1fa3-42ca-8c4b-ad6e8f5882ed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"North Shore University Hospital Sleep Disorders Center","state":"NY","individuals_affected":13332,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"4eefe45e-1fa3-42ca-8c4b-ad6e8f5882ed","severity_score":70},{"record_id":"b818f67a-42b7-47da-8285-82b3faef83a7","source_event_group_id":"5c0859da-8e46-428e-accf-7f0cc9dc760d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sports Physical Therapy, Occupational Therapy and Rehabilitation Services of the North Shore, P.L.L.C","state":"NY","individuals_affected":6195,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"5c0859da-8e46-428e-accf-7f0cc9dc760d","severity_score":50},{"record_id":"2c575294-181f-4d40-8b3f-33ca0b90dfe3","source_event_group_id":"9ebadc18-6f7f-408a-bbf6-2bdd8d433388","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NHPP Physical Medicine and Rehabilitation","state":"NY","individuals_affected":1353,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"9ebadc18-6f7f-408a-bbf6-2bdd8d433388","severity_score":50},{"record_id":"c1e9ec19-e45e-4c13-b58c-a0e86a0a109a","source_event_group_id":"9f42ecf5-a183-48b3-9644-ba8c7583b9d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cahaba Center for Mental Health","state":"AL","individuals_affected":501,"breach_submission_date":"2025-05-27","enforcement_action_date":null,"summary":"","event_id":"9f42ecf5-a183-48b3-9644-ba8c7583b9d8","severity_score":30},{"record_id":"f56901d3-8f79-49ec-9351-ed5439685901","source_event_group_id":"f6f49439-c3e2-455f-9fb1-b6841a78ef55","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mary B. Toporcer, MD, P.C.","state":"PA","individuals_affected":501,"breach_submission_date":"2025-05-28","enforcement_action_date":null,"summary":"","event_id":"f6f49439-c3e2-455f-9fb1-b6841a78ef55","severity_score":30},{"record_id":"1dbb0d3f-ff58-4774-b433-d2b3dde3c663","source_event_group_id":"266ec205-68e3-4baa-acae-61bff366a9ac","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Covenant Surgical Partners, Inc.","state":"TX","individuals_affected":88609,"breach_submission_date":"2025-05-28","enforcement_action_date":null,"summary":"","event_id":"266ec205-68e3-4baa-acae-61bff366a9ac","severity_score":70},{"record_id":"d28aa56b-18b1-4ef7-8d50-e6f53b05aca4","source_event_group_id":"043f5a2a-e722-41b6-a867-947def7698bc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Smith Institute for Urology","state":"NY","individuals_affected":2263,"breach_submission_date":"2025-05-28","enforcement_action_date":null,"summary":"","event_id":"043f5a2a-e722-41b6-a867-947def7698bc","severity_score":50},{"record_id":"41a7edae-720b-4d3d-82c0-4c789c75bf70","source_event_group_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Erlanger Health","state":"TN","individuals_affected":3371,"breach_submission_date":"2025-05-28","enforcement_action_date":null,"summary":"","event_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","severity_score":50},{"record_id":"12c790bc-6957-45ce-b984-2599f444cd48","source_event_group_id":"88db3c66-5186-44fd-81b4-f24d16eda828","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gateway Community Services, Inc.","state":"FL","individuals_affected":34498,"breach_submission_date":"2025-05-29","enforcement_action_date":null,"summary":"","event_id":"88db3c66-5186-44fd-81b4-f24d16eda828","severity_score":70},{"record_id":"1fcfd105-7695-4522-9230-790b431de233","source_event_group_id":"f8810f75-9f88-4a44-a271-d4b73517423b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwestern Community Services Board","state":"VA","individuals_affected":21856,"breach_submission_date":"2025-05-29","enforcement_action_date":null,"summary":"","event_id":"f8810f75-9f88-4a44-a271-d4b73517423b","severity_score":70},{"record_id":"b9363dad-e6cf-473f-9713-907b9008a47a","source_event_group_id":"9d844db7-3796-49ab-91b3-5d9e880d69a1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Missouri Department of Conservation","state":"MO","individuals_affected":10260,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"9d844db7-3796-49ab-91b3-5d9e880d69a1","severity_score":70},{"record_id":"9611cb5b-0623-4b16-be0e-2234ab3bc53a","source_event_group_id":"0e35febb-5ea1-417f-9172-2a1ce5cd94fa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Next Step Healthcare LLC","state":"MA","individuals_affected":12090,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"0e35febb-5ea1-417f-9172-2a1ce5cd94fa","severity_score":70},{"record_id":"5e1e02db-18b1-405b-9b39-924b48110521","source_event_group_id":"6a58c8b8-c572-4ef9-8f16-2073a7fddf52","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Horizon Blue Cross Blue Shield NJ","state":"NJ","individuals_affected":781,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"6a58c8b8-c572-4ef9-8f16-2073a7fddf52","severity_score":30},{"record_id":"f30006d4-c158-449b-9bed-a4909d5bcc48","source_event_group_id":"e1235656-9a45-4a4e-9718-3bfc9bfe82e2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oliver Street Dermatology Management LLC","state":"TX","individuals_affected":13717,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"e1235656-9a45-4a4e-9718-3bfc9bfe82e2","severity_score":70},{"record_id":"69cb9bd6-37ad-4979-8f94-a3925aaa3c4e","source_event_group_id":"cce97b5c-fa01-42c6-8537-5369f778bb01","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CareOregon, Inc.","state":"OR","individuals_affected":1786,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"cce97b5c-fa01-42c6-8537-5369f778bb01","severity_score":50},{"record_id":"08cb1f4e-04ad-48ab-8b1d-9d0f105c79f1","source_event_group_id":"6107d64d-f441-44ca-89e5-888ef5d0d6cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Upper Dublin Family Dentistry","state":"PA","individuals_affected":5000,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"","event_id":"6107d64d-f441-44ca-89e5-888ef5d0d6cf","severity_score":50},{"record_id":"1eebc5a0-9e65-4cf8-bafa-aef6347a40d1","source_event_group_id":"9bdb47a1-9d09-4537-bbcf-e6dd11ad2657","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cumberland County Hospital Association","state":"KY","individuals_affected":36659,"breach_submission_date":"2025-06-02","enforcement_action_date":null,"summary":"","event_id":"9bdb47a1-9d09-4537-bbcf-e6dd11ad2657","severity_score":70},{"record_id":"b159f5aa-1b29-47a3-9aeb-5c1c5cdb4e17","source_event_group_id":"0b609dd6-61ea-4382-a2a4-15199f385004","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Renkim Corporation","state":"MI","individuals_affected":46592,"breach_submission_date":"2025-06-02","enforcement_action_date":null,"summary":"","event_id":"0b609dd6-61ea-4382-a2a4-15199f385004","severity_score":70},{"record_id":"32dc5a2d-e3d4-4095-b7e3-71ba32e53536","source_event_group_id":"62602146-03fb-4875-ad1f-39c10adb95a6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jupiter Family Medicine PC","state":"MI","individuals_affected":3000,"breach_submission_date":"2025-06-05","enforcement_action_date":null,"summary":"","event_id":"62602146-03fb-4875-ad1f-39c10adb95a6","severity_score":50},{"record_id":"e90a55bb-c375-4564-89f9-f705f43533d1","source_event_group_id":"7d536eb7-e2a9-40e0-8844-41c6e69b0370","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sensata Technologies, Inc. Health and Welfare Benefit Plan","state":"MA","individuals_affected":15630,"breach_submission_date":"2025-06-05","enforcement_action_date":null,"summary":"","event_id":"7d536eb7-e2a9-40e0-8844-41c6e69b0370","severity_score":70},{"record_id":"65c632f0-3fd7-47e7-88f9-b3135174968d","source_event_group_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"NYC Health + Hospitals","state":"NY","individuals_affected":5728,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"2e8fa112-495f-4af0-ae65-a25025f1b54a","severity_score":50},{"record_id":"b112a17e-8143-4d3f-a2f1-755b39f26125","source_event_group_id":"371718b8-6cc3-4cc0-90af-481ca36bfd2f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Centivo Corporation","state":"GA","individuals_affected":630,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"371718b8-6cc3-4cc0-90af-481ca36bfd2f","severity_score":30},{"record_id":"9d510f4c-1ad9-4530-a041-3cb2993ead3d","source_event_group_id":"26e7720b-13bb-43ea-b019-3f3dce5d153c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Huron Regional Medical Center, Inc.","state":"SD","individuals_affected":25398,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"26e7720b-13bb-43ea-b019-3f3dce5d153c","severity_score":70},{"record_id":"088201bf-9581-4a20-be9f-f105837a3121","source_event_group_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sharp HealthCare","state":"CA","individuals_affected":500,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"3a51c3ef-8b22-4f3b-b99e-54d1dc3b5b62","severity_score":30},{"record_id":"d7fc7646-2af3-424c-b99b-7a8169f2fc75","source_event_group_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Public Health Trust of Miami Dade County DBA Jackson Health System","state":"FL","individuals_affected":2599,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"ccd061cc-aacb-44e9-8fb0-f5ba9b0cd406","severity_score":50},{"record_id":"201dbf4e-5cf1-457d-a04d-41898d536b9a","source_event_group_id":"d596941d-2f4e-4784-b6a9-47c66c1c570f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sharp Community Medical Group","state":"CA","individuals_affected":26976,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"d596941d-2f4e-4784-b6a9-47c66c1c570f","severity_score":70},{"record_id":"8e53a380-a4e2-43ca-91ca-858206c43772","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":1543,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":50},{"record_id":"4a1fdaf4-b439-40f6-bc2e-327957bd5154","source_event_group_id":"51b77160-2b93-43e0-b176-5cfdaaa10107","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Episource, LLC","state":"CA","individuals_affected":5418866,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"51b77160-2b93-43e0-b176-5cfdaaa10107","severity_score":95},{"record_id":"c406ea40-7280-4f1d-9e55-2c03f54c9bfd","source_event_group_id":"c74a9817-a45a-46b0-a1e5-7084eefb48e4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southern Connecticut Vascular Center, LLC","state":"CT","individuals_affected":154417,"breach_submission_date":"2025-06-09","enforcement_action_date":null,"summary":"","event_id":"c74a9817-a45a-46b0-a1e5-7084eefb48e4","severity_score":85},{"record_id":"79ecf3c2-11f7-4b4a-90a3-627796915609","source_event_group_id":"7341d7cf-84c7-4c57-8da4-bde26a5f64c1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Repay Management Services, LLC","state":"GA","individuals_affected":606,"breach_submission_date":"2025-06-10","enforcement_action_date":null,"summary":"","event_id":"7341d7cf-84c7-4c57-8da4-bde26a5f64c1","severity_score":30},{"record_id":"6e5fd86e-2fe9-4307-87df-a4c481ca40c4","source_event_group_id":"6ab3a776-8790-422b-8517-e7fae60955d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"SunLink Health Systems, Inc.","state":"GA","individuals_affected":2856,"breach_submission_date":"2025-05-06","enforcement_action_date":null,"summary":"","event_id":"6ab3a776-8790-422b-8517-e7fae60955d8","severity_score":50},{"record_id":"fdcfc012-6404-4d61-b6b9-2728460c65d5","source_event_group_id":"63e795f5-e7ca-4ba0-a9ec-ca8ceac249e2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Carpenter Health Network","state":"LA","individuals_affected":878,"breach_submission_date":"2025-05-06","enforcement_action_date":null,"summary":"","event_id":"63e795f5-e7ca-4ba0-a9ec-ca8ceac249e2","severity_score":30},{"record_id":"50e8f8b0-b949-41b6-ad19-222ca1bda79f","source_event_group_id":"e6c7fbc1-3de3-452c-b044-63d83cb74f8c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Allied Services Division Welfare Fund","state":"IL","individuals_affected":5727,"breach_submission_date":"2025-05-07","enforcement_action_date":null,"summary":"","event_id":"e6c7fbc1-3de3-452c-b044-63d83cb74f8c","severity_score":50},{"record_id":"d381fc2e-4199-4eac-80d9-ea454eca8f86","source_event_group_id":"e82cbf7b-3c27-4122-8ae2-c78ca6d23609","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Tri-City Cardiology Consultants, P.C.","state":"AZ","individuals_affected":22753,"breach_submission_date":"2025-05-08","enforcement_action_date":null,"summary":"","event_id":"e82cbf7b-3c27-4122-8ae2-c78ca6d23609","severity_score":70},{"record_id":"d7bf7ddb-2394-43b8-a5fc-abca18a6390d","source_event_group_id":"c6f84df8-2cc9-4661-b18d-cf5cad23afa5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"THE CARING HEALTHCARE NETWORK, LLC","state":"PA","individuals_affected":1019,"breach_submission_date":"2025-05-09","enforcement_action_date":null,"summary":"","event_id":"c6f84df8-2cc9-4661-b18d-cf5cad23afa5","severity_score":50},{"record_id":"7283a8f3-0538-4919-a4a5-86695cb0e1d7","source_event_group_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Cross Blue Shield of Texas","state":"IL","individuals_affected":593,"breach_submission_date":"2025-05-09","enforcement_action_date":null,"summary":"","event_id":"2c0c76df-f982-4c75-bcfa-b666e1df858d","severity_score":30},{"record_id":"09eb0464-c1ae-40d3-ae37-26da00d8ce85","source_event_group_id":"b902e40f-22e8-4744-ac01-41e3d2033cce","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Washington Gastroenterology","state":"WA","individuals_affected":501,"breach_submission_date":"2025-05-09","enforcement_action_date":null,"summary":"","event_id":"b902e40f-22e8-4744-ac01-41e3d2033cce","severity_score":30},{"record_id":"783bb93f-a809-4526-9e7b-e9b9b617b6fe","source_event_group_id":"0c1442fe-c5df-4ff9-a727-9bd9749ed684","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clarkston Chiropractic Sports & Wellness","state":"MI","individuals_affected":2757,"breach_submission_date":"2025-06-11","enforcement_action_date":null,"summary":"","event_id":"0c1442fe-c5df-4ff9-a727-9bd9749ed684","severity_score":50},{"record_id":"be934b2e-8778-4bef-b6fa-e6e87cadad08","source_event_group_id":"453e174f-38b5-4fde-a718-ec1b23fffd27","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rural Health Services","state":"SC","individuals_affected":36542,"breach_submission_date":"2025-06-12","enforcement_action_date":null,"summary":"","event_id":"453e174f-38b5-4fde-a718-ec1b23fffd27","severity_score":70},{"record_id":"a22c976a-69f3-4aff-bfdd-9df81a0f089b","source_event_group_id":"13b3bf0f-f0b0-42b0-b50c-27891f63e52d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kelley Drye & Warren LLP","state":"NY","individuals_affected":771,"breach_submission_date":"2025-06-12","enforcement_action_date":null,"summary":"","event_id":"13b3bf0f-f0b0-42b0-b50c-27891f63e52d","severity_score":30},{"record_id":"1d5bb970-ad04-4e55-800b-f266a92c7e71","source_event_group_id":"ea404da1-bb03-4bcb-826d-069d1881c6e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mount Rogers Community Services","state":"VA","individuals_affected":38191,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"ea404da1-bb03-4bcb-826d-069d1881c6e9","severity_score":70},{"record_id":"7d291898-4348-47cc-9e1e-fa293ce8337b","source_event_group_id":"df5e90d4-f73e-45b3-a2db-983e34669fb4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AltaMed Health Services Corporation","state":"CA","individuals_affected":4530,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"df5e90d4-f73e-45b3-a2db-983e34669fb4","severity_score":50},{"record_id":"6fa69334-0cc8-4e42-9bf1-459977861775","source_event_group_id":"bb60a2a5-b123-4928-bbbe-6c29ff73951c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arkansas Urology Associates PA","state":"AR","individuals_affected":642,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"bb60a2a5-b123-4928-bbbe-6c29ff73951c","severity_score":30},{"record_id":"336aa7d5-d993-4d47-a2ed-6cd7e062e02a","source_event_group_id":"203cab64-1bfe-4098-a48b-4fab37ac6af4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Elmore County","state":"ID","individuals_affected":931,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"203cab64-1bfe-4098-a48b-4fab37ac6af4","severity_score":30},{"record_id":"9c022fc3-c549-4d36-b6b2-526e42f4b87e","source_event_group_id":"c36f5726-e944-421d-a442-70aba946d30d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Diversified Services Enterprises","state":"FL","individuals_affected":501,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"c36f5726-e944-421d-a442-70aba946d30d","severity_score":30},{"record_id":"e6aae33b-2150-4e33-a339-3195b6700c86","source_event_group_id":"7734d13e-deeb-44bd-8df8-9820ab53628f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Kentucky Radiology","state":"KY","individuals_affected":166953,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"7734d13e-deeb-44bd-8df8-9820ab53628f","severity_score":85},{"record_id":"d1620fe2-1a05-4b83-a5ab-26c8cf25ee81","source_event_group_id":"f9aade08-47cb-44be-a80e-c9b306fdabb6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Decisely Insurance Services, LLC","state":"GA","individuals_affected":84039,"breach_submission_date":"2025-06-13","enforcement_action_date":null,"summary":"","event_id":"f9aade08-47cb-44be-a80e-c9b306fdabb6","severity_score":70},{"record_id":"76ace9d5-cd3c-4372-9234-e4b468a70981","source_event_group_id":"1f598563-0fb6-4049-a47a-30bf80cd4874","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Broadwest Specialty Surgical Center","state":"IN","individuals_affected":536,"breach_submission_date":"2025-06-17","enforcement_action_date":null,"summary":"","event_id":"1f598563-0fb6-4049-a47a-30bf80cd4874","severity_score":30},{"record_id":"2e857ee3-de49-4972-9ffd-8aa94cca723b","source_event_group_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Winkler County Hospital District","state":"TX","individuals_affected":637,"breach_submission_date":"2025-06-17","enforcement_action_date":null,"summary":"","event_id":"c32fb784-4f5e-47f9-88b1-bbac6b340076","severity_score":30},{"record_id":"f1131307-bbee-47b9-910f-31eca205c137","source_event_group_id":"f21c7f6f-7518-4667-938a-89d1fe16b0f1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marquette County Medical Care Facility","state":"OH","individuals_affected":1499,"breach_submission_date":"2025-06-18","enforcement_action_date":null,"summary":"","event_id":"f21c7f6f-7518-4667-938a-89d1fe16b0f1","severity_score":50},{"record_id":"12553439-8707-4308-b4d1-e48c4814c413","source_event_group_id":"daa3c3ec-8cf5-4970-b1a1-0356100bdaed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Iron County Medical Center","state":"MO","individuals_affected":10239,"breach_submission_date":"2025-06-18","enforcement_action_date":null,"summary":"","event_id":"daa3c3ec-8cf5-4970-b1a1-0356100bdaed","severity_score":70},{"record_id":"58516359-3fb9-4a52-9b30-814e8829ef56","source_event_group_id":"d0e6ee79-3c1e-418d-a289-b7ef1c1da0c4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TRG, LLC","state":"OR","individuals_affected":70434,"breach_submission_date":"2025-06-18","enforcement_action_date":null,"summary":"","event_id":"d0e6ee79-3c1e-418d-a289-b7ef1c1da0c4","severity_score":70},{"record_id":"2066b227-73bb-4429-8e2c-b55d33b15841","source_event_group_id":"3d006c5a-7bd5-42ba-b617-00eb46dcf900","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Skin Care Specialty Physicians","state":"MD","individuals_affected":1038,"breach_submission_date":"2025-06-19","enforcement_action_date":null,"summary":"","event_id":"3d006c5a-7bd5-42ba-b617-00eb46dcf900","severity_score":50},{"record_id":"1ca02fee-a640-40e0-ac80-b48ae840952d","source_event_group_id":"4f630862-f7dd-451e-8d13-9e8df742b5dc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Harbor","state":"OH","individuals_affected":2703,"breach_submission_date":"2025-06-20","enforcement_action_date":null,"summary":"","event_id":"4f630862-f7dd-451e-8d13-9e8df742b5dc","severity_score":50},{"record_id":"fdacc0a9-af49-42be-8b21-21eadfbc5139","source_event_group_id":"37ab3c16-60b1-4738-810c-bdffef84c917","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Retina Associates of Cleveland, Inc.","state":"OH","individuals_affected":3604,"breach_submission_date":"2025-06-20","enforcement_action_date":null,"summary":"","event_id":"37ab3c16-60b1-4738-810c-bdffef84c917","severity_score":50},{"record_id":"a6d26d13-0e70-4aae-95aa-c3504e46a9ec","source_event_group_id":"0a5eab8b-55a1-4bb0-80de-36643f99e061","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Los Angeles County Developmental Services Fdn., Inc. dba Frank D. Lanterman Regional Ctr.","state":"CA","individuals_affected":19000,"breach_submission_date":"2025-06-20","enforcement_action_date":null,"summary":"","event_id":"0a5eab8b-55a1-4bb0-80de-36643f99e061","severity_score":70},{"record_id":"cf20b3fa-b07f-4c7d-9203-58398942f3da","source_event_group_id":"134affb7-d0f0-459f-9bb4-8e48d549642d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Esse Health","state":"MO","individuals_affected":23671,"breach_submission_date":"2025-06-20","enforcement_action_date":null,"summary":"","event_id":"134affb7-d0f0-459f-9bb4-8e48d549642d","severity_score":70},{"record_id":"3cc1810f-6acd-489e-96c9-d354fd176116","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":673,"breach_submission_date":"2025-06-23","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":30},{"record_id":"3f6af550-a4e4-4e11-9b9f-a554bd6e11d0","source_event_group_id":"bac5c9fd-d099-4875-9a97-d82e5f64122f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mainline Health Systems Inc","state":"AR","individuals_affected":101104,"breach_submission_date":"2025-06-23","enforcement_action_date":null,"summary":"","event_id":"bac5c9fd-d099-4875-9a97-d82e5f64122f","severity_score":85},{"record_id":"6083d49d-c6df-4f09-9c91-9d9159b84139","source_event_group_id":"26f3f4b3-ca34-4a35-a23b-3cfd8a9e2d9b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Minneapolis VA Medical Center","state":"MN","individuals_affected":1099,"breach_submission_date":"2025-06-24","enforcement_action_date":null,"summary":"","event_id":"26f3f4b3-ca34-4a35-a23b-3cfd8a9e2d9b","severity_score":50},{"record_id":"2d2a3913-7a38-435c-81ca-822263e6abbe","source_event_group_id":"eee62fa3-f9ef-45c5-9c45-a75c40b61d42","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gardner Orthopedics LLC","state":"FL","individuals_affected":47000,"breach_submission_date":"2025-06-24","enforcement_action_date":null,"summary":"","event_id":"eee62fa3-f9ef-45c5-9c45-a75c40b61d42","severity_score":70},{"record_id":"031625b0-944d-460e-b96c-ea2f6397261b","source_event_group_id":"af103b53-fedd-4583-acd8-8b6d673d787b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McLaren Health Care","state":"MI","individuals_affected":743131,"breach_submission_date":"2025-06-24","enforcement_action_date":null,"summary":"","event_id":"af103b53-fedd-4583-acd8-8b6d673d787b","severity_score":95},{"record_id":"a7314fda-6259-45f5-812f-0c4e2a3a1c2e","source_event_group_id":"856b0268-0672-4c82-a08c-37aa5821b696","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clement Manor","state":"WI","individuals_affected":500,"breach_submission_date":"2025-06-25","enforcement_action_date":null,"summary":"","event_id":"856b0268-0672-4c82-a08c-37aa5821b696","severity_score":30},{"record_id":"ad23000f-77fa-40e8-80cc-f791fa89cbdb","source_event_group_id":"ac9bdb88-3834-4f6a-beba-adb0394c482b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jordan Drug, Inc.","state":"KY","individuals_affected":4947,"breach_submission_date":"2025-06-26","enforcement_action_date":null,"summary":"","event_id":"ac9bdb88-3834-4f6a-beba-adb0394c482b","severity_score":50},{"record_id":"68fedb12-3c83-43b8-be07-f61005627b10","source_event_group_id":"24c95f12-0ae0-4eb4-a3af-629378b813a2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Acadiana Radiation Therapy, LLC","state":"LA","individuals_affected":2219,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"24c95f12-0ae0-4eb4-a3af-629378b813a2","severity_score":50},{"record_id":"e5d4c433-b8ac-4183-89bb-bbefd9c711b9","source_event_group_id":"56be7150-68d7-401d-9b8e-503e81174ed8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bardmoor Cancer Center","state":"FL","individuals_affected":991,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"56be7150-68d7-401d-9b8e-503e81174ed8","severity_score":30},{"record_id":"0b769737-689f-482b-8458-af64a5f084a6","source_event_group_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"California Cancer Associates for Research and Excellence - Fresno","state":"CA","individuals_affected":7670,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","severity_score":50},{"record_id":"63fd1bc2-ae11-4c84-a2fc-3e606c252432","source_event_group_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"California Cancer Associates for Research and Excellence – High Desert","state":"CA","individuals_affected":17250,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","severity_score":70},{"record_id":"281dfaa7-cda5-41b0-a580-7bcf3c2dc2e7","source_event_group_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"California Cancer Associates for Research and Excellence – San Diego","state":"CA","individuals_affected":638,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"ccc7303a-8ac2-462a-8bc6-ef5c061c14cf","severity_score":30},{"record_id":"8b8dee0e-9b5b-4b4b-aa30-aca6af6c274b","source_event_group_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cancer Care Center of North Florida-Lake Butler","state":"FL","individuals_affected":976,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","severity_score":30},{"record_id":"5e245068-55f1-48cb-a0b0-995765dbeee2","source_event_group_id":"aabb14a4-706f-4094-9972-2aa88a9d87ae","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Horizon Healthcare RCM","state":"IN","individuals_affected":210901,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"aabb14a4-706f-4094-9972-2aa88a9d87ae","severity_score":85},{"record_id":"2287ea04-e96d-4bb6-bb74-1df0d7067f21","source_event_group_id":"9e17e069-9354-438e-b458-00870aa7b249","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Denali Biomedical","state":"AK","individuals_affected":2413,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"9e17e069-9354-438e-b458-00870aa7b249","severity_score":50},{"record_id":"e8c64f9a-edca-4f70-b7ed-eb21052fe2d6","source_event_group_id":"bcf9882a-4945-4173-a5a9-c03838f83f2b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"e+ Oncologics Louisiana, LLC","state":"LA","individuals_affected":8270,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"bcf9882a-4945-4173-a5a9-c03838f83f2b","severity_score":50},{"record_id":"a02989e7-78bf-45ba-959b-c6acf6a4f72b","source_event_group_id":"cadaf600-1c3a-41b4-8a10-3b5379d7cd6e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fairbanks Urology","state":"AK","individuals_affected":4289,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"cadaf600-1c3a-41b4-8a10-3b5379d7cd6e","severity_score":50},{"record_id":"4ff28531-b396-4819-9f8e-1ff54fc0ed98","source_event_group_id":"a857bbea-a69f-469e-80b3-cee40d24b11c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Golden State Radiation Oncology","state":"CA","individuals_affected":2130,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"a857bbea-a69f-469e-80b3-cee40d24b11c","severity_score":50},{"record_id":"6a97559d-235c-4111-84d3-61e30e904322","source_event_group_id":"3081e785-5cb2-464a-8fe6-183ccf2980bf","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Integrated Oncology Network","state":"TN","individuals_affected":4174,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"3081e785-5cb2-464a-8fe6-183ccf2980bf","severity_score":50},{"record_id":"edeffe6a-05f8-4287-ac72-4e28a82b2327","source_event_group_id":"689a7cf4-dd1f-4024-909e-15cbef436962","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Compumedics USA, Inc.","state":"NC","individuals_affected":318150,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"689a7cf4-dd1f-4024-909e-15cbef436962","severity_score":85},{"record_id":"51236dbc-70f7-4f83-b941-37abce9b136a","source_event_group_id":"463a9330-146c-4d0f-bd83-8b8b9a15cc47","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heartland Regional Medical Center d/b/a Mosaic Life Care","state":"MO","individuals_affected":145269,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"463a9330-146c-4d0f-bd83-8b8b9a15cc47","severity_score":85},{"record_id":"36b3be53-2664-4e8a-b77b-3b02109c56d8","source_event_group_id":"52ef4e6f-6ea0-4bfb-a84d-c4175e9611eb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Apex Global Solutions, LLC","state":"NY","individuals_affected":14741,"breach_submission_date":"2025-06-10","enforcement_action_date":null,"summary":"","event_id":"52ef4e6f-6ea0-4bfb-a84d-c4175e9611eb","severity_score":70},{"record_id":"50e3d1ac-5c9b-4f44-bf96-527611c9edf9","source_event_group_id":"9f43d9f9-f392-47ce-afc3-d51a386bdfc3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lake City Cancer Care, LLC","state":"FL","individuals_affected":15142,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"9f43d9f9-f392-47ce-afc3-d51a386bdfc3","severity_score":70},{"record_id":"0d30a918-159d-4399-989b-72d24edd07cc","source_event_group_id":"07df0e6b-b784-4947-a854-3ff6d71e142a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mojave Radiation Oncology Medical Group","state":"CA","individuals_affected":4403,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"07df0e6b-b784-4947-a854-3ff6d71e142a","severity_score":50},{"record_id":"cb74e5e8-366e-4225-8768-e3318f587c9e","source_event_group_id":"07df0e6b-b784-4947-a854-3ff6d71e142a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Orange County Radiation Oncology Medical Group","state":"CA","individuals_affected":1911,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"07df0e6b-b784-4947-a854-3ff6d71e142a","severity_score":50},{"record_id":"18e6e9ba-d7d8-43b9-9e9c-b12537817e26","source_event_group_id":"7a6b7f9a-9b70-4b87-883d-3b7d071193b2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of Dallas Northeast","state":"TX","individuals_affected":1935,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"7a6b7f9a-9b70-4b87-883d-3b7d071193b2","severity_score":50},{"record_id":"504f70ae-4ec7-4d0e-9252-93029dc523eb","source_event_group_id":"68b72c74-9073-4c67-9321-4b7b9f5e0d9e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of Houston Medical Center","state":"TX","individuals_affected":1236,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"68b72c74-9073-4c67-9321-4b7b9f5e0d9e","severity_score":50},{"record_id":"6b9bcda1-6920-4c3c-a071-aeb7a9d14b98","source_event_group_id":"81314275-dec9-4644-aa7d-18bd3da934b0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of Northern Colorado","state":"CO","individuals_affected":4824,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"81314275-dec9-4644-aa7d-18bd3da934b0","severity_score":50},{"record_id":"65871da8-5a18-45ab-b505-b63ba65cf89a","source_event_group_id":"432fa692-f4de-4adc-aa74-7f28f47057b8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of Sugar Land","state":"TX","individuals_affected":1808,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"432fa692-f4de-4adc-aa74-7f28f47057b8","severity_score":50},{"record_id":"338f46a7-4ed8-41c1-a395-e04ac5823cca","source_event_group_id":"abc765f4-3cc3-41a7-a472-7e51b4217e36","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of The Woodlands","state":"TX","individuals_affected":2978,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"abc765f4-3cc3-41a7-a472-7e51b4217e36","severity_score":50},{"record_id":"3e9f6142-d0c9-4ee3-86d1-e4ea23c50f9a","source_event_group_id":"f4241432-ea83-4f8d-a4ac-66bb62b335b6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PET Imaging of Tulsa","state":"OK","individuals_affected":3159,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"f4241432-ea83-4f8d-a4ac-66bb62b335b6","severity_score":50},{"record_id":"60523d2f-7ba3-4868-8748-cfa62f8cbd12","source_event_group_id":"c078c682-360b-4996-92d6-c715fc9a90ec","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Oncology Care","state":"WY","individuals_affected":10268,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"c078c682-360b-4996-92d6-c715fc9a90ec","severity_score":70},{"record_id":"4e496d81-37e7-4bba-ac7f-a4b3e7ac095c","source_event_group_id":"5f2e265a-3d96-422f-a2e0-4aee1f49cc7c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PDCM Insurance","state":"IA","individuals_affected":501,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"5f2e265a-3d96-422f-a2e0-4aee1f49cc7c","severity_score":30},{"record_id":"fcb624b6-1dd6-4136-bd16-d2fd39362df9","source_event_group_id":"ea15f28d-3192-428c-9c17-52d7b70a95b4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiation Oncology Network of Southern California, LLC","state":"CA","individuals_affected":12944,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"ea15f28d-3192-428c-9c17-52d7b70a95b4","severity_score":70},{"record_id":"5e047dae-1a0e-4073-8f5d-1698ac71112e","source_event_group_id":"1d08e7bf-315b-442a-9309-c26765c2af90","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"South Georgia Center for Cancer Care, LLC","state":"GA","individuals_affected":4108,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"1d08e7bf-315b-442a-9309-c26765c2af90","severity_score":50},{"record_id":"87beb47e-62a5-42da-b8cd-239f62172b05","source_event_group_id":"da1fd246-ff3c-4a9f-8aa5-a4ded248d32f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Southwest Urology","state":"OH","individuals_affected":7214,"breach_submission_date":"2025-06-27","enforcement_action_date":null,"summary":"","event_id":"da1fd246-ff3c-4a9f-8aa5-a4ded248d32f","severity_score":50},{"record_id":"0f5730be-4070-497e-a828-dcfdc67859bd","source_event_group_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Clinical Practices of the University of Pennsylvania","state":"PA","individuals_affected":1432,"breach_submission_date":"2025-06-30","enforcement_action_date":null,"summary":"","event_id":"6c5dc2db-df09-49a2-aaaf-c2b8b5c6d8aa","severity_score":50},{"record_id":"70d474a0-b48b-4d3e-ba92-b7e1d0c4b15a","source_event_group_id":"4c0f5351-7ca0-4ff4-b3a6-e56d54a6c642","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Centers for Medicare & Medicaid Services","state":"MD","individuals_affected":107154,"breach_submission_date":"2025-06-30","enforcement_action_date":null,"summary":"","event_id":"4c0f5351-7ca0-4ff4-b3a6-e56d54a6c642","severity_score":85},{"record_id":"88417558-100b-4af5-8d78-0e3d23133f1c","source_event_group_id":"67139153-7a34-464b-ba3b-c717a47d183d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Texas Center for Infectious Disease Associates","state":"TX","individuals_affected":19481,"breach_submission_date":"2025-06-30","enforcement_action_date":null,"summary":"","event_id":"67139153-7a34-464b-ba3b-c717a47d183d","severity_score":70},{"record_id":"ee832e43-55d3-4aad-b4ec-e8250dd2390f","source_event_group_id":"1a3f97d3-801f-4b20-a6ed-ae7b2f7c5f46","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiology Associates of Richmond, Inc.","state":"VA","individuals_affected":1419091,"breach_submission_date":"2025-07-01","enforcement_action_date":null,"summary":"","event_id":"1a3f97d3-801f-4b20-a6ed-ae7b2f7c5f46","severity_score":95},{"record_id":"a6183eaf-7497-4510-ad41-7218f2052a1e","source_event_group_id":"c7c10335-7908-4ec9-bade-38829c25ffa8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Urology Associates of Charleston","state":"SC","individuals_affected":2060,"breach_submission_date":"2025-07-03","enforcement_action_date":null,"summary":"","event_id":"c7c10335-7908-4ec9-bade-38829c25ffa8","severity_score":50},{"record_id":"a5f891a6-ad4c-4f0d-8d4f-4d9b708ecee2","source_event_group_id":"f4344a99-4e3d-4b6a-846b-a62cc8a99c6e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arbor Associates, Inc.","state":"MI","individuals_affected":17040,"breach_submission_date":"2025-07-03","enforcement_action_date":null,"summary":"","event_id":"f4344a99-4e3d-4b6a-846b-a62cc8a99c6e","severity_score":70},{"record_id":"7dd126b2-e64f-40e5-997d-6ddd73231145","source_event_group_id":"fc7696b1-114f-43ab-958b-43bfcfdba48f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cierant Corporation","state":"CT","individuals_affected":232506,"breach_submission_date":"2025-07-03","enforcement_action_date":null,"summary":"","event_id":"fc7696b1-114f-43ab-958b-43bfcfdba48f","severity_score":85},{"record_id":"8822c3e6-36fc-4d11-8d58-39637ce25c2b","source_event_group_id":"20597397-b71c-40fc-98d7-a32905b5e437","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Zumpano Patricios, P.A.","state":"FL","individuals_affected":279275,"breach_submission_date":"2025-07-03","enforcement_action_date":null,"summary":"","event_id":"20597397-b71c-40fc-98d7-a32905b5e437","severity_score":85},{"record_id":"b0713242-1586-4023-a790-532d7cb030a6","source_event_group_id":"2d00926e-7d55-4ba1-a612-421943a547f7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of Franklin","state":"WI","individuals_affected":3233,"breach_submission_date":"2025-07-03","enforcement_action_date":null,"summary":"","event_id":"2d00926e-7d55-4ba1-a612-421943a547f7","severity_score":50},{"record_id":"4a976b9c-91e0-4b9c-9976-a4d27c26dae4","source_event_group_id":"3173d8d0-8221-4f9f-a6c2-979b04da1c39","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"K&E Advanced Dentisrty","state":"OH","individuals_affected":1700,"breach_submission_date":"2025-07-07","enforcement_action_date":null,"summary":"","event_id":"3173d8d0-8221-4f9f-a6c2-979b04da1c39","severity_score":50},{"record_id":"79d8f7ad-a8d6-41a3-b2c0-df83562dcdb7","source_event_group_id":"37e8f14b-dde5-4e77-b719-f4b50025ffb5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Community Health Network, Inc.","state":"IN","individuals_affected":15410,"breach_submission_date":"2025-07-07","enforcement_action_date":null,"summary":"","event_id":"37e8f14b-dde5-4e77-b719-f4b50025ffb5","severity_score":70},{"record_id":"3690113d-d693-4526-8060-c5880a64f751","source_event_group_id":"03dad7ac-6d6b-4711-8250-ed65cf9057d8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Complete Care Rehab LLC","state":"MI","individuals_affected":4764,"breach_submission_date":"2025-07-08","enforcement_action_date":null,"summary":"","event_id":"03dad7ac-6d6b-4711-8250-ed65cf9057d8","severity_score":50},{"record_id":"256af308-f661-40f5-8fd2-501d8ab50c34","source_event_group_id":"a2f557e1-c5f6-4e79-902c-0115555a8b62","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ascension Health Services LLC dba Alpha Wellness & Alpha Medical Centre","state":"GA","individuals_affected":1714,"breach_submission_date":"2025-07-08","enforcement_action_date":null,"summary":"","event_id":"a2f557e1-c5f6-4e79-902c-0115555a8b62","severity_score":50},{"record_id":"2f41f31f-a826-42c6-b0c5-5c642cdf397a","source_event_group_id":"c729d74c-e338-4dda-8e8b-de632c86edbd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Florida Lung, Asthma & Sleep Specialists (FLASS)","state":"FL","individuals_affected":10000,"breach_submission_date":"2025-07-09","enforcement_action_date":null,"summary":"","event_id":"c729d74c-e338-4dda-8e8b-de632c86edbd","severity_score":50},{"record_id":"fa71a6e1-9c81-487b-9b6e-bb6ff1227739","source_event_group_id":"d77fe84b-edc6-4ccd-81ec-dc6ae303ec2d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Naper Grove Vision Care","state":"IL","individuals_affected":501,"breach_submission_date":"2025-07-10","enforcement_action_date":null,"summary":"","event_id":"d77fe84b-edc6-4ccd-81ec-dc6ae303ec2d","severity_score":30},{"record_id":"049837d4-6896-4c49-bb0e-0d6f4c2c7229","source_event_group_id":"b5399681-b27b-44e0-a3d4-0a6df96de630","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mountain Laurel Dermatology","state":"NC","individuals_affected":3324,"breach_submission_date":"2025-07-10","enforcement_action_date":null,"summary":"","event_id":"b5399681-b27b-44e0-a3d4-0a6df96de630","severity_score":50},{"record_id":"2bd15859-dd3c-417a-9207-1eb4bfa6ae7d","source_event_group_id":"8b7716cf-58dd-4cfd-bf50-1c0df0072a5c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anne Arundel Dermatology","state":"MD","individuals_affected":1905000,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"8b7716cf-58dd-4cfd-bf50-1c0df0072a5c","severity_score":95},{"record_id":"efdcf4ed-2122-4204-98f4-880ce61f3a8a","source_event_group_id":"94722150-9da9-48a6-b31d-a98ef53e84a7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Covenant Health","state":"MA","individuals_affected":7864,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"94722150-9da9-48a6-b31d-a98ef53e84a7","severity_score":50},{"record_id":"0f2494d2-dc61-4c5e-89de-902e71ab40fc","source_event_group_id":"20e15acc-3359-43fd-a845-0cc98608280a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Picis Clinical Solutions, Inc. d/b/a Medstreaming","state":"MA","individuals_affected":500,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"20e15acc-3359-43fd-a845-0cc98608280a","severity_score":30},{"record_id":"5d49e64e-7a6b-4dc5-ba0c-378e2118efc1","source_event_group_id":"ccc83efa-01ab-425d-9635-e67a62227ddb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Freedom Square of Seminole","state":"FL","individuals_affected":3473,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"ccc83efa-01ab-425d-9635-e67a62227ddb","severity_score":50},{"record_id":"4c0236a9-b7a6-44ec-b7e1-4ac5eb17b4ca","source_event_group_id":"071c198b-d83b-44ac-b8ab-71fe34a5af90","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Freedom Plaza Senior Living","state":"FL","individuals_affected":4847,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"071c198b-d83b-44ac-b8ab-71fe34a5af90","severity_score":50},{"record_id":"60d0959f-f4b4-4bf4-bb6e-52f1876766b7","source_event_group_id":"2bfb80ed-5bbe-4bee-a6fb-8fb46e0ab681","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regency Oaks","state":"FL","individuals_affected":2008,"breach_submission_date":"2025-07-11","enforcement_action_date":null,"summary":"","event_id":"2bfb80ed-5bbe-4bee-a6fb-8fb46e0ab681","severity_score":50},{"record_id":"74026892-115e-498c-a678-d5e6eae69f03","source_event_group_id":"39a38b88-9e49-4cfa-99a3-b6b6bf4e6d71","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Williamsburg Area Medical Assistance Corporation d/b/a Olde Towne Medical and Dental Center (OTMDC)","state":"VA","individuals_affected":2567,"breach_submission_date":"2025-07-13","enforcement_action_date":null,"summary":"","event_id":"39a38b88-9e49-4cfa-99a3-b6b6bf4e6d71","severity_score":50},{"record_id":"58939fd4-7eef-45a1-93e7-a26f8f1ee8e6","source_event_group_id":"da3649a8-3b52-4bfa-b0de-7268c6b6fc2f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwest Medical Homes, LLC","state":"OR","individuals_affected":500,"breach_submission_date":"2025-07-13","enforcement_action_date":null,"summary":"","event_id":"da3649a8-3b52-4bfa-b0de-7268c6b6fc2f","severity_score":30},{"record_id":"17decde3-2e5f-4dec-ae62-4ac5fe7c3958","source_event_group_id":"aa459a7b-51c0-4207-b555-67adf6fb94f7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mid South Rehab Services Inc.","state":"MS","individuals_affected":1316,"breach_submission_date":"2025-07-15","enforcement_action_date":null,"summary":"","event_id":"aa459a7b-51c0-4207-b555-67adf6fb94f7","severity_score":50},{"record_id":"7e774f7a-a2c3-4ebb-b7bc-14616d753ca6","source_event_group_id":"6a04d419-e7ec-42a8-aee6-e29c15bfa54d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Self Regional Healthcare","state":"SC","individuals_affected":26696,"breach_submission_date":"2025-07-17","enforcement_action_date":null,"summary":"","event_id":"6a04d419-e7ec-42a8-aee6-e29c15bfa54d","severity_score":70},{"record_id":"42516acc-2f30-408b-ac42-6c12a2eb831e","source_event_group_id":"c35c027f-94c7-4b07-94da-e2298101b1d6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Human Development Services of Westchester","state":"NY","individuals_affected":501,"breach_submission_date":"2025-07-18","enforcement_action_date":null,"summary":"","event_id":"c35c027f-94c7-4b07-94da-e2298101b1d6","severity_score":30},{"record_id":"44186285-327e-4b02-9428-6cfdddf4b495","source_event_group_id":"12308234-9a75-4088-a9c3-4a6df1488f1c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"ABC Holding Company","state":"WV","individuals_affected":1300,"breach_submission_date":"2025-07-18","enforcement_action_date":null,"summary":"","event_id":"12308234-9a75-4088-a9c3-4a6df1488f1c","severity_score":50},{"record_id":"b47e456d-5909-4eb3-a19b-d87f86db35a4","source_event_group_id":"02f44195-8c82-4d2e-bd6f-c6bb21f50973","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Brien Center for Mental Health and Substance Abuse Services","state":"MA","individuals_affected":5427,"breach_submission_date":"2025-07-18","enforcement_action_date":null,"summary":"","event_id":"02f44195-8c82-4d2e-bd6f-c6bb21f50973","severity_score":50},{"record_id":"9a44fdcc-3a6e-4f99-b7c6-56a293649992","source_event_group_id":"2fc8e5cb-f851-457e-a9f0-abb27c1e17b2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Oregon Specialty Group","state":"OR","individuals_affected":3337,"breach_submission_date":"2025-07-18","enforcement_action_date":null,"summary":"","event_id":"2fc8e5cb-f851-457e-a9f0-abb27c1e17b2","severity_score":50},{"record_id":"f93070f5-e6c6-4abf-a819-b001161cdf48","source_event_group_id":"14132323-d9fc-41ff-adb1-b9a707836d9e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Keys Pathology Associates, PA","state":"FL","individuals_affected":20000,"breach_submission_date":"2025-07-19","enforcement_action_date":null,"summary":"","event_id":"14132323-d9fc-41ff-adb1-b9a707836d9e","severity_score":70},{"record_id":"c211ff44-bd82-4631-bb7d-02166b545488","source_event_group_id":"1aa6060c-9a17-421c-a0ea-4ce8c2a612af","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Equilibria Mental Health Services","state":"PA","individuals_affected":3232,"breach_submission_date":"2025-07-20","enforcement_action_date":null,"summary":"","event_id":"1aa6060c-9a17-421c-a0ea-4ce8c2a612af","severity_score":50},{"record_id":"79b65df3-f257-4c75-bc32-a9b594d9fea0","source_event_group_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Blue Shield of California","state":"CA","individuals_affected":783,"breach_submission_date":"2025-07-21","enforcement_action_date":null,"summary":"","event_id":"1fdbd20f-1938-4c74-8a77-54a8c91fb5fb","severity_score":30},{"record_id":"ca33171d-0331-4653-a8aa-c205ce177570","source_event_group_id":"79bd583a-7376-4338-89c2-89cf79a34338","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dr. Michael Bilikas and Associates d.b.a. 32 Pearls","state":"WA","individuals_affected":23517,"breach_submission_date":"2025-07-21","enforcement_action_date":null,"summary":"","event_id":"79bd583a-7376-4338-89c2-89cf79a34338","severity_score":70},{"record_id":"fe719269-cdb6-4d65-934c-0d8f09182681","source_event_group_id":"2ff04c40-6a40-4be6-aa62-af710d26fd20","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Infinite Services, Inc.","state":"NY","individuals_affected":31742,"breach_submission_date":"2025-07-21","enforcement_action_date":null,"summary":"","event_id":"2ff04c40-6a40-4be6-aa62-af710d26fd20","severity_score":70},{"record_id":"c4deda60-488d-4ac8-92e2-36f6bcfffdfe","source_event_group_id":"74104257-7786-4056-9a42-e909b78f00ae","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OrthoAtlanta LLC","state":"GA","individuals_affected":626,"breach_submission_date":"2025-07-21","enforcement_action_date":null,"summary":"","event_id":"74104257-7786-4056-9a42-e909b78f00ae","severity_score":30},{"record_id":"d7462a37-c41c-4671-90e2-d9240a485f7a","source_event_group_id":"63d9992d-d303-4f37-9d3b-8ab20bdd7b8f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kettering Adventist Healthcare","state":"OH","individuals_affected":501,"breach_submission_date":"2025-07-21","enforcement_action_date":null,"summary":"","event_id":"63d9992d-d303-4f37-9d3b-8ab20bdd7b8f","severity_score":30},{"record_id":"7d812e1f-8d69-4576-90ab-785d06f2caa4","source_event_group_id":"f5415b0b-4bc2-4e36-b646-2a813c5e77b2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gastroenterology Consultants of South Texas","state":"TX","individuals_affected":44579,"breach_submission_date":"2025-07-22","enforcement_action_date":null,"summary":"","event_id":"f5415b0b-4bc2-4e36-b646-2a813c5e77b2","severity_score":70},{"record_id":"44d3d9b2-0637-43f4-bb54-5702a26e6951","source_event_group_id":"98d51340-bdd0-4eac-bbfa-bfff6abea669","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"OB/GYN Medical Center Associates","state":"TX","individuals_affected":2132,"breach_submission_date":"2025-07-23","enforcement_action_date":null,"summary":"","event_id":"98d51340-bdd0-4eac-bbfa-bfff6abea669","severity_score":50},{"record_id":"053a9714-d556-4dea-893e-13a0c1a685ed","source_event_group_id":"27f19d08-0fda-41c0-80d6-f0821278ab82","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McKenzie Memorial Hospital","state":"MI","individuals_affected":58839,"breach_submission_date":"2025-07-24","enforcement_action_date":null,"summary":"","event_id":"27f19d08-0fda-41c0-80d6-f0821278ab82","severity_score":70},{"record_id":"15b7d257-6721-4758-beb2-413056e02208","source_event_group_id":"43259901-1d0c-45b1-b5ae-c6303445caaa","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Nova Recovery Center, LLC d/b/a Nova Recovery Center","state":"TX","individuals_affected":6242,"breach_submission_date":"2025-07-24","enforcement_action_date":null,"summary":"","event_id":"43259901-1d0c-45b1-b5ae-c6303445caaa","severity_score":50},{"record_id":"fc73b507-ab83-4b59-92b7-2ad2925c32a2","source_event_group_id":"058948f2-1cf2-42ce-a2b4-eedc355a02c9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Doctors’ Memorial Hospital","state":"FL","individuals_affected":500,"breach_submission_date":"2025-07-25","enforcement_action_date":null,"summary":"","event_id":"058948f2-1cf2-42ce-a2b4-eedc355a02c9","severity_score":30},{"record_id":"d9d0460d-e4aa-48c7-a2a5-68e5a689ce36","source_event_group_id":"d38cc712-f1c0-41ea-956e-0c40a121e94f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwest Denture Center, Inc.","state":"WA","individuals_affected":19419,"breach_submission_date":"2025-07-25","enforcement_action_date":null,"summary":"","event_id":"d38cc712-f1c0-41ea-956e-0c40a121e94f","severity_score":70},{"record_id":"6133a9fe-84d0-4c5d-8753-260cf9c315d4","source_event_group_id":"5b315efb-e7d6-45c3-907e-30b45c35edf9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wood River Health","state":"RI","individuals_affected":54926,"breach_submission_date":"2025-07-28","enforcement_action_date":null,"summary":"","event_id":"5b315efb-e7d6-45c3-907e-30b45c35edf9","severity_score":70},{"record_id":"781ffdec-db78-4143-b830-ba3eb4b3d2e0","source_event_group_id":"fd148f31-eb1a-4c6c-ab41-551e9a490089","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aflac Incorporated (“Aflac”)","state":"GA","individuals_affected":500,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"fd148f31-eb1a-4c6c-ab41-551e9a490089","severity_score":30},{"record_id":"2ebe670f-2b34-4a41-b09b-8354a0543fb0","source_event_group_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Miami","state":"FL","individuals_affected":2928,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"86b98c53-2ee1-4ea7-a03d-0f0f35e76b18","severity_score":50},{"record_id":"4b8b7b27-14a0-4d18-b867-a173ffef70a5","source_event_group_id":"67cece1f-aed4-478a-86e4-83a63f876e64","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AVALA Holdings","state":"LA","individuals_affected":22732,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"67cece1f-aed4-478a-86e4-83a63f876e64","severity_score":70},{"record_id":"7e169bd0-78e0-47db-a9d9-fc32a204f860","source_event_group_id":"13e74e9e-f7df-4ea7-881d-e513ba15d30a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PhyNet Dermatology, LLC","state":"TN","individuals_affected":1308,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"13e74e9e-f7df-4ea7-881d-e513ba15d30a","severity_score":50},{"record_id":"336df1de-d9fa-44df-b481-9bd9ea513f66","source_event_group_id":"904dcb3c-28de-4b4b-b6aa-7e68f87fea1e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alera Group, Inc.","state":"IL","individuals_affected":155567,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"904dcb3c-28de-4b4b-b6aa-7e68f87fea1e","severity_score":85},{"record_id":"6bf32cf3-e225-446d-8564-8dd4e94e3c48","source_event_group_id":"2d431624-60d5-48f6-943a-f8009eb43d26","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Compass Counseling Services, LLC","state":"FL","individuals_affected":5440,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"2d431624-60d5-48f6-943a-f8009eb43d26","severity_score":50},{"record_id":"f36d051c-f52c-4dbb-a04a-772aaa778fdb","source_event_group_id":"2fdf996b-9d4f-41ac-b9db-f20bfabc1dc9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Center at Cordera","state":"CO","individuals_affected":6057,"breach_submission_date":"2025-07-29","enforcement_action_date":null,"summary":"","event_id":"2fdf996b-9d4f-41ac-b9db-f20bfabc1dc9","severity_score":50},{"record_id":"51ebf855-cca2-4f0c-b28b-9001d09aa020","source_event_group_id":"74ff377e-5a21-47df-a144-62509b26618c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Berkshire Health Systems, Inc.","state":"MA","individuals_affected":1421,"breach_submission_date":"2025-07-30","enforcement_action_date":null,"summary":"","event_id":"74ff377e-5a21-47df-a144-62509b26618c","severity_score":50},{"record_id":"3a2fd6a8-18be-4722-ae01-b5b8ca88923b","source_event_group_id":"aafacbc2-0829-4828-949f-23d942a07d83","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Maine Healthcare","state":"ME","individuals_affected":7223,"breach_submission_date":"2025-07-31","enforcement_action_date":null,"summary":"","event_id":"aafacbc2-0829-4828-949f-23d942a07d83","severity_score":50},{"record_id":"66e96002-25e0-4399-aecd-e33753f2f31e","source_event_group_id":"2c610d4b-cf3c-4bdb-8e38-cc3de26f3fd8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vail Summit Orthopaedics","state":"CO","individuals_affected":5044,"breach_submission_date":"2025-07-31","enforcement_action_date":null,"summary":"","event_id":"2c610d4b-cf3c-4bdb-8e38-cc3de26f3fd8","severity_score":50},{"record_id":"8fdb5735-096c-4078-a163-c6bd9aaa21bb","source_event_group_id":"ef18ebe9-5c6c-4a39-84cd-9f45811d3fd4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Western Montana Clinic PC","state":"MT","individuals_affected":8255,"breach_submission_date":"2025-08-01","enforcement_action_date":null,"summary":"","event_id":"ef18ebe9-5c6c-4a39-84cd-9f45811d3fd4","severity_score":50},{"record_id":"1dec8b9c-93c7-47bb-9c17-82a62e07fd3c","source_event_group_id":"7b816843-99fe-49f1-b48e-f0f21ade7229","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"DaVita Inc.","state":"CO","individuals_affected":2689826,"breach_submission_date":"2025-08-01","enforcement_action_date":null,"summary":"","event_id":"7b816843-99fe-49f1-b48e-f0f21ade7229","severity_score":95},{"record_id":"5df55715-fe7b-4052-87dd-9aaa523449cf","source_event_group_id":"813f3f05-b348-4389-a482-8132fff1b385","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Langdon & Company, LLP Certified Public Accountants","state":"NC","individuals_affected":46061,"breach_submission_date":"2025-08-01","enforcement_action_date":null,"summary":"","event_id":"813f3f05-b348-4389-a482-8132fff1b385","severity_score":70},{"record_id":"3c9e1b74-bbd8-455e-a8e8-464ea601ddc4","source_event_group_id":"04577057-c77d-4641-88b2-e661ba9a381d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Highlands Oncology Group PA","state":"AR","individuals_affected":111766,"breach_submission_date":"2025-08-01","enforcement_action_date":null,"summary":"","event_id":"04577057-c77d-4641-88b2-e661ba9a381d","severity_score":85},{"record_id":"8fc78a1d-9201-45f3-a78b-a334b2df4af0","source_event_group_id":"38a9db05-93a7-4505-9fa1-60ab6834d2f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"West Texas Oral Facial Surgery","state":"TX","individuals_affected":11151,"breach_submission_date":"2025-08-02","enforcement_action_date":null,"summary":"","event_id":"38a9db05-93a7-4505-9fa1-60ab6834d2f9","severity_score":70},{"record_id":"a94e2163-3a7a-4da8-a18e-b7eec6dd3753","source_event_group_id":"f3ae298b-fc0d-47db-ae53-857c8422c7d3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Genoa Community Hospital/LTC","state":"NE","individuals_affected":2544,"breach_submission_date":"2025-08-04","enforcement_action_date":null,"summary":"","event_id":"f3ae298b-fc0d-47db-ae53-857c8422c7d3","severity_score":50},{"record_id":"e404f4c9-cbee-4a33-b3ca-f05b1a225dab","source_event_group_id":"983f8704-780e-4be1-906d-0d5da178232d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MDLand International Corporation","state":"NY","individuals_affected":22586,"breach_submission_date":"2025-08-04","enforcement_action_date":null,"summary":"","event_id":"983f8704-780e-4be1-906d-0d5da178232d","severity_score":70},{"record_id":"09840a6b-b54c-422a-afd7-6c98319b4eb3","source_event_group_id":"579a632d-27a5-4f43-9447-0e35434b94a2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Precision Edodontics of Raleigh","state":"NC","individuals_affected":4022,"breach_submission_date":"2025-08-05","enforcement_action_date":null,"summary":"","event_id":"579a632d-27a5-4f43-9447-0e35434b94a2","severity_score":50},{"record_id":"f18d1f95-5152-4721-888f-0fedb3af6ae5","source_event_group_id":"e64bd585-dbe0-4766-9cc6-7b4a8f03541d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"South Coast Pediatrics","state":"CA","individuals_affected":7000,"breach_submission_date":"2025-08-05","enforcement_action_date":null,"summary":"","event_id":"e64bd585-dbe0-4766-9cc6-7b4a8f03541d","severity_score":50},{"record_id":"aeb9a6e3-b3d8-4046-8c84-c20e7f02d640","source_event_group_id":"21a78429-8231-4aa7-9425-0820c893f353","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PROVAIL","state":"WA","individuals_affected":501,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"21a78429-8231-4aa7-9425-0820c893f353","severity_score":30},{"record_id":"8951e936-5498-43d8-acbe-b284cbdd5fb8","source_event_group_id":"bd6e71dc-e096-490e-bb9b-5b18ecbf7049","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Center for Disability Services, Inc.","state":"NY","individuals_affected":3343,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"bd6e71dc-e096-490e-bb9b-5b18ecbf7049","severity_score":50},{"record_id":"06d0f29b-3568-4b08-912e-680dd9ed62a1","source_event_group_id":"378d22c2-3d9a-4d8c-9e85-fa78203d9926","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Friesen Group","state":"CA","individuals_affected":500,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"378d22c2-3d9a-4d8c-9e85-fa78203d9926","severity_score":30},{"record_id":"58c431a8-9ed1-4822-a749-6e41ae0d53b0","source_event_group_id":"fd148f31-eb1a-4c6c-ab41-551e9a490089","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aflac Incorporated (\\Aflac\\)","state":"GA","individuals_affected":500,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"fd148f31-eb1a-4c6c-ab41-551e9a490089","severity_score":30},{"record_id":"e2359dab-c5df-4b4c-aabd-75721af4ca1f","source_event_group_id":"5c0d1181-05e6-4b0a-a10d-372f12e97f46","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anderson & Kreiger LLP","state":"MA","individuals_affected":1607,"breach_submission_date":"2025-08-08","enforcement_action_date":null,"summary":"","event_id":"5c0d1181-05e6-4b0a-a10d-372f12e97f46","severity_score":50},{"record_id":"b3a70b4c-01e9-4bc5-9974-ad551842f6c2","source_event_group_id":"8f9e64f0-695c-4214-b167-2e3c3c936182","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mission City Community Network, Inc.","state":"CA","individuals_affected":11016,"breach_submission_date":"2025-08-09","enforcement_action_date":null,"summary":"","event_id":"8f9e64f0-695c-4214-b167-2e3c3c936182","severity_score":70},{"record_id":"e1bc931b-9a53-42a7-8c46-ef8b023f858d","source_event_group_id":"9360032e-2fbb-458c-abf4-b90b8700ddb2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Dr. Doug's Pediatric Dentistry","state":"UT","individuals_affected":3590,"breach_submission_date":"2025-08-11","enforcement_action_date":null,"summary":"","event_id":"9360032e-2fbb-458c-abf4-b90b8700ddb2","severity_score":50},{"record_id":"e611c04a-ce4e-4d89-aef2-d656322d10ed","source_event_group_id":"e4c22f6e-ed67-404f-bbe7-9a2542d7bcbb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Altos Inc","state":"CA","individuals_affected":2700,"breach_submission_date":"2025-08-11","enforcement_action_date":null,"summary":"","event_id":"e4c22f6e-ed67-404f-bbe7-9a2542d7bcbb","severity_score":50},{"record_id":"ec49d82a-f0e8-43d2-b581-bfe381b820bd","source_event_group_id":"7768702d-1bc8-4ff8-af1c-eb1d23324f6d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Integrated Orthopedics of Arizona","state":"AZ","individuals_affected":2916,"breach_submission_date":"2025-08-11","enforcement_action_date":null,"summary":"","event_id":"7768702d-1bc8-4ff8-af1c-eb1d23324f6d","severity_score":50},{"record_id":"32286ee2-e714-46f6-93a1-ee074b9951bf","source_event_group_id":"c8d97445-7793-4993-91a1-b461058440d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Manhattan Retirement Foundation d/b/a Meadowlark Hills","state":"KS","individuals_affected":14442,"breach_submission_date":"2026-02-26","enforcement_action_date":null,"summary":"","event_id":"c8d97445-7793-4993-91a1-b461058440d2","severity_score":70},{"record_id":"8f371bb1-793c-4fd9-b30b-3fcfd8320d49","source_event_group_id":"0f084f61-4464-4eb4-a2fc-04d3570f0402","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Zelis Healthcare LLC","state":"MA","individuals_affected":4289,"breach_submission_date":"2025-08-12","enforcement_action_date":null,"summary":"","event_id":"0f084f61-4464-4eb4-a2fc-04d3570f0402","severity_score":50},{"record_id":"0d828951-d030-4bd0-bbd3-e571e59cc127","source_event_group_id":"87be8151-e0ad-4d8f-8fc7-c448fdd4f9e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kathalene Keller Riney NP, LLC DBA Life in Motion Family Wellness Center","state":"IN","individuals_affected":3747,"breach_submission_date":"2025-08-12","enforcement_action_date":null,"summary":"","event_id":"87be8151-e0ad-4d8f-8fc7-c448fdd4f9e9","severity_score":50},{"record_id":"b8248e35-a8ce-4e64-83fb-8cd4bd2a38b0","source_event_group_id":"1d066ee3-e5d8-420f-a95b-092b76cef8da","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Laurel Cancer Care, LLC","state":"MS","individuals_affected":1541,"breach_submission_date":"2025-08-12","enforcement_action_date":null,"summary":"","event_id":"1d066ee3-e5d8-420f-a95b-092b76cef8da","severity_score":50},{"record_id":"e74d5dc6-dd42-4a49-ad14-15e2c2f806e0","source_event_group_id":"f79b9057-b6d2-44b3-bba0-97faecf5fd14","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UnitedHealthcare","state":"CT","individuals_affected":3215,"breach_submission_date":"2025-08-12","enforcement_action_date":null,"summary":"","event_id":"f79b9057-b6d2-44b3-bba0-97faecf5fd14","severity_score":50},{"record_id":"c39e66da-86a1-40d5-97e1-454ed3e90ade","source_event_group_id":"3671ce74-fd42-44ec-8638-2fcb0efa0856","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Welcome Dentistry","state":"CA","individuals_affected":1001,"breach_submission_date":"2025-08-13","enforcement_action_date":null,"summary":"","event_id":"3671ce74-fd42-44ec-8638-2fcb0efa0856","severity_score":50},{"record_id":"e2c9c65d-cdb4-4369-a825-a3de209d1f5c","source_event_group_id":"6b36503b-c346-4704-9afc-60f784cbe5a5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Children's Home & Aid dba Brightpoint","state":"IL","individuals_affected":1051,"breach_submission_date":"2025-08-14","enforcement_action_date":null,"summary":"","event_id":"6b36503b-c346-4704-9afc-60f784cbe5a5","severity_score":50},{"record_id":"435ba546-089f-4d8c-a1b5-a5b81928db10","source_event_group_id":"3671ce74-fd42-44ec-8638-2fcb0efa0856","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Welcome Dentistry","state":"CA","individuals_affected":1001,"breach_submission_date":"2025-08-15","enforcement_action_date":null,"summary":"","event_id":"3671ce74-fd42-44ec-8638-2fcb0efa0856","severity_score":50},{"record_id":"3c7a20d2-4d97-470f-84c4-05114e5fefe9","source_event_group_id":"e9abe289-6260-4dfe-b8db-286d8430376a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Mower County Health and Human Services","state":"MN","individuals_affected":501,"breach_submission_date":"2025-08-15","enforcement_action_date":null,"summary":"","event_id":"e9abe289-6260-4dfe-b8db-286d8430376a","severity_score":30},{"record_id":"9ee44085-5ab7-41c6-817b-72cc74b92229","source_event_group_id":"9f43d9f9-f392-47ce-afc3-d51a386bdfc3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lake City Cancer Care, LLC","state":"FL","individuals_affected":9980,"breach_submission_date":"2025-08-15","enforcement_action_date":null,"summary":"","event_id":"9f43d9f9-f392-47ce-afc3-d51a386bdfc3","severity_score":50},{"record_id":"be8996ce-fdef-47a2-95ac-57bb9ff6d699","source_event_group_id":"7e39ee6c-664d-497c-80ac-a55975d3d788","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CPAP Medical Supplies and Services Inc.","state":"FL","individuals_affected":90133,"breach_submission_date":"2025-08-15","enforcement_action_date":null,"summary":"","event_id":"7e39ee6c-664d-497c-80ac-a55975d3d788","severity_score":70},{"record_id":"d0ff2f3b-75e4-4f51-a76f-0130731d36c9","source_event_group_id":"c873511c-6caa-426f-9538-27a66486ac92","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pediatric Otolaryngology Head & Neck Surgery Associates, P.A.","state":"FL","individuals_affected":43446,"breach_submission_date":"2025-08-18","enforcement_action_date":null,"summary":"","event_id":"c873511c-6caa-426f-9538-27a66486ac92","severity_score":70},{"record_id":"22930f89-7f1c-444d-a58b-d66fcf322110","source_event_group_id":"5ad71e6d-0cbf-4aff-8d98-14b247766f10","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bevel Health Medical Group","state":"PA","individuals_affected":510,"breach_submission_date":"2025-08-18","enforcement_action_date":null,"summary":"","event_id":"5ad71e6d-0cbf-4aff-8d98-14b247766f10","severity_score":30},{"record_id":"407cbafb-9301-4065-97ae-9f418f668b07","source_event_group_id":"701470bf-3559-4120-8539-ba9aeccb4e84","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CareTracker, Inc.","state":"NY","individuals_affected":501,"breach_submission_date":"2025-08-18","enforcement_action_date":null,"summary":"","event_id":"701470bf-3559-4120-8539-ba9aeccb4e84","severity_score":30},{"record_id":"cf58e117-f1ca-4f88-aac1-6383ebc58689","source_event_group_id":"de9f31af-fb3f-4baf-8600-ed57b66feca9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Behavioral Health Group","state":"TX","individuals_affected":597,"breach_submission_date":"2025-08-19","enforcement_action_date":null,"summary":"","event_id":"de9f31af-fb3f-4baf-8600-ed57b66feca9","severity_score":30},{"record_id":"e607098c-74cc-4d52-bc18-e7df7e20f50b","source_event_group_id":"7c6d5160-1d4f-4aad-af2a-ab534a97ca76","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Revere Health PC","state":"UT","individuals_affected":605,"breach_submission_date":"2025-08-19","enforcement_action_date":null,"summary":"","event_id":"7c6d5160-1d4f-4aad-af2a-ab534a97ca76","severity_score":30},{"record_id":"61e4c740-bc3b-481b-93e6-d8fdeb1155c6","source_event_group_id":"33dd2adc-b134-4c7b-9b6f-77f9c91da48a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Indiana Exceptional Medical care LLC","state":"IN","individuals_affected":1850,"breach_submission_date":"2025-08-20","enforcement_action_date":null,"summary":"","event_id":"33dd2adc-b134-4c7b-9b6f-77f9c91da48a","severity_score":50},{"record_id":"4a8158ba-0e4a-420d-b8c0-5904ab33ccf4","source_event_group_id":"66bce8bb-36bf-4c8f-8380-5cb2042ef8f9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Aspire Rural Health System","state":"MI","individuals_affected":138386,"breach_submission_date":"2025-08-20","enforcement_action_date":null,"summary":"","event_id":"66bce8bb-36bf-4c8f-8380-5cb2042ef8f9","severity_score":85},{"record_id":"ac3cc0d4-bb8c-4df3-9ffb-93ec7207c2d8","source_event_group_id":"3d8d5eac-c43f-41ef-a681-417d7e3fcd7d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Arkansas Primary Care Clinic","state":"AR","individuals_affected":2491,"breach_submission_date":"2025-08-20","enforcement_action_date":null,"summary":"","event_id":"3d8d5eac-c43f-41ef-a681-417d7e3fcd7d","severity_score":50},{"record_id":"19aeadbe-98f7-461d-811a-caa40e1b499b","source_event_group_id":"4aea9b8c-d233-4b7b-93b0-c16c88d043ee","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Preferred Hospital Leasing Hemphill Inc., d/b/a Sabine County Hospital","state":"TX","individuals_affected":7600,"breach_submission_date":"2025-08-21","enforcement_action_date":null,"summary":"","event_id":"4aea9b8c-d233-4b7b-93b0-c16c88d043ee","severity_score":50},{"record_id":"68d70a62-9ef8-4a27-a3a2-9717bdf87ef1","source_event_group_id":"3aebcf0e-0717-413f-bd64-99e1fed7772c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vital Imaging Medical Diagnostic Centers, LLC","state":"FL","individuals_affected":260000,"breach_submission_date":"2025-08-21","enforcement_action_date":null,"summary":"","event_id":"3aebcf0e-0717-413f-bd64-99e1fed7772c","severity_score":85},{"record_id":"c4dbe099-2257-498c-a6c0-4b6b43988812","source_event_group_id":"391d2438-866a-43e6-bc65-11e6de1858d2","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"McEwen & Associates","state":"TX","individuals_affected":500,"breach_submission_date":"2025-08-21","enforcement_action_date":null,"summary":"","event_id":"391d2438-866a-43e6-bc65-11e6de1858d2","severity_score":30},{"record_id":"4a9ee274-6ad3-4818-a1af-b6a075d48a4f","source_event_group_id":"46f5da80-bf28-4c92-9abf-a5c0d828145e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Independent Health Association, Inc.","state":"NY","individuals_affected":637,"breach_submission_date":"2025-08-22","enforcement_action_date":null,"summary":"","event_id":"46f5da80-bf28-4c92-9abf-a5c0d828145e","severity_score":30},{"record_id":"bfed98e8-7cc6-4e72-92b6-d8f36cc64c37","source_event_group_id":"c50dd200-46f8-4654-8b60-fe9ebe81e00d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Department of Social Services for Vance County, North Carolina","state":"NC","individuals_affected":501,"breach_submission_date":"2025-08-22","enforcement_action_date":null,"summary":"","event_id":"c50dd200-46f8-4654-8b60-fe9ebe81e00d","severity_score":30},{"record_id":"299cd125-bb29-4e0f-ab0c-6caf4961837f","source_event_group_id":"2e1a00e1-cf54-4356-b36b-cd2ed3a4de71","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Beech Acres Parenting Center","state":"OH","individuals_affected":19315,"breach_submission_date":"2025-08-22","enforcement_action_date":null,"summary":"","event_id":"2e1a00e1-cf54-4356-b36b-cd2ed3a4de71","severity_score":70},{"record_id":"492dbd65-83af-4aa6-b954-dea84f541ac3","source_event_group_id":"8960eb7a-f63c-460e-ba63-b54fdd1e7e5c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"zizzl llc","state":"WI","individuals_affected":2416,"breach_submission_date":"2025-08-22","enforcement_action_date":null,"summary":"","event_id":"8960eb7a-f63c-460e-ba63-b54fdd1e7e5c","severity_score":50},{"record_id":"175321d6-1f64-441f-a227-011e8f7ded18","source_event_group_id":"0dcec26d-0e81-473b-9c54-f1aea4136aa7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Woodlawn Hospital","state":"IN","individuals_affected":62278,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"0dcec26d-0e81-473b-9c54-f1aea4136aa7","severity_score":70},{"record_id":"58ef988c-626e-44cb-ab6e-fe2176952e89","source_event_group_id":"2d62768a-c8d2-4307-9f5b-d1deb43dfa66","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pacific Imaging Management, LLC","state":"CA","individuals_affected":13158,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"2d62768a-c8d2-4307-9f5b-d1deb43dfa66","severity_score":70},{"record_id":"d629e1f5-09c2-4fca-b40e-6dabd580c367","source_event_group_id":"c09f7c1c-662e-4949-9b3e-3a3d0d6fd1cc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prime Therapeutics LLC","state":"MN","individuals_affected":2266,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"c09f7c1c-662e-4949-9b3e-3a3d0d6fd1cc","severity_score":50},{"record_id":"472cfb6a-bb8b-488c-bc71-3a795b766eae","source_event_group_id":"3248698c-793a-4365-8988-5261f213abe9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Assisted Living Pharmacy Service, LLC","state":"WI","individuals_affected":5590,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"3248698c-793a-4365-8988-5261f213abe9","severity_score":50},{"record_id":"b5877232-91dc-4412-adde-5c5bf7e66537","source_event_group_id":"832b5dda-40b7-46d0-bfb7-277de7737c7d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"College Parkside Pharmacy","state":"NY","individuals_affected":5736,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"832b5dda-40b7-46d0-bfb7-277de7737c7d","severity_score":50},{"record_id":"c3a079b9-7924-4d06-85b5-a309cc85ef17","source_event_group_id":"d7dc842c-4cd5-47fb-95a2-cd47f7392316","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"College Hometown Pharmacy","state":"NY","individuals_affected":9742,"breach_submission_date":"2025-08-25","enforcement_action_date":null,"summary":"","event_id":"d7dc842c-4cd5-47fb-95a2-cd47f7392316","severity_score":50},{"record_id":"7487bfd9-3909-49a8-aae1-69ea4d7e0902","source_event_group_id":"828fee94-a70c-4e6d-8a62-f664da4b21ea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Children's Center of Hamden","state":"CT","individuals_affected":5213,"breach_submission_date":"2025-08-28","enforcement_action_date":null,"summary":"","event_id":"828fee94-a70c-4e6d-8a62-f664da4b21ea","severity_score":50},{"record_id":"9ae2b406-5174-4384-b15f-8b30843eac78","source_event_group_id":"eeb95d73-fe98-415f-9281-4e14cb01a920","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northwest Medical Specialties PLLC","state":"WA","individuals_affected":3864,"breach_submission_date":"2025-08-28","enforcement_action_date":null,"summary":"","event_id":"eeb95d73-fe98-415f-9281-4e14cb01a920","severity_score":50},{"record_id":"b7cfb5f9-3a5d-47e1-bebc-bbfa31de5686","source_event_group_id":"be6eefe9-8695-41cd-b4b7-784c5175da71","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Anthony L. Jordan Health Corporation","state":"NY","individuals_affected":2974,"breach_submission_date":"2025-08-29","enforcement_action_date":null,"summary":"","event_id":"be6eefe9-8695-41cd-b4b7-784c5175da71","severity_score":50},{"record_id":"82a704e1-6b6b-4e3b-ab75-cca450d18429","source_event_group_id":"19190a2d-fe0e-4c4f-bd5a-cdaf9c71e336","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Health & Palliative Services of the Treasure Coast, Inc d/b/a Treasure Coast Hospice  (\\Treasure Health \\)","state":"FL","individuals_affected":13234,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"","event_id":"19190a2d-fe0e-4c4f-bd5a-cdaf9c71e336","severity_score":70},{"record_id":"f94a5933-8745-41a5-a336-0c93d26e60ec","source_event_group_id":"120672fc-ae50-46a0-9e8f-1d9ebd08dcd4","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rockhill Women's Care","state":"MO","individuals_affected":70129,"breach_submission_date":"2025-09-25","enforcement_action_date":null,"summary":"","event_id":"120672fc-ae50-46a0-9e8f-1d9ebd08dcd4","severity_score":70},{"record_id":"2ae64d5b-210c-4a7d-a3f9-6cb8a6508da8","source_event_group_id":"65433c44-56fa-4b18-b4a2-1868daae613f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Saint Mary's Home of Erie","state":"PA","individuals_affected":501,"breach_submission_date":"2025-10-24","enforcement_action_date":null,"summary":"","event_id":"65433c44-56fa-4b18-b4a2-1868daae613f","severity_score":30},{"record_id":"00807ae7-1aa3-4b16-9312-64d4056e4e25","source_event_group_id":"7d718fdf-bb6b-4fba-a243-7a028729b794","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heywood Healthcare Inc. including Henry Heywood Memorial Hospital, Athol Memorial Hospital, and Heywood Medical Group, Inc. (“Heywood”)","state":"MA","individuals_affected":500,"breach_submission_date":"2025-12-12","enforcement_action_date":null,"summary":"","event_id":"7d718fdf-bb6b-4fba-a243-7a028729b794","severity_score":30},{"record_id":"c6ad0f0a-a350-4b7b-ba42-56371b72340d","source_event_group_id":"b38c38b1-fde4-4f94-8b61-cba65e511a24","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Providence","state":"WA","individuals_affected":22701,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"b38c38b1-fde4-4f94-8b61-cba65e511a24","severity_score":70},{"record_id":"d186061f-6bcf-4cd8-814b-0261d2516d28","source_event_group_id":"f4d251a5-5400-4bfd-8e6e-517765c45487","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Superior Care Plus LLC d/b/a Supportive Home Health LLC","state":"OH","individuals_affected":1415,"breach_submission_date":"2026-01-16","enforcement_action_date":null,"summary":"","event_id":"f4d251a5-5400-4bfd-8e6e-517765c45487","severity_score":50},{"record_id":"9a0dc29b-ab0d-4f09-9fe0-7300efed5d1b","source_event_group_id":"b43cce54-679f-45bc-b690-034fea021855","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Houston Health Department","state":"TX","individuals_affected":7445,"breach_submission_date":"2026-02-10","enforcement_action_date":null,"summary":"","event_id":"b43cce54-679f-45bc-b690-034fea021855","severity_score":50},{"record_id":"307d2956-4cf2-42ba-96ac-a286757e8a31","source_event_group_id":"d027052c-b99e-449e-aecb-c7ca0ed79642","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lucent Health Solutions, LLC","state":"TN","individuals_affected":37000,"breach_submission_date":"2025-01-30","enforcement_action_date":null,"summary":"The covered entity (CE), Lucent Health Solutions, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 37,000 individuals. The PHI involved included names, address, dates of birth, drivers’ license and Social Security numbers, claims information, diagnoses, and conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented multi-factor authentication across all users, retrained workforce members, and implemented new technical and physical safeguards.","event_id":"d027052c-b99e-449e-aecb-c7ca0ed79642","severity_score":70},{"record_id":"f094e298-4cdf-4986-beb4-771ea2a9f9b0","source_event_group_id":"c1a1e936-8e04-42a2-8dd0-e903875c6ee0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Infosys Public Services, Inc. (“Infosys”)","state":"MD","individuals_affected":2985,"breach_submission_date":"2025-01-31","enforcement_action_date":null,"summary":"Infosys Public Services, the business associate (BA) reported that an employee of its subcontractor uploaded the protected health information (PHI) of 2,985 individuals to the Internet. The PHI involved included names, addresses, dates of birth, claims and health insurance information, diagnoses, and other treatment information. To reduce the likelihood of a similar event occurring in the future, Infosys terminated its business relationship with the subcontractor and retrained employees on proper procedures for handling PHI.","event_id":"c1a1e936-8e04-42a2-8dd0-e903875c6ee0","severity_score":50},{"record_id":"caa99fca-b0f8-4431-9f3c-c763c34e32ae","source_event_group_id":"18e23dda-7dbc-49a2-8aa1-9d1f98275862","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jewish Child Care Association of New York","state":"NY","individuals_affected":1962,"breach_submission_date":"2025-01-31","enforcement_action_date":null,"summary":"The covered entity (CE), Jewish Child Care Association of New York, reported that it experienced a ransomware incident that affected the protected heath information (PHI) of 1,962 individuals. The PHI involved names, addresses, dates of birth, drivers’ license and social security numbers, financial information, diagnoses/conditions, lab results and medications. The CE notified HHS, affected individuals, the media, and posted substitute notice to its website. In response to the breach, the CE offered free credit monitoring to affected individuals and implemented additional administrative, technical, and security safeguards.","event_id":"18e23dda-7dbc-49a2-8aa1-9d1f98275862","severity_score":50},{"record_id":"fc54e833-0243-4c8e-98f9-fe9e6cd72674","source_event_group_id":"297c80e4-1812-4e64-9f69-7126b4ad7869","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Catholic Charities West Michigan","state":"MI","individuals_affected":45115,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"Catholic Charities West Michigan, the covered entity (CE)reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 45,115 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, health insurance information, diagnoses, and conditions. The CE notified HHS and the affected individuals about the breach. The CE also took corrective actions in response to the breach, implementing additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"297c80e4-1812-4e64-9f69-7126b4ad7869","severity_score":70},{"record_id":"8038c53d-3288-4fbc-9f20-d5bc7baeb21c","source_event_group_id":"dcdf450e-9f52-476c-936b-87e5667ef276","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Insurance ACE/Humana Inc.","state":"KY","individuals_affected":8553,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"The covered entity (CE), Insurance Ace/Humana, Inc., reported that there was a mailing incident that affected the protected health information (PHI) of 8,553 individuals. The PHI involved included names, addresses, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. Corrective actions included changes in mailing procedures moving forward to better protect PHI.","event_id":"dcdf450e-9f52-476c-936b-87e5667ef276","severity_score":50},{"record_id":"e6af6101-1ad3-4d2e-8b2e-87829d6f47d7","source_event_group_id":"76420d4e-6592-4ef9-8a87-4073a4831869","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The League Treatment Center","state":"NY","individuals_affected":1826,"breach_submission_date":"2025-02-06","enforcement_action_date":null,"summary":"The covered entity (CE), The League Treatment Center, reported that it was the subject of a cybersecurity attack that affected the protected health information (PHI) of 1,826 individuals. The PHI involved included names, Social Security numbers, addresses, drivers’ license numbers, dates of birth, diagnoses/conditions, medications, and other treatment information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.","event_id":"76420d4e-6592-4ef9-8a87-4073a4831869","severity_score":50},{"record_id":"a5923e5c-8c77-4a8a-aead-539a2e4be1b1","source_event_group_id":"b6f1efb9-d782-4185-af50-7a643ad28890","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"St. Andrew’s Resources for Seniors System","state":"MO","individuals_affected":4434,"breach_submission_date":"2025-02-07","enforcement_action_date":null,"summary":"The covered entity (CE), St. Andrew’s Resources for Seniors System, reported that multiple employees were the targets of an email phishing scheme that affected the protected health information (PHI) of 4,434 individuals.  The PHI involved included names, dates of birth, Social Security  and drivers’ license numbers, addresses, passport information, claims and financial information, diagnoses, lab results, medications, and other treatment information.  The CE notified HHS, affected individuals, and the media.  In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.  In addition, the CE retrained its workforce members on the proper methods of identifying fraudulent email communications.","event_id":"b6f1efb9-d782-4185-af50-7a643ad28890","severity_score":50},{"record_id":"759a0979-6912-48ef-bbce-8e944275d36b","source_event_group_id":"6636c479-351f-4367-aec1-91f43f93964f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Heartland Medical Clinic, Inc. dba Heartland Community Health Center","state":"KS","individuals_affected":43768,"breach_submission_date":"2025-02-10","enforcement_action_date":null,"summary":"","event_id":"6636c479-351f-4367-aec1-91f43f93964f","severity_score":70},{"record_id":"acc244ff-2b7e-46b2-b250-110ab5e5fcd9","source_event_group_id":"359a1f72-3a94-4b4b-b6e7-8dbb08d13623","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Precision Orthopedics and Sports Medicine","state":"MD","individuals_affected":1903,"breach_submission_date":"2025-02-13","enforcement_action_date":null,"summary":"The covered entity (CE), Precision Orthopedics and Sports Medicine, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 1,903 individuals. The PHI involved included names, dates of birth, diagnoses, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach the CE undertook additional security program enhancements, including strengthening its administrative and technical safeguards.","event_id":"359a1f72-3a94-4b4b-b6e7-8dbb08d13623","severity_score":50},{"record_id":"284641f0-f5d4-46a6-b3b4-2d7c2d55508d","source_event_group_id":"d66dc5b1-d874-440b-9ff9-94fe6e2061c9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fillmore County Hospital","state":"NE","individuals_affected":3535,"breach_submission_date":"2025-02-13","enforcement_action_date":null,"summary":"The covered entity (CE), Filmore County Hospital, reported that an employee was the target of an email phishing scheme that impacted the protected health information (PHI) of 3,535 individuals. The PHI involved names, addresses, dates of birth, social security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE revised its relevant policies and procedures, increased its workforce security awareness training, and increased its threat protections to better protect its electronic PHI.  OCR provided the CE with technical assistance.","event_id":"d66dc5b1-d874-440b-9ff9-94fe6e2061c9","severity_score":50},{"record_id":"4ee1b5a6-4e0f-4c59-9e31-1a9ae71c7161","source_event_group_id":"0db3e741-425f-4552-9c4a-0c29cdb589e8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Charleston Area Medical Center","state":"WV","individuals_affected":67413,"breach_submission_date":"2025-02-14","enforcement_action_date":null,"summary":"Charleston Area Medica Center, the covered entity (CE), reported that an employee was the subject of an email phishing incident that compromised the protected health information (PHI) of 67,413 individuals. The PHI involved included names, Social Security and drivers’ license numbers, birthdates, addresses, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards and retrained its employees on email security precautions.","event_id":"0db3e741-425f-4552-9c4a-0c29cdb589e8","severity_score":70},{"record_id":"41491da1-3cac-441e-9e8f-041db8c2ffca","source_event_group_id":"0a722da3-dff9-46bf-9290-7c9e1df75211","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Life University","state":"GA","individuals_affected":3389,"breach_submission_date":"2025-02-17","enforcement_action_date":null,"summary":"The covered entity (CE), Life University, reported that it experienced a hacking incident that affected the protected health information (PHI) of 3,389 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, financial information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"0a722da3-dff9-46bf-9290-7c9e1df75211","severity_score":50},{"record_id":"d0e354e5-aa00-4c3d-85d8-ea0d48d566aa","source_event_group_id":"e2c6063a-ee3d-4ff1-aa64-b5466c5998e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central New York Cardiology","state":"NY","individuals_affected":93983,"breach_submission_date":"2025-02-19","enforcement_action_date":null,"summary":"The covered entity (CE), Central New York Cardiology reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 93,983 individuals. The PHI involved include names, addresses, dates of birth, drivers’ license and Social Security numbers, medical diagnoses, financial information, and health insurance information. The CE notified HHS, the media, and affected individuals. In response to the breach, the CE implemented additional technical and security safeguards.","event_id":"e2c6063a-ee3d-4ff1-aa64-b5466c5998e6","severity_score":70},{"record_id":"f20cfa89-3e8e-4e3e-8ec1-9eb4e5f22cea","source_event_group_id":"58fabe36-b4a9-445e-bc10-53966e009d58","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HealthRev Partners, LLC","state":"MO","individuals_affected":1446,"breach_submission_date":"2025-02-20","enforcement_action_date":null,"summary":"The business associate (BA), HealthRev Partners, reported that an employee was the target of an email phishing scheme that impacted the protected health information (PHI) of approximately 1,446 individuals.  The PHI involved names, dates of birth, and claims information. The BA notified HHS and the affected individuals. In its mitigation efforts, the BA enhanced its access controls and implemented multi-factor authentication and monitoring to better protect its electronic PHI.","event_id":"58fabe36-b4a9-445e-bc10-53966e009d58","severity_score":50},{"record_id":"fe4ff20a-6ebf-436e-8c62-b4afc2277430","source_event_group_id":"7ff366a2-4ac1-498c-922d-6360622ba778","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Roswell Park Comprehensive Cancer Center","state":"NY","individuals_affected":11435,"breach_submission_date":"2025-02-24","enforcement_action_date":null,"summary":"The covered entity (CE), Roswell Park Comprehensive Cancer Center, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 11,435 individuals. The PHI involved included names, dates of birth,  and clinical information. The CE notified HHS and affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"7ff366a2-4ac1-498c-922d-6360622ba778","severity_score":70},{"record_id":"60f5a10f-821f-4ad8-86c3-811b74d58d8f","source_event_group_id":"beb4771b-c39f-4320-9e47-db6dda1ecfbc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bassford Remele P.A.","state":"MN","individuals_affected":4435,"breach_submission_date":"2025-02-25","enforcement_action_date":null,"summary":"The business associate (BA), Bassford Remele, reported that an employee was the target of an email phishing scheme that impacted the protected health information (PHI) of approximately 4,435 individuals.  The PHI involved names, dates of birth, addresses, social security numbers, and diagnoses/conditions.  The BA notified HHS, affected individuals, and the media.  In its mitigation efforts, the BA provided security awareness training to its workforce and enhanced its access controls to better protect its PHI.  OCR provided technical assistance to the BA.","event_id":"beb4771b-c39f-4320-9e47-db6dda1ecfbc","severity_score":50},{"record_id":"a3248429-7225-41f8-acc9-c125ddcd8457","source_event_group_id":"c734973b-d988-4c2d-898e-54b2f7374efb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"HHH Acquisition, LLC d/b/a The Grove at Valhalla Rehabilitation and Nursing Center","state":"NY","individuals_affected":4196,"breach_submission_date":"2025-02-26","enforcement_action_date":null,"summary":"The covered entity (CE), HHH Acquisition dba The Grove at Valhalla Rehabilitation and Nursing Center, reported  that its business associate (BA) experienced a cybersecurity event that affected the protected health information (PHI) of 4,196 individuals. The PHI involved included names, dates of birth, Social Security Numbers, addresses, lab results, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE and BA implemented additional technical safeguards to better protect PHI.","event_id":"c734973b-d988-4c2d-898e-54b2f7374efb","severity_score":50},{"record_id":"809668e5-809d-4e62-a46f-483e998e2bfe","source_event_group_id":"e73a8364-d795-4a75-9188-90ef77fefefc","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Five Star Home Health, Inc.","state":"OK","individuals_affected":1575,"breach_submission_date":"2026-02-10","enforcement_action_date":null,"summary":"","event_id":"e73a8364-d795-4a75-9188-90ef77fefefc","severity_score":50},{"record_id":"b64679ed-96a1-4eb7-bb3c-13694fd7ae00","source_event_group_id":"e7d08cae-d69f-4fca-9843-7402e1650450","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Atlantis Operating LLC d/b/a The Phoenix Rehabilitation and Nursing Center","state":"NY","individuals_affected":6459,"breach_submission_date":"2025-02-26","enforcement_action_date":null,"summary":"The covered entity (CE), Atlantis Operating LLC dba The Phoenix Rehabilitation and Nursing Center, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 6,459 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA and CE implemented additional  technical safeguards to better protect PHI.","event_id":"e7d08cae-d69f-4fca-9843-7402e1650450","severity_score":50},{"record_id":"e497d697-e5c6-4c2e-bc31-d9058f115673","source_event_group_id":"7b17030e-c33a-4b8a-8ad8-e1df97f72581","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Stram Center for Integrative Medicine","state":"NY","individuals_affected":15263,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"","event_id":"7b17030e-c33a-4b8a-8ad8-e1df97f72581","severity_score":70},{"record_id":"3d839535-75f1-4586-b5e1-6954131b4fbd","source_event_group_id":"ae17fe85-c1ff-4bf1-a09b-c2925cbf0504","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Community Health Center","state":"IA","individuals_affected":750,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"The covered entity (CE), United Community Health Center, reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 750 individuals. The PHI involved included names, addresses, dates of birth, diagnoses, and medications. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE enhanced its system activity monitoring, increased its workforce security awareness training, and increased its threat protections to better protect its PHI.  OCR provided the CE with technical assistance regarding the HIPAA Rules.","event_id":"ae17fe85-c1ff-4bf1-a09b-c2925cbf0504","severity_score":30},{"record_id":"1da295d1-0512-473c-ba30-7f2b7d185098","source_event_group_id":"f0297ede-71dd-4410-bbdf-3211451dd244","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Scott County, Iowa","state":"IA","individuals_affected":4336,"breach_submission_date":"2025-02-28","enforcement_action_date":null,"summary":"The covered entity (CE), Scott County, Iowa, reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of approximately 4,336 individuals. The PHI involved names, addresses, dates of birth, social security and drivers’ license numbers, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE enforced its multi-factor authentication, increased its workforce security awareness training, and increased its threat protections to better protect its electronic PHI. OCR provided the CE with technical assistance.","event_id":"f0297ede-71dd-4410-bbdf-3211451dd244","severity_score":50},{"record_id":"849776d7-c8d7-4cf9-acf7-0104f24c6fb4","source_event_group_id":"1490045f-e62e-4a68-b97d-3b297fdea90a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vernon Rehabilitation and Healthcare Center","state":"CT","individuals_affected":5416,"breach_submission_date":"2025-03-03","enforcement_action_date":null,"summary":"The covered entity (CE), Vernon Rehabilitation and Healthcare Center, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 5,416 individuals. The PHI involved included names,  addresses, dates of birth, drivers’ license and social security numbers, financial information, diagnoses, conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the implemented new technical safeguards.","event_id":"1490045f-e62e-4a68-b97d-3b297fdea90a","severity_score":50},{"record_id":"4697ded4-48f1-424d-9334-c7b64ab213d8","source_event_group_id":"363b7795-8308-4a12-a206-3316181f8b69","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle Center","state":"PA","individuals_affected":602,"breach_submission_date":"2025-03-03","enforcement_action_date":null,"summary":"Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle Center, the covered entity (CE), reported that someone broke into an employee’s car and stole a laptop, iPad and paperwork for 602 individuals. The protected health information involved included names, dates of birth, addresses, and health insurance and other treatment information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE offered free credit monitoring and implemented additional physical and administrative safeguards.","event_id":"363b7795-8308-4a12-a206-3316181f8b69","severity_score":30},{"record_id":"b90caff1-2af6-4ea7-8779-c1b6e515ab58","source_event_group_id":"3dc21dfe-8890-4f90-8855-8118e530f6db","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bay Cove Human Services, Inc.","state":"MA","individuals_affected":21295,"breach_submission_date":"2025-03-03","enforcement_action_date":null,"summary":"The covered entity (CE), Bay Cove Human Services, reported that it was the subject of a data breach that affected the protected health information (PHI) of 21,295 individuals. The PHI involved included names, addresses, dates of birth, social security numbers, diagnoses, conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented new technical safeguards.","event_id":"3dc21dfe-8890-4f90-8855-8118e530f6db","severity_score":70},{"record_id":"c9ec8d29-3012-423e-8913-30122eb081ce","source_event_group_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"United Seating and Mobility, LLC d/b/a Numotion","state":"TN","individuals_affected":529004,"breach_submission_date":"2025-03-07","enforcement_action_date":null,"summary":"The covered entity (CE), United Seating and Mobility dba Numotion, reported that it experienced a hacking incident that affected the protected health information (PHI) of 529,004 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial information, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"c324a2bc-32e1-4491-aaa2-030d53f1bc8b","severity_score":95},{"record_id":"a1504e54-d6e5-43ef-aea8-a088f474c90e","source_event_group_id":"1418b65c-80d9-489b-874b-5fcc28a175f1","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hand & Plastic Surgery Centre, PLC","state":"MI","individuals_affected":19846,"breach_submission_date":"2025-03-07","enforcement_action_date":null,"summary":"The covered entity (CE), Hand & Plastic Surgery Centre reported that it experienced a cyber-attack that affected the protected health information (PHI) of approximately 19,846 individuals.  The PHI involved included names, social security numbers, dates of birth, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE updated its multifactor authentication, updated its policies and procedures, and increased its threat protections to better protect its PHI.  OCR provided technical assistance regarding the HIPAA Rules.","event_id":"1418b65c-80d9-489b-874b-5fcc28a175f1","severity_score":70},{"record_id":"31e2b522-3350-49ac-81aa-b329ef893eac","source_event_group_id":"64eda29b-e77e-46f9-9953-14238aba3c00","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sunflower Medical Group, P.A.","state":"KS","individuals_affected":220968,"breach_submission_date":"2025-03-07","enforcement_action_date":null,"summary":"The covered entity (CE), Sunflower Medical group, reported that it experienced a cyberattack that compromised the protected health information (PHI) of approximately 220,968 individuals. The PHI involved names, dates of birth, addresses, social security and drivers’ license numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE deployed endpoint monitoring, implemented security enhancements, and retrained its workforce to better protect its electronic PHI.  OCR provided the CE with technical assistance regarding the HIPAA Rules.","event_id":"64eda29b-e77e-46f9-9953-14238aba3c00","severity_score":85},{"record_id":"578a12bf-0ee5-48e0-8edb-a83b237c4522","source_event_group_id":"00e55258-26ba-43da-b844-b560d4658e4d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"St. Charles County Ambulance District","state":"MO","individuals_affected":1265,"breach_submission_date":"2025-03-07","enforcement_action_date":null,"summary":"The covered entity (CE), St. Charles County Ambulance District, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of approximately 1,265 individuals. The PHI involved names, dates of birth, addresses, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided security awareness training to its workforce, enhanced its multi-factor authentication, and is modernizing its email and identity security to better protect its PHI. OCR provided technical assistance regarding the HIPAA Rules.","event_id":"00e55258-26ba-43da-b844-b560d4658e4d","severity_score":50},{"record_id":"df2abce2-e059-4a2c-85a9-99b43ff6ed71","source_event_group_id":"e63ad271-ace3-4be0-b308-7a11a3c6f6e9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rocky Mountain Regional VA Medical Center","state":"CO","individuals_affected":1115,"breach_submission_date":"2025-03-10","enforcement_action_date":null,"summary":"The covered entity (CE), Rocky Mountain Regional VA Medical Center, reported that a workforce member inadvertently emailed a spreadsheet containing the protected health information (PHI) of 1,115 individuals to the wrong recipients.  The PHI involved included names, addresses, and other identifiers.  The CE notified HHS, affected individuals, and the media of the breach.  In its mitigation efforts, the CE sanctioned the responsible workforce member.","event_id":"e63ad271-ace3-4be0-b308-7a11a3c6f6e9","severity_score":50},{"record_id":"15c4cffe-3933-48a9-a572-b179f9fac1a3","source_event_group_id":"485b9898-ba19-417f-869e-ee99b565c47f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"CHC Solutions, Inc.","state":"PA","individuals_affected":794,"breach_submission_date":"2025-03-13","enforcement_action_date":null,"summary":"CHC Solutions, Inc., the covered entity (CE), reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 794 individuals. The PHI involved included names, addresses, dates of birth, health insurance information and diagnosis codes. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data including security awareness training for all of its staff.","event_id":"485b9898-ba19-417f-869e-ee99b565c47f","severity_score":30},{"record_id":"12be1b83-795f-4758-b78c-6eb834726d7c","source_event_group_id":"8382bbb1-1fe6-44d3-82ff-001a52d75f94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy","state":"NY","individuals_affected":2348,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"","event_id":"8382bbb1-1fe6-44d3-82ff-001a52d75f94","severity_score":50},{"record_id":"e5197736-b46f-49de-bb7f-9a5eb3ef8a0a","source_event_group_id":"5701f4fb-7590-4e9f-8187-32f49cc23166","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lake Psychological Services","state":"PA","individuals_affected":987,"breach_submission_date":"2025-03-14","enforcement_action_date":null,"summary":"The covered entity (CE), Lake Psychological Services, LLC, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 987 individuals. The PHI involved included diagnoses/conditions and other treatment information. The CE notified HHS and the affected individuals of the breach. In response to the breach, the CE implemented additional technical safeguards to better protect its PHI.","event_id":"5701f4fb-7590-4e9f-8187-32f49cc23166","severity_score":30},{"record_id":"a4c823df-ccfc-4de1-a312-d0ecb9c3ed39","source_event_group_id":"b8da4583-b130-4f5c-b02a-ea2fe849e1b7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Special Tree Ltd.","state":"MI","individuals_affected":3820,"breach_submission_date":"2025-03-20","enforcement_action_date":null,"summary":"The covered entity (CE), Special Tree, reported that it experienced a cyberattack that impacted the protected health information (PHI) of 3,820 individuals. The PHI involved included names, addresses, drivers’ license and social security numbers, dates of birth, claims and financial information, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE enforced its multi-factor authentication capabilities, retrained its workforce, and increased its threat protections to better protect its PHI.  OCR provided the CE with technical assistance regarding the HIPAA Rules.","event_id":"b8da4583-b130-4f5c-b02a-ea2fe849e1b7","severity_score":50},{"record_id":"080f54b3-9652-499e-b9cc-ede6160e6953","source_event_group_id":"11e8dcfb-c160-4fa6-89e6-f9a6c553a6c9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Meigs County Emergency Medical Services","state":"OH","individuals_affected":5802,"breach_submission_date":"2025-03-20","enforcement_action_date":null,"summary":"The covered entity (CE), Meigs County Emergency Medical Services, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 5,802 individuals. The PHI involved included names, addresses, social security numbers, dates of birth, drivers’ license numbers, claims and financial information, diagnoses/conditions, medications, and other treatment information.  The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE enhanced its system activity monitoring, increased its workforce security awareness training, and revised its policies and procedures to better protect its PHI.","event_id":"11e8dcfb-c160-4fa6-89e6-f9a6c553a6c9","severity_score":50},{"record_id":"2e8dd610-5a36-468c-8a71-0c70b9e0b689","source_event_group_id":"a89b131b-cd9c-4317-8deb-24348f18169c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Graphium Health","state":"UT","individuals_affected":1187,"breach_submission_date":"2025-03-20","enforcement_action_date":null,"summary":"The covered entity (CE), Graphium Health, reported that the protected health information (PHI) of 1,187 individuals was emailed to the wrong recipient. The PHI involved included names, providers, and dates and costs of service. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards to better protect its PHI.","event_id":"a89b131b-cd9c-4317-8deb-24348f18169c","severity_score":50},{"record_id":"cbee9c37-feb1-4e0e-a139-751d333e3ee2","source_event_group_id":"ac9651d4-b217-4f76-8989-855ff07d28dd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Pineland Community Service Board","state":"GA","individuals_affected":19010,"breach_submission_date":"2025-03-20","enforcement_action_date":null,"summary":"The covered entity (CE), Pineland Community Service Board, reported that it experienced a ransomware attack that that affected the protected health information (PHI) of 19,010 individuals. The PHI involved included names, social security numbers, addresses, birthdates, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and posted substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional physical, technical, and security safeguards to better protect its PHI.","event_id":"ac9651d4-b217-4f76-8989-855ff07d28dd","severity_score":70},{"record_id":"ca40a043-2952-405b-a44b-639762d4d48b","source_event_group_id":"d3434016-ffd7-400f-b7ac-9734da29478a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"PAR Rehab","state":"MI","individuals_affected":4300,"breach_submission_date":"2025-03-21","enforcement_action_date":null,"summary":"The covered entity (CE), PAR Rehab, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of approximately 4,300 individuals.  The PHI involved names, dates of birth, addresses, social security and drivers’ license numbers, claims and financial information, lab results, medications, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided security awareness training to its workforce and enhanced its email security to better protect its PHI. OCR provided technical assistance regarding the HIPAA Rules.","event_id":"d3434016-ffd7-400f-b7ac-9734da29478a","severity_score":50},{"record_id":"27bf6919-4b9f-4b28-b3a5-db00d18a5076","source_event_group_id":"abc1495e-e246-4b42-82b7-04495529523f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fundamental Administrative Services, LLC","state":"MD","individuals_affected":56325,"breach_submission_date":"2025-03-21","enforcement_action_date":null,"summary":"The business associate (BA), Fundamental Administrative Services, LLC, reported that it experienced a cybersecurity incident that affected the protected heath information (PHI) of 56,325 individuals. The PHI involved included names, Social Security  and drivers’ license numbers, addresses, dates of birth, financial and claims information, diagnoses/conditions, lab results, medications, and treatment information. The BA notified HHS, affected covered entities, affected individuals, and posted substitute notice to its website. In response to the breach, the BA implemented additional administrative, technical, and security safeguards and retrained workforce members to better protect PHI.","event_id":"abc1495e-e246-4b42-82b7-04495529523f","severity_score":70},{"record_id":"a1938158-b0af-4741-adc7-59d228dc5a46","source_event_group_id":"556402c7-e4ef-45fd-b143-f34cdd680d89","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"First Choice Community Home Care, Inc.","state":"TX","individuals_affected":725,"breach_submission_date":"2026-02-11","enforcement_action_date":null,"summary":"","event_id":"556402c7-e4ef-45fd-b143-f34cdd680d89","severity_score":30},{"record_id":"13dfc676-8e70-4d8d-ae59-315d252200f3","source_event_group_id":"a621d797-54b8-45a7-b7de-35ab585eac16","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"William F Rinehart DMD PA","state":"SC","individuals_affected":25000,"breach_submission_date":"2025-03-24","enforcement_action_date":null,"summary":"William F Rinehart DMD, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 25,000 individuals. The type of PHI affected included names, addresses, birthdates, driver’s license and Social Security numbers, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards.","event_id":"a621d797-54b8-45a7-b7de-35ab585eac16","severity_score":70},{"record_id":"ec342a41-1a60-43da-b3eb-262db732af83","source_event_group_id":"4a2d0657-3a2f-452c-bb36-d3beea8412bd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MAK Anesthesia","state":"GA","individuals_affected":24079,"breach_submission_date":"2025-03-26","enforcement_action_date":null,"summary":"The covered entity (CE), MAK Anesthesia, reported that its business associate (BA) was the subject of a ransomware attack that affected the protected health information (PHI) of 24,079 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals.","event_id":"4a2d0657-3a2f-452c-bb36-d3beea8412bd","severity_score":70},{"record_id":"6a2a81f3-3299-457a-8715-8120c76aaab8","source_event_group_id":"a03cae76-8d99-4953-b21c-ed4486988558","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Georgia Urology","state":"GA","individuals_affected":12398,"breach_submission_date":"2025-03-27","enforcement_action_date":null,"summary":"The covered entity (CE), Georgia Urology, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 12,398 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, claims information, diagnoses, conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE enabled multi-factor authentication, reset and strengthened its password requirements, and implemented new technical safeguards.","event_id":"a03cae76-8d99-4953-b21c-ed4486988558","severity_score":70},{"record_id":"4022d8a9-b59b-4b27-b715-0aaab3eca0a6","source_event_group_id":"3fcff90c-2c82-4ba8-939d-5703389d0e94","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Apria Healthcare LLC","state":"IN","individuals_affected":713,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"The covered entity (CE), Apria Healthcare, reported that an employee mailed the protected health information (PHI) of 731 individuals to the wrong recipients. The PHI involved included names, addresses, and unique identification numbers. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"3fcff90c-2c82-4ba8-939d-5703389d0e94","severity_score":30},{"record_id":"0b40d635-fcb2-415c-aa61-403d9dda326d","source_event_group_id":"782ba191-ddf2-4093-bd2b-12f7e057240a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Samaritan's Purse","state":"NC","individuals_affected":2351,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"The covered entity (CE), Samaritan’s Purse, reported that an employee of its business associate (BA) was subject to an email phishing scheme that affected the protected health information (PHI) of 2,351 individuals. The PHI included names, dates of birth, gender, and benefits information. The CE notified HHS and the affected individuals. In its mitigation efforts, the BA provided free credit protection services.","event_id":"782ba191-ddf2-4093-bd2b-12f7e057240a","severity_score":50},{"record_id":"81798c41-8fe2-4150-9c0a-ef91164ef647","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sentara Health","state":"VA","individuals_affected":1620,"breach_submission_date":"2025-03-28","enforcement_action_date":null,"summary":"Sentara Health, the covered entity (CE) reported that the protected health information (PHI) of 1,620 patients may have been accessed by an unauthorized individual impersonating an employee. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses/conditions, medications, and other treatment information.  The CE notified HHS, impacted individuals, and the media.  In its mitigation efforts, the CE implemented additional administrative and security safeguards to better protect its sensitive data.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":50},{"record_id":"ba730e40-dc21-446e-872e-7bead5d975d4","source_event_group_id":"4c100aa4-b56b-424d-9120-6058ba612aad","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"COSE Healthcloud Solutions, LLC","state":"AZ","individuals_affected":2606,"breach_submission_date":"2025-03-31","enforcement_action_date":null,"summary":"The business associate (BA), COSE Healthcloud Solutions, reported that an employee was the target of an email phishing scheme that affected the protected heath information (PHI) of 2,606 individuals. The PHI involved included dates of birth, medical record numbers, health insurance information and medical treatment information. The BA notified HHS, affected covered entities, and affected individuals. In response to the breach, the BA conducted employee training and implemented additional administrative, technical, and security safeguards.","event_id":"4c100aa4-b56b-424d-9120-6058ba612aad","severity_score":50},{"record_id":"e0c0b6c7-9430-40fa-a2ec-4adaffaecfba","source_event_group_id":"a0bcebb9-35db-4a53-bd08-554f7e500def","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Howard Health Systems dba Howard Memorial Hospital","state":"AR","individuals_affected":17703,"breach_submission_date":"2025-03-31","enforcement_action_date":null,"summary":"The covered entity (CE), Howard Health Systems dba Howard Memorial Hospital, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 17,703 individuals. The PHI involved included names, dates of birth, clinical or treatment information, medical provider names, medical record numbers, and patient account numbers. The CE notified HHS, affected individuals, and the media.  In response to the breach the CE implemented additional administrative and technical safeguards to better protect sensitive data.","event_id":"a0bcebb9-35db-4a53-bd08-554f7e500def","severity_score":70},{"record_id":"70e524b7-9f59-4c0e-9669-bf7014fdfd6d","source_event_group_id":"e96ac343-fe73-425e-ab61-60d671773d23","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Gilead Sciences, Inc.","state":"CA","individuals_affected":12224,"breach_submission_date":"2025-04-02","enforcement_action_date":null,"summary":"","event_id":"e96ac343-fe73-425e-ab61-60d671773d23","severity_score":70},{"record_id":"27e60b29-08c3-42aa-87d0-0d0d22af79fc","source_event_group_id":"f193c2a9-97e5-4bb3-b5c4-f58f9c198584","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Worthington Steel Health and Welfare Plan","state":"OH","individuals_affected":4078,"breach_submission_date":"2025-04-04","enforcement_action_date":null,"summary":"The covered entity (CE), Worthington Steel Health and Welfare Plan, reported that it sustained a ransomware attack that impacted the protected health information (PHI) of 4,078 individuals. The PHI involved included names, addresses, dates of birth, Social Security and drivers’ license numbers, health insurance information, claims and financial information, diagnoses and conditions, and medications. The CE notified HHS, the affected individuals, and the media about the breach. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"f193c2a9-97e5-4bb3-b5c4-f58f9c198584","severity_score":50},{"record_id":"260d32a3-c9bd-495a-9ba3-d433674d0f9a","source_event_group_id":"3163f442-4dd0-41bc-85c6-ecbc4b7ab333","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Central Texas Pediatric Orthopedics","state":"TX","individuals_affected":140000,"breach_submission_date":"2025-04-04","enforcement_action_date":null,"summary":"The covered entity (CE), Central Texas Pediatric Orthopedics, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 140,000 individuals. The PHI involved included names, dates of birth, x-ray images, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented revised its information security policies and procedures and implemented new technical safeguards.","event_id":"3163f442-4dd0-41bc-85c6-ecbc4b7ab333","severity_score":85},{"record_id":"d43084c5-a092-48b4-aebe-a282bcb4ff17","source_event_group_id":"1c673cc8-2ce2-4c21-9044-e1e7ae97f6c8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alexes Hazen MD, PLLC","state":"NY","individuals_affected":500,"breach_submission_date":"2026-02-12","enforcement_action_date":null,"summary":"","event_id":"1c673cc8-2ce2-4c21-9044-e1e7ae97f6c8","severity_score":30},{"record_id":"24d61260-cc8f-45d8-b624-f4e328ee696f","source_event_group_id":"c15ce760-7d9c-414a-ae28-1ae0e0cdcc2b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Hebrew Home for Aged Disabled d/b/a San Francisco Campus for Jewish Living","state":"CA","individuals_affected":2568,"breach_submission_date":"2025-04-07","enforcement_action_date":null,"summary":"","event_id":"c15ce760-7d9c-414a-ae28-1ae0e0cdcc2b","severity_score":50},{"record_id":"dbaa276e-f22a-4446-a75b-7dd5a53ffc57","source_event_group_id":"b75e0041-74fb-4eb7-93c7-373fdd781417","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Northeast Georgia Health System","state":"GA","individuals_affected":24849,"breach_submission_date":"2025-04-08","enforcement_action_date":null,"summary":"The covered entity (CE), Northeast Georgia Health System, reported that its business associate (BA) experienced a cybersecurity incident that compromised the protected health information (PHI) of 24,849 individuals. The PHI involved included names and addresses. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards.","event_id":"b75e0041-74fb-4eb7-93c7-373fdd781417","severity_score":70},{"record_id":"3fbf50cb-9d2b-4d97-9909-f1e4a7500341","source_event_group_id":"307b08c8-cf09-4533-ab5e-1b69d85f6e12","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Benefits Partner, LLC dba Salus Group*","state":"MI","individuals_affected":40177,"breach_submission_date":"2025-04-08","enforcement_action_date":null,"summary":"The covered entity (CE), Benefits Partner, LLC dba Salus Group, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 40,177 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license and Social Security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"307b08c8-cf09-4533-ab5e-1b69d85f6e12","severity_score":70},{"record_id":"5146c280-517c-4252-814a-d593047a75f7","source_event_group_id":"91af1621-babe-4eda-9419-c81f76f4f0f3","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"California Correctional Health Care Services","state":"CA","individuals_affected":4105,"breach_submission_date":"2025-04-09","enforcement_action_date":null,"summary":"The covered entity (CE), California Correctional Health Care Services, reported that a workforce member sent an unencrypted email containing the protected health information (PHI) of 4,105 individuals to the wrong recipients. The PHI involved included names, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE retrained workforce members to better protect PHI.","event_id":"91af1621-babe-4eda-9419-c81f76f4f0f3","severity_score":50},{"record_id":"1c5f44b5-537c-4a4f-a064-c680bf092f73","source_event_group_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Erlanger Health","state":"TN","individuals_affected":3193,"breach_submission_date":"2025-04-10","enforcement_action_date":null,"summary":"The covered entity (CE), Erlanger Health, reported that its business associate (BA) experienced a ransomware incident that affected the protected health information (PHI) of 3,193 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, and other treatment information. The CE notified HHS, the affected individuals, and the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring to affected individuals.","event_id":"0030bfad-bcb4-4f1b-a441-82df594df50f","severity_score":50},{"record_id":"ae7f4631-0c56-46cb-902f-8f14851cea57","source_event_group_id":"87ea13fb-3ab0-4892-b569-bfdb44e79164","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"RHEA MEDICAL CENTER","state":"TN","individuals_affected":8309,"breach_submission_date":"2025-04-10","enforcement_action_date":null,"summary":"Rhea Medical Center, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 8,309 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards.","event_id":"87ea13fb-3ab0-4892-b569-bfdb44e79164","severity_score":50},{"record_id":"b8fb0b83-0024-4e11-985e-bbc6d1ec65d5","source_event_group_id":"805efd06-5444-4811-b64c-b27fc7b3b71b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Boudreaux’s Specialty Compounding Pharmacy","state":"LA","individuals_affected":6270,"breach_submission_date":"2025-04-10","enforcement_action_date":null,"summary":"The covered entity (CE), Boudreaux’s Specialty Compounding Pharmacy, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 6,270 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, and medications. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained.","event_id":"805efd06-5444-4811-b64c-b27fc7b3b71b","severity_score":50},{"record_id":"e6857f03-7b3a-439a-87da-f249f5bfab71","source_event_group_id":"e15267c4-6aa4-4a3b-a779-9779347c9bd7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Yale New Haven Health System","state":"CT","individuals_affected":5556702,"breach_submission_date":"2025-04-11","enforcement_action_date":null,"summary":"The covered entity (CE), Yale New Haven Health System, reported that it experienced a hacking incident that affected the protected health information (PHI) of 5,556,702 individuals. The PHI involved included names, dates of birth, addresses, and Social Security numbers. The CE notified HHS, affected individuals, the media, and implemented substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"e15267c4-6aa4-4a3b-a779-9779347c9bd7","severity_score":95},{"record_id":"4f9c3ea6-2cd1-4405-bd27-d42ac9cad53e","source_event_group_id":"69f94623-bfe1-489d-bda0-eb54cd83a1f8","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bassett Healthcare Network","state":"NY","individuals_affected":5565,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"Bassett Healthcare Network, the covered entity (CE), reported that a physician impermissibly accessed the protected health information (PHI) 5,565 individuals without authorization. The PHI involved in the incident included names, addresses, dates of birth, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. Substitute notice was provided on the CE’s website. Upon discovering the incident, the CE sanctioned the physician and implemented additional administrative, technical, and security safeguards.","event_id":"69f94623-bfe1-489d-bda0-eb54cd83a1f8","severity_score":50},{"record_id":"8d89adba-9519-4e94-b08b-18c77f9bfb4a","source_event_group_id":"ca831225-259f-4bd1-b048-7f5bd0d56b95","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Alternate Solutions Health Network, LLC","state":"OH","individuals_affected":93589,"breach_submission_date":"2025-04-14","enforcement_action_date":null,"summary":"Alternate Solutions Health Network, LLC, the covered entity (CE), reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of 93,589 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented multi-factor authentication and provided additional employee training on phishing campaigns.","event_id":"ca831225-259f-4bd1-b048-7f5bd0d56b95","severity_score":70},{"record_id":"666c56b8-14ac-4f0d-9992-b213c2e86af0","source_event_group_id":"942681ca-a025-433e-acb7-3b030917fd9c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Highland Rivers Behavioral Health","state":"GA","individuals_affected":2253,"breach_submission_date":"2025-04-15","enforcement_action_date":null,"summary":"Highland Rivers Behavioral Health, the covered entity (CE) reported that its business associate was the subject of a cyber-attack that affected the protected health information (PHI) of 2,253 individuals. The PHI involved included names, addresses, claims and financial information, and other treatment information. The CE notified HHS, impacted individuals, and the media.  In its mitigation efforts, the BA implemented additional administrative safeguards to better protect sensitive data.","event_id":"942681ca-a025-433e-acb7-3b030917fd9c","severity_score":50},{"record_id":"9aa55500-f263-41a8-9478-eac7cab63a9b","source_event_group_id":"984eb634-0d69-4bf9-a85b-f3af0830bb5e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Devereux Foundation","state":"PA","individuals_affected":501,"breach_submission_date":"2026-01-08","enforcement_action_date":null,"summary":"","event_id":"984eb634-0d69-4bf9-a85b-f3af0830bb5e","severity_score":30},{"record_id":"9c7b2848-226d-4f43-a6c8-ffb1de46d830","source_event_group_id":"cb1bce3c-887c-4f28-9f8b-0380d31399e6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"WPM Pathology Laboratory, Chartered","state":"KS","individuals_affected":5694,"breach_submission_date":"2025-04-17","enforcement_action_date":null,"summary":"The covered entity (CE), WPM Pathology Laboratory, Chartered, reported that it experienced a hacking incident that affected the protected health information (PHI) of 5,694 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license and Social Security numbers, and diagnoses and conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"cb1bce3c-887c-4f28-9f8b-0380d31399e6","severity_score":50},{"record_id":"d18c6138-7f54-42dc-bd54-67cb7689bd6f","source_event_group_id":"09380072-4924-41a2-8d43-96024c549007","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Langdon Prairie Health","state":"ND","individuals_affected":1152,"breach_submission_date":"2025-04-18","enforcement_action_date":null,"summary":"Langdon Prairie Health, the covered entity (CE), reported that it experienced a breach when an employee included the protected health information (PHI)  of 1,152 individuals in quality assurance reports in violation of its minimum necessary policy. The PHI involved included medical record numbers, dates of birth, dates of service, health care providers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE amended and clarified its minimum necessary policy, trained staff on the revised policy, and sent out reminders to department directors not to include PHI in quality assurance reports.","event_id":"09380072-4924-41a2-8d43-96024c549007","severity_score":50},{"record_id":"2a50fb2e-a924-4b10-8af4-939f95e58185","source_event_group_id":"df4106f8-c716-44a6-b9b1-93eea7ec7be9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Rheumatology Associates of Baltimore","state":"MD","individuals_affected":28968,"breach_submission_date":"2025-04-21","enforcement_action_date":null,"summary":"Rheumatology Associates of Baltimore, the covered entity (CE) reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 28,968 individuals. The PHI included names, addresses, dates of birth, and Social Security numbers.   The BA notified impacted individuals and the media and the CE notified HHS of the breach.  In its mitigation efforts, the CE and BA implemented additional administrative and technical safeguards to better protect sensitive data.","event_id":"df4106f8-c716-44a6-b9b1-93eea7ec7be9","severity_score":70},{"record_id":"ac2077da-3fc1-403e-99a8-f0775bad5164","source_event_group_id":"b0b0c127-56f5-45f6-9716-6d67544c7fe7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Horizon Behavioral Health","state":"VA","individuals_affected":49303,"breach_submission_date":"2025-04-21","enforcement_action_date":null,"summary":"The covered entity (CE), Horizon Behavioral Health, reported that it experienced a ransomware incident that affected the protected heath information (PHI) of 49,303 individuals. The PHI involved included names, dates of birth, social security numbers, drivers’ license numbers, diagnoses, medications, and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice to its website. In response to the breach, the CE offered free credit monitoring to affected individuals and implemented additional administrative, technical, and security safeguards.","event_id":"b0b0c127-56f5-45f6-9716-6d67544c7fe7","severity_score":70},{"record_id":"a3bbb6ad-9a57-443e-a456-f87bdec1b491","source_event_group_id":"70bc9dfc-b1de-4655-bc41-f56958315b59","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Union Health System, Inc.","state":"IN","individuals_affected":262831,"breach_submission_date":"2025-04-21","enforcement_action_date":null,"summary":"The covered entity (CE), Union Health System, reported that it’s business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 262,831 individuals. The PHI involved included names, addresses, drivers’  license and Social Security numbers, diagnoses/conditions, lab results and medications. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.","event_id":"70bc9dfc-b1de-4655-bc41-f56958315b59","severity_score":85},{"record_id":"a18ae85e-8307-422c-9a5f-8eb601bc38d2","source_event_group_id":"b893acec-5fb8-4334-a7a5-f0d427229cc9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Eliza Jennings Senior Care Network","state":"OH","individuals_affected":845,"breach_submission_date":"2025-04-22","enforcement_action_date":null,"summary":"Eliza Jennings Senior Care Network, the covered entity (CE), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 845 individuals. The PHI involved included names, addresses, dates of birth, medical diagnoses and treatment information, medication information, vaccination status, health insurance information, and Social Security numbers. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE enhanced its multifactor authentication protocols and closed the firewall port that had been vulnerable.","event_id":"b893acec-5fb8-4334-a7a5-f0d427229cc9","severity_score":30},{"record_id":"623e9296-ec51-4e3d-9e39-b35d895a9f8f","source_event_group_id":"d64b6cd5-dc30-43e0-97d0-1f1e1a9c3ee5","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"City of Bristol, Tennessee","state":"TN","individuals_affected":4708,"breach_submission_date":"2025-04-22","enforcement_action_date":null,"summary":"The covered entity (CE), the City of Bristol, TN, reported that its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 4,708 individuals. The PHI involved names, addresses, Social Security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring to affected individuals and the CE and BA implemented additional administrative, technical, and security safeguards.","event_id":"d64b6cd5-dc30-43e0-97d0-1f1e1a9c3ee5","severity_score":50},{"record_id":"a00eebe5-0afb-4448-83f4-1135e7bea530","source_event_group_id":"cec0e736-6c49-468b-8cd3-7352d314f993","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Prestonwood Baptist Church, Inc.","state":"TX","individuals_affected":501,"breach_submission_date":"2025-04-25","enforcement_action_date":null,"summary":"Prestonwood Baptist Church reported it experienced a cyber-attack that affected the protected health information of 501 individuals.  After review, it was determined that Prestonwood Baptist Church is not a covered entity.  Therefore, OCR closed the case.","event_id":"cec0e736-6c49-468b-8cd3-7352d314f993","severity_score":30},{"record_id":"a88edf0e-34a9-4525-b17a-8c589daa6fa8","source_event_group_id":"f505eb4f-beec-4866-ad57-5ee8f3a877c7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"The Neurological Institute of Savannah & Center for Spine, P.C","state":"GA","individuals_affected":32548,"breach_submission_date":"2025-05-01","enforcement_action_date":null,"summary":"The covered entity (CE), The Neurological Institute of Savannah & Center for Spine, P.C., reported that it experienced a hacking attack that compromised the protected health information (PHI) of 32,548 individuals. The PHI involved included names, addresses, dates of birth, social security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained.","event_id":"f505eb4f-beec-4866-ad57-5ee8f3a877c7","severity_score":70},{"record_id":"8c248d0f-44f0-4dc6-9b29-33ed27788227","source_event_group_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Lincoln National Corporation d/b/a Lincoln Financial","state":"IN","individuals_affected":1123,"breach_submission_date":"2025-05-02","enforcement_action_date":null,"summary":"Lincoln National Corporation dba Lincoln Financial, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that impacted the protected health information (PHI) for 1,123 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and claims and financial information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE strengthened passwords and offered credit monitoring.","event_id":"8a2d8a39-f6b8-4820-9772-ce7375ad6424","severity_score":50},{"record_id":"a01799fa-2cf7-4a11-88fb-f0256bc36e34","source_event_group_id":"b82fb62f-3329-4dd1-8483-2e4d2b875b16","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TapestryHealth","state":"CT","individuals_affected":6494,"breach_submission_date":"2025-12-22","enforcement_action_date":null,"summary":"","event_id":"b82fb62f-3329-4dd1-8483-2e4d2b875b16","severity_score":50},{"record_id":"b94e9a5c-769d-41bf-8f66-10b3d4e4aeea","source_event_group_id":"cc39ec20-5cac-4987-aa6a-39c0b569b175","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Schewitz Psychological Services dba Couples Learn","state":"ME","individuals_affected":3700,"breach_submission_date":"2025-05-03","enforcement_action_date":null,"summary":"The covered entity (CE), Schewitz Psychological Services dba Couples Learn, reported that its business associate (BA) experienced a cyberattack affecting the protected health information (PHI) of 3,700 individuals. The PHI involved included names, email addresses, phone numbers, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA implemented additional technical safeguards.","event_id":"cc39ec20-5cac-4987-aa6a-39c0b569b175","severity_score":50},{"record_id":"43b1d5e9-18f8-402e-a020-9b9f49c5e952","source_event_group_id":"26185036-d78d-497a-9482-94c8444e9028","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Primary Health Care, Inc.","state":"IA","individuals_affected":787,"breach_submission_date":"2025-05-06","enforcement_action_date":null,"summary":"The covered entity (CE), Primary Health Care, Inc., reported that that a workforce member inadvertently sent an email that contained the protected health information (PHI) of 787 individuals to the wrong recipients. The PHI involved included names and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards and retrained workforce members to better protect PHI.","event_id":"26185036-d78d-497a-9482-94c8444e9028","severity_score":30},{"record_id":"658c5df5-4426-40c6-a689-19b4660ddace","source_event_group_id":"0b9b52ce-7c7e-4051-84a0-830cbdbcb5fb","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Serviceaide, Inc.","state":"CA","individuals_affected":483126,"breach_submission_date":"2025-05-09","enforcement_action_date":null,"summary":"The business associate (BA), Serviceaide, reported that a database containing the protected health information (PHI) of 483,126 individuals was made publicly available via the Internet. The PHI involved included names, Social Security numbers, addresses, diagnoses/conditions, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained.","event_id":"0b9b52ce-7c7e-4051-84a0-830cbdbcb5fb","severity_score":85},{"record_id":"56f719d3-cd59-4515-ac50-0b5740eafcef","source_event_group_id":"118dc3e6-a0ce-480f-a970-018b0c78d81f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Marlboro-Chesterfield Pathology, P.C.","state":"NC","individuals_affected":235911,"breach_submission_date":"2025-05-09","enforcement_action_date":null,"summary":"The covered entity (CE), Marlboro-Chesterfield Pathology, P.C., reported that it experienced a hacking incident that affected the protected health information (PHI) of 235,911 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, and lab results. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.","event_id":"118dc3e6-a0ce-480f-a970-018b0c78d81f","severity_score":85},{"record_id":"da136d71-da06-44e6-a5f3-a98b58ebc9a4","source_event_group_id":"be82d7e6-f597-4c3a-a9f3-d02eed077fb6","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"InSider Vision, LLC","state":"CO","individuals_affected":1426,"breach_submission_date":"2025-05-13","enforcement_action_date":null,"summary":"The covered entity (CE), InSider Vision, LLC, reported that an employee emailed the protected health information (PHI) of 1,426 individuals to the wrong recipient. The PHI involved included names, phone numbers, and addresses.  The CE notified HHS and impacted individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.","event_id":"be82d7e6-f597-4c3a-a9f3-d02eed077fb6","severity_score":50},{"record_id":"8d425815-f2ed-4420-84fc-5582b04cf3f3","source_event_group_id":"214ed64e-2bb0-428c-a683-1335e38cc69e","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Midlothian Pharmacy Compounding & Prescription","state":"TX","individuals_affected":1000,"breach_submission_date":"2025-05-15","enforcement_action_date":null,"summary":"The covered entity (CE), Midlothian Pharmacy Compounding & Prescription, reported that an employee inadvertently sent an email that contained the protected health information (PHI) of 1,000 individuals to the wrong recipients. The PHI involved was limited to patient names. The CE notified HHS, affecged individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Breach Notification Rules.  Staff were retrained.","event_id":"214ed64e-2bb0-428c-a683-1335e38cc69e","severity_score":30},{"record_id":"02fd419a-7a7b-4bc4-b929-dee2efadcd3e","source_event_group_id":"32913cd6-be1e-4e91-bf73-a6158feea3fd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Balance Autism","state":"IA","individuals_affected":1281,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"The covered entity (CE), Balance Autism, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 1,281 individuals. The PHI involved included names, dates of birth, addresses, Social Security and drivers’ license numbers, diagnoses/conditions, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"32913cd6-be1e-4e91-bf73-a6158feea3fd","severity_score":50},{"record_id":"c815dd98-4ed3-4dc3-987e-d2ad8bfaffd4","source_event_group_id":"f60dacf3-62bf-46df-bb5f-17dfbe929677","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Radiology Chartered","state":"WI","individuals_affected":12656,"breach_submission_date":"2025-05-16","enforcement_action_date":null,"summary":"The covered entity (CE), Radiology Chartered, reported that its  former business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 12,656 individuals. The PHI involved included names, dates of birth, addresses, and Social Security numbers. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"f60dacf3-62bf-46df-bb5f-17dfbe929677","severity_score":70},{"record_id":"887aec2a-01ee-4232-9924-1db098ca5c2f","source_event_group_id":"ca0f549a-ae4f-40c3-8f41-0bb2a72ee696","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Swedish Edmonds Hospital","state":"WA","individuals_affected":886,"breach_submission_date":"2025-05-19","enforcement_action_date":null,"summary":"The covered entity (CE), Swedish Edmonds Hospital, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 886 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE offered free credit monitoring and implemented additional technical safeguards.","event_id":"ca0f549a-ae4f-40c3-8f41-0bb2a72ee696","severity_score":30},{"record_id":"99e81c19-34d6-4561-a635-10e3e504dc2b","source_event_group_id":"50c92587-c10b-4f76-9a4f-8e96f977ea35","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Shore Medical Center","state":"NJ","individuals_affected":31177,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"50c92587-c10b-4f76-9a4f-8e96f977ea35","severity_score":70},{"record_id":"a53f0f32-4127-424e-b487-cfb6c5c3a98f","source_event_group_id":"cfc87a41-1ade-4b51-8e27-4b6be62c26b7","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"UChicago Medicine Medical Group","state":"IL","individuals_affected":38656,"breach_submission_date":"2025-05-23","enforcement_action_date":null,"summary":"","event_id":"cfc87a41-1ade-4b51-8e27-4b6be62c26b7","severity_score":70},{"record_id":"1547f97c-6bf9-4108-9636-6830d0b81353","source_event_group_id":"2af929aa-24b2-4ec3-9730-ef1cc6008d01","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"MedStar St. Mary's Hospital","state":"MD","individuals_affected":172915,"breach_submission_date":"2025-05-29","enforcement_action_date":null,"summary":"The covered entity (CE), MedStar St. Mary’s Hospital, reported that its business associate (BA) reported that it was the subject of a cybersecurity attack that affected the protected health information (PHI) of 172,915 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and health insurance information. The CE notified HHS, the affected individuals, the media, and provided substitute notice.  In response to the breach, the CE and BA provided complimentary credit monitoring services to the affected individuals and implemented additional safeguards to better protect PHI.","event_id":"2af929aa-24b2-4ec3-9730-ef1cc6008d01","severity_score":85},{"record_id":"72dcfe35-303b-42ff-9556-882be34c37e2","source_event_group_id":"3119e1da-005b-4153-8eb1-714971c7a52d","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Easterseals Northeast Indiana","state":"IN","individuals_affected":3158,"breach_submission_date":"2026-02-16","enforcement_action_date":null,"summary":"","event_id":"3119e1da-005b-4153-8eb1-714971c7a52d","severity_score":50},{"record_id":"720bc0b6-27f3-4935-a459-a9c491250a63","source_event_group_id":"74dbc1ff-82ba-46b8-8e85-fdb95cbc575c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Wendy Foster OD","state":"KS","individuals_affected":20000,"breach_submission_date":"2026-02-09","enforcement_action_date":null,"summary":"","event_id":"74dbc1ff-82ba-46b8-8e85-fdb95cbc575c","severity_score":70},{"record_id":"fd345c22-9ea6-49e0-bf13-68d698fe93ac","source_event_group_id":"b4167f3c-f523-4b9e-9724-2733d8c95188","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Ocuco Inc","state":"FL","individuals_affected":240961,"breach_submission_date":"2025-05-30","enforcement_action_date":null,"summary":"The Business Associate (BA), Ocuco, reported that it experienced a hacking incident that affected the protected health information (PHI) of 240,961 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license numbers, Social Security numbers, claims and financial information, diagnoses/conditions, lab results, medications, and other treatment information. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals, and implemented additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"b4167f3c-f523-4b9e-9724-2733d8c95188","severity_score":85},{"record_id":"29fd0b53-dcbd-4bef-be42-8545ec043452","source_event_group_id":"dcc4cdd6-3f9e-4aa4-8a56-392cf5dcf366","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"AffirmedRx PBC","state":"KY","individuals_affected":1089,"breach_submission_date":"2025-06-05","enforcement_action_date":null,"summary":"The business associate (BA), AffirmedRx PBC, reported that an employee mailed the protected health information (PHI) of 1,089 individuals to the wrong recipients. The PHI involved included names and medications. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.","event_id":"dcc4cdd6-3f9e-4aa4-8a56-392cf5dcf366","severity_score":50},{"record_id":"6b958972-c31a-4d73-a65d-73d0a996627d","source_event_group_id":"24be5aa6-257a-41eb-af3d-4ef40a543348","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Select Medical Holdings Corporation","state":"PA","individuals_affected":119525,"breach_submission_date":"2025-06-06","enforcement_action_date":null,"summary":"","event_id":"24be5aa6-257a-41eb-af3d-4ef40a543348","severity_score":85},{"record_id":"d06e5d9b-1db7-4976-ba38-4294db88fa0d","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sentara Health","state":"VA","individuals_affected":13278,"breach_submission_date":"2025-06-09","enforcement_action_date":null,"summary":"The covered entity (CE), Sentara Health, reported a breach after it discovered that two remote workforce members processing their lab requisitions were not the persons the CE hired to do the work. The breach affected the protected health information (PHI) of 13,278 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and lab results. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals  and implemented additional administrative, technical, and security safeguards to better protect PHI.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":70},{"record_id":"44177a58-10fc-4f5d-833d-a8fbe9ac8de2","source_event_group_id":"a413307b-b8ae-416f-8a45-7348c11a4f0a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cerner Corporation","state":"MO","individuals_affected":501,"breach_submission_date":"2025-06-17","enforcement_action_date":null,"summary":"Cerner reported that it experienced a cyberattack that compromised the protected health information (PHI) of 501 individuals. Cerner was acquired by Oracle Corporation in 2022, and as a result, the investigation has closed since Cerner is no longer a covered entity.","event_id":"a413307b-b8ae-416f-8a45-7348c11a4f0a","severity_score":30},{"record_id":"94788bf0-2f8c-4525-b14d-56bd63059f63","source_event_group_id":"c5117de4-0d2e-48af-808c-d527f7ceac76","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Kotel ATX PLLC dba Heading Health","state":"TX","individuals_affected":650,"breach_submission_date":"2025-07-01","enforcement_action_date":null,"summary":"","event_id":"c5117de4-0d2e-48af-808c-d527f7ceac76","severity_score":30},{"record_id":"93134a3c-591c-415b-874a-3d12e9dbed11","source_event_group_id":"810cba0c-9a28-45a4-94a8-b8ca072920a9","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Regional Center of the East Bay","state":"CA","individuals_affected":689,"breach_submission_date":"2025-07-09","enforcement_action_date":null,"summary":"The covered entity (CE), Regional Center of the East Bay, reported that an employee sent an email containing the protected health information (PHI) of 689 individuals to an unintended recipient.  The PHI involved included names, dates of birth, and other identifiers. The CE notified HHS, the affected individuals, and the media regarding the breach.  In response to the breach the CE sent an email reminder to all employees regarding its HIPAA compliance policies and procedures and provided written counseling to the affected employee.","event_id":"810cba0c-9a28-45a4-94a8-b8ca072920a9","severity_score":30},{"record_id":"208862fe-b687-4cff-84e1-c9d4a87636c7","source_event_group_id":"acd1e735-206b-4ed7-b769-cfb87944133b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Jack L Marcus","state":"WI","individuals_affected":705,"breach_submission_date":"2025-07-14","enforcement_action_date":null,"summary":"The business associate (BA), Jack L Marcus, reported that the BA’s website impermissibly disclosed the protected health information (PHI) of 705 individuals. The PHI involved was limited to the treatment facility names where inmates in the Wisconsin Department of Corrections were located. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards. Staff members were retrained.","event_id":"acd1e735-206b-4ed7-b769-cfb87944133b","severity_score":30},{"record_id":"facaa5e6-7058-4b0f-86f3-27381e7c9c9b","source_event_group_id":"f36d3455-6fbc-44b4-86a8-b2ea33c1ab09","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Valley Mountain Regional Center","state":"CA","individuals_affected":529,"breach_submission_date":"2025-07-25","enforcement_action_date":null,"summary":"Valley Mountain Regional Center, the business associate (BA), reported that an employee posted the protected health information (PHI) of 529 individuals on its website. The PHI involved included names, addresses, phone numbers, and other identifiers. The BA notified HHS, the affected individuals, and the media. In its mitigation efforts, the BA revised its policies and procedures and implemented additional administrative and security safeguards.","event_id":"f36d3455-6fbc-44b4-86a8-b2ea33c1ab09","severity_score":30},{"record_id":"323203ba-c9ba-4ebb-b592-3c6ece9168ae","source_event_group_id":"70069ada-b991-4cfc-8287-245b5eabd4af","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"University of Michigan/Michigan Medicine","state":"MI","individuals_affected":1015,"breach_submission_date":"2025-08-13","enforcement_action_date":null,"summary":"The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect PHI. Staff were retrained.","event_id":"70069ada-b991-4cfc-8287-245b5eabd4af","severity_score":50},{"record_id":"889ad237-90b9-45e2-9bff-ae31b9f04d52","source_event_group_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Cancer Care Center of North Florida","state":"FL","individuals_affected":1798,"breach_submission_date":"2025-08-15","enforcement_action_date":null,"summary":"Cancer Care Center of North Florida, the covered entity (CE), reported that its business associate (BA) experienced a cybersecurity attack that compromised the protected health information (PHI) of 1,798 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, social security numbers, diagnoses/conditions, diagnostic imaging, diagnostic test results, lab results, medications, financial and health insurance information, and other treatment information. The CE notified HHS, the affected individuals, and the media about the breach as well as posting substitute notice on its website. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect PHI.","event_id":"f26f071e-fee8-4494-a9c3-e95c8a83b008","severity_score":50},{"record_id":"b4a11054-e24f-41cf-88b8-30cc439dcf61","source_event_group_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Sentara Health","state":"VA","individuals_affected":696,"breach_submission_date":"2025-09-03","enforcement_action_date":null,"summary":"Sentara Health, the covered entity (CE), reported that an employee mailed the protected health information (PHI) of 696 individuals to the wrong recipients. The PHI involved included names, addresses, and treatment information. The CE notified HHS and the affected individuals. The CE also took corrective actions in response to the breach, implementing additional administrative, technical, and security safeguards to better protect its PHI.","event_id":"9bd440b0-fcc6-4389-845d-cdcbc5222cbd","severity_score":30},{"record_id":"18d24fd3-484c-4183-b65e-3960d16b413e","source_event_group_id":"4c3c46ba-ed16-4b2c-b83e-1ede93cca58a","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Herr Foods, Inc.","state":"PA","individuals_affected":1164,"breach_submission_date":"2025-09-19","enforcement_action_date":null,"summary":"Herr Foods, the covered entity(CE) reported that its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 1,164 individuals. The PHI involved included names, birthdates, addresses, claims information, health insurance information, diagnoses, and other treatment information. Following the discovery of the incident, the covered entity provided notice to HHS and the affected individuals. The BA implemented additional administrative, technical, and security safeguards.","event_id":"4c3c46ba-ed16-4b2c-b83e-1ede93cca58a","severity_score":50},{"record_id":"beeb2ff0-fbfb-409a-93de-a763914a6506","source_event_group_id":"a25d049c-ca3a-475b-bba7-314b84487181","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Outcomes One, Inc.","state":"FL","individuals_affected":257481,"breach_submission_date":"2025-09-23","enforcement_action_date":null,"summary":"The business associate (BA), Outcomes One, Inc., reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 257,481 individuals. The PHI involved included names, dates of birth, medications, and other treatment information. The BA notified HHS, the affected covered entities, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.","event_id":"a25d049c-ca3a-475b-bba7-314b84487181","severity_score":85},{"record_id":"19d5cae1-cfc9-4aed-9a45-14caa1aff64d","source_event_group_id":"54889e2b-e4f3-403e-a839-e5caa206256f","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Walgreen Co.","state":"IL","individuals_affected":2708,"breach_submission_date":"2025-09-30","enforcement_action_date":null,"summary":"","event_id":"54889e2b-e4f3-403e-a839-e5caa206256f","severity_score":50},{"record_id":"95d0f82e-de35-420d-9ca8-82032d58a1eb","source_event_group_id":"bc6657e7-995f-4adb-859a-3bbfe25ba819","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Vibra Hospital of Sacramento, LLC","state":"CA","individuals_affected":620,"breach_submission_date":"2025-10-03","enforcement_action_date":null,"summary":"Vibra Hospital of Sacramento, LLC, the covered entity (CE), reported that several employees were the targets of an email phishing incident that affected the protected health information (PHI) of 620 individuals.  The PHI included names, dates of birth, addresses, drivers’ license information, Social Security numbers, financial information, diagnoses and conditions, lab results, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Breach Notification Rules. Staff were retrained.","event_id":"bc6657e7-995f-4adb-859a-3bbfe25ba819","severity_score":30},{"record_id":"d0be8b87-2a76-4ffc-b1de-b07727a71eae","source_event_group_id":"b4d303c2-bf54-43b2-ad4e-212ab0c21fea","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Fidelis Care New York","state":"MO","individuals_affected":1680,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"The covered entity (CE), Fidelis Care New York, reported that a workforce member emailed documents containing the protected health information (PHI) of 1,680 individuals to the wrong recipient. The PHI involved included names, dates of birth, member identification numbers, medications and other treatment information.  The CE notified HHS, the affected individuals, and the media.  In response to the breach, the CE implemented additional administrative safeguards and sanctioned the responsible workforce member.","event_id":"b4d303c2-bf54-43b2-ad4e-212ab0c21fea","severity_score":50},{"record_id":"5f048fca-41bd-49ca-9fae-ef8bb7812392","source_event_group_id":"a848373f-37cc-4350-8751-7a9e70b6c991","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Bosch Choice Welfare Benefit Plan","state":"MI","individuals_affected":55000,"breach_submission_date":"2025-10-31","enforcement_action_date":null,"summary":"The covered entity (CE), Bosch Choice Welfare Benefit Plan, reported that a vendor of its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 55,000 individuals. The PHI involved included names, Social Security numbers, dates of birth, claims and health insurance information, and diagnoses/conditions. The CE notified HHS and the BA notified the affected covered entities and the affected individuals. In response to the breach, the CE and BA implemented additional technical safeguards to better protect PHI.","event_id":"a848373f-37cc-4350-8751-7a9e70b6c991","severity_score":70},{"record_id":"9537058f-fe6e-4d70-90eb-6e6430d4e58b","source_event_group_id":"82a7661f-96c1-4ea2-9d3c-2954506d0346","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Emanuel Medical Center","state":"GA","individuals_affected":28963,"breach_submission_date":"2026-02-17","enforcement_action_date":null,"summary":"","event_id":"82a7661f-96c1-4ea2-9d3c-2954506d0346","severity_score":70},{"record_id":"e6a02950-4010-4e83-87c3-b1479c524dac","source_event_group_id":"114e49cd-ceca-4e6d-b459-9a202abe9ccd","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Weill Cornell Medicine","state":"NY","individuals_affected":516,"breach_submission_date":"2026-02-23","enforcement_action_date":null,"summary":"","event_id":"114e49cd-ceca-4e6d-b459-9a202abe9ccd","severity_score":30},{"record_id":"aba147f4-ecfa-4782-bf3a-b215899529f9","source_event_group_id":"99ffe75f-6171-4d72-8836-7d6dcf83e219","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"TriZetto Provider Solutions","state":"MO","individuals_affected":3433965,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"99ffe75f-6171-4d72-8836-7d6dcf83e219","severity_score":95},{"record_id":"6c18bdd0-5d10-461c-ac53-47cd3e4cb995","source_event_group_id":"5e860c24-2609-4b5f-9059-18800ed4465b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"VNS Behavioral Health Inc. (“VNS Health”)","state":"NY","individuals_affected":739,"breach_submission_date":"2026-02-18","enforcement_action_date":null,"summary":"","event_id":"5e860c24-2609-4b5f-9059-18800ed4465b","severity_score":30},{"record_id":"2dcccc89-a266-4f33-823e-58b770f45881","source_event_group_id":"1dfdf5c0-09c8-40f8-9204-b930c2fe039b","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Commonwealth Care Alliance","state":"MA","individuals_affected":634,"breach_submission_date":"2026-02-25","enforcement_action_date":null,"summary":"","event_id":"1dfdf5c0-09c8-40f8-9204-b930c2fe039b","severity_score":30},{"record_id":"70d148e3-07a6-4392-be87-01c94bdd90f6","source_event_group_id":"11c7863e-f201-40aa-af66-f71b5987184c","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"EDGAR A MARTORELL MD LLC","state":"FL","individuals_affected":1107,"breach_submission_date":"2026-02-06","enforcement_action_date":null,"summary":"","event_id":"11c7863e-f201-40aa-af66-f71b5987184c","severity_score":50},{"record_id":"d076b838-67b8-4d8f-9038-768fe0045e2b","source_event_group_id":"4760265a-1519-45a6-b9ce-ee981aeeaeed","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"QualDerm Partners, LLC","state":"TN","individuals_affected":3117874,"breach_submission_date":"2026-02-22","enforcement_action_date":null,"summary":"","event_id":"4760265a-1519-45a6-b9ce-ee981aeeaeed","severity_score":95},{"record_id":"be46bb19-c242-4a32-91e0-a53f480951a3","source_event_group_id":"4f86b8d1-3d8f-4bda-ac97-8bea4f061909","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Standards Home Health, Inc.","state":"TX","individuals_affected":6847,"breach_submission_date":"2025-12-31","enforcement_action_date":null,"summary":"","event_id":"4f86b8d1-3d8f-4bda-ac97-8bea4f061909","severity_score":50},{"record_id":"b21e123e-de25-40a9-bcea-94fb0d95014c","source_event_group_id":"8f74b9fd-444a-4f62-b7b5-286f560744d0","record_class":"breach_filing","source_type":"hhs_breach","entity_name":"Transitions of Western Illinois, Inc.","state":"IL","individuals_affected":805,"breach_submission_date":"2026-02-09","enforcement_action_date":null,"summary":"","event_id":"8f74b9fd-444a-4f62-b7b5-286f560744d0","severity_score":30}]}