Nevada healthcare breach data

A breach can involve an organization located in one state while notices about the same event appear through several other states. This page keeps those apart: 6 events involve an organization located in Nevada, and 6 appear through Nevada notice activity. Reconciled from 12 source records under Canonical Data Model 1.1.

Events at organizations located in Nevada

Events with Nevada notice activity

710K

Reported affected, event totals

Hacking / IT incident

Most common mechanism

The two counts above answer different questions and are not added together: one says the breached organization is located in Nevada, the other says a notice about the event appears through Nevada. Neither states where an incident physically happened, which these sources do not establish. Reported affected is an event total, not a count of Nevada residents: unless a source scopes its figure to one state, it covers everyone the breach affected anywhere. For the same reason state figures do not sum to the national total — one breach reported through several jurisdictions is one event appearing under each of them. How these numbers are calculated.

Recent events

Latest breach events reported in Nevada

Mar 28, 2026·1,221 reported affected·Unauthorized access or disclosure·1 source record
University Medical Center of Southern Nevada
Reported to HHS OCR.
Oct 6, 2025·62,238 reported affected·Hacking / IT incident·1 source record
OB-GYN Associates, Ltd. dba OBGYN Associates
Reported to HHS OCR.
Sep 18, 2025·27,001 reported affected·Hacking / IT incident·1 source record
Sun Valley Surgery Center
Reported to HHS OCR.
Sep 2, 2025·501 reported affected·Hacking / IT incident·1 source record
La Perouse, LLC
Reported to HHS OCR.
May 2, 2025·501 reported affected·Hacking / IT incident·1 source record
Absolute Dental Group, LLC
Reported to HHS OCR.
Dec 20, 2024·3,112 reported affected·Hacking / IT incident·1 source record
Effortless Office Enterprises, LLC
Reported to HHS OCR.
Date not reported·123,456 reported affected·Hacking / IT incident·1 source record
Nevada Department of Health and Human Services (DHHS)
A cyberattack on a third-party vendor, Maximus, exposed the personal and health information of individuals who received services from the Nevada DHHS.
Date not reported·154,000 reported affected·Unknown mechanism·1 source record
Nevada Department of Health and Human Services
The Nevada Department of Health and Human Services was affected by a data breach through its third-party vendor, Managed Care of North America (MCNA) Dental. The breach compromised personal and health information.
Date not reported·1,000 reported affected·Ransomware / malware·1 source record
Nevada Family Dentistry
A ransomware attack encrypted patient records, including names, contact information, and dental histories.
Date not reported·12,000 reported affected·Unauthorized access or disclosure·1 source record
Sierra Nevada Dental Group
Server misconfiguration led to public exposure of patient billing records.
Date not reported·250,000 reported affected·Hacking / IT incident·1 source record
Sierra Nevada Health Plan
Cyberattack on insurer's systems resulted in exposure of member data.
Date not reported·75,000 reported affected·Ransomware / malware·1 source record
Sierra Nevada Health System
Ransomware attack encrypted patient data and exfiltrated some files.

Most affected entities

Organizations in Nevada by breach events

Sierra Nevada Health Plan

event

250K

reported affected

Nevada Department of Health and Human Services

event

154K

reported affected

Nevada Department of Health and Human Services (DHHS)

event

123.5K

reported affected

Sierra Nevada Health System

event

75K

reported affected

OB-GYN Associates, Ltd. dba OBGYN Associates

event

62.2K

reported affected

Incident mechanisms

How breaches happen in Nevada

How the 12 canonical breach events with a Nevadasource record were caused, as stated by the reporting source. An event is counted once regardless of how many times it was filed.

Hacking / IT incident7 (58%)
Ransomware / malware2 (17%)
Unauthorized access or disclosure2 (17%)
Unknown mechanism1 (8%)

Nevada compliance requirements

Nevada breach notification law

Beyond federal HIPAA requirements, Nevada has its own breach notification law that may impose additional obligations on healthcare practices operating in the state.

Nev. Rev. Stat. § 603A.220(1)

Notification deadline

In the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. No numeric outer bound in the general breach statute.

State regulator notice

Not required

None. § 603A.220 does not impose an affirmative Attorney General notice obligation on private entities. The Attorney General and district attorneys have enforcement authority under § 603A.290 to bring actions for suspected violations of §§ 603A.010 to 603A.290, but there is no affirmative AG notice trigger in § 603A.220 itself.

Consumer Health Data Privacy Act (§ 603A.400-.550) is a separate regime that excludes HIPAA entities

Nevada's Consumer Health Data Privacy Act at § 603A.400-.550, added by SB 370 (2023), imposes controller-level obligations on 'regulated entities' processing consumer health data (a defined term including biometric data, genetic data, precise geolocation near healthcare facilities, and reproductive or sexual health-care information). The Act at § 603A.490(1)(a) EXCLUDES entities subject to and complying with HIPAA and its implementing regulations. For a HIPAA-regulated dental, medical, behavioral-health, chiropractic, physical-therapy, or optometry practice operating in Nevada, the § 603A.400-.550 regime is inapplicable — the applicable framework is § 603A.220 (for the practice's non-HIPAA personal-information holdings) plus HIPAA (for PHI).

2025-2026 currentness note

§ 603A.220 substantive text confirmed against leg.state.nv.us current NRS text on 2026-08-23. Nevada 2025 legislative session amended § 603A.210 and § 603A.215(5)(b) and § 603A.217 (encryption / state-agency information-security requirements) — none of those 2025 amendments modified § 603A.220 or the § 603A.400-.550 health-data privacy regime. If Nevada amends § 603A.220 in a future session, this record must be re-verified.

This is a general reference based on current Nevada law. Consult legal counsel for state-specific compliance obligations. Source: Nev. Rev. Stat. § 603A.220(1). Per-jurisdiction verification status and primary-source references are shown on each specialty/state compliance page.

Protect your Nevada practice

12 breach events in Nevada. Is your practice next?

Patient Protect gives independent practices real-time compliance monitoring, breach prevention, and secure workflows — so your practice stays out of this database. Starting at $39/month.

Start free trial Get your Patient Protect Score — free

14-day free trial · No charge until trial ends

FAQ

Healthcare breaches in Nevada

How many healthcare data breaches have been reported in Nevada?

6 canonical breach events involve an organization located in Nevada, and 6 appear through Nevada notice activity. Those are different relationships and are not added together — a breach at an organization elsewhere can be notified through Nevada. Together the events on this page report 710K individuals affected, an event total counting everyone each breach affected anywhere, not a count of Nevada residents. Sourced from HHS OCR breach reports and state attorney general notices, reconciled under Patient Protect Canonical Data Model 1.1. Updated nightly.

What is the most common breach mechanism in Nevada?

The most frequently reported incident mechanism in Nevada is Hacking / IT incident, present in 7 of 12 canonical breach events. Ransomware / malware follows with 2.

Are independent practices in Nevada at higher risk?

Independent healthcare practices are the fastest-growing target for healthcare cyberattacks nationwide — attacks on small providers have increased 6x since 2021. Nevada practices face the same threat landscape with fewer resources to defend against it. Patient Protect provides breach prevention specifically for independent practices starting at $39/month.

What are Nevada's breach notification requirements?

Nevada requires breach notification in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. No numeric outer bound in the general breach statute. These requirements apply alongside federal HIPAA's 60-day notification deadline. Reference: Nev. Rev. Stat. § 603A.220(1).

Explore the full breach intelligence dashboard — the landscape by mechanism and jurisdiction, the organizations appearing in the record, and every underlying source record.

Open full dashboard

Data Disclaimer: This page counts canonical breach events reconciled from the HHS OCR Breach Portal and state attorney general breach notifications under Patient Protect Canonical Data Model 1.1. Regulatory enforcement actions, security advisories, community reports and algorithmically modeled records are held separately and are not counted here. Data is provided “as-is” for informational purposes only. Inclusion of any entity does not imply wrongdoing. Users must independently verify information before relying on it. See Terms of Use.

Nevada healthcare breach data

Events at organizations located in Nevada

Events with Nevada notice activity

710K

Reported affected, event totals

Hacking / IT incident

Most common mechanism

Recent events

Latest breach events reported in Nevada

Mar 28, 2026·1,221 reported affected·Unauthorized access or disclosure·1 source record
University Medical Center of Southern Nevada
Reported to HHS OCR.
Oct 6, 2025·62,238 reported affected·Hacking / IT incident·1 source record
OB-GYN Associates, Ltd. dba OBGYN Associates
Reported to HHS OCR.
Sep 18, 2025·27,001 reported affected·Hacking / IT incident·1 source record
Sun Valley Surgery Center
Reported to HHS OCR.
Sep 2, 2025·501 reported affected·Hacking / IT incident·1 source record
La Perouse, LLC
Reported to HHS OCR.
May 2, 2025·501 reported affected·Hacking / IT incident·1 source record
Absolute Dental Group, LLC
Reported to HHS OCR.
Dec 20, 2024·3,112 reported affected·Hacking / IT incident·1 source record
Effortless Office Enterprises, LLC
Reported to HHS OCR.
Date not reported·123,456 reported affected·Hacking / IT incident·1 source record
Nevada Department of Health and Human Services (DHHS)
A cyberattack on a third-party vendor, Maximus, exposed the personal and health information of individuals who received services from the Nevada DHHS.
Date not reported·154,000 reported affected·Unknown mechanism·1 source record
Nevada Department of Health and Human Services
The Nevada Department of Health and Human Services was affected by a data breach through its third-party vendor, Managed Care of North America (MCNA) Dental. The breach compromised personal and health information.
Date not reported·1,000 reported affected·Ransomware / malware·1 source record
Nevada Family Dentistry
A ransomware attack encrypted patient records, including names, contact information, and dental histories.
Date not reported·12,000 reported affected·Unauthorized access or disclosure·1 source record
Sierra Nevada Dental Group
Server misconfiguration led to public exposure of patient billing records.
Date not reported·250,000 reported affected·Hacking / IT incident·1 source record
Sierra Nevada Health Plan
Cyberattack on insurer's systems resulted in exposure of member data.
Date not reported·75,000 reported affected·Ransomware / malware·1 source record
Sierra Nevada Health System
Ransomware attack encrypted patient data and exfiltrated some files.

Most affected entities

Organizations in Nevada by breach events

Sierra Nevada Health Plan

event

250K

reported affected

Nevada Department of Health and Human Services

event

154K

reported affected

Nevada Department of Health and Human Services (DHHS)

event

123.5K

reported affected

Sierra Nevada Health System

event

75K

reported affected

OB-GYN Associates, Ltd. dba OBGYN Associates

event

62.2K

reported affected

Incident mechanisms

How breaches happen in Nevada

How the 12 canonical breach events with a Nevadasource record were caused, as stated by the reporting source. An event is counted once regardless of how many times it was filed.

Hacking / IT incident7 (58%)
Ransomware / malware2 (17%)
Unauthorized access or disclosure2 (17%)
Unknown mechanism1 (8%)

Nevada compliance requirements

Nevada breach notification law

Beyond federal HIPAA requirements, Nevada has its own breach notification law that may impose additional obligations on healthcare practices operating in the state.

Nev. Rev. Stat. § 603A.220(1)

Notification deadline

State regulator notice

Not required

Consumer Health Data Privacy Act (§ 603A.400-.550) is a separate regime that excludes HIPAA entities

2025-2026 currentness note

Protect your Nevada practice

12 breach events in Nevada. Is your practice next?

Patient Protect gives independent practices real-time compliance monitoring, breach prevention, and secure workflows — so your practice stays out of this database. Starting at $39/month.

Start free trial Get your Patient Protect Score — free

14-day free trial · No charge until trial ends

FAQ

Healthcare breaches in Nevada

How many healthcare data breaches have been reported in Nevada?

What is the most common breach mechanism in Nevada?

The most frequently reported incident mechanism in Nevada is Hacking / IT incident, present in 7 of 12 canonical breach events. Ransomware / malware follows with 2.

Are independent practices in Nevada at higher risk?

What are Nevada's breach notification requirements?

Explore the full breach intelligence dashboard — the landscape by mechanism and jurisdiction, the organizations appearing in the record, and every underlying source record.

Open full dashboard

Nevada healthcare breach data

Latest breach events reported in Nevada

University Medical Center of Southern Nevada

OB-GYN Associates, Ltd. dba OBGYN Associates

Sun Valley Surgery Center

La Perouse, LLC

Absolute Dental Group, LLC

Effortless Office Enterprises, LLC

Nevada Department of Health and Human Services (DHHS)

Nevada Department of Health and Human Services

Nevada Family Dentistry

Sierra Nevada Dental Group

Sierra Nevada Health Plan

Sierra Nevada Health System

Organizations in Nevada by breach events

Sierra Nevada Health Plan

Nevada Department of Health and Human Services

Nevada Department of Health and Human Services (DHHS)

Sierra Nevada Health System

OB-GYN Associates, Ltd. dba OBGYN Associates

How breaches happen in Nevada

Nevada breach notification law

Consumer Health Data Privacy Act (§ 603A.400-.550) is a separate regime that excludes HIPAA entities

2025-2026 currentness note

12 breach events in Nevada. Is your practice next?

Healthcare breaches in Nevada

How many healthcare data breaches have been reported in Nevada?

What is the most common breach mechanism in Nevada?

Are independent practices in Nevada at higher risk?

What are Nevada's breach notification requirements?

Nevada healthcare breach data

Latest breach events reported in Nevada

University Medical Center of Southern Nevada

OB-GYN Associates, Ltd. dba OBGYN Associates

Sun Valley Surgery Center

La Perouse, LLC

Absolute Dental Group, LLC

Effortless Office Enterprises, LLC

Nevada Department of Health and Human Services (DHHS)

Nevada Department of Health and Human Services

Nevada Family Dentistry

Sierra Nevada Dental Group

Sierra Nevada Health Plan

Sierra Nevada Health System

Organizations in Nevada by breach events

Sierra Nevada Health Plan

Nevada Department of Health and Human Services

Nevada Department of Health and Human Services (DHHS)

Sierra Nevada Health System

OB-GYN Associates, Ltd. dba OBGYN Associates

How breaches happen in Nevada

Nevada breach notification law

Consumer Health Data Privacy Act (§ 603A.400-.550) is a separate regime that excludes HIPAA entities

2025-2026 currentness note

12 breach events in Nevada. Is your practice next?

Healthcare breaches in Nevada

How many healthcare data breaches have been reported in Nevada?

What is the most common breach mechanism in Nevada?

Are independent practices in Nevada at higher risk?

What are Nevada's breach notification requirements?

Latest verified Responses

CareCloud breach filing: what a revised scope means for vendor oversight

Madera Community Hospital breach filing: 150,000 individuals and exfiltration-scoped risk analysis

Brown Health Medical Group breach filing: 311,760 individuals and server-side safeguards