HHS' Office for Civil Rights discloses all U.S. breaches of unsecured protected health information affecting 500 individuals or more via its breach portal.
Here are the 10 breaches that affected the highest number of individuals:
1. Anthem, affiliated covered entity (Indianapolis): 78.80 million
Date: 3/13/2015
Type of breach: Hacking/IT incident
2. Premera Blue Cross (Mountlake Terrace, Wash.): 11 million
Date: 3/17/2015
Type of breach: Hacking/IT incident
3. Excellus Health Plan (Rochester, N.Y.): 10 million
Date: 9/9/2015
Type of breach: Hacking/IT incident
4. Science Applications International Corp. (McLean, Va.): 4.90 million
Date: 11/4/2011
Type of breach: Loss
5. University of California, Los Angeles Health: 4.50 million
Date: 7/17/2015
Type of breach: Hacking/IT incident
6. Community Health Systems (Franklin, Tenn.): 4.50 million
Date: 8/20/2014
Type of breach: Theft
7. Advocate Medical Group (Downers Grove, Ill.): 4.02 million
Date: 8/23/2013
Type of breach: Theft
8. Medical Informatics Engineering (Fort Wayne, Ind.): 3.90 million
Date: 7/23/2015
Type of breach: Hacking/IT incident
9. Banner Health (Phoenix): 3.62 million
Date: 8/3/2016
Type of breach: Hacking/IT incident
10. Newkirk Products (Albany, N.Y.): 3.46 million
Date: 8/9/2016
Type of breach: Hacking/IT incident