Research / HipaaBreachPulse
HIPAA Breach Reports (500+ Individuals) by State & Type: 2026 statistics from 715 public records
Texas leads with 64 of 715 records (9.0%), ahead of California with 56 (7.8%) (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)).
Data as of · Compiled by Zalwin from HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)
Key findings
- Zalwin's HipaaBreachPulse dataset holds 715 HipaaBreachPulse records dated 2023-10-12 to 2026-10-09 (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- Texas leads with 64 of 715 records (9.0%), ahead of California with 56 (7.8%) (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- The most common entity type is Healthcare provider: 545 of 715 records (76.2%) (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- Across 715 records with a stated individuals affected, the total is 186,856,552 and the median is 6,195; the largest is 62,224,658 (Conduent Business Services LLC) (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- The top 10% of records by individuals affected (72 of 715) account for 93.9% of the total (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- 9 of 715 records (1.3%) are dated within the 30 days before 2026-11-03 (source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
- In Texas, the leading entity type is Healthcare provider with 49 of 64 records (76.6%) (as of 2026-11-03; source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals)). #
HipaaBreachPulse records by state
| Group | Records | Share |
|---|---|---|
| Texas | 64 | 9.0% |
| California | 56 | 7.8% |
| Florida | 45 | 6.3% |
| New York | 43 | 6.0% |
| Pennsylvania | 34 | 4.8% |
| Illinois | 28 | 3.9% |
| Minnesota | 25 | 3.5% |
| Ohio | 25 | 3.5% |
| Massachusetts | 21 | 2.9% |
| Michigan | 21 | 2.9% |
| Washington | 21 | 2.9% |
| Missouri | 19 | 2.7% |
| North Carolina | 19 | 2.7% |
| Georgia | 18 | 2.5% |
| New Jersey | 18 | 2.5% |
HipaaBreachPulse records by entity type
| Group | Records | Share |
|---|---|---|
| Healthcare provider | 545 | 76.2% |
| Business associate | 132 | 18.5% |
| Health plan | 38 | 5.3% |
Methodology and data provenance
- Sample: 715 public records dated 2023-10-12 to 2026-10-09; illustrative samples excluded.
- Source: HHS Office for Civil Rights breach portal (breaches affecting 500+ individuals). Refreshed automatically about every 24 hours; figures above are as of 2026-11-03.
- Shares are of all records in the dataset; totals and medians use only records with a stated individuals affected.
- Organization-level data only. Informational; verify individual records at the official source.
Cite this study
Zalwin Research, "HipaaBreachPulse statistics" (data as of 2026-11-03), https://zalwin.com/research/hipaabreachpulse
Search the HipaaBreachPulse records Browse by state and category