This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

Use the search box above to explore reports of patient privacy violations, breaches and complaints. You can search for a hospital, clinic, pharmacy or health insurer, and you can also search for keywords inside these reports.

Try searching for something like — or explore highlights and previous coverage:

Do you believe your privacy has been violated? Here’s what you can do:

Related Stories

Another VA Headache: Privacy Violations Rising at Veterans’ Medical Facilities

Deceased vets’ data has been sent to the wrong widows. Employees have snooped on the records of patients who’ve committed suicide. And whistleblowers say their own medical privacy has been violated. In response, the VA says patient privacy is a priority.

Few Consequences For Health Privacy Law’s Repeat Offenders

Regulators have logged dozens, even hundreds, of complaints against some health providers for violating federal patient privacy law. Warnings are doled out privately, but sanctions are imposed only rarely. Companies say they take privacy seriously.

Nursing Home Workers Share Explicit Photos of Residents on Snapchat

A ProPublica review found 35 cases since 2012 in which nursing home or assisted living workers surreptitiously shared photos or videos of residents on social media. At least 16 cases involved Snapchat.

Methodology: How We Analyzed Privacy Violation Data

ProPublica followed the paper trail to find out the health care facilities that repeatedly violated patient privacy laws. Find out how we did it.

Sources

Deficiencies cited by California Department of Public Health (January 1, 2012 to September 11, 2015, though some violations occurred earlier); Large privacy breaches reported to U.S. Department of Health and Human Services, Office for Civil Rights (January 1, 2011 to November 6, 2015); Complaints resolved by HHS Office for Civil Rights (January 1, 2011 to July 31, 2014); privacy incident reports within the U.S. Department of Veterans Affairs (January 1, 2011 to June 29, 2015).

Credits: Document icon by Nate Eul from the Noun Project.
Sources: California Department of Public Health (deficiency citations, 2012-2015); U.S. Department of Health and Human Services, Office for Civil Rights (large breaches, 2011-2015; complaints, 2011-2014); U.S. Department of Veterans Affairs (incident reports, 2011-2015). For more information, read the methodology.