From ClingantryAI Health Regulator News

The Department of Health Care Finance for the District of Columbia filed a breach report with HHS OCR on September 3, 2026. The filing covers 399,086 individuals whose protected health information was involved in an unauthorized access or disclosure. The compromised data resided in an electronic medical record system. As a health plan, this entity is a covered entity under HIPAA. This submission date reflects when the report was filed with the government, not necessarily when the incident occurred or was discovered. Healthcare administrators should note the scale of this event involving a major public health plan.

A major healthcare provider, Centers Lab NJ LLC, has reported a significant data breach to the HHS Office for Civil Rights. The incident involved a hacking/IT incident targeting a network server, compromising the records of 542,377 individuals. The breach was officially filed on June 18, 2026. Hospital administrators should monitor this case closely as a reminder of the risks associated with network security vulnerabilities. While this specific report does not detail immediate operational changes for other facilities, it underscores the critical need for robust cybersecurity measures to protect patient data from unauthorized access.

Laurel Eye Clinic in Pennsylvania has reported a significant cybersecurity incident to the HHS Office for Civil Rights. The breach involved a hacking or IT incident targeting the clinic's network server. This event potentially exposed the protected health information of 145,221 individuals. The report was submitted on April 22, 2026. Hospital administrators should review their own network security protocols to ensure similar vulnerabilities are addressed. While this specific incident is contained to one provider, it highlights the ongoing risk of server-based attacks in healthcare settings. Ensure your IT teams are monitoring for unauthorized access and that incident response plans are up to date.

A Maryland-based insurance group, Kelly & Associates Insurance Group, Inc., has filed a report with HHS OCR regarding a significant data breach. As a Business Associate, this entity handles protected health information on behalf of covered entities. The filing, submitted on April 9, 2025, indicates that a hacking/IT incident compromised data stored on a network server. The breach affects 553,332 individuals. Healthcare administrators should note this as a high-volume incident involving a vendor. While the submission date is April 9, the actual breach likely occurred earlier. This event highlights the risks associated with third-party data storage and the importance of monitoring vendor security practices.

Dameron Hospital in California has reported a significant data breach to HHS OCR. The incident involved a hacking or IT incident that compromised information stored on a network server. This breach affects 210,706 individuals, making it a large-scale event that hospital administrators should monitor for potential industry-wide trends. The filing was submitted on April 2, 2025. While this specific report does not detail the exact data types exposed, the scale suggests a serious security failure. Administrators should review their own server security protocols and ensure incident response plans are current. This is a confirmed breach, not a proposal, and highlights the ongoing risk of cyberattacks on healthcare infrastructure.