From ClingantryAI Health Regulator News

Midwest Spine & Brain Institute, a healthcare provider in Minnesota, submitted a breach report to HHS OCR on August 14, 2026. The filing states that 108,487 individuals were affected by unauthorized access or disclosure of protected health information. The compromised data was located on a network server and other systems. This date reflects when the report was filed with the regulator, not when the incident occurred or was discovered. While secondary sources suggest the incident involved a vendor, 3C Care Systems, the official government record does not specify the cause or origin of the breach. Healthcare administrators should review this filing as an example of large-scale unauthorized access reporting.

The Minnesota Department of Human Services, a state health plan, filed a breach report with HHS OCR on January 16, 2026. The filing covers 303,965 individuals and cites unauthorized access or disclosure of data stored on a network server. Healthcare administrators should note that this is a reportable breach involving a large number of people. The record does not specify whether the access was external or internal, only that it was unauthorized. Monitor for further updates from the agency regarding remediation steps or additional notifications.

Alpine Ears, Nose & Throat, P.L.L.C., a healthcare provider in Colorado, submitted a reportable breach filing to HHS OCR on 01/17/2025. The incident involved unauthorized access or disclosure of patient information stored on a network server. The breach affects 65,648 individuals. This submission date reflects when the report was filed, not when the breach occurred. While secondary sources describe a ransomware attack and a subsequent class-action settlement, the OCR record does not confirm these details. Providers should note that obligations differ for Business Associates versus Covered Entities. The filing highlights the ongoing risk of unauthorized access to stored health data within provider networks.