Table 2. Ten of the largest HIPAA data breaches reported to the HHS database as of December 2015.
OrganizationMethod/BreachDateNumber of
records
Location of
breached
information
AnthemHacking/IT incidentMarch 201578,800,000Network server
Premera Blue CrossHacking/IT incidentMarch 201511,000,000Network server
Excellus Health PlanHacking/IT incidentSeptemberbreak/>201510,000,000Network Server
Science Applications
International Corpora
tion (SAIC)
LossNovember
2011
4,900,000Other
University of California,
Los Angeles Health
Hacking/IT incidentJuly 20154,500,000Network Server
Community
Health Systems
Professional Services
Corporation
TheftAugust 20144,500,000Network Server
Advocate Medical
Group
TheftAugust 20134,029,530Desktop computer
Medical Informatics
Engineering
Hacking/IT incidentJuly 20153,900,000Electronic Medical
Record Network Server
Xerox State HealthcareUnauthorized
access/disclosure
September
2014
2,000,000Desktop computer or
other device
IBMUnknownApril 20111,900,000Other