OCR Enforcement Insights
Every HIPAA Penalty. Tracked and Analyzed.
The most comprehensive database of HHS OCR enforcement actions, settlements, and data breaches, sourced directly from official HHS records and updated continuously.
Enforcement actions tracked
220
Total penalties assessed
$120.1M
Individuals affected (breaches in hub)
56,342,387
Largest single penalty
$16.0M
Anthem pays OCR $16 Million in record HIPAA settlement following largest health data breach in history
Penalties by year
Aggregate OCR/HHS penalty dollars in the medcomply enforcement dataset.
Showing 25 of 220 enforcement actions
Filtered total: $120,064,203 in penalties
| Entity | State | Type | Penalty | Date | Violations | Details |
|---|---|---|---|---|---|---|
HHS’ Office for Civil Rights Settles HIPAA Right of Access Investigation with Azul Vision, Inc. | — | Settlement | , | Aug 2026 | View → | |
HHS’ Office for Civil Rights Settles Ransomware Investigation with Healthcare System | — | Settlement | , | Jul 2026 | View → | |
Spencer Gifts LLC Resolution Agreement | — | Resolution agreement | , | May 2026 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Investigation of MMG Fusion, LLC Breach | — | Settlement | , | Mar 2026 | View → | |
SG Health Plan Resolution Agreement and Corrective Action Plan | — | Resolution agreement | , | Jan 2026 | View → | |
Consociate, Inc. Resolution Agreement and Corrective Action Plan | — | Resolution agreement | , | Dec 2025 | View → | |
Assured Imaging Resolution Agreement and Corrective Action Plan | — | Resolution agreement | , | Dec 2025 | View → | |
Regional Women’s Health Group, LLC Resolution Agreement and Corrective Action Plan | — | Resolution agreement | , | Aug 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP | — | Settlement | , | Aug 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Ransomware Investigation with Syracuse ASC | — | Settlement | , | Jul 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with a Behavioral Health Provider | — | Settlement | , | Jul 2025 | View → | |
Top of the World Ranch Treatment Center, LLC Resolution Agreement | — | Resolution agreement | , | Jun 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Comstar, LLC | — | Settlement | , | May 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Security Rule Investigation with a Florida Health Care Provider | — | Settlement | , | May 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Cybersecurity Investigation with Vision Upright MRI | — | Settlement | , | May 2025 | View → | |
Concentra Settlement Agreement | — | Settlement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Neurology Practice | — | Settlement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles Phishing Attack Breach with Health Care Network for $600,000 | — | Settlement | $600,000 | Apr 2025 | View → | |
Cadia Rehabilitation Resolution Agreement | — | Resolution agreement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Public Hospital | — | Settlement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Security Rule Investigation with Northeast Radiology | — | Settlement | , | Apr 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Security Rule Investigation with Health Fitness Corporation | — | Settlement | , | Mar 2025 | View → | |
HHS Office for Civil Rights Imposes a $200,000 Penalty Against Oregon Health & Science University for Failure to Provide Timely Access to Patient Records | — | CMP | $200,000 | Mar 2025 | View → | |
HHS Office for Civil Rights Imposes a $1,500,000 Civil Money Penalty Against Warby Parker in HIPAA Cybersecurity Hacking Investigation | — | CMP | $1,500,000 | Feb 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Case Against Memorial Healthcare System Over Patient Access to Records | — | Settlement | , | Jan 2025 | View → |
Page 1 of 9
Download full dataset →