OCR Enforcement Insights
Every HIPAA Penalty. Tracked and Analyzed.
The most comprehensive database of HHS OCR enforcement actions, settlements, and data breaches, sourced directly from official HHS records and updated continuously.
Enforcement actions tracked
209
Total penalties assessed
$120.1M
Individuals affected (breaches in hub)
18,278,220
Largest single penalty
$16.0M
Anthem pays OCR $16 Million in record HIPAA settlement following largest health data breach in history
Penalties by year
Aggregate OCR/HHS penalty dollars in the medcomply enforcement dataset.
Showing 25 of 209 enforcement actions
Filtered total: $120,064,203 in penalties
| Entity | State | Type | Penalty | Date | Violations | Details |
|---|---|---|---|---|---|---|
HHS’ Office for Civil Rights Settles HIPAA Investigation of MMG Fusion, LLC Breach | — | Settlement | , | Mar 2026 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP | — | Settlement | , | Aug 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Ransomware Investigation with Syracuse ASC | — | Settlement | , | Jul 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with a Behavioral Health Provider | — | Settlement | , | Jul 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Comstar, LLC | — | Settlement | , | May 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Security Rule Investigation with a Florida Health Care Provider | — | Settlement | , | May 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Cybersecurity Investigation with Vision Upright MRI | — | Settlement | , | May 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Neurology Practice | — | Settlement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles Phishing Attack Breach with Health Care Network for $600,000 | — | Settlement | $600,000 | Apr 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Public Hospital | — | Settlement | , | Apr 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Security Rule Investigation with Northeast Radiology | — | Settlement | , | Apr 2025 | View → | |
HHS’ Office for Civil Rights Settles HIPAA Security Rule Investigation with Health Fitness Corporation | — | Settlement | , | Mar 2025 | View → | |
HHS Office for Civil Rights Imposes a $200,000 Penalty Against Oregon Health & Science University for Failure to Provide Timely Access to Patient Records | — | CMP | $200,000 | Mar 2025 | View → | |
HHS Office for Civil Rights Imposes a $1,500,000 Civil Money Penalty Against Warby Parker in HIPAA Cybersecurity Hacking Investigation | — | CMP | $1,500,000 | Feb 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Case Against Memorial Healthcare System Over Patient Access to Records | — | Settlement | , | Jan 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation for $10,000 | — | Settlement | $10,000 | Jan 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Phishing Cybersecurity Investigation with Solara Medical Supplies, LLC for $3,000,000 | — | Settlement | $3,000,000 | Jan 2025 | View → | |
HHS Office for Civil Rights Settles HIPAA Security Rule Investigation with USR Holdings, LLC Concerning the Deletion of Electronic Protected Health Information | — | Settlement | , | Jan 2025 | View → | |
HHS Office for Civil Rights Settles 8th Ransomware Investigation with Elgon Information Systems | — | Settlement | , | Jan 2025 | View → | |
HHS Office for Civil Rights Settles 9th Ransomware Investigation with Virtual Private Network Solutions | — | Settlement | , | Jan 2025 | View → | |
HHS Office for Civil Rights Settles with Health Care Clearinghouse, Inmediata Health Group, Over HIPAA Impermissible Disclosure | — | Settlement | , | Dec 2024 | View → | |
HHS Office for Civil Rights Imposes a $548,265 Penalty Against Children’s Hospital Colorado for HIPAA Privacy and Security Rules Violations | — | CMP | $548,265 | Dec 2024 | View → | |
HHS Office for Civil Rights Imposes a $1.19 Million Penalty Against Gulf Coast Pain Consultants for HIPAA Security Rule Violations | — | CMP | $1,190,000 | Dec 2024 | View → | |
HHS Office for Civil Rights Settles with Holy Redeemer Family Medicine Over Disclosure of Patient’s Protected Health Information, Including Reproductive Health Information | — | Settlement | , | Nov 2024 | View → | |
HHS Office for Civil Rights Imposes a $100,000 Penalty Against Mental Health Center for Failure to Provide Timely Access to Patient Records | — | CMP | $100,000 | Nov 2024 | View → |
Page 1 of 9
Download full dataset →