The HHS Office for Civil Rights breach portal lists 5 large HIPAA breach submissions with a breach submission date of August 14, 2026. Combined, these filings report 2,823,765 individuals affected nationally (not state-resident totals).
The largest filing — Baylor Genetics (TX) — accounts for 2,810,878 individuals in this batch. See our live HIPAA / HHS OCR statistics and healthcare AG tracker for broader context.
August month-to-date now totals 12 OCR submissions covering 2,892,732 individuals dated through August 14, 2026 on the under-investigation portal view.
Submissions Dated August 14, 2026
| Organization | State | Entity Type | Individuals | Breach Type | Submitted |
|---|---|---|---|---|---|
| Baylor Genetics | TX | Healthcare Provider | 2,810,878 | Hacking/IT Incident | 08/14/2026 |
| Mountain Rheumatology Professional, LLC | CO | Healthcare Provider | 5,378 | Hacking/IT Incident | 08/14/2026 |
| Gardiner Family Chiropractic, PC | ME | Healthcare Provider | 5,000 | Hacking/IT Incident | 08/14/2026 |
| Integrative Emergency Services, LLC | TX | Business Associate | 2,009 | Hacking/IT Incident | 08/14/2026 |
| Well Child, Inc. | TN | Healthcare Provider | 500 | Hacking/IT Incident | 08/14/2026 |
OCR lists breaches affecting 500 or more individuals. Submission dates reflect when the covered entity reported to OCR; investigation status and counts can change as the portal updates.
Independent Cybersecurity Audits
EmailMeNow domain audits on August 14, 2026 scored 5 filer domains in this batch.
3 of 5 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Mountain Rheumatology Professional, LLC (mountain.com) leads at 53% overall; Integrative Emergency Services, LLC (integrative.com) scores 24%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Baylor Genetics | baylorgenetics.com | 47% | 50% | 15% | 39% | Below Average |
| Mountain Rheumatology Professional, LLC | mountain.com | 53% | 65% | 15% | 39% | Average |
| Gardiner Family Chiropractic, PC | gardinerfamilychiropractic.com | 45% | 45% | 45% | 45% | Below Average |
| Integrative Emergency Services, LLC | integrative.com | 24% | 0% | 15% | 40% | Weakest |
| Well Child, Inc. | wellchild.com | 45% | 45% | 45% | 45% | Below Average |
Audit links: baylorgenetics.com · mountain.com · gardinerfamilychiropractic.com · integrative.com · wellchild.com
Website stack note
- Baylor Genetics (
baylorgenetics.com): WordPress behind current (running .; latest 7.1); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly. - Well Child, Inc. (
wellchild.com): WordPress behind current (running 7.0.4; latest 7.1)
Related trackers
- HIPAA / HHS OCR statistics
- Healthcare AG breach tracker
- Texas healthcare breaches (2026)
- All state AG trackers
- Breach monitoring guide
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA August roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR August roundup
- SEC 8-K September roundup
Source: HHS OCR Breach Portal