The HHS Office for Civil Rights breach portal lists 4 large HIPAA breach submissions with a breach submission date of July 31, 2026. Combined, these filings report 6,166 individuals affected nationally (not state-resident totals).
The largest filing — Monongalia County General Hospital Company (WV) — accounts for 2,173 individuals in this batch. See our live HIPAA / HHS OCR statistics and healthcare AG tracker for broader context.
July month-to-date now totals 41 OCR submissions covering 23,438,156 individuals dated through July 31, 2026 on the under-investigation portal view.
Submissions Dated July 31, 2026
| Organization | State | Entity Type | Individuals | Breach Type | Submitted |
|---|---|---|---|---|---|
| Monongalia County General Hospital Company | WV | Healthcare Provider | 2,173 | Hacking/IT Incident | 07/31/2026 |
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation | NC | Healthcare Provider | 1,551 | Hacking/IT Incident | 07/31/2026 |
| Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation | NC | Healthcare Provider | 1,397 | Hacking/IT Incident | 07/31/2026 |
| Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation | NC | Healthcare Provider | 1,045 | Hacking/IT Incident | 07/31/2026 |
OCR lists breaches affecting 500 or more individuals. Submission dates reflect when the covered entity reported to OCR; investigation status and counts can change as the portal updates.
Independent Cybersecurity Audits
EmailMeNow domain audits on July 31, 2026 scored 1 filer domain in this batch.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation | asheville.com | 45% | 45% | 45% | 45% | Below Average |
Audit links: asheville.com
Related trackers
- HIPAA / HHS OCR statistics
- Healthcare AG breach tracker
- Texas healthcare breaches (2026)
- All state AG trackers
- Breach monitoring guide
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA August roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR August roundup
- SEC 8-K September roundup
Source: HHS OCR Breach Portal