The HHS Office for Civil Rights breach portal lists 3 large HIPAA breach submissions with a breach submission date of October 1, 2026. Combined, these filings report 244,647 individuals affected nationally (not state-resident totals).
The largest filing — Denver Health Medical Plan (CO) — accounts for 238,083 individuals in this batch. See our live HIPAA / HHS OCR statistics and healthcare AG tracker for broader context.
October month-to-date now totals 4 OCR submissions covering 245,287 individuals dated through October 1, 2026 on the under-investigation portal view.
Submissions Dated October 1, 2026
| Organization | State | Entity Type | Individuals | Breach Type | Submitted |
|---|---|---|---|---|---|
| Denver Health Medical Plan | CO | Health Plan | 238,083 | Hacking/IT Incident | 10/01/2026 |
| Bay Area Psychological Consultants | FL | Healthcare Provider | 5,679 | Hacking/IT Incident | 10/01/2026 |
| Family Physicians, Inc. | OH | Healthcare Provider | 885 | Hacking/IT Incident | 10/01/2026 |
OCR lists breaches affecting 500 or more individuals. Submission dates reflect when the covered entity reported to OCR; investigation status and counts can change as the portal updates.
Independent Cybersecurity Audits
EmailMeNow domain audits on October 1, 2026 scored 2 filer domains in this batch.
2 of 2 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Family Physicians, Inc. (familyphysiciansclinic.com) leads at 33% overall; Denver Health Medical Plan (denverhealthmedicalplan.org) scores 24%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Denver Health Medical Plan | denverhealthmedicalplan.org | 24% | 0% | 15% | 40% | Weakest |
| Family Physicians, Inc. | familyphysiciansclinic.com | 33% | 25% | 15% | 37% | Weak |
Audit links: denverhealthmedicalplan.org · familyphysiciansclinic.com
Website stack note
- Family Physicians, Inc. (
familyphysiciansclinic.com): WordPress behind current (running 7.0.7; latest 7.1.3)
Related trackers
- HIPAA / HHS OCR statistics
- Healthcare AG breach tracker
- Texas healthcare breaches (2026)
- All state AG trackers
- Breach monitoring guide
Source: HHS OCR Breach Portal