The HHS Office for Civil Rights breach portal lists 2 large HIPAA breach submissions with a breach submission date of October 9, 2026. Combined, these filings report 31,263 individuals affected nationally (not state-resident totals).
The largest filing — Photon Health (NY) — accounts for 30,625 individuals in this batch. See our live HIPAA / HHS OCR statistics and healthcare AG tracker for broader context.
October month-to-date now totals 18 OCR submissions covering 8,539,661 individuals dated through October 9, 2026 on the under-investigation portal view.
Submissions Dated October 9, 2026
| Organization | State | Entity Type | Individuals | Breach Type | Submitted |
|---|---|---|---|---|---|
| Photon Health | NY | Business Associate | 30,625 | Hacking/IT Incident | 10/09/2026 |
| Allswell Health Medical Group PA | CA | Healthcare Provider | 638 | Hacking/IT Incident | 10/09/2026 |
OCR lists breaches affecting 500 or more individuals. Submission dates reflect when the covered entity reported to OCR; investigation status and counts can change as the portal updates.
Independent Cybersecurity Audits
EmailMeNow domain audits on October 9, 2026 scored 2 filer domains in this batch.
1 of 2 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Photon Health (photon.health) leads at 54% overall; Allswell Health Medical Group PA (allswell.com) scores 49%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Photon Health | photon.health | 54% | 65% | 45% | 37% | Average |
| Allswell Health Medical Group PA | allswell.com | 49% | 15% | 15% | 92% | Below Average |
Audit links: photon.health · allswell.com
Website stack note
- Allswell Health Medical Group PA (
allswell.com):
Related trackers
- HIPAA / HHS OCR statistics
- Healthcare AG breach tracker
- Texas healthcare breaches (2026)
- All state AG trackers
- Breach monitoring guide
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA October roundup
- TX October roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP October roundup
- Breach data week (November)
- HHS OCR October roundup
- SEC 8-K October roundup
Source: HHS OCR Breach Portal