OCR HIPAA Breach Portal · October 9, 2026 · Primary source
OCR HIPAA Breach: Photon Health, NY, 30,625 affected, Hacking/IT Incident
Summary
Photon Health, a business associate, reported a HIPAA breach to HHS OCR on October 9, 2026, affecting 30,625 individuals in New York. The breach involved a hacking or IT incident on a network server. Under HITECH Act Section 13402(e)(4), OCR publicly lists breaches affecting 500 or more individuals, and the matter is subject to potential resolution agreements or civil money penalties.
What this may mean
The breach disclosure places Photon Health within OCR's active enforcement pipeline, where resolution agreements and civil money penalties are possible outcomes. As a business associate, Photon Health's covered-entity partners may face scrutiny of their own BAA oversight and vendor security controls. The 30,625-individual scope exceeds the threshold that typically triggers an OCR investigation.
Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.
Related items
- HHS OCR Enforcement: Resolution Agreements & CMPs · October 29, 2026HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network,Score 96
- OCR HIPAA Breach Portal · September 16, 2026OCR HIPAA Breach: Beaver County Behavioral Health, PA, 501 affected, Hacking/IT IncidentScore 95
- OCR HIPAA Breach Portal · October 1, 2026OCR HIPAA Breach: Leggett & Platt, Incorporated Employee Benefit Plan, MO, 61,702 affected, Hacking/IT IncidentScore 89
- Vermont Attorney General · September 29, 2026Attorney General Clark Announces Multistate Settlement with Labcorp Over the American Medical Collection Agency Data BreachScore 89
- Connecticut Attorney General · September 25, 2026Attorney General Tong Leads $2.3 Million Multistate Settlement with LabCorp Over the American Medical Collection Agency Data BreachScore 89
- Pennsylvania Attorney General · September 24, 2026Press Release SEP 24, 2026 Attorney General Sunday Announces Multistate Settlement with Labcorp over American Medical Collection Agency Data Breach HARRISBURG, Attorney General Dave Sunday announced that Pennsylvania, as part of a coalition of 44 attorneys general, has settled with the Laboratory Corporation of America (Labcorp) resolving… Read moreScore 89