Skip to content

← All developments

OCR HIPAA Breach Portal · October 6, 2026 · Primary source

OCR HIPAA Breach: Nabi Health, Inc., CA, 783 affected, Unauthorized Access/Disclosure

Score 62PRIMARYregulatoryHHS OCRHIPAA

Summary

Nabi Health, Inc., a California-based business associate, reported a HIPAA breach to HHS OCR on October 6, 2026, affecting 783 individuals. The breach involved unauthorized access or disclosure of protected health information stored on a network server and other locations. OCR's public posting of the incident is required under HITECH Act Section 13402(e)(4) for breaches affecting 500 or more individuals.

What this may mean

The breach notice triggers OCR's public reporting requirement under HITECH and places Nabi Health within the pool of entities subject to potential OCR investigation, resolution agreement, or civil money penalty. Because Nabi Health is a business associate, covered entities that contracted with it may face scrutiny of their business associate agreement terms and breach notification obligations. The 783-individual scope and network server vector are the primary facts on record.

Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.

Related items