OCR HIPAA Breach Portal · September 25, 2026 · Primary source
OCR HIPAA Breach: Vascular Associates of South Alabama, AL, 623 affected, Unauthorized Access/Disclosure
Summary
Vascular Associates of South Alabama, an Alabama healthcare provider, reported a HIPAA breach to HHS OCR on September 25, 2026, affecting 623 individuals via unauthorized access or disclosure of email-based information. No business associate was involved. The breach is publicly listed under HITECH Act Section 13402(e)(4), and OCR resolution agreements or civil monetary penalties may follow.
What this may mean
The breach listing triggers OCR's standard investigative posture for incidents affecting 500 or more individuals under HITECH Act Section 13402(e)(4). The affected entity is a small single-state provider with 623 individuals affected, limiting broader precedential impact.
Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.
Related items
- OCR HIPAA Breach Portal · June 23, 2026OCR HIPAA Breach: Xsolis, Inc., TN, 1,396,519 affected, Hacking/IT IncidentScore 96
- OCR HIPAA Breach Portal · September 16, 2026OCR HIPAA Breach: Beaver County Behavioral Health, PA, 501 affected, Hacking/IT IncidentScore 95
- OCR HIPAA Breach Portal · October 1, 2026OCR HIPAA Breach: Leggett & Platt, Incorporated Employee Benefit Plan, MO, 61,702 affected, Hacking/IT IncidentScore 89
- OCR HIPAA Breach Portal · September 10, 2026OCR HIPAA Breach: White River Junction VA Medical Center, VT, 1,408 affected, Unauthorized Access/DisclosureScore 87
- OCR HIPAA Breach Portal · September 1, 2026OCR HIPAA Breach: NFI North, Inc., NH, 49,540 affected, Hacking/IT IncidentScore 87
- OCR HIPAA Breach Portal · August 13, 2026OCR HIPAA Breach: Vanderbilt University Medical Center, TN, 3,298 affected, Hacking/IT IncidentScore 86