The federal list of major health information breaches that have occurred since September 2009 included 249 incidents affecting nearly 8.3 million individuals as of Tuesday. But the total number affected could surpass 10 million once details about the recent Health Net breach are added. At least three state government agencies are investigating the Health Net breach, which affected an estimated 1.9 million individuals and involved nine server drives missing from a California data center managed by IBM. The Department of Health and Human Services' Office for Civil Rights, which adds breach incidents to its official tally once details are confirmed, has not yet placed the Health Net incident on its list. OCR added only nine incidents to its official tally in the past month. But those included a health information breach at New York City Health and Hospitals Corp. that affected 1.7 million.
