Get Permission Many of the major health data breaches added to the federal tally so far this year involve business associates, continuing a trend in recent years. The largest breach added so far in 2021 to the U.S. Department of Health and Human Services' HIPAA Breach Reporting Tool website – which lists health data breaches affecting 500 or more individuals – is a vendor hacking incident reported on Jan. 29 by Florida Healthy Kids Corp., a provider of children's' health and dental health plans in Florida. That breach – reported as affecting 3.5 million individuals - involved Jelly Bean Communications Design, a website hosting vendor that the health plans provider says failed to address vulnerabilities over a seven-year period, leaving patient data potentially exposed. Plus, the hackers tampered with some of that data, Healthy Florida Kids Corp. said in its breach notification statement last month.