The HHS breach portal is the federal reporting and review system used to track healthcare breach disclosures in the United States. Covered entities and business associates use it to submit notices about incidents involving unsecured protected health information under HIPAA’s breach-notification framework.
It matters because breach reporting is both a legal obligation and a source of public accountability. Security teams use the portal record to compare initial estimates with later, more accurate scoping results as logs, backups, exports, and connected systems are reviewed. In real attacks, an incident may first appear limited, then expand as investigators discover more records or additional data stores. For defenders, the portal is a reminder that incident response must include evidence preservation, data mapping, and careful impact assessment, not just system restoration.