# HHS HIPAA Breach Portal – Active Investigations Feed

> HHS HIPAA Breach Portal – Active Investigations Feed is a paid API for AI agents from api.healthtravel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-29).

Returns the newest HIPAA breach reports (500+ individuals affected, under investigation) from the HHS Office for Civil Rights portal, filterable by state, entity type, breach type, minimum affected count, or entity name.

## Facts

- Endpoint: GET https://api.healthtravel-api.workers.dev/api/health/hhs-hipaa-breach-portal?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hhs-hipaa-breach-portal-active-investigations-feed-852d9f61
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LgvA4AOBloRKXXVQqTHhg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hhs-hipaa-breach-portal-active-investigations-feed-852d9f61
```

Example prompt: Pull the latest HIPAA breach cases currently under HHS OCR investigation — show me up to 50 results for health plans in Texas involving hacking, with at least 1000 individuals affected.

## When to prefer this

Use this endpoint when you need near-real-time access to active HIPAA breach investigations from the official HHS OCR portal, filtered by jurisdiction, organization type, breach vector, or scale. It is the right choice for healthcare compliance monitoring, due-diligence research on covered entities, or tracking breach trends by state or breach type. Prefer this over general web search when you need structured, filterable breach data with consistent fields (entity type, individuals affected, business associate flag) rather than unstructured news articles.

## Known failure modes

- No results returned if filter combination (state + entity type + breach type + minIndividuals) yields zero matches
- Invalid state code returns an empty result set or error
- Limit parameter outside 1–100 range may be clamped or rejected
- HHS source portal downtime causes fetch failure or stale data
- Name filter too specific may match no records — partial name matching recommended

## How this service works

HIPAA breaches affecting 500+ people from the HHS Office for Civil Rights portal (last 24 months, under investigation): entity name, state, entity type, individuals affected, submission date, breach type, location of the information and business-associate flag. Newest 100 reports, filterable by state, entity type, breach type, minimum individuals or name; plus total open cases.

## Output

A JSON array of up to 100 HIPAA breach records, each containing the covered entity name, state, entity type, number of individuals affected, submission date, breach type, location of breached information (e.g. network server, paper records), and a business-associate flag. Also includes a total count of open cases currently under HHS OCR investigation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "name": {
       "type": "string",
       "description": "Optional part of the covered entity name"
      },
      "limit": {
       "type": "string",
       "description": "Rows to return, 1 to 100 (default 50)"
      },
      "state": {
       "type": "string",
       "description": "Optional 2-letter state, e.g. CA, TX"
      },
      "breachType": {
       "type": "string",
       "description": "Optional words of the breach type, e.g. hacking, theft, unauthorized"
      },
      "entityType": {
       "type": "string",
       "description": "Optional words of the entity type, e.g. health plan, business associate"
      },
      "minIndividuals": {
       "type": "string",
       "description": "Optional minimum number of individuals affected"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hhs-hipaa-breach-portal-active-investigations-feed-852d9f61/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.healthtravel-api.workers.dev](https://www.zero.xyz/host/api.healthtravel-api.workers.dev/llms.txt)