Regional Center of Orange County
bd_229a3f7382eca32e · schema v1 · pii pii-v1
Full breach record for Regional Center of Orange County →Regional Center of Orange County (RCOC) notified individuals served through its Cypress office of a data breach involving the mistaken disposal of documents by a contracted janitorial service. On May 27, 2026, documents containing names, addresses, dates of birth, phone numbers, email addresses, Unique Client Identifiers, and personal health information were placed in regular trash instead of secure destruction bins. Staff discovered the error on May 28, 2026, but the trash had already been collected. No Social Security numbers or financial account numbers were involved. RCOC replaced bins with secure containers, strengthened procedures and vendor oversight, and offered one year of complimentary Experian IdentityWorks identity theft protection.
J jump to incidentP pin to compareR raw source
Incident timeline
May 27, 2026
Begins
May 28, 2026
Discovered
Jul 27, 2026
Filed
vs. sector median
2 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- HHS OCRbd_b0da8986db95d7d22026-07-27Candidate
Filing propagation · 2 filings
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.