HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIHealth (basic)Government IDIdentity (basic)MediumContained

MACT Health Board

bd_411912b737a1f9de · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 23, 2026

To disclose

—

Affected

Not disclosed

Linked

2 records

Confidence

66%

Full breach record for MACT Health Board →

MACT Health Board Inc. reported that an unauthorized party accessed files on its systems between November 12 and November 20, 2025. The incident affected patients and employees. Affected data included names, Social Security numbers, driver's license numbers, and medical information such as diagnoses, treatments, and insurance details. MACT engaged third-party forensic experts, notified law enforcement, and implemented additional security safeguards. Identity protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 12, 2025

Begins

Jan 23, 2026

Filed

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_1a30792d15666fb32025-11-21 · +63dCandidate

Name: MACT Health Board
norm: mact health board
Domain: macthealth.org

Name: MACT Health Board
norm: mact health board
Domain: macthealth.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Nov 12, 2025 – Nov 20, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Government IDIdentity (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown
Threat actor: External

During the incident: Took steps to secure our systems
Launched an investigation with the assistance of third-party forensic experts
Notified law enforcement
Implemented additional safeguards and technical security measures to further protect and monitor our systems
Offering a 12-month membership to Experian’s IdentityWorks SM Credit 3B
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-617506
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 23, 2026
Raw hash: ab36f6c86a4f7412b4f912be0c63991feec747869d4fb92e15f6bfbb1b87ff5c

Linked disclosures

Ransomware claims (1)

Reporting entityMACT Health Board

Victim entityMACT Health Board

IncidentUnknown

Stated responseTook steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov