DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPHIIdentity (basic)Government IDMediumContained

Paradigm Healthcare Services

bd_76247b93c47d970d · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 13, 2025

Filed

Sep 14, 2026

To disclose

48 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

70%
Full breach record for Paradigm Healthcare Services →

Paradigm Healthcare Services, a third-party service provider for California Medi-Cal billing, experienced unauthorized access to its local network between October 8 and October 15, 2025. The company became aware of the incident on October 13, 2025. Affected data included names, dates of birth, gender, and Medi-Cal member identification numbers. The company took systems offline, notified law enforcement, and engaged forensic investigators. No evidence of fraud or identity theft was found.

California clockDiscovered Oct 13, 2025 → Notified Sep 14, 2026336d ✗ CA 60-day late48 weeks discovery → filing

Incident timeline

undetected · 5 days
discovery → filing · 48 weeks / 336 days

Oct 8, 2025

Begins

Oct 13, 2025

Discovered

Sep 14, 2026

Filed

vs. sector median

+39 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
HHS OCRSep 14 · first
California State AGSep 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.