AltaMed Health Services Corporation

AltaMed Health Services Corporation reported to HHS on 2026-02-26 a Hacking/IT Incident affecting 501 individuals. Breached information located on Network Server.

On December 14, 2025, AltaMed Health Services Corporation experienced a cybersecurity incident that limited access to certain computer systems. An unauthorized individual accessed personal employment information including names, addresses, Social Security numbers, and compensation data. AltaMed initiated incident response protocols, engaged cybersecurity experts, notified law enforcement, and is offering Experian credit monitoring to affected individuals.

AltaMed Health Services Corporation notified the California Attorney General of an incident where an unauthorized individual accessed an email account between August 5 and August 9, 2024. AltaMed became aware of suspicious activity on August 9, 2024, and contained the incident by disconnecting systems. The investigation, finalized on April 16, 2025, determined that names and potentially protected health information were involved. No evidence of fraudulent use was found. AltaMed enhanced security protocols and offered 24 months of credit monitoring to affected individuals.

AltaMed Health Services Corporation reported to HHS on 2025-06-13 a Unauthorized Access/Disclosure affecting 4530 individuals. Breached information located on Email.

AltaMed Health Services reported a data breach involving a third-party software vulnerability in Progress Software's MOVEit Transfer. An unauthorized third party accessed a server on May 29-30, 2023, and downloaded data including names, Social Security numbers, dates of birth, addresses, and gender. The vulnerability was disclosed by Progress on May 31, 2023. AltaMed patched servers, investigated the incident, and is offering 24 months of identity monitoring through Kroll to affected individuals.

AltaMed Health Services Corporation notified the California AG of a data breach involving its third-party vendor, Vitality Group. The incident stemmed from a vulnerability in the MOVEit file transfer program exploited on May 30, 2023. Vitality identified the risk on June 1, 2023, and disconnected the server. Affected data included names, addresses, dates of birth, email addresses, and Social Security numbers. AltaMed is offering two years of credit monitoring to affected members.

AltaMed Health Services Corporation notified patients of a data breach involving its business associate, Sharecare Health Data Services (SHDS). An unauthorized third party accessed SHDS's network as early as May 21, 2018, and acquired files containing patient information, including names, addresses, dates of birth, and medical record numbers. SHDS detected abnormal activity on June 22, 2018. This supplemental notice was sent to individuals potentially missed in the initial notification on February 15, 2019.

AltaMed Health Services Corporation reported to HHS on 2019-04-18 a Hacking/IT Incident affecting 5500 individuals. Breached information located on Network Server. Business associate Centrelake Medical Group, Inc. experienced a ransomware attack exposing PHI including names, addresses, SSNs, and medical data.

AltaMed Health Services Corporation reported to HHS on 2019-02-15 a Hacking/IT Incident affecting 6000 individuals. Breached information located on Network Server. The incident involved a business associate, ShareCare Health Data Services, which disclosed a data security incident affecting patient PHI (clinical and demographic) on December 31, 2018. AltaMed notified HHS, individuals, and media, and revised its BA agreement.

AltaMed Health Services Corporation notified the California Attorney General of a data breach affecting 5,767 California residents. The incident occurred at Sharecare Health Data Services (SHDS), an AltaMed business associate. An unauthorized third party gained access to the SHDS network as early as May 21, 2018, with abnormal activity detected on June 22, 2018. Affected data included patient names, addresses, dates of birth, unique identification numbers, medical record numbers, and facility information. Notification letters were mailed on February 15, 2019.

ALTAMED HEALTH SERVICES filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-062). The register records the breach as discovered on May 21, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

ALTAMED HEALTH SERVICES filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-227). The register records the breach as discovered on December 31, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

AltaMed Health Services Corporation reported to HHS on 2014-08-29 a Theft affecting 3206 individuals. Breached information located on Desktop Computer, Network Server, Paper/Films.

AltaMed Health Services Corporation notified individuals that a former employee was investigated for identity theft. Law enforcement recovered a hard drive containing personal information. AltaMed determined the former employee accessed patient records in Orange and Los Angeles Counties. The incident involves potential misuse of insider access to PHI and basic identity data.