LA CLINICA DE LA RAZA, INC.

La Clinica de La Raza, Inc. reported to HHS on 2026-01-22 a Hacking/IT Incident affecting 11,403 individuals. A subcontractor of the covered entity's business associate experienced a hacking attack that compromised PHI including clinical, demographic, and financial information. Breached information was located on a Network Server. The CE, subcontractor, and media were all notified; OCR provided technical assistance regarding the HIPAA Breach Notification Rule.

La Clinica de La Raza, Inc. filed a breach notification with the California AG regarding an incident dated November 4, 2024, involving TriZetto (a third-party vendor). The attachment PDF was not extractable. Data types likely include patient PII/PHI based on the breach letter title referencing 'Patient Breach Letter'. Limited detail available from source.

La Clinica de La Raza, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-01. 26 Massachusetts residents were affected. The report records the breach type as electronic.

La Clinica de La Raza reported unauthorized access to employee email accounts from January 24, 2023, to February 8, 2023. The organization became aware of suspicious activity on February 8, 2023. Patient health records were not accessed. Affected individuals' names and other personal information may have been viewed. The organization secured accounts, engaged forensic investigators, and offered credit monitoring.

La Clínica de La Raza, Inc. reported to HHS on 2023-04-07 a Hacking/IT Incident affecting 125794 individuals. Breached information located on Email.

LA CLINICA DE LA RAZA INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-612). The register records the breach as discovered on January 24, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

La Clinica de La Raza, Inc. experienced a malware incident on January 12, 2021, discovered on January 28, 2021. Unauthorized access affected patient records containing names, dates of birth, contact info, health insurance info, and health information (diagnoses, test results, treatment). SSNs and financial account info were not involved. The organization disconnected affected systems, engaged forensic investigators, and notified law enforcement. Remediation includes enhanced security safeguards and training.

The covered entity (CE), La Clinica de La Raza, reported that its business associate suffered a cyber-attack affecting the protected health information (PHI) of 31,132 individuals. The PHI involved included names, addresses, dates of birth, diagnoses and conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach the BA implemented additional administrative and technical safeguards.

La Clinica de La Raza, Inc. reported to HHS on 2019-11-22 a Theft affecting 2477 individuals. Breached information located on Other Portable Electronic Device. A mobile device containing ePHI (names, DOB, MRN, lab results) was stolen from a workforce member's vehicle.