Petaluma Health Center

Petaluma Health Center notified patients of a data breach involving a third-party vendor, TriZetto, which works with their electronic medical record system (OCHIN). An unauthorized individual gained access to TriZetto's systems. Affected data may include names, social security numbers, dates of birth, contact information, and health/insurance information. The clinic was notified by OCHIN on December 15, 2025. TriZetto engaged Kroll for notification and identity theft protection services.

Petaluma Health Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-05. 108 Massachusetts residents were affected. The report records the breach type as electronic.

Petaluma Health Center reported a data breach to the California Attorney General. The incident occurred between March 7, 2023, and March 14, 2023. The filing indicates that patient information was affected, likely including protected health information (PHI) and personally identifiable information (PII). The specific nature of the breach, number of individuals affected, and response actions are not detailed in the provided summary page, as the attached notice letter content is redacted/empty in the source.

Petaluma Health Center reported to HHS on 2023-06-02 a Hacking/IT Incident affecting 124862 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including names, DOBs, addresses, SSNs, and treatment info.

Petaluma Health Center reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-02. The breach occurred during 3/7/2023 - 3/14/2023. The breach was discovered on 3/14/20234/28/2023. 482 individuals were affected. Notice was sent on 6/1/2023.

Petaluma Health Center notified Montana residents of a March 14, 2023 network security incident where an unauthorized party gained access. Personal information including SSNs, DOBs, and PHI may have been acquired. No evidence of misuse was found. The network was secured and forensic investigators were engaged.

Petaluma Health Center experienced an external system breach on March 7, 2023, which was discovered on March 14, 2023. The breach affected one Maine resident, compromising their name and driver's license number. The center notified the affected individual on April 24, 2023, and offered 12 months of free credit monitoring and identity theft protection services.

Petaluma Health Center experienced a network security incident on March 14, 2023, involving unauthorized access to its network environment. The breach potentially exposed personal information of current and former employees, board members, and volunteers, including names, addresses, Social Security numbers, driver's license numbers, passport numbers, dates of birth, and health insurance plan information. The organization contained the incident by shutting off network access and engaged third-party forensic investigators. Affected individuals were offered credit monitoring and fraud assistance services.

Petaluma Health Center notified Montana residents of a March 14, 2023 network security incident where an unauthorized party gained access to the network. Affected data included names, addresses, SSNs, driver's license numbers, passport numbers, DOBs, and health insurance info for employees/board members. PHC engaged forensic investigators, secured the network, and offered credit monitoring.

Petaluma Health Center reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-07 and was reported on 2023-04-24. 2 Indiana residents were affected.

The Petaluma Health Center is a Federally Qualified Health Center that strives to care for the "whole" individual by providing excellent care for all patients, regardless of one's ability to pay for services. We do not know whether their patients personal and medical information was stored unsafely because of their disability to pay but we have almost 490GB of this Health Center on our servers. Along with that we've obtained a good amount of financial information (numerous declarations, payment docs, tax forms ...) and personal employees information (SSNs, passports, phone numbers, addresses etc).That is going to be interesting.