L.A. Care Health Plan

L.A. Care Health Plan notified members of a data breach involving former vendor Conduent Business Services LLC. An unauthorized third party accessed Conduent's network between October 21, 2024, and January 13, 2025, obtaining files containing member names, dates of birth, claim numbers, dates of service, treatment costs, admission/discharge dates, and health insurance member information. One notification variant also included Social Security Numbers. Conduent secured networks, engaged forensic experts, notified law enforcement, and is enhancing security measures.

California AG SB24 breach notification index entry for L.A. Care Health Plan, listing a breach date of January 30, 2026. The linked sample notification letter PDF was not extractable from the provided source body (no text was returned for pages 1-5), so incident details such as cause, attack vector, data types affected, and number of individuals impacted are unknown.

L.A. Care Health Plan (CA) reported to HHS OCR on 2026-04-17 an Unauthorized Access/Disclosure breach affecting 2,885 individuals. Breached information was located on Paper/Films. No business associate was involved. As a Health Plan, the organization is a public health plan serving Los Angeles County. No further detail was available in the web description.

L.A. Care Health Plan, the nation's largest publicly operated health plan, reported to HHS OCR on 2019-03-15 an Unauthorized Access/Disclosure breach affecting 1,506 individuals, with breached information located on Paper/Films. OCR's investigation found systemic HIPAA Security Rule noncompliance, including failures in risk analysis, risk management, activity review, and ePHI security evaluations. LA Care agreed to a $1,300,000 settlement and a three-year corrective action plan monitored by OCR.

L.A. Care Health Plan experienced a manual information processing error between January 22 and January 24, 2014, resulting in the accidental disclosure of member names, addresses, and member identification numbers via the payment portal. The portal was temporarily disabled, the error corrected, and replacement IDs issued. No SSNs or financial data were exposed.

L.A. Care Health Plan (CA) reported to HHS OCR on 2012-11-17 a breach classified as 'Other' affecting 18,000 individuals. The location of breached information was listed as 'Other'. No business associate was present. No further details are available from the web description.

L.A. Care Health Plan reported to HHS on 2012-10-22 a breach involving an accidental mailing error affecting 18,000 individuals. Member ID cards were mailed to the wrong addresses, exposing names, dates of birth, addresses, and zip codes. Information was located on Paper/Films. The entity notified HHS, affected individuals, and the media, and revised its mailing processes.

L.A. Care Health Plan experienced an accidental mailing error where member ID cards containing names, member ID numbers, and dates of birth were sent to the wrong members. The incident occurred between September 17 and September 20, 2012, and was discovered on September 18, 2012. The organization notified affected members and issued replacement cards. No sensitive financial or detailed medical data was exposed.