L.A. Care Health Plan

L.A. Care Health Plan notified members of a data breach involving former vendor Conduent Business Services LLC. An unauthorized third party accessed Conduent's network between October 21, 2024, and January 13, 2025, obtaining files containing member names, dates of birth, claim numbers, dates of service, treatment costs, admission/discharge dates, and health insurance member information. One notification variant also included Social Security Numbers. Conduent secured networks, engaged forensic experts, notified law enforcement, and is enhancing security measures.

California AG SB24 breach notification index entry for L.A. Care Health Plan, listing a breach date of January 30, 2026. The linked sample notification letter PDF was not extractable from the provided source body (no text was returned for pages 1-5), so incident details such as cause, attack vector, data types affected, and number of individuals impacted are unknown.

L.A. Care Health Plan (CA) reported to HHS OCR on 2026-04-17 an Unauthorized Access/Disclosure breach affecting 2,885 individuals. Breached information was located on Paper/Films. No business associate was involved. As a Health Plan, the organization is a public health plan serving Los Angeles County. No further detail was available in the web description.

L.A. Care Health Plan, the nation's largest publicly operated health plan, reported to HHS OCR on 2019-03-15 an Unauthorized Access/Disclosure breach affecting 1,506 individuals, with breached information located on Paper/Films. OCR's investigation found systemic HIPAA Security Rule noncompliance, including failures in risk analysis, risk management, activity review, and ePHI security evaluations. LA Care agreed to a $1,300,000 settlement and a three-year corrective action plan monitored by OCR.

L.A. Care Health Plan experienced a data security breach in California involving an information processing error. Between January 22 and 24, 2014, a payment portal misconfiguration allowed members to view other members' names, addresses, and member identification numbers. The portal was disabled, and affected individuals received new member IDs and cards. No SSN, driver's license, or financial data was exposed.

L.A. Care Health Plan (CA) reported to HHS OCR on 2012-11-17 a breach classified as 'Other' affecting 18,000 individuals. The location of breached information was listed as 'Other'. No business associate was present. No further details are available from the web description.

L.A. Care Health Plan reported to HHS on 2012-10-22 a breach involving an accidental mailing error affecting 18,000 individuals. Member ID cards were mailed to the wrong addresses, exposing names, dates of birth, addresses, and zip codes. Information was located on Paper/Films. The entity notified HHS, affected individuals, and the media, and revised its mailing processes.

L.A. Care Health Plan experienced a misdelivery error on September 17-20, 2012, where member ID cards containing names, member IDs, and dates of birth were mailed to the wrong recipients. The breach was discovered on September 18, 2012. L.A. Care notified affected members and is issuing new ID cards while reviewing internal procedures to prevent recurrence. No other sensitive identity information was exposed.