San Diego Family Care

San Diego Family Care reported to HHS on 2021-05-18 a Hacking/IT Incident affecting 154,513 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, addresses, SSNs, driver's license numbers, DOBs, lab results, medications, and financial information.

San Diego Family Care (SDFC), a healthcare provider, notified the NH Attorney General that 6 New Hampshire residents were affected by a data security incident involving its IT hosting provider, NetGain. In December 2020, SDFC became aware that NetGain experienced an incident resulting in data encryption. In January 2021, SDFC learned that certain data, including names, Social Security numbers, dates of birth, medical diagnoses, and insurance information, may have been accessed or acquired by an unauthorized individual. SDFC engaged forensic experts and a data review firm. The incident is contained, and SDFC is offering credit monitoring to affected individuals.

San Diego Family Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-05-10. 34 Massachusetts residents were affected. The report records the breach type as electronic.

San Diego Family Care notified individuals of a data breach involving its IT hosting provider. In December 2020, the provider experienced an incident resulting in data encryption. On January 20, 2021, SDFC learned unauthorized access may have occurred. Affected data included names, SSNs, dates of birth, medical diagnoses, and insurance info. SDFC engaged forensics and is offering identity protection.

San Diego Family Care reported a data breach affecting 6 Maine residents. The breach, which occurred on December 3, 2020, was discovered on April 12, 2021. The incident was an external system breach (hacking) that compromised names and Social Security numbers. The company provided 12 months of credit monitoring and identity protection services through IDX to those affected.

San Diego Family Care notified Montana residents of a data breach involving its IT hosting provider. In December 2020, the provider experienced a security incident resulting in data encryption. By January 2021, unauthorized access was confirmed. Affected data included names, SSNs, DOBs, medical diagnoses, and insurance info. SDFC engaged forensic experts and offers 12 months of credit monitoring.

San Diego Family Care reported a data breach to the Indiana Attorney General. The breach occurred on 2020-11-22 and was reported on 2021-05-07. 36 Indiana residents were affected. 125,530 individuals affected in total.

SAN DIEGO FAMILY CARE filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-161). The register records the breach as discovered on December 1, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.