Pomona Valley Hospital Medical Center

Pomona Valley Hospital Medical Center notified patients of a ransomware incident involving a vendor's subcontractor in late November 2023. Patient PHI was encrypted. The incident did not affect Pomona's network. Investigation is complete.

Pomona Valley Hospital Medical Center notified patients of a security incident at a vendor's subcontractor. In late November 2023, an unauthorized third party accessed a patient-management tool and encrypted files containing protected health information (PHI), including names, medical record numbers, dates of birth, and clinical details. The hospital confirmed the breach on February 1, 2024, after the vendor provided additional information. The hospital engaged third-party experts, stopped using the affected vendor, and is assisting impacted individuals.

Pomona Valley Hospital Medical Center reported that its business associate experienced a cybersecurity incident affecting the protected health information (PHI) of 13,516 individuals. The PHI involved included names, dates of birth, diagnoses, medications, and other treatment information. The incident was reported to HHS on March 20, 2024.