Central Valley Regional Center

Central Valley Regional Center, Inc. disclosed that a third-party janitorial service improperly disposed of confidential documents containing private health and financial information (including SSNs) between March and July 2025. The incident was discovered in July 2025. The organization contained the incident, notified authorities, and implemented physical security controls for shredding bins and revised vendor procedures.

Central Valley Regional Center (CVRC) experienced unauthorized access to employee email accounts between July 25 and August 2, 2019. CVRC discovered the incident on July 29, 2019. The breach potentially affected 11,990 California residents, exposing personal information including names, SSNs, driver's license numbers, Medi-Cal numbers, financial account details, and health information. CVRC engaged forensic investigators, notified the FBI, and provided 12 months of credit monitoring to affected individuals.

Central Valley Regional Center notified Montana residents of a data breach where unauthorized access to employee email accounts occurred July 25–August 2, 2019. CVRC discovered the incident on July 29, 2019. Personal information including names, SSNs, driver's licenses, and health data may have been accessed. CVRC engaged forensic investigators, notified the FBI, and offered one year of identity protection services.

Central Valley Regional Center reported to HHS on 2019-10-11 a Hacking/IT Incident affecting 15975 individuals. Breached information located on Email. The cyber-attack compromised electronic protected health information (ePHI) including names, addresses, birthdates, SSNs, and driver's license information. The CE notified HHS, affected individuals, and the media, and implemented new technical safeguards and workforce retraining following OCR's investigation.