Altos, a billing services provider for healthcare providers in southern California, experienced a data breach due to an internal system exposed to the Internet. The incident occurred between May 30 and May 31, 2025, and was discovered on June 17, 2025. An unauthorized third party accessed the system and may have exfiltrated personal and health information, including names, addresses, dates of birth, Social Security numbers, and health information. Altos blocked access to the system, hired a cybersecurity firm, and is offering credit monitoring to affected individuals.