PIH Health, a California healthcare provider, notified the California Attorney General of a data security incident involving unauthorized access to employee email accounts via a targeted phishing campaign. The breach affected approximately 159,879 California residents, exposing personal information, SSNs, driver's license numbers, medical information, and credentials. PIH Health engaged cybersecurity experts, reset passwords, and offered credit monitoring.
Affected (this filing): 159,879