George Hills Company, Inc. (GHC) notified California residents of a data breach involving claims database backups hosted by third-party vendor Systema Software. A security researcher identified a misconfiguration allowing unauthorized access to temporary backups containing names, SSNs, driver's license numbers, and medical information. The researcher downloaded data to an external hard drive and surrendered it to the Texas Attorney General. GHC engaged a security firm to remediate the configuration issue.