CardioFit Medical Group, Inc.

CardioFit Medical Group, Inc. disclosed that between January 8 and February 5, 2026, protected health information was sent via unencrypted email. The incident was discovered on February 17, 2026. Affected data included names, demographic details, clinical information (diagnosis), and insurance information. No SSNs, bank accounts, or credit cards were involved. The organization strengthened email encryption procedures and provided staff training.

CardioFit Medical Group, Inc. (CA) reported to HHS OCR on 2026-04-09 an Unauthorized Access/Disclosure incident affecting 7,243 individuals. Breached information was located in Email. No business associate was identified as present. No further detail is available from the web description.

Affected (this filing): 7,243