Pedes Orange County, Inc. disclosed that on November 14, 2017, a physician from another medical group sharing the same facility accessed the company's electronic medical records database without permission and disclosed materials to their attorney. The breach involved personal health information including names, diagnoses, treatments, and dates of service. Social Security numbers and financial account information were not involved. The company worked with the unauthorized individual to destroy the accessed information and is evaluating security protocols.