CCA Health Plans of California, Inc. f/k/a Vitality Health Plan of California, Inc.

CCA Health Plans of California, Inc. (d/b/a CCA Health California) notified the California Attorney General's Office of a cybersecurity incident occurring between May 4, 2022, and September 16, 2022. An unauthorized party accessed systems and removed files containing member information, including names, SSNs, DOBs, government IDs, and PHI. The company engaged law enforcement and forensic investigators, secured systems, and offered 12 months of Experian IdentityWorks.

CCA Health Plans of California, Inc. reported to HHS on 2022-11-15 a Hacking/IT Incident affecting 14,631 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI (names, DOB, SSN, passport, diagnoses, medications, lab results, insurance info). The entity notified HHS, individuals, and media, offered credit protection, and implemented security safeguards.

Affected (this filing): 14,631