CalViva Health notified California regulators of a data breach involving its third-party file transfer vendor, Accellion. Between January 7 and January 25, 2021, an unknown malicious party accessed files containing member names, dates of birth, insurance IDs, and health information. CalViva activated its incident response plan, ceased using Accellion, and provided one year of free identity protection services to affected individuals.