Pomona Valley Hospital Medical Center

Pomona Valley Hospital Medical Center reported that its business associate experienced a cybersecurity incident affecting the protected health information (PHI) of 13,516 individuals. The PHI involved included names, dates of birth, diagnoses, medications, and other treatment information. The incident was reported to HHS on March 20, 2024.

Affected (this filing): 13,516

Pomona Valley Hospital Medical Center reported a data breach to the Montana Attorney General. The breach was reported on 2024-03-22. The breach occurred from 11/1/2023 to 12/31/2023. 3 Montana residents were affected.

Affected (this filing): 3

Pomona Valley Hospital Medical Center notified patients of a security incident at a vendor's subcontractor. In late November 2023, an unauthorized third party accessed a patient-management tool and encrypted files containing protected health information (PHI), including names, medical record numbers, dates of birth, and clinical details. The hospital confirmed the breach on February 1, 2024, after the vendor provided additional information. The hospital engaged third-party experts, stopped using the affected vendor, and is assisting impacted individuals.