Central Valley Regional Center, Inc. disclosed that a third-party janitorial service improperly disposed of confidential documents containing private health and financial information (including SSNs) between March and July 2025. The incident was discovered in July 2025. The organization contained the incident, notified authorities, and implemented physical security controls for shredding bins and revised vendor procedures.