Redwood Coast Regional Center

Redwood Coast Regional Center (CA) reported to HHS on 2023-08-07 an Unauthorized Access/Disclosure affecting 1,345 individuals. Emails containing PHI — including names, addresses, dates of birth, and other identifiers — were sent without encryption during a network outage. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, and mitigated by revising policies and procedures, retraining staff, and implementing additional technical safeguards.

Affected (this filing): 1,345

Redwood Coast Regional Center experienced a data breach affecting 1,347 clients due to a mail server encryption failure caused by a system outage. The incident, discovered on June 14, 2023, resulted in the unauthorized disclosure of Public Health Information, including names, addresses, dates of birth, client UCI numbers, and authorized service data. No Social Security numbers or financial account information were involved. The organization conducted an internal investigation and is reviewing procedures to prevent recurrence.

Affected (this filing): 1,347