Axis Community Health

Disclosed Jan 16, 20263,579 affectedConfirmed

The covered entity (CE), Axis Community Health, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 3,579 individuals. The PHI involved included financial and demographic information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, and the CE and BA implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected	3,579 (as reported to HHS)
Disclosed	Jan 16, 2026
Happened	Nov 1, 2024
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Axis Community Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Axis Community Health (Healthcare Provider, CA)

Notices filed

Residents of CAJan 16

California AGCount not stated

TotalJan 16

HHS archive3,579 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 3579by backfillSource

summary2026-09-25

empty to The covered entity (CE), Axis Community Health, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 3,579 individuals. The PHI involved included fby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Axis Community Health