Brandman Centers for Senior Care
Disclosed Mar 18, 20215 years ago521 affectedConfirmed
The covered entity (CE), Brandman Centers for Senior Care, reported that its business associate (BA) experienced a ransomware attack that affected the protected health information (PHI) of 521 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, diagnoses, medications prescribed, and claims information. The CE notified HHS and local law enforcement entities; the BA notified affected individuals and provided substitute notice on its website. Following OCR’s investigation, the CE reviewed and revised its policies and procedures to better protect its PHI.
What is known
| People affected | 521 (as reported to HHS) |
|---|---|
| Disclosed | Mar 18, 2021 |
| Happened | Dec 28, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Brandman Centers for Senior Careoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Brandman Centers for Senior Care (Health Plan, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 18, 2021 | 521 |
| California AGresidents of CA | Mar 19, 2021 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 521 · backfill source
- 2026-09-25 · disclosed: 2021-03-19 to 2021-03-18 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Brandman Centers for Senior Care, reported that its business associate (BA) experienced a ransomware attack that affected the protected health information (PHI) of 521 individuals. The PHI involved included names, d · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.