California Correctional Health Care Services
Disclosed May 15, 201610 years ago400,000 affectedConfirmed
Stolen unencrypted laptop held custody and medical data of 400,000 inmates
A password protected but unencrypted laptop was stolen from a staff member's car, exposing medical, mental health and custodial information on up to 400,000 patients of California's prison health system.
What is known
| People affected | 400,000 (as reported by the organization) |
|---|---|
| Disclosed | May 15, 2016 |
| Happened | Feb 25, 2016 |
| Attack | Lost or stolen device |
| Data exposed | Health, Other, Names |
| Sector | Government · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: California Correctional Health Care Servicesoag.ca.gov · Official notice | Official notice |
| HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individualsocrportal.hhs.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 15, 2016 | |
| Researchtotal | May 15, 2016 | 400,000 |
| HHS archivetotal | May 15, 2016 | 400,000 |
| HHS archivetotal | Feb 9, 2017 | 738 |
Other breaches at California Correctional Health Care Services
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 13, 2024Mar 13, 20242 years agoInsider | Mar 13, 20242 years ago | Insider | Healthcare | Confirmed | 4,105 |
| Disclosed Nov 18, 2022Nov 18, 20223 years ago | Nov 18, 20223 years ago | Not stated | Healthcare | Confirmed | Unknown |
| Disclosed Dec 2, 2021Dec 2, 20214 years ago | Dec 2, 20214 years ago | Not stated | Healthcare | Confirmed | Unknown |
| Disclosed Jul 30, 2013Jul 30, 201313 years ago | Jul 30, 201313 years ago | Not stated | Healthcare | Confirmed | 1,033 |
| Disclosed Aug 7, 2012Aug 7, 201214 years ago | Aug 7, 201214 years ago | Not stated | Healthcare | Confirmed | Unknown |
History of this record
- 2026-09-25 · data_types: ["health","other"] to ["health","other","names"] · backfill source
- 2026-09-25 · sector: health to government · seed source
- 2026-09-25 · attack: unknown to lost-device · seed source
- 2026-09-25 · data_types: [] to ["health","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 400000 · seed source
- 2026-09-25 · summary: empty to A password protected but unencrypted laptop was stolen from a staff member's car, exposing medical, mental health and custodial information on up to 400,000 patients of California's prison health system. · seed source
- 2026-09-25 · title: empty to Stolen unencrypted laptop held custody and medical data of 400,000 inmates · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.
Everything about California Correctional Health Care Services