California Health & Wellness

Disclosed Mar 25, 202180,242 affectedConfirmed

The covered entity (CE), California Health & Wellness, reported that its business associate (BA) experienced a cyber-attack that affected the electronic protected health information (ePHI) of 80,242 individuals. The ePHI involved included names, addresses, dates of birth, health insurance information, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Following the breach, the CE offered one year of complimentary credit monitoring services to affected individuals and terminated its business relationship with the BA.

What is known

People affected	80,242 (as reported to HHS)
Disclosed	Mar 25, 2021
Happened	Jan 7, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: California Health & Wellness

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): California Health & Wellness (Health Plan, CA)

Notices filed

Residents of CAMar 25, 2021

California AGCount not stated

TotalMar 25, 2021

HHS archive80,242 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 80242by backfillSource

summary2026-09-25

empty to The covered entity (CE), California Health & Wellness, reported that its business associate (BA) experienced a cyber-attack that affected the electronic protected health information (ePHI) of 80,242 individuals. The ePHI involved included nby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about California Health & Wellness