City Health, a medical

Disclosed Apr 14, 202665,000 affectedConfirmed

The covered entity (CE), City Health, reported that a former IT employee accessed the CE’s network three years after his termination without authorization and may have accessed the protected health information (PHI) of 65,000 individuals. The PHI involved included demographic and financial information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected	65,000 (as reported to HHS)
Disclosed	Apr 14, 2026
Happened	Mar 2, 2026
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: City Health, a medical

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): City Health, a medical (Healthcare Provider, CA)

Notices filed

Residents of CAApr 14

California AGCount not stated

TotalApr 14

HHS archive65,000 people

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 65000by backfillSource

summary2026-09-25

empty to The covered entity (CE), City Health, reported that a former IT employee accessed the CE’s network three years after his termination without authorization and may have accessed the protected health information (PHI) of 65,000 individuals. Tby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about City Health, a medical