Community Medical Centers
Disclosed Sep 11, 20206 years ago656,047 affectedConfirmed
The covered entity (CE), Community Medical Centers, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of approximately 604,583 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, and clinical information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE retrained its workforce members and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 656,047 (as reported by the organization) |
|---|---|
| Disclosed | Sep 11, 2020 |
| Happened | Oct 10, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Community Medical Centersoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: Community Medical Centersin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Community Medical Centers (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 11, 2020 | 43,667 |
| California AGresidents of CA | Oct 26, 2021 | |
| HHS archivetotal | Oct 26, 2021 | 604,583 |
| Indiana AGresidents of IN | Nov 2, 2021 | 39 |
History of this record
- 2026-09-25 · disclosed: 2021-10-26 to 2020-09-11 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Community Medical Centers, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of approximately 604,583 individuals. The PHI involved included names, Social · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 656047 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.