Skip to content

Covenant Care California

Disclosed May 6, 20224 years ago31,255 affectedConfirmed

Official notice

The covered entity (CE), Covenant Care California on behalf of Wagner Heights Nursing and Rehabilitation Center, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 23,093 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, medications, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained on email security.

What is known

People affected31,255 (as reported by the organization)
DisclosedMay 6, 2022
HappenedFeb 24, 2022
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalMay 6, 202223,093
California AGresidents of CAMay 9, 2022
California AGresidents of CAMay 17, 2022
California AGresidents of CAJun 22, 2022
Indiana AGresidents of INAug 31, 20222
California AGresidents of CASep 1, 2022
California AGresidents of CAOct 27, 2022

Other breaches at Covenant Care California

BreachAffected
Disclosed Jan 12, 2024Jan 12, 20242 years agoHacking501
Disclosed Mar 6, 2019Mar 6, 20197 years agoHacking11K
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · disclosed: 2022-05-09 to 2022-05-06 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Covenant Care California on behalf of Wagner Heights Nursing and Rehabilitation Center, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 2 · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 31255 · backfill source
  • 2026-09-25 · disclosed: 2022-05-17 to 2022-05-09 · backfill source
  • 2026-09-25 · disclosed: 2022-06-22 to 2022-05-17 · backfill source
  • 2026-09-25 · disclosed: 2022-09-01 to 2022-06-22 · backfill source
  • 2026-09-25 · disclosed: 2022-10-27 to 2022-09-01 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Covenant Care California

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.