Golden State Radiation Oncology
Disclosed Jun 27, 20251 year ago2,130 affectedConfirmed
The covered entity (CE), Golden State Radiation Oncology, reported that multiple employees of its business associate (BA) was the subject of an email phishing scheme that affected the protected health information (PHI) of 2,130 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 2,130 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2025 |
| Happened | Dec 13, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Golden State Radiation Oncologyoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Golden State Radiation Oncology (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 27, 2025 | 2,130 |
| California AGresidents of CA | Jul 15, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2130 · backfill source
- 2026-09-25 · disclosed: 2025-07-15 to 2025-06-27 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Golden State Radiation Oncology, reported that multiple employees of its business associate (BA) was the subject of an email phishing scheme that affected the protected health information (PHI) of 2,130 individuals. · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.