Indian Health Center of Santa Clara Valley
Disclosed Jan 5, 20268 months ago3,276 affectedConfirmed
Indian Health Center of Santa Clara Valley, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that affected the protected health information (PHI) of 3,276 individuals. The PHI included names, addresses, Social Security numbers, and dates of birth. The CE notified HHS, affected individuals, and media. HHS provided technical assistance to the CE regarding the applicable provisions of the HIPAA Privacy, Security and Breach Notification Rules.
What is known
| People affected | 3,276 (as reported to HHS) |
|---|---|
| Disclosed | Jan 5, 2026 |
| Happened | Nov 1, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Indian Health Center of Santa Clara Valleyoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Indian Health Center of Santa Clara Valley (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 5 | 3,276 |
| California AGresidents of CA | Jan 16 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 3276 · backfill source
- 2026-09-25 · disclosed: 2026-01-16 to 2026-01-05 · backfill source
- 2026-09-25 · summary: empty to Indian Health Center of Santa Clara Valley, the covered entity (CE), reported that its business associate (BA) experienced a cyberattack that affected the protected health information (PHI) of 3,276 individuals. The PHI included names, addr · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.