Skip to content

Kaiser Foundation Hospitals, Northern California

Disclosed Feb 23, 20215 years ago2,121 affectedConfirmed

Official notice

The covered entity (CE), Kaiser Foundation Hospitals, Northern California, reported that an employee impermissibly accessed the medical records and electronic protected health information (ePHI) of 2,121 individuals. The ePHI involved included names, dates of birth, phone numbers, email addresses, and photographs. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE also provided complimentary credit monitoring services. In response to the breach, the CE sanctioned the employee responsible for the breach. OCR provided technical assistance to the CE.

What is known

People affected2,121 (as reported to HHS)
DisclosedFeb 23, 2021
HappenedJan 1, 2015
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
California AGresidents of CAFeb 23, 2021
HHS archivetotalFeb 23, 20212,121
History of this record
  • 2026-09-25 · attack: unknown to insider · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 2121 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Kaiser Foundation Hospitals, Northern California, reported that an employee impermissibly accessed the medical records and electronic protected health information (ePHI) of 2,121 individuals. The ePHI involved inclu · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Kaiser Foundation Hospitals, Northern California

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.