Skip to content

Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group

Disclosed Jul 15, 20242 years ago3,435 affectedConfirmed

Official notice

The covered entity (CE), Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group, reported that an employee impermissibly accessed the medical records of 3,435 individuals. The protected health information (PHI) involved included names, dates of birth, addresses, email addresses, clinical information, phone numbers, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE revised its policies and procedures and sanctioned the workforce member involved.

What is known

People affected3,435 (as reported to HHS)
DisclosedJul 15, 2024
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
California AGresidents of CAJul 15, 2024
HHS archivetotalJul 15, 20243,435
History of this record
  • 2026-09-25 · attack: unknown to insider · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 3435 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group, reported that an employee impermissibly accessed the medical records of 3,435 individuals. The protected health information (PHI) in · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.