Methodist Hospital of Southern California

Disclosed Nov 4, 202039,881 affectedConfirmed

The covered entity (CE), Methodist Hospital of Southern California, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 39,881individuals. The ePHI involved included names, addresses, dates of birth, and treatment information. This breach involved the CE’s medical foundation, which is not subject to the HIPAA Rules.

What is known

People affected	39,881 (as reported to HHS)
Disclosed	Nov 4, 2020
Happened	Feb 1, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Methodist Hospital of Southern California

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Methodist Hospital of Southern California (Healthcare Provider, CA)

Notices filed

Residents of CANov 4, 2020

California AGCount not stated

TotalNov 4, 2020

HHS archive39,881 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 39881by backfillSource

summary2026-09-25

empty to The covered entity (CE), Methodist Hospital of Southern California, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 39,881individuals. The ePby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Methodist Hospital of Southern California