Skip to content

MiCare Health Center

Disclosed Oct 11, 20241 year ago2,766 affectedConfirmed

Official notice

The covered entity (CE), miCare Health Center, reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 2,766 individuals. The PHI involved included names, dates of birth, Social Security numbers, diagnoses/conditions, medications and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional technical safeguards. Staff were retrained on email security.

What is known

People affected2,766 (as reported to HHS)
DisclosedOct 11, 2024
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: MiCare Health Centeroag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): miCare Health Center (Healthcare Provider, MT)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAOct 11, 2024
HHS archivetotalOct 11, 20242,766
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 2766 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), miCare Health Center, reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 2,766 individuals. The PHI involved included names, dat · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about MiCare Health Center

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.