Pacific Alliance Medical Center
Disclosed Aug 10, 20179 years ago266,123 affectedConfirmed
The covered entity (CE) was the victim of a malware/ransom attack affecting the protected health information (PHI) of 266,123 patients. The PHI involved in the breach included names, dates of birth, addresses, social security numbers, driver’s license information, claims information, and treatment information such as diagnoses, medications, lab results, and medical images. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE strengthened its administrative and technical safeguards. OCR’s investigation resulted in the CE enhancing its practices in safeguarding PHI.
What is known
| People affected | 266,123 (as reported to HHS) |
|---|---|
| Disclosed | Aug 10, 2017 |
| Happened | Jun 14, 2017 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Pacific Alliance Medical Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Pacific Alliance Medical Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 10, 2017 | 266,123 |
| California AGresidents of CA | Aug 11, 2017 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 266123 · backfill source
- 2026-09-25 · disclosed: 2017-08-11 to 2017-08-10 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE) was the victim of a malware/ransom attack affecting the protected health information (PHI) of 266,123 patients. The PHI involved in the breach included names, dates of birth, addresses, social security numbers, drive · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.