Pomona Valley Hospital Medical Center
Disclosed Mar 20, 20242 years ago13,516 affectedConfirmed
The covered entity (CE), Pomona Valley Hospital Medical Center, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 13,516 individuals. The PHI involved included names, dates of birth, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards. The CE also discontinued its business relationship with the BA.
What is known
| People affected | 13,516 (as reported to HHS) |
|---|---|
| Disclosed | Mar 20, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Pomona Valley Hospital Medical Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Pomona Valley Hospital Medical Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 20, 2024 | 13,516 |
| California AGresidents of CA | Mar 22, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 13516 · backfill source
- 2026-09-25 · disclosed: 2024-03-22 to 2024-03-20 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Pomona Valley Hospital Medical Center, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 13,516 individuals. The PHI involved incl · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.