Rancho Family Medical Group
Disclosed Mar 11, 20242 years ago10,480 affectedConfirmed
The covered entity (CE), Rancho Family Medical Group, reported that its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 10,480 individuals. The PHI involved included names, dates of birth, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE strengthened its administrative and technical safeguards. In addition, the CE terminated its business relationship with the BA.
What is known
| People affected | 10,480 (as reported to HHS) |
|---|---|
| Disclosed | Mar 11, 2024 |
| Happened | Nov 19, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Rancho Family Medical Groupoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Rancho Family Medical Group (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 11, 2024 | |
| HHS archivetotal | Mar 11, 2024 | 10,480 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 10480 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Rancho Family Medical Group, reported that its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 10,480 individuals. The PHI involved included names, dat · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.