SAC Health System
Disclosed May 7, 20215 years ago77,842 affectedConfirmed
The covered entity (CE), SAC Health System, reported a break-in at its paper record storage facility that compromised the protected health information (PHI) of approximately 77,842 individuals. The PHI involved included names, addresses, dates of birth, diagnoses, and conditions. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative and physical safeguards.
What is known
| People affected | 77,842 (as reported to HHS) |
|---|---|
| Disclosed | May 7, 2021 |
| Happened | Nov 15, 2020 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: SAC Health Systemoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: SAC Health Systemin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): SAC Health System (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 7, 2021 | 1 |
| California AGresidents of CA | May 10, 2021 | |
| HHS archivetotal | May 5, 2022 | 77,842 |
History of this record
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 28128 to 77842 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), SAC Health System, reported a break-in at its paper record storage facility that compromised the protected health information (PHI) of approximately 77,842 individuals. The PHI involved included names, addresses, da · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 28128 · backfill source
- 2026-09-25 · disclosed: 2021-05-10 to 2021-05-07 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.