San Andreas Regional Center
Disclosed Aug 25, 20215 years ago57,244 affectedConfirmed
The business associate (BA), San Andreas Regional Center, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 57,244 individuals. The PHI involved included names, addresses, dates of birth, telephone numbers, Social Security numbers, drivers’ license numbers, passport numbers, email addresses, health insurance information, photos, diagnoses, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA revised its HIPAA security procedures, retrained its workforce members, and implemented additional technical safeguards. OCR provided technical assistance to the BA.
What is known
| People affected | 57,244 (as reported to HHS) |
|---|---|
| Disclosed | Aug 25, 2021 |
| Happened | Jul 3, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Nonprofit · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: San Andreas Regional Centeroag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: San Andreas Regional Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): San Andreas Regional Center (Business Associate, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 25, 2021 | |
| HHS archivetotal | Aug 25, 2021 | 57,244 |
| Indiana AGresidents of IN | Aug 27, 2021 | 2 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 57224 to 57244 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), San Andreas Regional Center, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 57,244 individuals. The PHI involved included names, addresses, date · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 57224 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.