San Diego American Indian Health Center
Disclosed Aug 15, 20224 years ago30,721 affectedConfirmed
San Diego American Indian Health Center, the covered entity (CE), reported that it experienced a ransomware attack that affected the protected health information (PHI) of 30,721 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided free credit monitoring and identity protection services and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 30,721 (as reported to HHS) |
|---|---|
| Disclosed | Aug 15, 2022 |
| Happened | May 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: San Diego American Indian Health Centeroag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: San Diego American Indian Health Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): San Diego American Indian Health Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 15, 2022 | |
| Indiana AGresidents of IN | Aug 15, 2022 | 4 |
| HHS archivetotal | Aug 15, 2022 | 30,721 |
| California AGresidents of CA | Nov 10, 2022 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 27367 to 30721 · backfill source
- 2026-09-25 · summary: empty to San Diego American Indian Health Center, the covered entity (CE), reported that it experienced a ransomware attack that affected the protected health information (PHI) of 30,721 individuals. The PHI involved included names, addresses, dates · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 27367 · backfill source
- 2026-09-25 · disclosed: 2022-11-10 to 2022-08-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.