Every public data breach

47 disclosed this week · 26,367 on record

San Diego Family Care

Disclosed May 7, 2021154,513 affectedConfirmed

Official notice

The covered entity (CE), San Diego Family Care, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 154,513 individuals. The ePHI involved included names, addresses, Social Security numbers, drivers’ license numbers, dates of birth, lab results, medications prescribed, and financial information. The CE notified HHS, affected individuals, and the media.

What is known

People affected154,513 (as reported to HHS)
DisclosedMay 7, 2021
HappenedDec 3, 2021
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
125530 to 154513by backfillSource
summary2026-09-25
empty to The covered entity (CE), San Diego Family Care, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 154,513 individuals. The ePHI involved included naby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 125530by backfillSource
disclosed2026-09-25
2021-05-09 to 2021-05-07by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about San Diego Family Care