Santa Clara Family Health Plan
Disclosed Mar 30, 20233 years ago276,993 affectedConfirmed
The covered entity (CE), Santa Clara Family Health Plan, reported that its business associate (BA) experienced a security incident that affected the protected health information (PHI) of 276,933 individuals. The PHI involved included names, addresses, dates of birth, and health insurance information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards and provided complimentary credit monitoring services to affected individuals.
What is known
| People affected | 276,993 (as reported to HHS) |
|---|---|
| Disclosed | Mar 30, 2023 |
| Happened | Jan 30, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Santa Clara Family Health Planoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Santa Clara Family Health Plan (Health Plan, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 30, 2023 | 276,993 |
| California AGresidents of CA | May 2, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 276993 · backfill source
- 2026-09-25 · disclosed: 2023-05-02 to 2023-03-30 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Santa Clara Family Health Plan, reported that its business associate (BA) experienced a security incident that affected the protected health information (PHI) of 276,933 individuals. The PHI involved included names, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.