St. John's Well Child and Family Center
Disclosed Apr 29, 202129,030 affectedConfirmed
The covered entity (CE), St. John's Well Child and Family Center, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 29,030 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, and diagnoses. The CE notified HHS, affected individuals, the media, and provided substitute notice. Following the breach incident and OCR’s investigation, the CE implemented new administrative and technical safeguards.
What is known
| People affected | 29,030 (as reported to HHS) |
|---|---|
| Disclosed | Apr 29, 2021 |
| Happened | Feb 3, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
other to healthby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 29030by backfillSource
empty to The covered entity (CE), St. John's Well Child and Family Center, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 29,030 individuals. The PHI involved included names, addresses, datesby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.