St. John's Well Child and Family Center
Disclosed Apr 29, 20215 years ago29,030 affectedConfirmed
The covered entity (CE), St. John's Well Child and Family Center, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 29,030 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, and diagnoses. The CE notified HHS, affected individuals, the media, and provided substitute notice. Following the breach incident and OCR’s investigation, the CE implemented new administrative and technical safeguards.
What is known
| People affected | 29,030 (as reported to HHS) |
|---|---|
| Disclosed | Apr 29, 2021 |
| Happened | Feb 3, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: St. John's Well Child and Family Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): St. John's Well Child and Family Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 29, 2021 | |
| HHS archivetotal | Apr 29, 2021 | 29,030 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 29030 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), St. John's Well Child and Family Center, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 29,030 individuals. The PHI involved included names, addresses, dates · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.