Breachesby GlyphValley Mountain Regional Center
Disclosed Nov 9, 202117,197 affectedConfirmed
Valley Mountain Regional Center, a business associate (BA), reported that multiple employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 17,197 individuals. The PHI involved included names, dates of birth, and addresses. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the BA strengthened its technical safeguards to better protect PHI. OCR provided technical assistance to the BA.
What is known
| People affected | 17,197 (as reported to HHS) |
|---|---|
| Disclosed | Nov 9, 2021 |
| Happened | Sep 15, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Nonprofit · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Valley Mountain Regional Center
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 17197by backfillSource
empty to Valley Mountain Regional Center, a business associate (BA), reported that multiple employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 17,197 individuals. The PHI involved includby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.