Breachesby GlyphValley Mountain Regional Center
Disclosed Jul 25, 2025529 affectedConfirmed
Valley Mountain Regional Center, the business associate (BA), reported that an employee posted the protected health information (PHI) of 529 individuals on its website. The PHI involved included names, addresses, phone numbers, and other identifiers. The BA notified HHS, the affected individuals, and the media. In its mitigation efforts, the BA revised its policies and procedures and implemented additional administrative and security safeguards.
What is known
| People affected | 529 (as reported to HHS) |
|---|---|
| Disclosed | Jul 25, 2025 |
| Happened | Jul 14, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Nonprofit · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Valley Mountain Regional Center
History of this record
unknown to insiderby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 529by backfillSource
empty to Valley Mountain Regional Center, the business associate (BA), reported that an employee posted the protected health information (PHI) of 529 individuals on its website. The PHI involved included names, addresses, phone numbers, and other idby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.