- State
- CA
- Covered entity type
- Healthcare Provider
- Individuals affected
- 6,000
- Business associate present
- Yes
- Type of breach
- Hacking/IT Incident
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
On December 31, 2018, ShareCare Health Data Services, a business associate (BA), informed the covered entity (CE), AltaMed, that it had experienced a data security incident which affected the protected health information (PHI) of approximately 6,000 of the CE's patients. The breach affected both clinical and demographic electronic PHI including names, addresses, dates of birth, other identifiers, and other treatment information. The CE provided breach notification to HHS, the affected individuals, and the media. Following the breach, the CE also revised its BA agreement with the BA. OCR obtained assurances that the CE implemented these corrective action steps.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.