Confirmé

MACT Health Board: files with patient SSNs and medical data accessed in disruptive incident

MACT experienced an incident that disrupted its IT systems; the investigation found an unauthorised party accessed some files on its systems between November 12 and 20, 2025.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

File review was completed on January 9, 2026; data included names with SSNs and/or medical information such as doctors, diagnoses, insurance, medicines, test results, images and treatment. Media reported ransomware group claims, which were not used as evidence. No total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Chronologie

  1. Survenue
  2. Découverte
  3. Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

  1. California AG data breach report: MACT Health Board Inc.California Department of Justice, Office of the Attorney General · 2026-11-09
  2. MACT Health Board Patients Affected by November 2025 Ransomware Attack (HIPAA Journal)The HIPAA Journal · 2026-11-09
  3. Sample consumer notice filed with California AG (MACT Health Board Inc.)California Department of Justice, Office of the Attorney General · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.

Commentaires et réponses

Écrire un commentaire

Sans inscription. Les commentaires sont publiés immédiatement.

Ne publiez pas de noms privés, d’adresses, de mots de passe ou de codes. Le masquage automatique est limité : vérifiez avant l’envoi.

Les champs obligatoires portent un *.

Après l’envoi du texte, vous pouvez masquer les données et joindre des images.

Chargement du contrôle de sécurité. Vous pourrez envoyer une fois la vérification terminée.