Skip to content
NewA calmer, faster ZeroHour

Paradigm Healthcare breach affects over 970,000 Medi-Cal members

Original title: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

SecurityWeekby Eduard Kovacs ()2 min read1 · 1 read
AI summary · x-ai/grok-4.7Summaries by Vani AI

Exposed files held names, birth dates, gender and Medi-Cal IDs; Student Health Network was not affected.

Paradigm Healthcare Services told HHS that unauthorized access to its local network exposed protected health information for more than 970,000 Medi-Cal members. The firm, which bills for California’s Medicaid program, said access occurred from October 8 to October 15, 2025, and was confirmed on August 18, 2026. Files contained names, dates of birth, gender and member IDs. The same HHS update also lists Tarter Krinsky & Drogin above 196,000 people and Ridgeway Pharmacy above 258,000.

Unconfirmed: The notice does not name an attacker, explain access, or confirm whether data was exfiltrated.

Key facts
  • Paradigm detected the intrusion on October 13, 2025, and dated notices September 14, 2026.
  • The company says it has no evidence the data was used for fraud or identity theft.
  • TKD found server access between July 9 and September 9, 2025, affecting more than 196,000 people.
  • Ridgeway Pharmacy says a hacked website may have exposed payment card and prescription data.
  • No known cybercrime group has claimed responsibility for the Paradigm incident.
Security assessment · AI, from the article

Impact: Protected health information of more than 970,000 people

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at securityweek.com

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals. The post 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach appeared first on SecurityWeek.

SecurityWeek

By Eduard Kovacs · securityweek.com

Read the full article at SecurityWeek

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.