Incident · State breach notice (California AG)
El Camino Health Notifies California Residents of Microsoft 365 Data Security Incident
Published . By the cisonews.net Desk.
What the notice says
El Camino Health filed a notice with the California Attorney General, reported 2026-10-30, about a data security incident affecting information held in its Microsoft 365 system. El Camino Health states it on September 1, 2026, and began an investigation with outside forensic help.
According to El Camino Health, the investigation found , and that certain documents were copied or downloaded from those accounts. El Camino Health says the information involved varies per individual and may include , provider names, dates of service, and health insurance information. El Camino Health adds that for some patients, .
El Camino Health states it has implemented additional safeguards for its Microsoft 365 system and is offering one year of complimentary Experian IdentityWorks identity monitoring to affected individuals.
What the notice leaves open
The notice as filed does not state a total number of individuals affected, describing the information involved as varying per individual. El Camino Health also says its review of the documents to determine their full contents is ongoing, and the notice does not specify how the unauthorized access was first made possible.
Sources
- 2026-10-30 · AEl Camino Health, notice filed with the California Attorney General, published October 30, 2026
- 2026-10-30 · ACalifornia Attorney General, data breach notification record, published October 30, 2026
Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.
See an error? Corrections are made on the page and logged on the corrections page. Send them through contact.