● Covered by 1 source · 1 reportMedium impact1 negative
Paradigm Healthcare Data Breach Affects Nearly 1 Million Medi-Cal Members
Key points
- Paradigm Healthcare Services reported a breach affecting 970,000+ Medi-Cal members.
- Unauthorized access occurred between October 8-15, 2025.
- Compromised data includes names, dates of birth, gender, and Medi-Cal IDs.
- Notification letters were sent 11 months after detection.
Data Breach Details Emerge
Paradigm Healthcare Services, a billing processor for California’s Medi-Cal program, informed the US Department of Health and Human Services (HHS) about a data breach affecting more than 970,000 individuals. The company discovered unauthorized access to its local network on October 13, 2025.
An investigation concluded on August 18, 2026, that protected health information might have been accessed by an unauthorized party between October 8 and October 15, 2025. The compromised data included names, dates of birth, gender, and Medi-Cal member identification numbers.
Impact and Notification Timeline
The breach did not affect Paradigm's online service documentation and billing platform, Student Health Network (SHN). Notification letters were issued on September 14, 2026, approximately 11 months after the initial detection of the intrusion.
Paradigm stated there is no evidence that the information has been used for fraud or identity theft. The company did not disclose the identity of the threat actor, the method of access, or whether data was exfiltrated.
Response Measures
Following the discovery, Paradigm took certain systems offline, notified law enforcement, and engaged external incident response experts. No known cybercrime group has publicly claimed responsibility for this attack.
Broader Healthcare Security Incidents
The HHS healthcare data breach tracker also shows recent disclosures from other entities. The law firm Tarter Krinsky & Drogin (TKD), which serves healthcare providers, reported an incident affecting over 196,000 individuals, with suspicious activity detected in September 2025 and an investigation concluding a year later.
Ridgeway Pharmacy Ltd. also began sending out data breach notices on September 21, following the discovery of unauthorized access to personal information on August 21, 2026, due to a website hack.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Paradigm Healthcare Services reported a data breach impacting over 970,000 Medi-Cal members, with unauthorized access occurring in October 2025. The compromised data includes names, dates of birth, gender, and Medi-Cal identification numbers, highlighting ongoing security challenges in healthcare data management.