On April 7, 2023, La Clinica de La Raza (“La Clinic”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights (“HHS-OCR”) after learning that certain employee email accounts containing confidential patient information were accessed by an unauthorized party over the course of a two-week period. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, dates of birth, financial account information, payment card information, online credentials, medical treatment information, and health insurance information. After confirming that consumer data was leaked, La Clinic began sending out data breach notification letters to the 15,316 individuals who were impacted by the recent data security incident.

If you received a data breach notification from La Clinica de La Raza, it is essential you understand what is at risk and what you can do about it. As we’ve previously mentioned in other posts, healthcare data breaches are becoming increasingly popular among hackers, who can often steal a wealth of confidential patient information in a single breach. Hackers can then use this information to commit identity theft and other frauds, or sell the data on the Dark Web to other criminals. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the La Clinica de La Raza data breach, reach out to a data breach lawyer for assistance.

What We Know So Far About the La Clinica de La Raza Breach

News of the La Clinica de La Raza data breach is still fresh; however, what we know at this point comes from the company’s filing with the U.S. Department of Health and Human Services Office for Civil Rights, as well as a “NOTICE OF DATA INCIDENT” on the company’s website. According to these sources, on February 8, 2023, La Clinica learned of suspicious activity within several employees’ email accounts. La Clinica secured the email accounts at issue and began an internal investigation with the assistance of a forensic security firm.

The La Clinica investigation confirmed that an unauthorized party was able to access multiple employee email accounts between January 24, 2023 and February 8, 2023. The investigation also revealed that some of the emails in these accounts contained confidential patient information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, La Clinica de La Raza began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, address, Social Security number, date of birth, financial account information, payment card information, online credentials, medical treatment information, and health insurance information.

On April 7, 2023, La Clinica de La Raza sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About La Clinica de La Raza

Founded in 1971, La Clinica de La Raza is a primary health care clinic located in Oakland, California. La Clinica also provides other healthcare services, including pediatrics, behavioral health, pharmacy, medical imaging, eye care and dentistry. La Clinica serves more than 90,000 patients per year through 35 locations in the East Bay. La Clinica de La Raza employs more than 235 people and generates approximately $17 million in annual revenue.