Data breach

MedImpact Healthcare Systems

San Diego, United States2 sources

NotifiedMedImpact Healthcare Systems notified the California Attorney General of a data breach on 25 Sept 2026. The cause was not stated.

Open the live map Am I affected?

San Diego, United States. Placed at the city in the organisation's breach notice address.

Sector: Healthcare
Confirmed: 327.1K people
First reported: 25 Sept 2026
Latest source: 29 Sept 2026

What is known

Confirmed

327,082 people

As stated in the notice.

Claimed

No claimed figure

Data involved

Name of individualAddressSocial Security Number InformationMedical InformationHealth Insurance InformationDate of Birth

Cause

Cause not statedDiscovered 342 days before the notice

Attack: 18 Oct 2025 to 30 Oct 2025
Discovered: 18 Oct 2025
Disclosed: 25 Sept 2026
First seen by Black Shard: 9 Nov 2026

Filings

Sources

Status timeline

25 Sept 2026
California Attorney General, primary source
25 Sept 2026
Status: notified
29 Sept 2026
Texas Attorney General, primary source

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 95%

The place 70%

2 independent sources. Placed at the city in the organisation's breach notice address.

Not known yet

Who did it

Update log

9 Nov 2026First seen.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.