Riviera Healthcare Center Data Breach

A ransomware group says it stole and leaked patient medical records from Riviera Healthcare Center, a nursing home in Pico Rivera, California. Three weeks later, the facility has not told residents.

Riviera Healthcare Center is a skilled nursing and rehabilitation facility at 8203 Telegraph Road in Pico Rivera, in Los Angeles County. It provides round-the-clock nursing care and rehab services.

On October 7, 2026, a ransomware group called Interlock listed the facility on its leak site, according to ransomware tracking services. Breachsense reports a leak size of about 30 GB. Trackers show the data was posted as leaked the next day.

Source: ransomware.live, Riviera Healthcare Center (Interlock)

Source: Breachsense, Riviera Healthcare Center data breach

Who Is Interlock?

Interlock is a ransomware group that has targeted many healthcare organizations. Ransomware is software that locks a victim’s files until a ransom is paid. Interlock also steals data and posts it online when a victim does not pay. U.S. agencies, including the FBI and CISA, have issued warnings about the group’s attacks on healthcare.

Source: Digital Watch Observatory, US agencies warn of rising Interlock ransomware threat targeting healthcare sector

Three Weeks Without a Notice

As of October 28, 2026, Riviera Healthcare Center has not posted a public notice. No filing with the California Attorney General or the U.S. Department of Health and Human Services (HHS) could be found.

Federal HIPAA rules require health care providers to notify patients without unreasonable delay, and no later than 60 days after discovering a breach. California law also requires notice in the most expedient time possible and without unreasonable delay. The facility has not said when it learned of the attack.

Source: HHS, Breach Notification Rule

What Information Was Exposed?

The facility has not confirmed what data was taken. Interlock claims the stolen data includes:

• Patient names
• Diagnoses and medical histories
• Treatment details, including fall and fracture information
• Billing and payment records
• Employee and human resources (HR) records

These are the group’s claims, as reported by threat-tracking sites. They have not been confirmed by the facility.

Why Nursing Home Data Is Especially Sensitive

Nursing home residents are often older adults. Many cannot easily check their own credit or spot a scam. Their records can show health conditions, medications and who handles their money. Criminals can use that mix for medical identity theft, insurance fraud or scams aimed at residents and their families.

What Is Riviera Healthcare Center Offering?

Nothing has been announced. The facility has not offered credit monitoring or identity protection as of October 28, 2026. Residents and families who receive a notice letter later should read it closely for any offer and enrollment deadline.

Your Information Is at Risk

Medical records can be more valuable to criminals than credit card numbers. A credit card can be canceled. A medical history cannot be changed. Employee HR records often include Social Security numbers and bank details for direct deposit.

Residents, families and employees can take steps now:

• Review Medicare and insurance statements for care that was never received
• Place a free credit freeze with Equifax, Experian and TransUnion, including for a resident in your care
• Watch bank and credit accounts for unusual activity
• Be careful with calls, texts or emails that mention Riviera Healthcare Center or the attack
• Keep any notice letter the facility sends

Do You Have Legal Options?

Health care providers that collect patient information have a legal duty to protect it. They also have a duty to tell patients when it is exposed. When those duties are not met, affected residents, families and employees may have legal rights and remedies.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. No Fee Unless We Recover.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

Was Riviera Healthcare Center hacked?

A ransomware group called Interlock listed the facility on its leak site on October 7, 2026, and trackers show the data was leaked. As of October 28, 2026, the facility has not announced the incident.

How many people were affected?

No one knows yet. The facility has not released a number.

What information may have been exposed?

Interlock claims it took:

• Patient names, diagnoses and medical histories
• Treatment and billing records
• Employee HR records

My parent lived at Riviera. What should I do?

If you help manage a loved one’s affairs, watch their Medicare and insurance statements, consider a credit freeze in their name and warn them about scam calls that mention the facility.

What are the risks when medical data is exposed?

Medical data can be used to get care, prescriptions or insurance payments in your name. It can also be used in scams that sound real because they mention your doctor or treatment. Unlike a card number, your health history cannot be replaced.

Someone contacted me about the Riviera Healthcare Center attack. Is it real?

Be careful. Criminals often use news of a breach to send fake emails, texts or calls. Do not click links or share information. Contact the facility directly using a phone number you already know.

Do I have a legal claim?

You may. Health care providers have a duty to protect patient data and to notify patients when it is exposed. If you or a family member was a resident or employee of Riviera Healthcare Center, call Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.