El Camino Health Data Breach

El Camino Health says an intruder copied documents from four employee accounts. Those documents may contain Social Security numbers, driver’s license numbers and medical information.

El Camino Health is a California health system based in Mountain View. On October 30, 2026, it began mailing notice letters about a data security incident and reported the incident to the California Attorney General.

According to the notice, El Camino Health identified unusual activity in its Microsoft 365 system on September 1, 2026. Microsoft 365 is the software many organizations use for email and shared files. El Camino Health says it secured the system, hired third-party forensic experts and notified law enforcement.

The investigation found intermittent unauthorized access to the Microsoft 365 accounts of four employees between August 26 and September 2, 2026. The notice says certain documents were copied or downloaded from those accounts.

Eight Days of Access, and a Document Review That Is Still Ongoing

The notice leaves several important questions open. El Camino Health says its review of the copied documents is ongoing. That means the full list of affected people and data may not be known yet.

• August 26, 2026: Unauthorized access begins
• September 1, 2026: El Camino Health identifies unusual activity
• September 2, 2026: Unauthorized access ends
• October 30, 2026: Notice letters begin mailing, 59 days after discovery

El Camino Health has not stated the total number of people affected. The notice also does not explain how the intruder gained access.

What Information Was Exposed?

The notice says the information varies by person. Based on the ongoing review, the documents may contain a name and some or all of the following:

• Contact information
• Demographic information
• Social Security number
• Driver’s license number
• Date of birth
• Medical record number
• Patient account number
• Diagnosis information
• Treatment information
• Prescription information
• Provider names
• Dates of service
• Health insurance information
• Financial account and routing numbers, for some patients

Why This Combination of Data Raises the Stakes

A Social Security number or a driver’s license number can be used on its own to open accounts. Medical and insurance details are different. A bank card can be replaced. A diagnosis or a treatment history cannot. Together, these details can make a scam or a false insurance claim look more believable.

El Camino Health has not said that anyone’s information was misused.

What Is El Camino Health Offering?

El Camino Health is offering one year of complimentary identity monitoring through Experian IdentityWorks. The enrollment deadline and activation code appear in each letter, and the code will not work after that date. A credit card is not required to enroll.

Enrollment is available at experianidworks.com/3bcredit or by calling Experian at 877.288.8057. El Camino Health also lists a call center for questions at 888.517.6420, Monday through Friday, 9:00 a.m. to 9:00 p.m. Pacific Time.

Your Information Is at Risk

Affected individuals face a risk of identity theft, financial fraud and medical identity theft. Steps that can reduce the risk include:

• Enroll in the identity monitoring offer before the deadline in the letter
• Review statements from providers and health insurers for services never received
• Review bank and financial account statements for suspicious activity
• Check free credit reports at annualcreditreport.com
• Consider a fraud alert or a credit freeze
• Keep the notice letter and any records of fraud or time spent resolving it

Do You Have Legal Options?

Healthcare organizations that collect patient information have a legal duty to safeguard it. When that duty is not met, affected individuals may have legal rights and remedies.

Contact Emery | Reddy today at 916.995.5968 for a Free Case Review. No Fee Unless We Recover.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

How many people were affected by the El Camino Health data breach?

El Camino Health has not stated a total. The review of the copied documents is ongoing, so more letters may follow.

What information was involved?

It varies by person. The documents may contain your Social Security number, driver’s license number, date of birth, medical record number, diagnosis, treatment and prescription information, and health insurance information. For some patients, financial account and routing numbers may also be involved.

When did this happen?

The notice says unauthorized access occurred between August 26 and September 2, 2026. El Camino Health identified the activity on September 1 and began mailing letters on October 30.

Was my information misused?

El Camino Health has not said that anyone’s information was misused. You can still review your statements and credit reports for anything unusual.

How could medical information be misused?

Stolen medical or insurance details can be used to:

• Bill false insurance claims
• Obtain care or prescriptions in your name
• Make scam calls or emails sound real

Could I get scam messages about this incident?

Yes, that is possible. Be careful with any call, text or email that mentions this incident and asks for personal details or payment. Use the phone numbers in your letter.

What should I do if I received a letter?

Consider these steps:

• Keep your letter
• Enroll in Experian IdentityWorks before your deadline
• Review your statements and credit reports
• Call 916.995.5968 for a Free Case Review

Do I have a legal claim?

Healthcare organizations have a duty to protect the information they collect. You may have legal rights if your information was involved. Contact Emery | Reddy at 916.995.5968 or visit www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.