On or about March 24, 2026, Southern California University of Health Sciences (“SCUHS”) became aware of unauthorized activity affecting its computer network. According to the Notice of Data Breach, the organization promptly initiated a response, engaged outside cybersecurity specialists, and took steps to secure its systems while determining the nature and scope of the incident.
The investigation determined that an unauthorized actor accessed SCUHS systems and viewed or copied certain files between March 23 and March 24, 2026. Following this discovery, SCUHS conducted a comprehensive review of the affected files to identify the information involved and determine which individuals may have been impacted.
Although SCUHS reported that it had not identified evidence of identity theft or fraud connected to the incident at the time of notification, the review confirmed that personal information belonging to certain individuals was present within the affected files.
After identifying the scope of the breach, SCUHS took steps to restore system functionality and enhance its security environment. The organization reported that it has implemented additional safeguards and continues to evaluate and strengthen its data protection practices as part of its ongoing commitment to protecting personal information.
Founded in 1911, Southern California University of Health Sciences specializes in integrative and evidence-based whole-person healthcare, blending conventional medicine with proven complementary therapies across chiropractic, eastern medicine, physician assistant, and science programs.
Individuals whose information may have been involved began receiving written notification letters in 2026. If you received a Notice of Data Breach from SCUHS, it indicates that your personal information may have been impacted by this incident.
As part of its response, SCUHS is offering affected individuals complimentary identity protection services through Kroll for 12 months. These services include credit monitoring, fraud consultation, and identity theft restoration support, provided individuals enroll by the deadline specified in their notification letter.
What information is involved in the Southern California University of Health Science Data Breach?
Compromised information may include:
First Name
Last Name
Other Personally Identifiable Information (PII)
Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations like universities are responsible for safeguarding this information. When PII is exposed in a data breach, it may be used by cybercriminals for identity theft, financial fraud, or phishing attacks.
Depending on the type of data involved, risks may include unauthorized account activity, misuse of sensitive personal or educational records, or long-term identity theft concerns. Even without confirmed misuse, exposure of personal data can create ongoing risk.
If your information was involved in this incident, it is important to remain vigilant. Affected individuals are encouraged to:
- Monitor financial accounts and credit reports regularly
- Watch for suspicious or unauthorized activity
- Consider placing a fraud alert or credit freeze
- Take advantage of complimentary identity monitoring services
Consumers may have legal rights when organizations fail to adequately safeguard personal information. These rights vary depending on the circumstances of the breach and applicable state laws.
If you received a Notice of Data Breach from Southern California University of Health Sciences, your personal information may be at risk.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.