Paradigm Healthcare Services, a Medi-Cal billing processor, reports a breach affecting more than 970,000 people, with notices sent 11 months after it found the intrusion
Paradigm Healthcare Services, which processes Medi-Cal billing and maintains Medi-Cal member ID numbers for California's Department of Health Care Services, has told HHS that a breach affected more than 970,000 people (SecurityWeek, citing the HHS portal). Paradigm's notice says it learned of unauthorized access to its local network on Oct 13, 2025. On Aug 18, 2026 it determined that files with protected health information may have been accessed between Oct 8 and Oct 15, 2025. Exposed data: name, date of birth, gender and Medi-Cal member ID number. Paradigm says its Student Health Network billing platform wasn't affected. Letters are dated Sept 14, 2026. The notice doesn't say how attackers got in or whether data was exfiltrated, and no group has claimed it. Paradigm says it has no evidence of misuse. For affected members, the main risk is medical identity theft and Medi-Cal-themed phishing. Review explanation-of-benefits statements for services you didn't receive.
Sources: Paradigm Healthcare Services: Notice of Data Breach · California AG breach notification sample · SecurityWeek (Oct 20)