Modoc Medical Center Reports 2026 Data Incident in California

Modoc Medical Center, a California healthcare provider, reported a data breach to the Attorney General's office on September 22, 2026. The incident, which occurred on January 19, 2026, exposed sensitive patient data including Full Name, Date of Birth, Social Security Number, Medical Record Number, and health-related details. Individuals affected by this breach face potential risks of identity theft and fraudulent medical claims.

State: California
Breach date: January 19, 2026
Reported: September 22, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Provider and Treatment Dates

Modoc Medical Center, a healthcare provider based in California, filed a report with the state's Attorney General's office on September 22, 2026. This report confirmed a data security incident that originally took place on January 19, 2026. The center has indicated that it is currently monitoring the situation following this data breach.

The compromised information includes a range of highly sensitive data points. Specifically, the breach exposed individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. Such a combination of personal and medical data poses significant risks to those affected.

Exposure of these specific data types can lead to serious consequences, including medical identity theft. Criminals could potentially use this information to obtain unauthorized medical services, file fraudulent insurance claims, or engage in other forms of long-term financial exploitation. Unlike some other types of data, clinical and demographic information cannot be easily changed once compromised.

As a crucial healthcare facility, Modoc Medical Center acts as a repository for extensive patient information, from intake forms to detailed clinical records. Healthcare organizations are subject to strict regulations regarding the protection of electronic protected health information. Individuals who receive an official notification letter regarding this incident should carefully review its contents.

To help mitigate potential risks, affected individuals are generally advised to remain vigilant. It is recommended to regularly review medical statements and Explanations of Benefits (EOBs) from insurers for any services or charges that seem unfamiliar. Monitoring credit reports for suspicious activity and considering the placement of a fraud alert or security freeze on credit files are also widely recommended protective measures.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: California Attorney General filing

Related data breach cases

Browse all California data breaches View the full case directory