DataBreachCaseFile.com

Case file

Case File: San Bernardino County on behalf of Arrowhead Regional Medical Center Data Breach

This file collects the dated facts on record for the San Bernardino County on behalf of Arrowhead Regional Medical Center incident. The state report is dated September 28, 2026. The incident itself is dated August 28, 2026.

Timeline

31 days separate the incident date from the date it was reported.

  1. August 28, 2026Incident dateWhen the filing says the breach took place.
  2. September 28, 2026Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state
California
Date reported
September 28, 2026
Incident date
August 28, 2026
Receiving office
California Attorney General

Data categories in the file

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates

Case notes

San Bernardino County, operating Arrowhead Regional Medical Center (ARMC), reported a data security incident to regulators on September 28, 2026. The breach was identified on August 28, 2026, and its specific type remains unspecified as the investigation is currently monitoring the situation. ARMC is a significant public teaching hospital in California, handling extensive patient data.

The reported exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of identifying and sensitive health information presents a significant risk to affected individuals. The exposure of such comprehensive records can lead to various forms of identity-related misuse.

As a large county-run medical facility, ARMC manages a vast repository of sensitive information crucial for patient care and administrative functions. The occurrence of a data breach at such an institution highlights the constant security challenges faced by healthcare providers and the potential impact on individuals whose private records are entrusted to them. Details on the full mechanics of the incident are still under evaluation.

Individuals who receive official notification regarding this incident should take proactive steps to protect themselves. It is advisable to carefully review any communication from San Bernardino County or Arrowhead Regional Medical Center. Consider placing a fraud alert or security freeze on your credit reports with the major credit bureaus to help prevent unauthorized accounts from being opened in your name. Additionally, regularly monitor your financial statements, health insurance explanations of benefits (EOBs), and medical records for any unusual activity or discrepancies.

Questions about this case file

Where does the San Bernardino County on behalf of Arrowhead Regional Medical Center case file come from?
Every entry is taken from the breach report San Bernardino County on behalf of Arrowhead Regional Medical Center lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?
Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?
It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?
Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

More California case files

California data breaches

Filing source: California Attorney General