Breaches and incidents

Buchalter LLP (law firm): breach exposes Arrowhead Regional Medical Center patient data

Per HIPAA Journal, Buchalter discovered on 28 Aug 2026 that “limited data was accessed by an unauthorized third party”, confirmed on 4 Sep 2026 that some...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per HIPAA Journal, Buchalter discovered on 28 Aug 2026 that “limited data was accessed by an unauthorized third party”, confirmed on 4 Sep 2026 that some Arrowhead Regional Medical Center (Colton, California) patients were affected, and obtained contact details on 21 Sep 2026 to mail letters.
  • Root cause: not disclosed.
  • No attacker named.
  • Buchalter says it improved data security; the count was not disclosed.