Breaches and incidents

Modoc Medical Center (Alturas, California critical access hospital): files downloaded, Worldleaks claimed

Modoc’s notice (filed with the California AG on 22 Sep 2026) says it became aware of unauthorized access on 27 Jan 2026 and “an unknown actor accessed a...

Disclosed
Verification
Checked against a primary source

What happened

  • Modoc’s notice (filed with the California AG on 22 Sep 2026) says it became aware of unauthorized access on 27 Jan 2026 and “an unknown actor accessed a limited number of Modoc systems and downloaded certain files” between 19 and 27 Jan 2026; HIPAA Journal says SSNs were among the data.
  • Root cause: not disclosed.
  • HIPAA Journal says the Worldleaks ransomware and data extortion group claimed responsibility; whether ransomware was used is unclear.
  • Modoc reported to law enforcement and regulators and offers 12 or 24 months of Experian monitoring.