Paradigm Healthcare Breach Affects More Than 970,000 Medi-Cal Members

Summary

Paradigm reported unauthorized network access and possible access to files containing protected health information for more than 970,000 Medi-Cal members. The article also details separate breaches reported by Tarter Krinsky & Drogin and Ridgeway Pharmacy.

Key points

• Paradigm said it detected unauthorized access to its local network on October 13, 2025, and determined in August 2026 that files may have been accessed between October 8 and 15, 2025.
• Paradigm reported that files contained names, dates of birth, gender, and Medi-Cal member identification numbers; it said its Student Health Network service was not affected.
• Paradigm said it took some systems offline, notified law enforcement, and engaged outside incident-response experts. It reported no evidence of resulting fraud or identity theft and did not say whether data was exfiltrated.
• Paradigm’s notification letters were dated September 14, 2026, and the company reported more than 970,000 affected people to HHS.
• Tarter Krinsky & Drogin reported that attackers accessed certain servers between July 9 and September 9, 2025; its incident affected more than 196,000 people.
• Ridgeway Pharmacy reported that an attacker may have accessed personal, health, prescription, insurance, and payment card information after its website was hacked; more than 258,000 people were affected.

Industries