970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

In October 2025, Paradigm Healthcare Services detected unauthorized access to its local network impacting over 970,000 Medi-Cal members. The compromised data included personal identifiers and Medi-Cal member IDs but did not affect Paradigm's Student Health Network platform. The breach was reported to the US Department of Health and Human Services, with notification letters sent in September 2026. Paradigm responded by taking affected systems offline, notifying law enforcement, and hiring external incident response teams. The company has not disclosed the attack method, threat actor identity, or confirmed data exfiltration. No evidence of misuse of the compromised data has been reported.

The breach exposed protected health information of approximately 970,000 Medi-Cal members, including names, dates of birth, gender, and member identification numbers. Such data exposure can increase risks of identity theft and privacy violations. However, Paradigm states there is no evidence that the information has been used for fraud or identity theft. The breach may impact patient trust and regulatory compliance obligations. No direct evidence of operational disruption or further exploitation has been provided.

Paradigm Healthcare Services has taken affected systems offline, notified law enforcement, and engaged outside incident response experts. Affected individuals have been notified. No further mitigation actions are specified. Patch status or remediation details are not provided. Organizations relying on Paradigm’s services should monitor vendor communications for updates. No immediate action is indicated beyond awareness and monitoring.