Alma Family Services, a Los Angeles-area nonprofit, disclosed a data breach to the U.S. Department of Health and Human Services on September 10, 2026. This disclosure indicated the breach affected 2,753 people and involved sensitive protected health information. The specific details regarding how the breach occurred or the exact types of data compromised have not been publicly released.
Potentially involved data types include names, Social Security numbers, dates of birth, addresses, government identification numbers, medical information, and financial information. The incident is considered a HIPAA-related breach due to the involvement of protected health information. The full scope of affected states includes California, Iowa, Maine, Massachusetts, Montana, Nebraska, New Hampshire, Oregon, Rhode Island, South Carolina, Texas, Vermont, and Washington.
Active litigation is underway, with Shamis & Gentile P.A. investigating the incident. It remains unclear which specific data categories were present for each affected individual. No official breach notification letter from Alma Family Services has been publicly identified. Further details may emerge as investigations continue, and notifications to affected individuals may be delayed.