Cornerstone Care Center, also known as Sanger Skilled Care, LLC, experienced a data breach in 2026. The company discovered unauthorized activity in one user account on or around April 7, 2026, and swiftly engaged a third-party forensic firm. The investigation concluded on April 16, 2026, determining that a limited amount of protected health information may have been accessed by an unauthorized third party. Notification to individuals began on May 1, 2026, and the California Attorney General was notified on or before May 7, 2026.
The breach potentially exposed full names, Social Security Numbers (SSN), dates of birth, dates of service, health insurance information, lab results, medical diagnosis information, medical record numbers, patient identification numbers, prescription and treatment information, and provider names. The company stated that the specific information impacted may vary for each individual. The exact number of affected individuals has not been publicly disclosed by Cornerstone Care Center, and the root cause and breach vector remain unclear.
While investigations into the incident, including potential litigation, are ongoing, Cornerstone Care Center has established a toll-free call center and email for inquiries. The company is undertaking a time-consuming process to obtain up-to-date address information for notifications.