Vista Del Mar Child and Family Services, a nonprofit based in Los Angeles, discovered suspicious activity within its computer network on June 30, 2026. The organization took its network offline and engaged external cybersecurity experts. The investigation revealed that an unauthorized actor accessed certain systems containing sensitive files.
The breach, reported to the U.S. Department of Health and Human Services on August 29, 2026, involved both personal information and protected health information. The potentially exposed data includes names, Social Security numbers, dates of birth, addresses, government IDs, medical information, and financial information. The breach affected hundreds of individuals, with the company continuing to review impacted files to determine the full scope.
Details can emerge as the company completes its review and issues notification letters. Official notices may be delayed as the investigation progresses.