Conifer Value-Based Care, LLC reported to the California Attorney General that a data breach occurred on August 28 and August 29, 2025. The California Attorney General’s records show that the breach notification was submitted on December 18, 2025. A law firm investigation page states that an unauthorized third party accessed a Conifer business email account hosted on Microsoft Office 365 and that Conifer discovered the incident on August 28, 2025.
The California filing and available source excerpts do not state the number of affected individuals or the specific information involved. The available sources also do not establish whether Social Security numbers, medical information, or financial information were exposed. A law firm has publicly announced an investigation into potential class-action claims, but no filed lawsuit or named plaintiff was identified in the consulted sources.