In June 2024, Hillcrest Convalescent Center, Inc. experienced a data breach. The incident was reported to regulatory bodies, with the California Attorney General's office listing a breach date of June 27, 2024, and a report date of March 4, 2025. Affected individuals were reportedly notified by mail in March 2025.
The breach exposed the personal data of approximately 106,194 individuals. The exposed data types include names, addresses, dates of birth, financial account information, driver's license/government ID numbers, medical information, and health insurance information. Social Security numbers were also compromised for a subset of the affected individuals. Montana's Attorney General's office noted 123 Montanans were affected, indicating a multi-state impact.
While a class-action lawsuit related to this breach has been filed and settled, additional details regarding the scope of the incident or investigations may emerge over time.