El Camino Health Data Breach Exposes Patient Health Information

El Camino Health, a nonprofit health care organization serving the communities of Silicon Valley in California, has disclosed a data breach involving unauthorized access to employee email accounts.

The breach was reported to the California Attorney General on Oct. 30, 2026. The organization also posted a notice on its website.

On Sept. 1, 2026, El Camino Health identified unusual activity in its Microsoft 365 system. The organization took steps to secure the system and launched an investigation with the help of third-party forensic experts.

The investigation determined that an unauthorized party gained intermittent access to the Microsoft 365 accounts belonging to four El Camino Health employees. This unauthorized access occurred between Aug. 26, 2026, and Sept. 2, 2026.

The organization stated that its electronic health record system was not involved in this incident.

The breach exposed a wide range of sensitive information including names, contact information, demographic information, Social Security numbers, driver's license numbers, dates of birth, financial account and routing numbers, medical record numbers, patient account numbers, diagnosis information, treatment information, prescription information, provider names, dates of service and health insurance information.

El Camino Health's response to the breach

El Camino Health is offering affected individuals one year of complimentary credit monitoring and identity protection services through Experian IdentityWorks Credit 3B.

Affected individuals will receive a personalized activation code in their notification letter. They can use this code to enroll online at Experian's IdentityWorks website or by calling Experian's customer care team at 877-288-8057.

El Camino Health also established a dedicated toll-free call center to answer questions about the incident. Individuals can reach the call center at 888-517-6420, Monday through Friday, from 9 a.m. to 9 p.m. Pacific Time, excluding major U.S. holidays.