On Dec. 20, 2024, Frank D. Lanterman Regional Center, experienced a significant data breach affecting approximately 19,000 individuals in the United States. The breach involved unauthorized access to certain email accounts within the center’s email environment, which occurred between August 2024 and December 2024.
According to the official consumer notice, the breach was discovered after suspicious activity was detected, prompting the organization to engage third-party computer specialists to investigate and determine the scope of the incident.
The center conducted a comprehensive review of the affected email accounts, assisted by data specialists, to identify the types of information present and the individuals impacted. The review was completed June 16, 2025, allowing the organization to begin notifying affected individuals and regulatory authorities.
The breach was reported to the California Attorney General’s office on Aug. 1, 2025, and to the U.S. Department of Health and Human Services on June 20, 2025.
To support those affected, Lanterman is offering 12 months of complimentary credit monitoring and identity protection services through Experian. This service includes identity restoration support, fraud detection tools and credit monitoring.
Affected individuals are encouraged to enroll in these services by Nov. 28, 2025, using the instructions and activation code provided in their notification letter. Due to privacy laws, the organization cannot activate these services on behalf of individuals.
Given the nature of the breach, Lanterman recommends that affected individuals remain vigilant by regularly reviewing their credit reports, account statements and explanation of benefits forms for suspicious activity.
More information can be found on the Lanterman Regional Center website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.