Madera Hospital Data Breach Impacts 150k: Compromises PHI and PII

Madera Community Hospital, a nonprofit community hospital in Madera, California, disclosed a data breach involving unauthorized access to its computer network over two days in late May 2025. A total number of 150,810 individuals were affected by the breach.

On May 29, 2025, Madera Community Hospital detected suspicious activity on its computer network, according to the hospital's notice to consumers. The hospital launched an investigation with the help of third-party cybersecurity experts.

By June 2025, the forensic investigation determined that an unauthorized third party had gained access to the hospital's computer network for two days, on May 28 and May 29.

The hospital identified the files that could have been affected by the unauthorized access. It then hired a specialized data-review firm to analyze those files and determine what personal data they contained. The hospital received the results of this review in April 2026.

After receiving the data-review results, the hospital spent additional time working to verify accurate mailing addresses and contact information for the people it needed to notify.

The potentially affected files contained personal information or protected health information including names, contact information, login credentials, financial account information, medical record information, health insurance details, and government identification numbers.

The breach was reported to the California Attorney General and to the Massachusetts Office of Consumer Affairs and Business Regulation starting on July 14, 2026.

Madera Community Hospital's response to the breach

Madera Community Hospital is offering some individuals a complimentary membership to Experian's IdentityWorks identity-theft-protection service. Adults who received an activation code in their notification letter can enroll through Experian's IdentityWorks website.

Parents or guardians of affected children can enroll minors through a separate Experian enrollment page designed for minors. Individuals who would prefer to enroll by phone or has questions about the service can contact Experian directly at 877-288-8057.

For any questions about the breach, affected individuals can call the hospital's dedicated response line at 844-958-8906, available Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.