Paradigm Healthcare Breach Affects Medi-Cal Data

Paradigm Healthcare Services, a San Francisco-based third-party billing company, disclosed a data breach that occurred in October 2025 involving unauthorized access to its network.

The breach was reported to the California Attorney General on Sept. 14, 2026. The company also posted a notice on its website with information about the incident. Paradigm Healthcare Services began notifying affected consumers on Sept. 14, 2026.

On Oct. 13, 2025, Paradigm Healthcare Services became aware of unauthorized access to its local network. An investigation later determined that the unauthorized access occurred over about one week, between Oct. 8 and Oct. 15, 2025.

On Aug. 18, 2026, the investigation concluded that some protected health information was potentially accessed by an unauthorized party during the breach window.

The information types that may have been accessed included names, dates of birth, gender and Medi-Cal member identification numbers.

Paradigm Healthcare Services' response to the breach

The notification letters sent to impacted indivduals include guidance on placing fraud alerts and security freezes with the three major credit bureaus, as well as instructions for obtaining free annual credit reports.

Paradigm Healthcare Services set up a dedicated and confidential call center for individuals who have questions about the incident. The call center is available between 5 a.m. and 5 p.m. PT, Monday through Friday, excluding holidays. Affected individuals can find the call center phone number on their notification letter or on the company's website.