On June 23, 2025, Reimagine Network, a nonprofit disability services provider based in Santa Ana, California, experienced a network disruption that led to a data breach affecting thousands of individuals in the United States. An investigation revealed that an unauthorized actor gained access to the organization's network and accessed files containing personal data.
On Aug. 6, 2025, it was determined the cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI). Exposed information included names, addresses, phone numbers, dates of birth, Social Security numbers, medical diagnosis and conditions, medications and health and insurance information.
Reimagine Network disclosed the data breach to the U.S. Department of Health and Human Services on Aug. 29, 2025, reporting at least 4,799 individuals impacted. The organization also published a Notice of Data Incident on its website on Aug. 28, 2025.
If you receive notification from Reimagine Network, you may want to:
More information about the organization and its servicescan be found on the Reimagine Network website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.