South Coast Pediatrics, a pediatric medical group based in Santa Ana, Calif., experienced a major data breach that impacted at least 7,000 individuals. The cyberattack was discovered on June 12, 2025 and compromised both both personally identifiable information (PII) and protected health information (PHI).
Exposed information included names, address, dates of birth, medical record numbers, diagnosis, and treatment descriptions and codes. The breach was disclosed to the California Attorney General’s office and the U.S. Department of Health and Human Services on Aug. 5, 2025.
South Coast Pediatrics began notifying individuals by mail on Aug. 4, 2024 and published a Notice of Data Breach on its website.
South Coast Pediatrics took steps to notify affected patients and families in compliance with state and federal regulations.
If you receive a notice from South Coast Pediatrics about this breach, you may want to:
For more information about South Coast Pediatrics, visit their official website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.