South Coast Pediatrics Data Breach Affects Thousands of Patients

Published
August 14, 2025
Updated
August 14, 2025
South Coast Pediatrics Data Breach Affects Thousands of Patients
South Coast Pediatrics
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

South Coast Pediatrics

data breach?

Join the Lawsuit

It's free to join. 

Banner advertisement for ExpressVPN to take control of your online security

Claim Depot may receieve a commission from links on this page

South Coast Pediatrics, a pediatric medical group based in Santa Ana, Calif., experienced a major data breach that impacted at least 7,000 individuals. The cyberattack was discovered on June 12, 2025 and compromised both both personally identifiable information (PII) and protected health information (PHI).

Exposed information included names, address, dates of birth, medical record numbers, diagnosis, and treatment descriptions and codes. The breach was disclosed to the California Attorney General’s office and the U.S. Department of Health and Human Services on Aug. 5, 2025.

South Coast Pediatrics began notifying individuals by mail on Aug. 4, 2024 and published a Notice of Data Breach on its website.

South Coast Pediatrics' response

South Coast Pediatrics took steps to notify affected patients and families in compliance with state and federal regulations.

If you receive a notice from South Coast Pediatrics about this breach, you may want to:

  • Sign up free credit monitoring services, if offered.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

For more information about South Coast Pediatrics, visit their official website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
South Coast Pediatrics
Consumers Notification date
Date of Breach
June 12, 2025
Breach Discovered Date
2025-06-12
Total People Affected
Information Types Exposed
  • address
  • date of birth
  • diagnosis
  • medical record number
  • patient name
  • treatment codes/descriptions
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image