Hoag Clinic Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Hoag Clinic data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Hoag Clinic
Hoag Clinic is part of the Hoag health network, a nonprofit healthcare provider based in Orange County, California. Established in 1952, Hoag Clinic operates alongside two acute-care hospitals, 16 urgent care facilities, and 11 health and wellness centers. It employs approximately 3,793 people and serves thousands of patients throughout the region.
The clinic offers a variety of specialized healthcare services, including cancer care, cardiac care, neurosciences, orthopedics, and women's health. Hoag Clinic is highly regarded in the medical community and has been recognized as one of the top hospitals in California by U.S. News & World Report.
What Happened?
In March 2024, ALN Medical Management, a third-party service provider for Hoag Clinic, identified suspicious activity affecting certain systems hosted by them. ALN quickly isolated the impacted environment and launched an investigation. The investigation revealed that between March 18 and March 24, 2024, an unauthorized actor accessed and possibly removed sensitive files from the third-party hosted environment.
What Information was Exposed?
- Personally Identifiable Information (PII)
- Name
- Date of birth
- Social Security number
- Driver’s license number
- Financial account information
- Mother’s maiden name
- Payment card information
- Taxpayer identification number
- Protected Health Information (PHI)
- Health insurance information
- Medical information
ALN Medical Management completed its investigation on January 31, 2025, and began notifying affected individuals and regulatory authorities on March 21, 2025. Approximately 258 Massachusetts residents were among those impacted, and notifications to other states' residents are ongoing.
Your Rights and Next Steps
If you were affected by the Hoag Clinic data breach, you have important rights and protections available to you. Lawyers are ready to help you understand your options and guide you through the process.
First, you should consider enrolling in the complimentary credit monitoring and identity theft protection services offered by ALN Medical Management through IDX. These services are available for 24 months and will help you monitor and protect your personal information.
Next, you have the right to place a fraud alert or a credit freeze on your credit file. A fraud alert will require businesses to verify your identity before extending credit, while a credit freeze restricts access to your credit reports, preventing new accounts from being opened without your explicit consent. These services are free and can be requested by contacting the three major credit bureaus.
You should also regularly review your financial statements, credit reports, and medical statements for any suspicious activity or unauthorized transactions. If you notice anything unusual, immediately report it to your financial institutions, healthcare providers, and local law enforcement.
You May Be Entitled to Compensation
If your personal information was compromised in the Hoag Clinic data breach, you may be eligible for compensation. Lawyers are ready to help you understand your legal rights and determine if you qualify to join a class action lawsuit.
To find out if you are eligible, simply complete the below form. Lawyers will review your information and contact you promptly. Taking action today can help protect your rights and potentially secure compensation for any harm caused by this data breach.