What Happened?
On September 2, 2025, Harbor Regional Center became aware of potential unauthorized access to an employee email account. The organization immediately reset the password for the affected account and engaged a third-party team of forensic investigators to determine the full nature and scope of the incident.
On September 29, 2025, following a thorough investigation, Harbor confirmed that a limited amount of protected health information may have been accessed in connection with the email account compromise. Harbor Regional Center published its official notification on October 30, 2025, and began mailing notice letters to potentially affected individuals.
What Information Was Exposed?
The information potentially accessed in this breach is especially sensitive because it involves individuals served by a developmental disabilities agency. Data that may have been compromised includes:
- Full name and address
- Date of birth
- Social Security number
- Medical record number
- Patient ID or account number
- Medicare or Medicaid number
- Health insurance information
- Medical diagnosis and treatment information
- Medical history and prescription information
- Medical lab and test results
- Treatment location, treatment dates, and provider name
The breadth of information potentially involved makes this a serious breach, particularly given that many of the individuals served by Harbor Regional Center are among the most vulnerable populations.
What Is Harbor Regional Center Doing?
Harbor Regional Center implemented additional security measures within its systems and is reviewing its data security policies and procedures. Complimentary credit monitoring services were offered to potentially affected individuals.
Why This Breach Is Particularly Serious
This incident exposed protected health information for individuals with developmental disabilities — a population that may face heightened vulnerability when it comes to the misuse of their personal and medical data. When health records, Social Security numbers, and insurance information are accessed together, the risk of medical identity theft, insurance fraud, and financial exploitation is significantly elevated.
Your Rights as an Affected Individual
If you or someone in your care received notice from Harbor Regional Center about this data breach, you may have the right to pursue compensation under applicable state and federal privacy laws, including HIPAA. You may be entitled to recover damages for:
- The unauthorized exposure of sensitive protected health information
- Costs of credit and identity monitoring
- Actual financial harm resulting from identity theft or fraud
- Emotional distress caused by the breach
Contact Wilshire Law Firm for a Free Consultation
Wilshire Law Firm is currently evaluating claims on behalf of individuals affected by the Harbor Regional Center data breach. Our experienced data privacy legal team can review your situation and help you understand your options.
We take no fees unless you get paid.
Call us 24/7 or contact us online for a free and confidential consultation.
