La Clínica de La Raza, Inc.

La Clínica de La Raza, Inc., a primary health care clinic based in Oakland, California, experienced a significant data breach that was officially reported on April 7, 2023. The breach was discovered on February 8, 2023, following the detection of suspicious activity within several employee email accounts between January 24, 2023, and February 8, 2023. A forensic security firm was engaged to assist with the investigation, which confirmed that an unauthorized party had accessed multiple employee email accounts over this period. The compromised email accounts contained confidential patient information.
The data breach affected 15,316 individuals, exposing a range of sensitive information, including names, addresses, Social Security numbers, dates of birth, financial account information, payment card information, online credentials, medical treatment information, and health insurance information. In response to the breach, La Clínica de La Raza began reviewing the affected files to determine the extent of the information compromised and started notifying impacted individuals through data breach letters.
La Clínica de La Raza, founded in 1971, serves more than 90,000 patients annually through 35 locations in the East Bay area. The clinic offers a variety of healthcare services, including pediatrics, behavioral health, pharmacy, medical imaging, eye care, and dentistry. It employs more than 235 people and generates approximately $17 million in annual revenue

1
.