Regal Medical Group,Lakeside Medical Organization, ADOC Acquisition, & Greater Covina Medical Group

In December 2022, Regal Medical Group and its affiliates, including Lakeside Medical Organization, ADOC Medical Group, and Greater Covina Medical Group, experienced a significant data breach due to a ransomware attack. This incident was part of a larger trend of increasing cyberattacks targeting healthcare providers, with this particular breach affecting over 3.3 million patients. The breach was first noticed on December 2, 2022, when employees encountered difficulties accessing certain servers. A subsequent investigation revealed that malware had been deployed, leading to unauthorized access and exfiltration of sensitive data

The compromised data included a wide range of personal and health information, such as names, Social Security numbers (for some individuals), dates of birth, addresses, health insurance details, medical and treatment information, laboratory test results, prescription data, radiology reports, and phone numbers

This breach is among the largest healthcare data breaches reported in 2023, highlighting the significant impact of cyberattacks on patient privacy and the healthcare sector’s vulnerability

In response to the breach, Regal Medical Group and its affiliates took steps to notify affected individuals and offered complimentary credit monitoring services to mitigate the risk of identity theft and fraud

The incident has also led to multiple lawsuits against Regal Medical Group and its affiliates, alleging negligence, breach of implied contract, and violations of various privacy laws.