Oodaloop Paradigm Healthcare Data Breach Affects Over 970,000 Medi-Cal Members
Article Content
- •Over 970,000 Medi-Cal members affected by the breach.
- •Unauthorized access detected in October 2025, with notifications sent in September 2026.
- •No evidence of misuse of the compromised information reported by Paradigm.
Paradigm Healthcare Services reported a data breach impacting over 970,000 Medi-Cal members. Unauthorized access to its local network was detected on October 13, 2025, with an investigation revealing that sensitive files containing names, dates of birth, gender, and Medi-Cal identification numbers were accessed between October 8 and October 15, 2025. Notification letters to affected individuals were sent in September 2026, nearly a year after the breach was detected. Paradigm stated there is currently no evidence that the compromised information has been misused. The breach adds to a series of healthcare data incidents, including those involving Tarter Krinsky & Drogin and Ridgeway Pharmacy, which also reported significant breaches around the same time. No details were provided about the threat actor or how the breach occurred.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track California Department Of Health Care Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What personal information was compromised?
When did Paradigm become aware of the breach?
Have any individuals reported misuse of their information?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…