Castro Valley Health, Inc. experienced a data security incident. The breach involved some personal information of former patients. Castro Valley Health first became aware of this incident on April 21, 2020, and promptly removed the information from the Docker Hub site. The information that was transferred to the Docker Hub site included patient names, Admission Visits, the name of the nurse, physical therapist, or speech therapist who admitted the patient, the address at which the patient visit was to occur, the patient’s date of birth, medical record number, and the start of care date.

The California Office of the Attorney General reported that Castro Valley Health, Inc. experienced a data breach on January 1, 2017, affecting patient information. The breach was discovered on April 21, 2020, when it was found that patient data had been inadvertently transferred to Docker Hub, which was then promptly removed. The reported breach involved patient names, dates of birth, and medical record numbers, but did not include Social Security numbers or clinical information.