The California Office of the Attorney General disclosed a data breach affecting Choice Physicians Network on September 5, 2023, with the incident occurring on April 23, 2023. Unauthorized actors gained access to and copied files containing sensitive personal information, including names, dates of birth, and Social Security numbers (SSNs). While no financial account details were compromised, the exposure of SSNs poses a significant risk for identity theft and fraud. The breach’s scope remains unclear, as the number of affected individuals has not been disclosed.Given the nature of the stolen data—personally identifiable information (PII) of patients—the incident could lead to long-term repercussions, such as fraudulent account openings, medical identity theft, or targeted phishing attacks. The lack of financial data exposure does not mitigate the severity, as SSNs are high-value targets for cybercriminals. The breach underscores vulnerabilities in the network’s security controls, potentially eroding patient trust and inviting regulatory scrutiny under laws like HIPAA (Health Insurance Portability and Accountability Act) or CCPA (California Consumer Privacy Act). No ransomware involvement was reported, but the unauthorized data exfiltration alone constitutes a major privacy violation.