Valley Presbyterian Hospital, based in California, fell victim to a ransomware attack between May 14, 2020, and May 20, 2020, with the breach formally reported on December 30, 2020. The incident compromised customer data, including names, though the full scope of the exposed information—such as whether medical records, financial details, or other sensitive personal data were accessed—remains unconfirmed. The attack disrupted hospital operations, raising concerns about potential delays in patient care, administrative disruptions, and reputational damage. As a healthcare provider, the breach posed risks to patient trust and regulatory compliance, particularly under HIPAA (Health Insurance Portability and Accountability Act). The hospital likely faced financial losses from incident response, potential ransom payments (if made), and remediation efforts. The lack of clarity on the exact data exposed further complicated risk assessment, leaving affected individuals vulnerable to identity theft or fraud if additional personal details were accessed. The attack underscored the critical need for robust cybersecurity measures in healthcare, where data breaches can have life-threatening consequences if systems like patient monitoring or treatment schedules are compromised.

The California Office of the Attorney General reported a data breach involving Emanate Health Foundation on September 11, 2020. The breach occurred when a cybercriminal accessed personal information from a backup file on February 7, 2020, and retained access until May 20, 2020, affecting unknown individuals. The compromised information included names, addresses, birth dates, gender, phone numbers, emails, but did not include credit card or social security numbers.