PITTSBURGH, Dec. 03, 2025 (GLOBE NEWSWIRE) -- Harbor Regional Center (“HRC”),1 recently announced a cybersecurity incident, which impacted the personal information of an unknown number of individuals. Lynch Carpenter, LLP is investigating claims against HRC related to this data breach. For an attorney to review your case, visit our site HERE. In the incident, an unauthorized person gained access to HRC’s network and may have acquired records containing personally identifiable information (“PII”) and protected health information (“PHI”) that includes individuals’ names in combination with: • address • date of birth • Social Security number • medical record number • health insurance number • diagnosis and treatment information • medical history • prescription information • medical lab or test result If your information was impacted in this incident, you may be entitled to compensation. For an attorney to review your case, visit our site HERE. If you have received any other data breach notice letters in the last 30 days, please contact us here. About Lynch Carpenter Lynch Carpenter is a national class action law firm with offices in Pennsylvania, California, and Illinois. Our firm has represented millions of clients in data privacy matters for more than a decade and has earned national acclaim for complex litigation for plaintiffs across the country. To learn more, please visit www.lynchcarpenter.com. For more information, please call Jerry Wells at (412) 322-9243

Harbor Regional Center, a California-based nonprofit supporting individuals with developmental disabilities, experienced a data breach in September 2025 after unauthorized access to an employee’s email account. The incident exposed sensitive personally identifiable information (PII), including names, addresses, dates of birth, Social Security numbers, phone numbers, medical records, and health insurance details. While the breach was contained by resetting passwords and launching a forensic investigation, the exposed data poses significant risks of identity theft, financial fraud, and misuse of protected health information (PHI). Affected individuals were notified via mail and offered complimentary credit monitoring, but the breach’s long-term consequences—such as potential legal liabilities, reputational damage, and emotional distress for victims—remain unresolved. The organization faces potential class-action lawsuits for failing to prevent the exposure of highly sensitive data.

On September 2, 2025, Harbor Regional Center detected unauthorized access to an employee’s email account, potentially exposing sensitive client data. The breach was confirmed by September 29, revealing that protected health information (PHI) and personally identifiable information (PII)—including names, Social Security numbers, medical records, treatment details, health insurance data, and Medicare/Medicaid numbers—may have been accessed. The compromised data varies per individual, with some affected by a single data type and others by multiple categories, heightening risks of identity theft and medical fraud. The incident was isolated to one email account but posed significant threats due to the center’s role in managing care for thousands of individuals with developmental disabilities in Los Angeles County. Harbor Regional Center responded by securing the account, launching a forensic investigation, and offering free credit monitoring to impacted individuals. Notifications were sent via mail, and a dedicated hotline and email were established for inquiries. The attacker’s identity remains unknown, leaving the scope of exploitation uncertain.