PHMG Data Breach Exposes Sensitive Patient and Financial Information California-based Palomar Health Medical Group (PHMG), a network of hospitals, clinics, and urgent care centers across Northern San Diego and Southern California, is investigating a data breach involving a third-party business associate. The incident, discovered on or around March 11, 2026, revealed unauthorized access to files containing PHMG patient data, though PHMG’s own systems were reportedly unaffected. The exposed information may include names, addresses, dates of birth, Social Security numbers, credit/debit card details, email addresses, usernames, and passwords. Additionally, medical records such as diagnoses, prescriptions, health insurance details, and medical record numbers were potentially compromised. PHMG identified suspicious activity in its associate’s hosted environment and launched an investigation, confirming that PHMG data was among the files accessed. While the full scope of affected individuals remains unclear, legal teams are exploring potential class action lawsuits on behalf of impacted patients, citing risks of identity theft, financial fraud, and privacy violations. Authorities, including the U.S. Department of Health and Human Services, have been notified. Further details, including official notifications to affected individuals, are expected as the investigation progresses.