Petaluma Health Center Data Breach Exposes Sensitive Patient Information Petaluma Health Center recently disclosed a data breach affecting sensitive personal and health-related information of its patients. On December 15, 2025, the center was alerted by its electronic medical record system, OCHIN, that an unauthorized individual had accessed a system belonging to TriZetto, a third-party vendor working with OCHIN. TriZetto’s investigation confirmed that patient data linked to Petaluma Health Center may have been exposed during the breach. The compromised information varies by individual but includes names, Social Security numbers, dates of birth, contact details, and health or insurance-related data. In response, Petaluma Health Center began notifying affected individuals via mail, detailing the specific types of information impacted. The center and TriZetto are also offering complimentary credit monitoring services to those affected. The breach notice was filed with the California Attorney General’s office.

The Petaluma Health Center experienced a data breach reported by the California Office of the Attorney General on June 2, 2023, though the incident itself occurred on March 14, 2023. Unauthorized actors gained access to the organization’s network, compromising sensitive personal and medical data. The exposed information included names, addresses, Social Security numbers, and medical records, though the exact number of affected individuals remains undisclosed. As a healthcare provider, the breach poses significant risks, including potential identity theft, financial fraud, and misuse of protected health information (PHI). The incident underscores vulnerabilities in safeguarding patient data, particularly in sectors handling highly sensitive records. While no immediate evidence of data misuse was reported, the exposure of such critical details elevates concerns over long-term privacy and security repercussions for those impacted. The breach also raises regulatory scrutiny, as healthcare entities are bound by strict compliance frameworks like HIPAA, potentially leading to legal and reputational consequences for the center.