The Vermont Office of the Attorney General disclosed a data breach affecting Redwood Coast Regional Center (RCRC) on November 5, 2024, with the incident occurring on March 6, 2024. The breach exposed sensitive personal information, including individuals' names, Social Security numbers (SSNs), and health insurance details. While the exact number of impacted individuals remains undisclosed, the compromised data poses significant risks, such as identity theft, financial fraud, and unauthorized access to healthcare-related information. The exposure of SSNs is particularly critical, as they are high-value targets for cybercriminals and can lead to long-term harm for affected individuals. The breach underscores vulnerabilities in RCRC’s data protection measures, raising concerns about compliance with regulatory requirements (e.g., HIPAA) and the organization’s ability to safeguard confidential client information. No immediate details were provided on whether the breach resulted from external cyberattacks, insider threats, or system vulnerabilities, but the nature of the leaked data suggests severe reputational and operational consequences for RCRC.

The California Office of the Attorney General reported that Redwood Coast Regional Center experienced a data breach involving unauthorized access to sensitive information on March 6, 2024. The breach potentially affected personal data including names, addresses, health insurance details, and Social Security numbers, although no evidence of misuse has been found. The breach notification was reported on November 4, 2024.

The California Office of the Attorney General reported that Redwood Coast Regional Center experienced a data breach on June 14, 2023, due to a failure of email encryption, potentially affecting client names, UCI numbers, and Public Health Information. The breach was reported on August 8, 2023, but no specific number of individuals affected was provided.