Reimagine Network, a Santa Ana-based nonprofit disability services provider, suffered a cybersecurity breach on June 23, 2025, when an unauthorized actor infiltrated its network. The attack exposed personally identifiable information (PII) and protected health information (PHI) of at least 4,799 individuals, including names, addresses, Social Security numbers, medical diagnoses, medications, and insurance details. The breach was formally disclosed to the U.S. Department of Health and Human Services (HHS) on August 29, 2025, with affected individuals notified via mail. In response, the organization offered 12 months of free credit monitoring and identity theft protection. The compromised data poses significant risks of identity theft, financial fraud, and targeted phishing attacks, particularly due to the sensitivity of health and financial records involved.