Wilmington Community Clinic Suffers Data Breach Exposing PII and PHI On August 13, 2024, Wilmington Community Clinic, a nonprofit health center in Wilmington, California, detected an unauthorized breach of its computer systems. The incident exposed a mix of personally identifiable information (PII) and protected health information (PHI) belonging to an undisclosed number of individuals. Following the discovery, the clinic engaged a third-party vendor to conduct a thorough review of the compromised data—a process that took several months due to the volume and complexity of the records. By October 13, 2025, the clinic retained a notice vendor to assist with notifications, call center support, and identity theft protection services, finalizing the list of affected individuals by November 18, 2025. Exposed data may include names, dates of birth, driver’s license or state ID numbers, health insurance identification numbers, and medical records. The breach heightens risks of identity theft and medical fraud, prompting regulatory disclosure to the California Attorney General’s office on December 11, 2025. In response, the clinic disconnected affected systems, secured its network with cybersecurity experts, and restored operations under enhanced security measures. To support impacted individuals, it is offering 12 months of complimentary credit monitoring and identity theft restoration services through HaystackID. A dedicated helpline (888-844-1319) has been established for affected parties. The clinic has also posted a breach notice on its website.