Catalyst Physician Group data breach

Clerk's notes

Catalyst Physician Group, a prominent outpatient medical network in California, officially reported a data security incident to authorities on September 11, 2026. This report concerned unauthorized access to their internal digital environment, with the breach itself initially occurring on or about December 2, 2025. The specific nature of the cyberattack remains unspecified, but incidents of this type in healthcare frequently target vast quantities of highly confidential patient information held within electronic health records and related systems.

The compromised patient data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. The exposure of such a comprehensive range of sensitive data can lead to significant long-term risks for affected individuals. Unlike credit card numbers, which can be easily changed, core identity and medical information is permanent, leaving victims vulnerable to ongoing exploitation.

This incident is currently under monitoring. The combination of personal identifiers like Full Name, Date of Birth, and Social Security Number, alongside detailed medical records, creates pathways for medical fraud, fraudulent insurance claims, and various forms of identity theft. Affected individuals may face challenges in detecting and mitigating these potential harms.

Under California law, medical providers have a stringent legal duty to safeguard patient data. A breach involving this scope of information suggests potential vulnerabilities in the organization's security protocols. Receiving an official data breach notification letter from Catalyst Physician Group serves as formal acknowledgment that your private medical and personal information was compromised.

If you received a data breach notification from Catalyst Physician Group, it is important to understand your rights. We are currently reviewing this incident and investigating potential class action claims on behalf of impacted patients. An attorney can help clarify how this breach might affect you and outline any available legal remedies.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.