25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Ransomware Attack on Good Samaritan Health Center Affects 10,000 Individuals

Data breaches have recently been announced by Good Samaritan Health Center, Wonderland Child & Family Services, and L.A. Care Health Plan.

Good Samaritan Health Center

Good Samaritan Health Center in Atlanta, Georgia, has notified 10,000 individuals about a February 9, 2026, ransomware attack on one of its internal servers. The attack was identified on February 9, 2026, and the server was isolated to contain the attack. The server was restored from backups on the same day. Good Samaritan Health Center said it has found no evidence to suggest that there has been any misuse of data stored on the server, nor was evidence found of any public disclosure of patient data after the attack; however, Good Samaritan Health Center could not rule out the possibility that data had been accessed or stolen.

Data on the server was reviewed, and the files were found to contain names, dates of birth, zip codes, and limited clinical information. Social Security numbers and financial information were not compromised as they were not stored on the server. Good Samaritan Health Center said it has taken steps to strengthen security, including resetting all passwords, enhancing its monitoring systems to detect malware, and providing ongoing security and privacy training to its workforce. The affected individuals have been advised to review the statements they receive from their healthcare providers and insurers, and should report any services or charges for services that were not received.

Wonderland Child & Family Services

Wonderland Child & Family Services has notified 1,283 individuals about an insider data breach. On or around January 26, 2026, Wonderland Child & Family Services identified unusual activity relating to one of its former employees. An investigation was launched to determine the scope and nature of the activity, and legal counsel was retained to investigate further.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

The investigation determined that the protected health information of certain individuals may have been viewed or copied by the employee in an unauthorized manner on May 31, 2023. A review was conducted, and the information impermissibly accessed included names, dates of birth, and medical information. Wonderland Child & Family Services said it is reviewing and enhancing its policies and procedures to reduce the likelihood of similar incidents in the future, and the affected individuals have been offered complimentary credit monitoring and identity theft protection services.

L.A. Care Health Plan

L.A. Care Health Plan has identified an error with a mailing that resulted in letters intended for one individual being sent to an incorrect health plan member on January 30, 2026. The error was due to a mistake that matched 2,885 member identification numbers with the wrong names when sending annual Health Risk Assessment (HRA) forms to L.A. Care Medi-Cal members. The information in the mailing was limited to member name, health plan name, and program name. No highly sensitive information was included in the mailing. L.A. Care Plan has updated its processes to prevent similar incidents in the future.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist