All Breaches
March 6, 2026 Verified Sensitive Record Healthcare

Harbor Regional Center 2026 Data Breach

The 2026 Harbor Regional Center data breach involved unauthorized access to the organization's network on March 6 and 7, 2026. Harbor says personal information in certain files may have been accessed by an unauthorized individual.

2.3 Thousand
Affected People
6
Data Types
Low
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

2 sensitive6
  • Health insurance information
  • Medical information
  • Names
  • Social security numbers
  • Dates of birth
  • Student IDs

About This Breach

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/IT incident involving a network server and reported 2,287 affected individuals.

How Was the Incident Discovered?

Harbor Regional Center noticed unusual activity in its network around March 7, 2026. The organization began an investigation with legal counsel and outside forensic specialists, which found that certain information may have been accessed without authorization.

What Information Was Affected?

The affected fields may vary by person and can include names, Social Security numbers, health-insurance information, medical information, mothers' maiden names, dates of birth, and student identification numbers.

Review and Notification Timeline

Harbor completed its review of the affected files and related individuals on July 7, 2026. Notice letters were mailed to people with valid addresses, and the organization says it is reviewing and strengthening its data-privacy policies and procedures.

What Should Affected People Do?

Notice recipients should review insurance explanations of benefits, account activity, and credit reports for activity they do not recognize. Harbor said it had no indication of misuse as of the notice date, but suspicious requests should still be verified through official contact channels.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information