L.A. Care Health Plan Data Breach (2026)
The 2026 L.A. Care Health Plan data breach resulted from a manual matching error in Health Risk Assessment mailers on or around January 30, 2026.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive2- Health insurance information
- Names
About This Breach
Certain member IDs were matched with incorrect member names, causing some people to receive a letter displaying another individual's name. The total number of affected people was not disclosed.
L.A. Care Health Plan is a public health plan serving Los Angeles County.
How Did the Breach Happen?
According to L.A. Care's official notice, a manual error caused certain member IDs to be matched with incorrect member names. Some Health Risk Assessment letters created from those inaccurate matches contained the wrong personal information and were sent to different recipients. The notice did not report a cyberattack or unauthorized access to systems.
What Information Was Affected?
The disclosed information was limited to first name, last name, health plan name and program name. The notice specifically states that Social Security numbers, driver's license numbers, treatment information, diagnoses and financial account numbers were not involved.
What Response Did L.A. Care Disclose?
L.A. Care said that after discovering the incident it assessed the overall impact and reviewed and updated its practices as needed to reduce the risk of recurrence.
What Should Affected People Do?
Notice recipients should keep the letter with their records and verify unexpected correspondence claiming to be from L.A. Care through the organization's official domain. Anyone who received a letter containing another person's information should report it to L.A. Care's official privacy office before sharing or disposing of it.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
