San Bernardino County/ARMC Patients' Data Exposed in 2026 Breach

San Bernardino County recently announced a data security incident affecting Arrowhead Regional Medical Center (ARMC) that occurred on August 28, 2026, and was reported on September 28, 2026. This breach means that highly sensitive personal information entrusted to a major public healthcare provider in California was exposed.

The exposed data includes critical categories such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of identifying and health-related data carries significant risks for affected individuals.

When your medical and identity details are compromised, you face increased risks like medical identity theft, where someone might use your information to obtain healthcare services, potentially corrupting your medical history. The exposure of your Social Security Number, alongside other personal identifiers, also creates a long-term vulnerability to financial fraud and other identity theft schemes that can be difficult to resolve.

Receiving an official data breach notification letter from San Bernardino County or ARMC confirms that your private records were compromised. Legal precedent in data breach cases suggests that victims do not need to prove immediate financial harm to have a valid claim; the increased risk of future identity theft and the burden of monitoring your personal information are recognized as injuries.

If you received a notification, it indicates a potential failure by the institution to adequately protect your sensitive data. You have the right to understand what happened and explore your legal options. Our firm is currently investigating this breach, and we offer a free case review to help you determine if your claim may be worth compensation, with no fee unless we successfully recover for you.