Paradigm Healthcare Services review: Medi-Cal Billing Breach Analysis
In short
A 2025 breach at Paradigm Healthcare Services exposed Medi-Cal member IDs for nearly one million people. Here is what the records show.
Paradigm Healthcare Services, a San Francisco firm that handles Medi-Cal billing under contract with the California Department of Health Care Services, confirmed unauthorized network access between October 8 and 15, 2025. The incident exposed names, dates of birth, gender, and Medi-Cal member identification numbers for 970,403 individuals. No Social Security numbers or financial data were involved.
Incident timeline and response
Paradigm detected the intrusion on October 13, 2025, and immediately took affected systems offline. External investigators completed their review on August 18, 2026, confirming that certain files containing protected health information may have been accessed. Notifications to affected individuals began on September 14, 2026, nearly eleven months after detection. The company reported the event to the HHS Office for Civil Rights on the same date and filed required notices with the California Attorney General.
Paradigm stated it notified law enforcement and retained outside incident-response specialists. It established a dedicated call center at 1-833-851-9382, available weekdays from 5 a.m. to 5 p.m. Pacific Time. The firm reported no evidence that the accessed information has been used for fraud or identity theft so far. Student Health Network online services remained unaffected throughout the event.
The breach occurred while Paradigm operated as a business associate processing claims for school districts and public agencies. It forms part of a broader pattern of incidents involving healthcare vendors in 2025 and 2026, though investigators have not linked it to any other contractor event.
Data types exposed and security context
The compromised records contained only the minimum elements needed for Medi-Cal billing: names, dates of birth, gender, and member identification numbers. Absence of Social Security numbers and financial details limits immediate identity-theft risk, yet the data still permits targeted phishing or insurance-fraud attempts when combined with other sources.
| Data element | Present in breach | Risk level |
|---|---|---|
| Name | Yes | Medium |
| Date of birth | Yes | Medium |
| Gender | Yes | Low |
| Medi-Cal ID | Yes | Medium |
| Social Security number | No | None |
| Financial information | No | None |
Paradigm advised recipients to place fraud alerts or credit freezes, obtain free credit reports, and monitor explanations of benefits for unusual activity. Law firms have begun investigating potential class-action claims, though no large settlements have been announced as of October 24, 2026. The company continues remediation work and has not publicly attributed the intrusion to any specific actor.
Practical steps for affected individuals
Anyone who received a notification letter should first confirm their Medi-Cal statements match expected services. Discrepancies should be reported directly to the call center and to county Medi-Cal offices. Individuals concerned about identity misuse can request a free weekly credit report from AnnualCreditReport.com and place a fraud alert with one of the three major credit bureaus.
Healthcare billing vendors that store member IDs should review access logs and enforce stricter segmentation between billing systems and public networks. Paradigm’s incident shows that even limited data sets require prompt detection and transparent disclosure timelines to maintain trust with state contractors and the individuals they serve.
Frequently asked questions
What information was exposed in the Paradigm Healthcare Services breach?
Names, dates of birth, gender, and Medi-Cal member identification numbers for 970,403 individuals were potentially accessed. Social Security numbers and financial data were not involved.
When did the Paradigm breach occur and when were people notified?
Unauthorized access took place October 8–15, 2025. Notifications began September 14, 2026, after an investigation concluded in August 2026.
What should affected Medi-Cal members do now?
Monitor explanations of benefits, request free credit reports, and consider placing a fraud alert or credit freeze. The dedicated call center number is 1-833-851-9382.
Is there evidence the data has been misused?
Paradigm has stated it found no evidence that accessed information has been used for fraud or identity theft as of the latest public update.
TrustScope
Comments 1