Santa Rosa Community Health Centers

Organization

Santa Rosa Community Health Centers

Source

California AG · source record

Date reported

Feb 26, 2021

Date(s) of breach

Wednesday, January 29, 2020

Residents affected

Not published by this source

Data exposed

Social Security number Financial / bank account Medical / health information Health insurance Date of birth Email address Postal address Name

Notice letter

Sample notice (PDF)

Discovered

Dec 30, 2020, as stated in the letter

"We engaged a vendor to conduct a comprehensive review of the affected email account and on December 30, 2020, we received a report from the vendor that identified the PHI that may have been stored in the account."

Days to notice

58 days from discovery (Dec 30, 2020) to the California record (Feb 26, 2021). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

12 months of credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 16:08 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.