Arrowhead Regional Medical Center Data Breach Investigation

San Bernardino County has submitted a data breach notification to the California Attorney General on behalf of Arrowhead Regional Medical Center. The filing, recorded with a reported date of September 28, 2026, lists a breach date of August 28, 2026. Contact a data breach attorney to learn more.

Arrowhead Regional Medical Center is a county-operated hospital in Colton that serves as a major trauma and teaching facility for the Inland Empire. Under California law, organizations that notify more than 500 residents of a security incident involving personal information must provide a sample notice to the Attorney General’s office. That requirement triggered the public listing.

Public details remain limited. The Attorney General’s list identifies the organization and the dates but does not specify how many people were affected or exactly which categories of information were involved.

In hospital incidents of this type, exposed data can include names, dates of birth, contact information, medical record numbers, insurance details, and other protected health information. Patients who receive a formal notice from the hospital or county should read it carefully for the specific data elements listed and any free credit-monitoring offer.

California’s breach notification rules require timely notice to affected residents once an organization determines that unencrypted personal information was acquired or reasonably believed to have been acquired by an unauthorized person.

Healthcare providers also face parallel obligations under HIPAA when protected health information is involved. Delays between discovery, investigation, and public notice are common while forensic reviews are completed.

Individuals who receive notice should consider placing fraud alerts or credit freezes, monitoring financial and medical statements, and retaining the letter. In some cases, private claims for negligence or related theories are evaluated after the facts become clearer.

If you received a notice related to the Arrowhead Regional Medical Center incident or believe your information may have been affected, data breach lawyers at The Lyon Firm is investigating. Contact the firm for a free consultation to discuss your options.