Glendora Surgery Center Data Breach

When you schedule a procedure at an outpatient surgery center, you likely share details about your health conditions and your treatment history. Some of that kind of information was reportedly taken from Glendora Surgery Center late last year. Contact the data breach lawyers at The Lyon Firm to learn more about your legal options.

What Happened at Glendora Surgery Center?

Glendora Surgery Center, an outpatient surgical facility located in Glendora, California, disclosed a cybersecurity incident that occurred over a five-day window between November 29 and December 3, 2025. The facility detected suspicious activity on its computer network and engaged outside cybersecurity specialists to investigate the scope of the intrusion.

The investigation confirmed that an unauthorized party had accessed and removed data from a portion of the center's network. The breach was formally reported to the U.S. Department of Health and Human Services on March 27, 2026, roughly four months after the incident was discovered. A notice was also posted to the facility's website and according to the disclosed information, the types of data present in the affected systems included patient names and medical treatment information.

Glendora Surgery Center discovered the incident on December 3, 2025, and the formal report to the Department of Health and Human Services was not made until March 27, 2026. California law and federal HIPAA regulations require covered entities to notify affected individuals and report breaches without unreasonable delay, generally within 60 days of discovery for breaches.

Your Legal Rights as a California Patient

The California Consumer Privacy Act, the California Confidentiality of Medical Information Act, and federal HIPAA regulations all impose legal obligations on healthcare providers to protect patient information with appropriate security measures, and if there is a problem, affected individuals may have grounds to pursue legal action.

Potential legal claims in healthcare data breach cases can include violations of state consumer protection statutes and there can be recoverable damages that include compensation for time spent addressing identity theft.

Why Hire The Lyon Firm?

The data breach attorneys at The Lyon Firm have spent years holding healthcare organizations accountable when they fail to protect patient information. We understand HIPAA compliance and California privacy law, and we build cases that produce results.

Our team handles these cases on a contingency fee basis, which means you pay nothing unless we recover compensation on your behalf. If you received a notice from Glendora Surgery Center, or if you suspect your medical information was involved in this incident, you may have a valid legal claim worth pursuing.

Contact The Lyon Firm today for a free, confidential consultation about your rights.