What Is This About?

If you received a letter or email about a data breach from North Los Angeles County Regional Center (“NLACRC”), your sensitive personal information or protected health information may have been compromised. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

On November 28, 2024, NLACRC discovered suspicious activity on its systems with indicators consistent with a ransomware attack. NLACRC immediately began an investigation and took steps to contain the situation. The investigation found evidence of unauthorized activity within NLACRC computer systems on November 20, 2024, through December 1, 2024, and that files containing personal information were copied from those systems. The unauthorized actor also encrypted or encoded certain NLACRC systems to render them inaccessible.

On June 30, 2026, NLACRC reported the data breach to the Attorneys General of California, Indiana, and Vermont, as well as the Massachusetts Office of Consumer Affairs and Business Regulation. NLACRC has also posted a public notice of the incident to its website. NLACRC’s public notice indicates that the investigation remains ongoing and that NLACRC is providing notice to all individuals potentially affected by the incident.

What Information Was Impacted?

According to NLACRC’s public disclosures, the following categories of personal information may have been compromised:

• • • • • • • • • • • • Name;
                      • Date of birth;
                      • Telephone, email, and home address contact information;
                      • Social Security number;
                      • Financial account information;
                      • Payment card information;
                      • Health insurance/health plan information;
                      • Full-face photos and/or comparable images;
                      • UCI and patient ID numbers (identifying codes generated by NLACRC);
                      • Medical information;
                      • Lab results;
                      • Medications;
                      • Diagnosis and/or treatment information;
                      • Treatment cost information;
                      • Disability codes;
                      • Certificate/license numbers;
                      • Medical record number;
                      • Patient account number;
                      • Health insurance information;
                      • Contact information;
                      • Medical and/or treatment information;
                      • Government-issued identification; and
                      • Financial information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected individuals are entitled to compensation. If you received notice from North Los Angeles County Regional Center (“NLACRC”), or are a current or former patient, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.