San Bernardino County: Arrowhead Regional Medical Center Patient Data Exposed

San Bernardino County, which operates Arrowhead Regional Medical Center (ARMC), officially reported a data security incident on September 28, 2026. This breach, which occurred on August 28, 2026, involved the exposure of sensitive patient information held by the healthcare provider. The full extent and mechanics of the intrusion are currently under ongoing investigation.

The compromised information includes highly personal details such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of data can pose significant risks to those affected.

Unlike financial data that can be easily replaced, this type of exposed medical and personal identification information carries long-term risks. It could be used for medical identity theft, where an unauthorized person uses your identity to obtain healthcare services, potentially leading to incorrect medical records and impacts on your care. The exposure of Social Security Numbers, combined with other identifiers, also raises the risk of financial fraud and other identity-related crimes.

If you received a data breach notification letter from San Bernardino County regarding Arrowhead Regional Medical Center, it means your private information was confirmed to be compromised. It is advisable to carefully review the notification for details specific to your situation. You should also consider monitoring your credit reports and medical statements for any suspicious activity.

Receiving this official letter confirms that your records were part of the breach. This provides you with a standing to seek further information or explore potential legal avenues. Understanding the specific details of the breach and the types of data exposed is a crucial first step in protecting yourself.

Our firm is actively investigating the San Bernardino County/Arrowhead Regional Medical Center data breach. We offer a free, no-obligation case review for individuals who received a notification letter. This review can help you understand your legal position and potential next steps, without any upfront costs.