Skip to content
Confirmed1 source articles · Official disclosure checkedUpdated 5 Nov 2026

El Camino Health Data Security Incident

Data breach1 source
Share

What happened

El Camino Health experienced a data security incident involving unauthorized access to Microsoft 365 accounts. The investigation identified intermittent unauthorized access to the Microsoft 365 accounts for four employees between August 26, 2026 and September 2, 2026. On September 1, 2026, unusual activity was identified in the Microsoft 365 system. Certain documents were copied or downloaded from those accounts. As stated,

AI summary of accepted evidence. Check the original sources for the full context.

Reported impact

An affected population has not been established in the accepted evidence.

Incident date
26 Aug 2026 – 2 Sept 2026
Discovery date
1 Sept 2026
Data access
accessed

Source evidence

1

Read the original reporting and statements. Multiple articles may rely on the same underlying source.

California Attorney General01

Organization notification filed with California Attorney General

Retrieved 5 Nov 2026

We are writing to inform you about a recent data security incident that involved some of your information.

Attributed reporting

3 more excerpts
The investigation identified intermittent unauthorized access to the Microsoft 365 accounts for four employees between August 26, 2026 and September 2, 2026

Attributed reporting

On September 1, 2026, we identified unusual activity in our Microsoft 365 system.

Attributed reporting

certain documents that were copied or downloaded from those accounts

Attributed reporting

Updates and corrections

All times UTC
  1. Revision 3

    Incident date revised

  2. Revision 2

    Incident date revised

  3. Revision 1

    Incident published