Breach · · 2 min read
Paradigm Healthcare breach: 970,000 Medi-Cal members notified
A billing company for California’s Medicaid program found an intrusion in October 2025. Names, birth dates and Medi-Cal ID numbers were in the files accessed.
Paradigm Healthcare Services, a San Francisco company that handles billing for Medi-Cal, California’s Medicaid program, has told the U.S. Department of Health and Human Services that a breach found last year affected more than 970,000 people. If you’re a current or former Medi-Cal member, here’s what to know.
What happened
According to SecurityWeek, Paradigm processes Medi-Cal billing under a data agreement with California’s Department of Health Care Services and also maintains Medi-Cal member ID numbers for the department.
Paradigm says it became aware of unauthorized access to its local network on October 13, 2025. On August 18, 2026, it determined that files with some people’s health information may have been accessed between October 8 and October 15, 2025. Those files contained:
- names
- dates of birth
- gender
- Medi-Cal member ID numbers
Paradigm says its Student Health Network billing platform wasn’t affected. Its notification letters are dated September 14, 2026, about 11 months after the intrusion was found. The company says it has no evidence anyone’s information has been used for fraud. It hasn’t said how the attackers got in or who they were, and no group has claimed the attack.
What this means for you
There are no Social Security numbers or medical details on the list. But a Medi-Cal number with your name and birth date can be used to impersonate you to a clinic or pharmacy, or to make a fake “your coverage is ending, confirm your details” call sound official.
What you can do
- Look for Paradigm’s letter and use the contact information in it if you have questions.
- Check your Medi-Cal and pharmacy records for visits or prescriptions you don’t recognize, and report them to Medi-Cal.
- Be wary of calls or texts about your coverage. Medi-Cal renewals come from your county office. If in doubt, call your county using a number from an official site.
- Read up on scams built from leaked data: how scammers use leaked data.
How Frame helps
Frame keeps a catalog of known breaches. Add the ones you know you were part of to a verified email and Frame shows what each exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- SecurityWeek, 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach, October 20, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.