Centric Health Reports Data Breach Affecting 6,855 Patients
On December 10, 2025, Centric Health, a multi-specialty healthcare provider based in Bakersfield, California, disclosed a data breach to the U.S. Department of Health and Human Services (HHS). The incident compromised the sensitive information of 6,855 individuals across the United States.
The breach involved unauthorized access to both personally identifiable information (PII) and protected health information (PHI). Exposed data may include names, addresses, dates of birth, Social Security numbers, medical records, treatment details, and insurance information. While the exact cause remains unconfirmed, the incident appears linked to a cyberattack or unauthorized system access.
The exposure of PII and PHI heightens risks of identity theft, medical fraud, and other malicious activities. Centric Health has begun notifying affected individuals via mail, outlining the breach’s scope, the types of compromised data, and recommended protective measures. Further technical details about the attack have not been released.
Source: https://www.claimdepot.com/data-breach/centric-health-2026
Centric Health cybersecurity rating report: https://www.rankiteo.com/company/centric-health
"id": "CEN1770197197",
"linkid": "centric-health",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '6855',
'industry': 'Healthcare',
'location': 'Bakersfield, California, USA',
'name': 'Centric Health',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized system access',
'customer_advisories': 'Notifying affected individuals via mail with '
'recommended protective measures',
'data_breach': {'number_of_records_exposed': '6855',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of birth',
'Social Security '
'numbers',
'Medical records',
'Treatment details',
'Insurance '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_publicly_disclosed': '2025-12-10',
'description': 'Centric Health, a multi-specialty healthcare provider based '
'in Bakersfield, California, disclosed a data breach '
'compromising the sensitive information of 6,855 individuals. '
'The breach involved unauthorized access to personally '
'identifiable information (PII) and protected health '
'information (PHI), including names, addresses, dates of '
'birth, Social Security numbers, medical records, treatment '
'details, and insurance information. The incident appears '
'linked to a cyberattack or unauthorized system access, '
'heightening risks of identity theft and medical fraud.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'U.S. Department of Health and Human Services '
'(HHS)'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA'],
'regulatory_notifications': ['U.S. Department of '
'Health and Human '
'Services (HHS)']},
'response': {'communication_strategy': 'Notifying affected individuals via '
'mail'},
'title': 'Centric Health Data Breach Affecting 6,855 Patients',
'type': 'Data Breach'}