LGBTQ Center Orange County Data Breach Exposes Sensitive Personal and Medical Information
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving the Gay & Lesbian Community Services Center of Orange County, Inc. (LGBTQ Center OC), a nonprofit based in Santa Ana, California. Founded in 1971, the organization provides critical services to the LGBTQ community, including mental health counseling, HIV/STI testing, and youth programs.
The breach occurred between December 25 and 26, 2025, with unauthorized parties gaining access to sensitive consumer data. The incident was disclosed to the California Attorney General on June 5, 2026, and publicly announced via the organization’s website.
Exposed information includes:
- Full names, dates of birth, and Social Security numbers
- Medical records (diagnoses, treatment histories, prescription details, health insurance information)
- Government-issued IDs (driver’s licenses, passports, taxpayer identification numbers)
- Financial data (payment card details, bank account information)
- Biometric identifiers
Affected individuals may be eligible for compensation as legal teams assess potential claims. The breach underscores the risks to nonprofit organizations handling highly sensitive personal and medical data.
Source: https://www.claimdepot.com/investigations/the-center-orange-county-data-breach-2026
LGBTQ Center Orange County cybersecurity rating report: https://www.rankiteo.com/company/lgbtqcenteroc
"id": "LGB1780691500",
"linkid": "lgbtqcenteroc",
"type": "Breach",
"date": "12/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Community Services / LGBTQ Support',
'location': 'Santa Ana, California, USA',
'name': 'Gay & Lesbian Community Services Center of '
'Orange County, Inc. (LGBTQ Center OC)',
'type': 'Nonprofit'}],
'customer_advisories': 'Public announcement via organization’s website',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Dates of birth',
'Social Security numbers',
'Medical records (diagnoses, '
'treatment histories, '
'prescription details, health '
'insurance information)',
'Government-issued IDs (driver’s '
'licenses, passports, taxpayer '
'identification numbers)',
'Financial data (payment card '
'details, bank account '
'information)',
'Biometric identifiers']},
'date_detected': '2025-12-26',
'date_publicly_disclosed': '2026-06-05',
'description': 'Unauthorized parties gained access to sensitive consumer '
'data, including personal, medical, and financial information, '
'at the Gay & Lesbian Community Services Center of Orange '
'County, Inc. (LGBTQ Center OC). The breach occurred between '
'December 25 and 26, 2025, and was disclosed to the California '
'Attorney General on June 5, 2026.',
'impact': {'data_compromised': 'Sensitive personal, medical, and financial '
'information',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential claims for compensation',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing (class action investigation)',
'references': [{'source': 'Shamis & Gentile P.A.'},
{'source': 'LGBTQ Center OC Website'}],
'regulatory_compliance': {'legal_actions': 'Potential class action '
'investigation',
'regulatory_notifications': 'Disclosed to '
'California Attorney '
'General'},
'response': {'communication_strategy': 'Public announcement via '
'organization’s website'},
'title': 'LGBTQ Center Orange County Data Breach Exposes Sensitive Personal '
'and Medical Information',
'type': 'Data Breach'}