On March 22, 2024, Pomona Valley Hospital Medical Center (“PVHMC”) filed a notice with the Attorney General of Montana after discovering that a third-party vendor used by PVHMC experienced a cyberattack. In this notice, PVHMC explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, medical record numbers, dates of birth and medical information. Upon completing its investigation, PVHMC began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Pomona Valley Hospital Medical Center, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Pomona Valley Hospital Medical Center vendor data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Pomona Valley Hospital Medical Center Patients?

The Pomona Valley Hospital Medical Center vendor data breach was only recently announced, and more information is expected in the near future. However, PVHMC’s filing with the Attorney General of Montana provides some important information on what led up to the breach. According to this source, PVHMC uses a third-party vendor to assist with running the patient-management tool used by PVHMC. In November 2023, PVHMC’s vendor noticed that the patient-management tool was unavailable.

Initially, PVHMC’s vendor worked with one of that company’s vendors to better understand the scope of the incident. About a week after the discovery, the vendor informed PVHMC about the incident. Then, in February 2024, PVHMC’s vendor provided additional information, confirming that an unauthorized party had gained access to the patient-management tool in late 2023.

After learning that sensitive consumer data was accessible to an unauthorized party, Pomona Valley Hospital Medical Center reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, medical record number, date of birth and medical information.

Since then, PVHMC has stopped using the vendor.

On March 22, 2024, Pomona Valley Hospital Medical Center sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Pomona Valley Hospital Medical Center

Founded in 1903, Pomona Valley Hospital Medical Center is a healthcare system located in Pomona, California. PVHMC operates 14 service locations in Pomona, Claremont, Chino Hills, and La Verne. PVHMC has more than 700 physicians on staff. Pomona Valley Hospital Medical Center employs more than 3,500 people and generates approximately $663 million in annual revenue.