El Camino Health patients received notice that documents copied from four employees’ Microsoft 365 accounts between August 26 and September 2, 2026 may contain their Social Security numbers, diagnoses and insurance details. No lawsuit or settlement has been reported, so there is nothing to claim; El Camino Health is offering one year of free Experian identity monitoring.
What Happened?
El Camino Health, the California health system, reported a data security incident to the California Attorney General on October 30, 2026. According to its notice letter, El Camino Health identified unusual activity in its Microsoft 365 system on September 1, 2026, secured the system, began an investigation with outside forensic experts and notified law enforcement.The investigation found intermittent unauthorized access to the Microsoft 365 accounts of four employees between August 26 and September 2, 2026, and identified documents that were copied or downloaded from those accounts. El Camino Health says its review of those documents to determine what they contained is still ongoing. It has not publicly said how many patients were affected.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Involved?
El Camino Health says the information varies by person. The documents may contain a patient’s name along with some or all of the following:- Contact and demographic information
- Social Security number and driver’s license number
- Date of birth
- Medical record number and patient account number
- Diagnosis, treatment and prescription information
- Provider names and dates of service
- Health insurance information
What El Camino Health Is Offering
El Camino Health says it has added safeguards and technical security measures to protect and monitor its Microsoft 365 system. It is offering one year of identity monitoring at no cost through Experian IdentityWorks, with enrollment instructions in each letter. The letter also suggests reviewing statements from providers and health insurers for services that were never received, and watching financial account statements for suspicious activity.Is There a Lawsuit?
No class action over the El Camino Health incident has been reported as of November 6, 2026, and there is no settlement or claim form. Any complaint would make allegations that El Camino Health could contest. OCA will update this page if one is filed.Questions
What information was exposed in the El Camino Health breach?
El Camino Health says the documents may contain a patient’s name plus some or all of: contact and demographic information, Social Security number, driver’s license number, date of birth, medical record number, patient account number, diagnosis, treatment and prescription information, provider names, dates of service and health insurance information. For some patients, financial account and routing numbers may also have been involved.
How did the El Camino Health breach happen?
El Camino Health says it found unusual activity in its Microsoft 365 system on September 1, 2026. Its investigation found intermittent unauthorized access to four employees’ Microsoft 365 accounts between August 26 and September 2, 2026, and that certain documents were copied or downloaded from those accounts.
Is there an El Camino Health data breach lawsuit or settlement?
No lawsuit or settlement over the El Camino Health incident has been reported as of November 6, 2026, so there is nothing to claim. El Camino Health is offering one year of free Experian IdentityWorks identity monitoring.
Is the El Camino Health review finished?
No. El Camino Health’s letter says its review of the copied documents is ongoing, so more people could be notified as it continues.
Sources
• California Attorney General, Submitted Breach Notification Sample: El Camino Health (reported October 30, 2026)• El Camino Health, patient notice letter (PDF, filed with the California Attorney General)
