People who received a Hoag Memorial Hospital Presbyterian letter dated November 4, 2026 were notified that files holding their personal or health information may have been accessed after an intrusion into the hospital’s network found on October 8, 2026. No lawsuit or settlement has been reported, so there is nothing to claim; Hoag is offering free IDX monitoring through February 4, 2027.
What Happened?
Hoag Memorial Hospital Presbyterian, the Orange County, California hospital system, reported a data security incident to the California Attorney General on November 4, 2026. According to its notice letter, Hoag became aware of suspicious activity in its network on October 8, 2026, began an investigation with independent forensic experts and learned that certain files may have been accessed without authorization.Hoag then had an independent team review the affected files. That review, completed on October 25, 2026, identified people whose personal and/or protected health information may have been in the data. Hoag has not publicly said how many people were affected or what kind of attack it was.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Involved?
Hoag’s letter says the information involved may have included each person’s name along with other data elements, which the letter lists individually. The sample letter filed with the California Attorney General leaves that list as a blank field, so the specific information varies from person to person and is spelled out only in each recipient’s own letter.What Hoag Is Offering
Hoag says it secured its network and added security measures after discovering the incident. It is offering free credit monitoring and identity protection through IDX, including CyberScan dark web monitoring, a $1,000,000 insurance reimbursement policy and managed identity theft recovery services, for either 12 or 24 months as stated in each letter. Enrollment uses the code at the top of the letter, and the deadline to enroll is February 4, 2027. IDX requires an enrollee to be over 18 with established U.S. credit, a Social Security number and a U.S. address on file to receive the credit monitoring piece.Is There a Lawsuit?
No class action over the Hoag incident has been reported as of November 6, 2026, and there is no settlement or claim form. Any complaint would make allegations that Hoag could contest. OCA will update this page if one is filed.Questions
What information was involved in the Hoag Hospital breach?
Hoag says the files may have contained personal and/or protected health information. The specific data elements are listed in each person’s letter; the sample letter Hoag filed with the California Attorney General leaves that list blank, so it varies from person to person.
What is the deadline to enroll in Hoag’s free credit monitoring?
Hoag’s letter sets an enrollment deadline of February 4, 2027 for the free IDX credit and dark web monitoring. Enrollment uses the code printed at the top of each letter.
Is there a Hoag Hospital data breach lawsuit or settlement?
No lawsuit or settlement over the Hoag incident has been reported as of November 6, 2026, so there is nothing to claim.
When did the Hoag Hospital breach happen?
Hoag says it became aware of suspicious activity in its network on October 8, 2026. A review completed on October 25, 2026 identified the people whose information may have been in the affected files, and letters are dated November 4, 2026.
Sources
• California Attorney General, Submitted Breach Notification Sample: Hoag Memorial Hospital Presbyterian (reported November 4, 2026)• Hoag Memorial Hospital Presbyterian, notice letter (PDF, filed with the California Attorney General)
