Shasta County Health and Human Services Agency reports data breach, possible insider incident
Learn More
Shasta County's Health and Human Services Agency in Redding, California, is reporting a data breach involving the unauthorized disclosure of protected health information (PHI) by a former county employee.
The incident was discovered on September 30, 2025 and is believed to have occurred over a six-month period between March 2025 and September 2025, impacting approximately 164 clients who received mental and behavioral health services through the agency.
The cause of the breach was attributed to the actions of a former county employee who inappropriately accessed and exposed client information. The compromised data includes:
- First and Last Names
- Initials
- Date of Birth
- Chart Number
- Health Plan information
- County Administrative Office Search Name
- Diagnosis/Condition
- Medications
- Treatment Authorization
- Request details related to Mental and Behavioral Health services
The investigation is ongoing. The agency has committed to reporting any confirmed misuse of the information to law enforcement authorities.
Affected clients are being notified by mail within seven to ten days of the announcement. The agency has advised potentially impacted individuals to place fraud alerts on their credit reports, regularly review credit reports for signs of fraudulent activity, and closely monitor their financial accounts for any suspicious transactions. Clients can obtain free credit reports and place fraud alerts through the three major credit bureaus: Equifax (1-800-525-6285), Experian (1-888-397-3742), and TransUnion (1-800-680-7289).
The Shasta County Health and Human Services Agency has expressed regret over the incident and apologized for any concern or distress caused to affected clients. For additional information or assistance, clients can contact the agency's Privacy and Security team at (530) 225-5995 or via email at privacyandsecurity@shastacounty.gov.
