970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

SecurityWeek reports that San Francisco-based Paradigm processes billing for Medi-Cal, California's Medicaid program, under a data use agreement with the California Department of Health Care Services (DHCS).[1]According to SecurityWeek, the company says it became aware of unauthorized access to its local network on October 13, 2025.[1] Paradigm told SecurityWeek that on August 18, 2026, it determined that files may have been accessed "by an unauthorized party between October 8, 2025, and October 15, 2025."[1]SecurityWeek reports that the compromised files contained names, dates of birth, gender, and Medi-Cal member identification numbers.[1] Tech Bytes reports that Paradigm says Student Health Network, its online service documentation and billing platform, was not impacted.[2]CloudLink Tech reports that the company's notification letters are dated Sept. 14, 2026, about 11 months after the intrusion was detected.[3] It also reports that the notices state that Paradigm has no evidence the information was used to commit fraud or identity theft.[3]According to CloudLink Tech, Paradigm did not identify the attacker or explain how the network was accessed.[3] SecurityWeek reports that no known cybercrime group appears to have taken credit for an attack on Paradigm.[1]CloudLink Tech reports that the company took certain systems offline, notified law enforcement and hired outside incident-response specialists.[3]