Two healthcare organizations confirmed breaches, one involving Social Security numbers. Here is who should watch their mail and what is still unknown.
Two healthcare organizations have confirmed data breaches. Sutherland Healthcare Solutions, a company that handles records for health plans, says a person who was not supposed to have access viewed plan members' data, including Social Security numbers. Hoag, a hospital network in Orange County, California, says someone broke into its computer network and may have taken patient information.
Sutherland handles tasks like billing support, medical coding and provider credentialing for health plans, providers and medical device companies. Under health privacy law, a company like this is called a business associate, meaning it holds patient data on behalf of others.
According to its notification letters, an employee secretly had another person do their work. Between July 29, 2024, and July 10, 2026, that person saw names, addresses, dates of birth, health plan information, Social Security numbers, insurance claims data and plan members' stated gender. Once it was discovered, the employee's access was cut off.
Hoag is a nonprofit hospital network. It spotted suspicious activity on its network on October 8, 2026. Outside security experts confirmed someone had gotten in without permission. On October 25, Hoag confirmed that personal and health information had been exposed.
The public notice does not say what kinds of information were involved. That detail is in the letters mailed to affected people in early November. Hoag is offering free credit monitoring and identity theft protection.
The two cases are different. Sutherland says the access does not appear to be malicious and it has found no misuse of the data. Hoag, by contrast, describes a break-in and possible theft. Even so, Social Security numbers do not expire. If they ended up in the wrong hands, they could be used for fraud years from now.
If you have no link to Hoag and your health plan has never mentioned Sutherland, nothing in the report points to you. The catch is that many people do not know which companies their plan uses behind the scenes. A letter in your mailbox is the real sign you are affected.
The alert box above lists the steps. The short version: read any letter closely and take the free protection offered.
Several things are still unknown. Neither organization has said how many people were affected. Sutherland's incident does not yet appear on the federal health breach portal run by the HHS Office for Civil Rights. Letters from Sutherland are going out through the affected health plans, so they may arrive from your plan rather than from Sutherland itself.
If a letter arrives from Hoag, Sutherland or your health plan, read it and accept the free identity protection, especially if it mentions Social Security numbers.
Ghana's cyber security agency says fake texts using the name TraffiTech-GH are going to drivers. One wrong tap could cost you money or personal details.
Read more: Fake TraffiTech-GH texts target drivers, Ghana cyber agency warnsQueens Public Library says a ransomware attack has disrupted its network at every location. Branches are open, but renewals are down and some programs may change.
Read more: Queens Public Library hit by ransomware, network down at all branchesMessages about an FTC Prime settlement payout are circulating. A real case does not make every message real, so check before you click or pay.
Read more: Prime settlement refund messages: how to tell real from fake
