Arch Health Partners, Inc. d/b/a Palomar Health Medical Group Data Breach Lawsuit Investigation
Arch Health Partners, Inc. d/b/a Palomar Health Medical Group (PHMG) has disclosed a network intrusion that compromised sensitive patient information. Individuals who received a notification dated October 15, 2025 can explore legal rights and complimentary credit monitoring options below.
Take Action: Review the facts, enroll in the free protection services, and consult an experienced data-breach attorney to discuss potential compensation.
Download Massachusetts Breach Notice (PDF) Download California Breach Notice (PDF)Key Facts
- Breach window: April 23 – May 05, 2024
- Discovery date: May 05, 2024
- Consumer notices mailed: October 15, 2025
- Total people affected: 374 (reported to the Massachusetts Attorney General)
What Happened
On May 5, 2024 PHMG detected suspicious activity in its network and immediately began an investigation. Findings show an unauthorized actor accessed—and may have copied—files stored on PHMG systems between April 23 and May 05, 2024. A file-by-file review confirmed that certain patient records were contained in the impacted data set. The California filing further notes that the incident did not impact Palomar Health’s separate systems.
What Information Was Involved
According to the notices filed with the Massachusetts and California Attorneys General, the breached files contained one or more of the following data elements:
- Full name
- Address
- Date of birth
- Social Security number
- Driver’s license number
- State identification number
- Military identification number
- Passport number
- U.S. alien registration number
- Medical information / diagnostic or treatment details
- Medical history
- Medical record number
- Medicare/Medicaid identification number
- Patient account number
- Health insurance information
- Health savings account information
- Biometric data
- Credit or debit card number
- Payment card information
- Financial account information
- Email address and password
- Username and password
Company Response
PHMG states it:
- Secured its network to prevent further unauthorized access;
- Performed a comprehensive investigation and data review;
- Notified law enforcement, consumer reporting agencies, and applicable regulators;
- Enhanced existing security protocols and continues to evaluate privacy procedures; and
- Is offering complimentary credit monitoring and identity-restoration services through Experian.
Steps You Can Take Now
- Enroll in the free Experian credit-monitoring service provided in your letter.
- Review bank, credit-card, and medical statements for unfamiliar charges.
- Obtain free credit reports at AnnualCreditReport.com and look for errors.
- Consider placing a fraud alert or security freeze with the credit bureaus.
- Consult a data-breach attorney to understand potential compensation.
Company Overview
Arch Health Partners, Inc. operates as Palomar Health Medical Group, a multi-specialty healthcare provider in Southern California.
- Website: palomarhealthmedicalgroup.org
- Headquarters: 15611 Pomerado Rd Ste 400, Poway, CA, USA
- Industry: Healthcare
- Parent organization: Palomar Health
No official social-media profiles were referenced in the regulatory filing.
Frequently Asked Questions
What happened in the Arch Health Partners, Inc. d/b/a Palomar Health Medical Group data breach?
An unauthorized actor accessed PHMG’s network from April 23 to May 05, 2024 and may have copied files containing patient data.
How many patients were affected?
The company reported 374 affected individuals to the Massachusetts Attorney General, which equals the total number disclosed.
What personal information was compromised in the Arch Health Partners, Inc. d/b/a Palomar Health Medical Group breach?
Potentially compromised data includes names, addresses, dates of birth, Social Security numbers, medical and health-insurance details, financial account information, driver’s-license and state ID numbers, passport numbers, biometric data, and related identifiers.
Is Arch Health Partners, Inc. d/b/a Palomar Health Medical Group offering credit monitoring?
Yes. The notice offers complimentary credit-monitoring and identity-restoration services through Experian. Enrollment instructions were included in mailed letters.
How long did the unauthorized access last?
Roughly 13 days—from April 23 to May 05, 2024.
What should I do if I received a PHMG breach notice?
Enroll in the free protection services, monitor your financial and medical statements, and speak with a data-breach attorney about your legal rights.
Is there a lawsuit against Arch Health Partners, Inc. d/b/a Palomar Health Medical Group?
Law firms are currently investigating potential class-action claims. Eligibility often hinges on whether you received the October 15, 2025 notice.