Kern Psychiatric Health and Wellness Center

Summary

Kern Psychiatric Health and Wellness Center notified the California Attorney General of a data breach involving its management company, Genesis Healthcare Management, after unauthorized access to network systems exposed extensive patient information. Compromised data included names, dates of birth, Social Security numbers, medical record and driver's license numbers, government identifiers, Medicare and Medicaid details, diagnoses, treatment records, lab results, account numbers, provider information, and health insurance data. The center mailed notification letters to affected individuals and offered complimentary credit monitoring and identity theft protection for twelve months, though the total number of impacted patients remains undisclosed.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Kern Psychiatric Health and Wellness Center, a Bakersfield, California-based psychiatric and behavioral care provider, notified the California Attorney General about a data breach involving its management company, Genesis Healthcare Management. Genesis Healthcare Management identified suspicious activity within its computer network on June 22, 2026, prompting the engagement of third-party cybersecurity specialists to assist with the investigation. The investigation confirmed that an unauthorized third party had accessed the network, compromising parts that contained personal and protected health information of Kern Psychiatric Health and Wellness Center patients. The compromised data encompassed a wide range of sensitive identifiers. These included names, dates of birth, Social Security numbers, medical record numbers, driver's license numbers, and government-issued ID numbers.

Additional exposed information included Medicare and Medicaid numbers, diagnoses, treatment information, lab results, patient account numbers, provider names and locations, and health insurance information. Notification letters are being mailed to affected individuals as part of the breach response process. Complimentary credit monitoring and identity theft protection services have been offered for 12 months to those impacted. As of the article date, the incident had not yet appeared on the HHS Office for Civil Rights breach portal, leaving the total number of affected individuals unclear. The breach notification process remains ongoing as the organization works to inform all impacted patients.

Sources

Sources available to members: 1 source.