Partnership Health Plan of California (PHC)

Partnership HealthPlan of California (PHC) is a nonprofit managed care organization headquartered in the United States, specifically serving Northern California. It operates as a health plan dedicated to providing healthcare coverage and services to Medi-Cal beneficiaries, which are California's Medicaid recipients. PHC's core functions include administering treatment authorizations, processing claims, and coordinating care for its enrolled population. The organization's scale is evident from the 2022 ransomware attack that impacted over 854,000 individuals, indicating a membership of significant size within the region's Medicaid ecosystem. This breach involved the exfiltration of sensitive personal data, including Social Security numbers and medical information, highlighting the volume of protected health information PHC manages. As a key participant in California's healthcare safety net, PHC facilitates access to medical services for low-income families, seniors, and people with disabilities. Its operational model relies on integrated systems for provider networks and patient management, making it a critical link between beneficiaries, healthcare providers, and state funding.

PHC distinguishes itself through its specialized focus on Medi-Cal populations, requiring compliance with both federal Medicaid regulations and state-specific healthcare mandates. The organization's role in prior authorization processes is central to its service delivery, as demonstrated when the 2022 cyber incident forced a suspension of these functions. Hospitals were directed to deliver urgent care without pre-approvals, submitting retroactive authorizations instead, which illustrates PHC's gatekeeping function in the provider reimbursement structure. This disruption also revealed the organization's dependency on digital infrastructure for core business operations, from claims processing to member communications. As a nonprofit entity, PHC's mission emphasizes community benefit and equitable healthcare access, aligning with broader public health goals in California. The Hive ransomware attack, which encrypted systems and stole 400 GB of data, remains a defining event in PHC's recent history, underscoring the cybersecurity challenges facing healthcare administrators. Despite the incident, PHC continued to serve its membership, engaging forensic specialists to restore services and notifying affected individuals as required by law. The organization's response to the breach reflects standard practices in healthcare incident management, including public acknowledgment and collaboration with external experts. PHC's ongoing operations contribute to the stability of Medi-Cal provider networks in Northern California, supporting a vulnerable patient population through managed care coordination.