DataBreachInformation.com
MonitoringCalifornia AG filing · May 28, 2026

Harbor Developmental Disabilities Foundation Data Breach: What the California Filing Shows

Harbor Developmental Disabilities Foundation, operating as Harbor Regional Center, filed a data breach report in May 2026 after discovering a security incident on March 6, 2026. This incident involved the potential exposure of sensitive client information, including Full Name, Date of Birth, and Medical Record Number, which could affect individuals served by the California agency.

State
California
Breach date
March 6, 2026
Reported
May 28, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Diagnosis and Treatment Information
  • Health Insurance Policy Details
  • Address and Contact Information
  • Service Coordination and Regional Center File Data

Harbor Developmental Disabilities Foundation, also known as Harbor Regional Center, provides essential services to individuals with developmental disabilities and their families across the South Bay, Harbor-Los Angeles, and Long Beach areas of California. As a non-profit agency, it manages a wide array of support, including early intervention and case management, which requires collecting extensive personal and health-related information from its clients.

On May 28, 2026, Harbor Regional Center publicly reported a data security incident that occurred on March 6, 2026. This report to state regulators indicates that unauthorized access to systems or data may have exposed sensitive client information. The specific nature of the breach has not been detailed in public filings, but investigations remain ongoing.

The compromised data categories from this incident include Full Name, Date of Birth, Social Security Number, Medical Record Number, Diagnosis and Treatment Information, Health Insurance Policy Details, Address and Contact Information, and Service Coordination and Regional Center File Data. The exposure of such detailed information can carry long-term risks for affected individuals.

Individuals whose Full Name, Date of Birth, or Social Security Number were exposed, among other categories, should be vigilant. This type of information can be used in various forms of identity theft, potentially affecting credit, healthcare, or government assistance programs. Monitoring for suspicious activity is a key preventative measure.

To safeguard against potential misuse of exposed data, it is recommended to remain alert for any unusual account activity. Consider placing a fraud alert or credit freeze with major credit bureaus. Reviewing explanation of benefits statements from health insurers for unauthorized services is also a prudent step. These general precautions can help mitigate risks associated with data exposure.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

What to know about the Harbor Developmental Disabilities Foundation data breach

How many people were affected by the Harbor Developmental Disabilities Foundation data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Date of Birth, Social Security Number, Medical Record Number, Diagnosis and Treatment Information, Health Insurance Policy Details, Address and Contact Information, Service Coordination and Regional Center File Data. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Where can I see the official Harbor Developmental Disabilities Foundation breach notice?
Harbor Developmental Disabilities Foundation's report is published by the California Attorney General: https://oag.ca.gov/privacy/databreach/list#harbor-developmental-disabilities-founda-2026-05-28 Compare it with the letter you received to confirm the dates and details match.
What should I do after getting the Harbor Developmental Disabilities Foundation data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Is the Harbor Developmental Disabilities Foundation data breach letter legit or a scam?
A notice from Harbor Developmental Disabilities Foundation in the mail matches the breach Harbor Developmental Disabilities Foundation reported to the California Attorney General on May 28, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Harbor Developmental Disabilities Foundation through a phone number or website you find yourself.
Did Harbor Developmental Disabilities Foundation offer free credit monitoring?
Look for an enrollment code in your Harbor Developmental Disabilities Foundation notice. Companies that offer free credit monitoring after a breach usually include it there, with a deadline to activate. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Using the free service won't stop you from joining a lawsuit or settlement later.
Can I sue Harbor Developmental Disabilities Foundation over the data breach?
It depends on what was exposed, the law in California and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
Is there a Harbor Developmental Disabilities Foundation data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Harbor Developmental Disabilities Foundation. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
How much could a Harbor Developmental Disabilities Foundation data breach settlement or claim be worth?
There is no set amount, and no Harbor Developmental Disabilities Foundation settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Date of Birth, Social Security Number as involved. Keep receipts and records; they're what damages claims are built on.
Do I need a Harbor Developmental Disabilities Foundation data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.

Source: California Attorney General filing

Related data breach cases