2026 Risk Program Administrators — employee email compromise; 8,309 notified
Data compromised
Personal and protected health information in compromised email account/messages (categories per practice notice via HIPAA Journal)
Technical writeup
Verified notification summarized by HIPAA Journal — September 4, 2026. Risk Program Administrators LLC (CA) identified suspicious activity in an employee email account ~June 16, 2026; investigation confirmed unauthorized access May 27, 2025–June 16, 2025. Notified 8,309 individuals about exposure of personal and protected health information. recordsAffected 8309; companyConfirmed true.
Root cause
Unauthorized access to an employee email account