Genesis Healthcare Management, a Bakersfield, California-based firm that provides back-office operations, strategy, consulting, and other business services to medical practices, has disclosed a data breach involving unauthorized access to its computer network. Because Genesis manages data on behalf of client healthcare providers, this incident potentially exposed sensitive patient information originally provided to those providers, including Kern Psychiatric Health and Wellness Center Inc. Companies entrusted with sensitive medical and personal data, even as a third-party manager, have a responsibility to keep that information secure.
Genesis Healthcare Management’s Data Breach Investigation
According to Genesis Healthcare Management, the company observed unusual activity on its network on June 22, 2026, and took immediate action to investigate the event with the assistance of third-party cybersecurity specialists. The goal of the investigation was to determine the full nature and scope of the suspicious activity and to identify what data may have been affected. The investigation determined that certain files stored on the Genesis network had been accessed without authorization.
Because the Genesis network houses data belonging to the healthcare practices it manages, this unauthorized access potentially exposed patient information that individuals had previously provided to those practices, such as Kern Psychiatric Health and Wellness Center Inc. Following the discovery, the affected healthcare practice began a comprehensive review of the impacted files to determine exactly whose information was involved.
Healthcare management and back-office service providers like Genesis are an increasingly common target for cyberattacks because they often centralize sensitive data from multiple client practices in one place, making a single successful intrusion potentially far more damaging than an attack on any one practice alone. Medical practices that outsource billing, records management, or administrative functions to a third party still bear ultimate responsibility for ensuring that vendor has adequate safeguards in place, and an incident like this highlights the real risk that comes with entrusting patient data to outside management companies.
When Did This Breach Occur?
Genesis Healthcare Management observed unusual network activity on June 22, 2026, and began its investigation immediately. The exact date the unauthorized access first began has not been publicly disclosed.
What Information Was Breached?
The exposed data may include names, Social Security numbers, driver’s license numbers or government-issued ID numbers, dates of birth, diagnosis and treatment information, prescription information, provider names and locations, dates of service, medical record numbers, patient account numbers, Medicare or Medicaid ID numbers, lab results, and health insurance information.
What You Can Do
If you have received a notice from Genesis Healthcare Management or an affiliated healthcare provider about this data breach, there are several steps you can take to help protect yourself:
- Read any notification letter carefully and keep it for your records
- Monitor your financial accounts, insurance statements, and explanation of benefits forms for suspicious activity
- Consider placing a fraud alert or credit freeze with the major credit bureaus
- Watch for phishing emails or calls referencing your medical care
- Report any suspected identity theft to the Federal Trade Commission
File a Data Breach Lawsuit Against Genesis Healthcare Management
If your personal or medical information was compromised in the Genesis Healthcare Management data breach, you may have legal options available to you. Companies that manage sensitive healthcare data on behalf of medical practices have a responsibility to implement reasonable safeguards to protect it from unauthorized access.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
