A privacy incident at the San Francisco Medical Respite Sobering Center involving patient medical information occurred on September 23, 2026, and was identified on September 24, 2026, by the San Francisco Department of Public Health.
What Happened? The San Francisco Department of Public Health identified an incident in which patient information was accessed by an unauthorized individual as a result of an information technology (IT) issue.
What Information Was Involved? The information involved was related to name, date of birth, last 4 numbers of the social security, diagnosis, medical history, treatment, and substance use information. No driver's license numbers, financial account information, or other information commonly associated with identity theft were involved.
What We Are Doing: Protecting patient privacy is a priority for the San Francisco Department of Public Health. Upon learning of this incident, the Department reviewed the circumstances surrounding the event and implemented additional safeguards to help prevent similar incidents in the future. These measures include transitioning document transmission to a secure portal, updating processes for handling patient information, and providing additional workforce training regarding the protection of confidential information.
What You Can Do: Individuals may wish to retain a copy of this notice for their records. Patients may also request a copy of their medical records through their health plan or healthcare provider. Additional information about medical privacy rights is available from the California Department of Justice, Privacy Enforcement and Protection, at www.privacy.ca.gov.
Agency Contact: Individuals with questions about this incident may contact the San Francisco Department of Public Health Compliance and Privacy Office at 855-729-6040 or 628-271-6176.
The San Francisco Department of Public Health takes its responsibility to safeguard patient information seriously. The Department regrets any concern or inconvenience this incident may cause and remains committed to protecting the privacy and confidentiality of patient information.