Central Valley Regional Center (CVRC) has notified individuals it serves and their families that a newly contracted janitorial service was improperly disposing of confidential records. Rather than being shredded as intended, documents that had been set aside for destruction were instead thrown out with regular trash. CVRC says this improper disposal took place at a single facility between March 2025 and July 2025, when the organization discovered and stopped it. This is a case of a third-party vendor breach, meaning the failure occurred on the vendor’s end rather than through a hack of CVRC’s own computer systems.
The exposed documents reportedly covered individuals served by CVRC and their family members going back to 2015, so the affected population spans a decade of records tied to one facility. CVRC has not given an exact number of people affected, and it says it has no evidence that anyone’s information has actually been accessed or misused by another person as a result of this incident.
What information was exposed?
- Full name
- Home address
- Date of birth
- Social Security number
- Medical information
- Other personal and financial details found in the discarded records
CVRC is offering one year of identity protection services through LifeLock at no cost to those affected. To enroll, go to the link provided in your letter, enter Promo Code CVRC2508, and use the Member ID printed on your notice; enrollment must be completed by November 25, 2025. You can also activate the service by phone at 800-899-0180.
What should you do now?
- Enroll in the free LifeLock identity protection offer before the November 25, 2025 deadline, since it includes monitoring you would otherwise pay for yourself.
- Because your Social Security number and medical information were involved, place a fraud alert or security freeze on your credit files with Equifax, Experian, and TransUnion.
- Watch your bank and insurance statements closely for unfamiliar charges, new accounts, or claims you don’t recognize.
- Request a free copy of your credit report at annualcreditreport.com and review it for accounts you didn’t open.
- Be cautious of unexpected calls, texts, or emails referencing this incident — scammers sometimes use real breach news to pose as the company involved.
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your personal information turns up in places it shouldn’t.
If you have questions, Central Valley Regional Center can be reached at 1-888-840-0361, Monday through Friday between 8:00am and 6:00pm PT.