Cybersecurity Incident Exposes Private Data of Nearly 20,000 Patients at San Antonio Clinic

Got story updates? Submit your updates here. ›

A San Antonio-based health care clinic, Barrio Family Health Care Center, has reported a data breach that may have exposed the private information of nearly 20,000 patients. The breach was discovered in September 2025 when staff flagged suspicious activity related to an employee email account. After investigating, the clinic found that there was unauthorized access to some employee emails, potentially exposing patient names, birth dates, account numbers, provider information, and clinical data.

Why it matters

Data breaches at healthcare facilities can have serious consequences for patients, potentially leading to identity theft, financial fraud, and other privacy violations. This incident highlights the ongoing cybersecurity challenges faced by medical providers and the need for robust security measures to protect sensitive patient information.

The details

Barrio Family Health Care Center reported the data breach to the Texas Attorney General's Office on March 9, 2026. The clinic's review concluded that up to 19,885 individuals may have been impacted. While there is no evidence the information was misused, the clinic is offering free credit monitoring services to affected patients as a precaution.

• The data breach was discovered on September 16, 2025.
• The clinic reported the breach to the Texas Attorney General's Office on March 9, 2026.
• The clinic's review of the impacted emails concluded on February 19, 2026.

What they’re saying

What’s next

The clinic is encouraging patients with concerns or questions to call a dedicated hotline or mail the clinic directly.