Almeida Law Group is investigating a data breach at Risk Program Administrators LLC. If you were affected, contact Almeida Law Group.
About Risk Program Administrators LLC
Risk Program Administrators LLC (RPA) is a business associate that provides program administration, risk management, coverage placement, member services, accounting, and related services to public entity risk pools and joint powers authorities. The company is headquartered in Irvine, California and has supported governmental risk programs for over four decades. Because RPA is classified as a HIPAA Business Associate, it handles protected health information on behalf of covered entities such as public entity risk pools that administer employee health benefit programs.
What Happened?
Risk Program Administrators LLC was listed in a HHS Office for Civil Rights breach portal report submitted on July 23rd, 2026. The filing describes a Hacking/IT Incident affecting 8,309 individuals, with the breached information located in email systems. RPA is identified as a Business Associate, meaning it processes protected health information on behalf of one or more covered entities.
No public reporting identified the specific attack vector, threat actor, or data types exposed in this incident. No notification letter was located publicly, and no litigation tied to this breach was identified at the time of publication.
Key Facts at a Glance
- Company or Organization: Risk Program Administrators LLC
- Industry: Insurance / Risk Management / Public Entity Risk Pool Administration
- Location: Irvine, California
- Incident type: Hacking/IT Incident
- Date breach discovered: July 23rd, 2026
- Total persons affected: 8,309
- Source: HHS Office for Civil Rights breach portal report; ZoomInfo; RPA Official Website
What Should You Do?
If you received notice that your information was involved in this breach, there are practical steps you can take now. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Monitor your existing financial accounts closely and review your free credit reports at AnnualCreditReport.com. If health information was involved, review any Explanation of Benefits statements you receive from your health plan and check your medical records for services you do not recognize. If you believe your identity has already been misused, report it at IdentityTheft.gov, where you can also build a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
