Almeida Law Group is investigating a data breach at The Health Trust and its subsidiary, FASS. The breach occurred on May 26th, 2025. If you were affected, contact Almeida Law Group.
About The Health Trust and its subsidiary, FASS
The Health Trust is a nonprofit operating foundation founded in 1996 in San Jose, California, from the proceeds of the sale of most of the assets of Good Samaritan Health System. It focuses on building health equity in Silicon Valley for vulnerable populations through grants, policy advocacy, and direct services such as nutrition programs, HIV/AIDS services, and housing support for homebound seniors. Its wholly owned subsidiary, Financial Administrative Support Services (FASS), provides finance and accounting services to The Health Trust and other organizations. The information involved in this breach was contained in files held by FASS, not in The Health Trust’s internal client files.
What Happened?
The Health Trust and its subsidiary, FASS was listed in a California Attorney General sample breach notice. According to that filing, on May 26th, 2025, The Health Trust identified suspicious activity on its computer network and took steps to secure its systems. On June 11th, 2025, further suspicious activity was detected, and systems were brought offline. The investigation determined that an unknown actor had first gained access to certain systems prior to March 26th, 2025, and then again between June 8th, 2025, and June 11th, 2025, accessing and/or copying certain information during both periods. The specific categories of information involved varied by individual and were not publicly enumerated in the notice template, which uses variable fields to list affected data types for each recipient. The notice was dated August 24th, 2026, meaning roughly 14 months elapsed between the initial detection of suspicious activity and notification to consumers. The total number of persons affected was not specified in the filing.
A Breachsense listing references a 408 GB leak size associated with The Health Trust. This appears to be an attacker-side allegation from a leak site and has not been confirmed by The Health Trust or any regulator. No specific ransomware group attribution was identified in available sources, and The Health Trust’s own notice does not confirm ransomware or the reported data volume.
Key Facts at a Glance
- Company or Organization: The Health Trust and its subsidiary, FASS
- Industry: Nonprofit / Health Equity / Community Health Services
- Location: 3180 Newberry Drive, Suite 200, San Jose, CA 95118
- Incident type: Unauthorized access and potential exfiltration of data
- Date of breach: May 26th, 2025 (initial detection); prior access identified before March 26th, 2025; second intrusion June 8th–11th, 2025
- Date of consumer notification: August 24th, 2026
- Identity theft protection offered: 12 or 24 months of complimentary credit monitoring through IDX (duration varied by individual)
- Enrollment deadline: November 24th, 2026
- Litigation status: No class action lawsuits specifically connected to this breach were identified as of August 2026
- Source: California Attorney General sample breach notice; Breachsense; The Health Trust official website; FASS services page
What Should You Do?
If you received a notice from The Health Trust or FASS, you should enroll in the complimentary IDX credit monitoring being offered before the November 24th, 2026 deadline using the enrollment code provided in your letter. Regardless of whether you enroll, you can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your account statements carefully for any unfamiliar activity and pull your free credit reports at AnnualCreditReport.com to check for errors or suspicious entries. If you believe your information has already been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery. You can also reach The Health Trust’s dedicated assistance line at 1-866-200-0959, available Monday through Friday from 6 a.m. to 6 p.m. Pacific Time.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
