Riviera Healthcare Center Data Breach: A Ransomware Claim, No Lawsuit Yet
Reference Guide
Riviera Healthcare Center is a skilled nursing and rehabilitation facility on Telegraph Road in Pico Rivera, California. On October 7, 2026 the Interlock ransomware group listed it as a victim and claimed it took patient health records and employee files. As of October 16, 2026 the facility has not confirmed anything publicly, no notice letters have surfaced, and no lawsuit has been filed. There is no settlement and nothing to claim.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Been Claimed — and by Whom
Everything known so far comes from the attackers, not from the facility. Dark-web tracker Ransomware.live recorded a post by the Interlock group on October 7, 2026, with an estimated attack date of the same day. A second tracker, Breachsense, logged it on October 8, 2026 and lists a claimed leak size of 30 GB.
The group’s own description claims it took patient names, diagnoses, medical histories, fall and fracture records, treatment information, payment records and employee/HR data. These are the attackers’ claims. Ransomware.live says it only indexes what ransomware operators post publicly; it does not verify the data.
Interlock is a known group. A joint advisory from the FBI, CISA, HHS and MS-ISAC dated July 22, 2025 says it was first seen in late September 2024, is financially motivated, and uses “double extortion” — copying data out before encrypting systems, then threatening to publish it.
Case details
No lawsuit has been filed that we can find, as of October 16, 2026. A CourtListener search of federal dockets for “Riviera Healthcare” returns three unrelated cases, none about this incident, and our feed of new federal filings shows no case naming the facility. State-court filings in Los Angeles County are not searchable the same way, so a state suit cannot be ruled out completely.
What does exist are law-firm “investigation” pages. Those are advertisements asking people to get in touch; one of them states that attorneys are still “looking into whether a class action lawsuit can be filed.” An investigation page is not a case.
Status: Unconfirmed Claim, No Case, No Settlement
The next real milestone is a notice letter. Under the federal HIPAA rule, a healthcare provider must notify patients “without unreasonable delay and in no case later than 60 calendar days after discovery of a breach,” and a breach involving 500 or more people must be reported to HHS at the same time. California also requires a sample notice to be filed with the Attorney General when more than 500 California residents are notified. Those filings are where a confirmed count would first appear.
Who Could Be Affected
If the claim proves true, the people at risk are those whose records the facility holds: current and former residents and patients (including short-term rehab stays), family members listed as contacts or responsible parties, and current and former employees, whose HR files the group says it took.
The practical test is your mail. If Riviera confirms that personal information was involved, it is required to tell affected people directly. Keep that letter and its envelope — it states which of your details were involved and is your proof if a case is later filed. Not having a letter yet proves nothing either way, because no letters have gone out that we can find.
Is There Any Money?
If suits are filed, healthcare-breach class actions typically seek money for loss of privacy, lost time and out-of-pocket costs. For a sense of how comparable settlements have been structured, see our data breach settlement calculator — that is context, not a prediction for Riviera. For other healthcare breaches we track, see The Center for Kidney Care, Westside GI and Xsolis.
Riviera Healthcare Center Breach Timeline
July 22, 2025 — Federal Warning About Interlock
The FBI, CISA, HHS and MS-ISAC publish a joint advisory on the Interlock ransomware group, first seen in late September 2024.
October 7, 2026 — Interlock Lists Riviera
Ransomware.live records Interlock’s post naming Riviera Healthcare Center, with an estimated attack date of the same day. The group claims patient and employee data.
October 8, 2026 — Second Tracker Logs It
Breachsense lists the claim with a leak size of 30 GB. Law-firm investigation pages appear shortly after.
October 16, 2026 — Nothing Confirmed
No statement on the facility’s website, nothing on the California Attorney General’s breach list, and no lawsuit found.
Next — Notice Letters, If Confirmed
If patient data was involved, HIPAA requires notice within 60 calendar days of discovery. A lawsuit, if any, usually follows the letters.
Three Things to Watch For
A ransomware claim against a nursing home, with no official notice yet, leaves room for imposters:
“Riviera settlement claim” pages
There is no settlement and no claim form. A site asking for a resident’s Social Security or Medicare number to “register for payment” is collecting data, not filing anything.
Calls to families about a resident’s records
Families of nursing-home residents are easy targets: a caller can name the facility and a diagnosis and sound official. Riviera’s real notice, if one comes, arrives by mail. Hang up and call the facility on the number from its website.
Threats to publish “your” data unless you pay
Interlock’s method is to threaten to publish stolen data. Messages demanding payment from a patient or employee to keep records private should be reported, not paid — paying does not delete anything.
Riviera Healthcare Center Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Riviera Healthcare Center data breach lawsuit?
Not as of October 16, 2026. We found no federal case naming the facility, and the law-firm pages are investigations, not lawsuits. A Riviera Healthcare Center data breach lawsuit would most likely follow official notice letters, if the breach is confirmed.
Did Riviera Healthcare Center actually have a data breach?
Unconfirmed. On October 7, 2026 the Interlock ransomware group claimed an attack and listed the facility on its leak site. The facility had posted no notice as of October 16, 2026, and the California Attorney General’s breach list shows no entry for it.
What data does the group claim it took?
Per the group’s own description: patient names, diagnoses, medical histories, fall and fracture records, treatment information, payment records and employee/HR data, with a claimed size of 30 GB. None of that has been verified.
How do I know if I was part of a data breach?
The reliable sign is a notice letter. HIPAA requires a provider to notify affected patients no later than 60 calendar days after discovering a breach, and California requires a sample notice on the Attorney General’s site when more than 500 Californians are notified. Check that list for “Riviera” and watch your mail.
Can you sue for a healthcare data breach?
Yes — patients and employees commonly file class actions after healthcare breaches, alleging negligence and state privacy-law violations and seeking money for lost time, out-of-pocket costs and loss of privacy. For Riviera, no one has filed as of October 16, 2026, and you do not need to sign anything to be included in a future class.
How much compensation will I get for a data breach?
For Riviera, nothing is payable, because there is no case and no settlement. Amounts in other breaches depend on the settlement fund, the size of the class and whether you document losses. Our payout calculator shows how funds are split.
Who is Interlock?
A ransomware group the FBI, CISA and HHS warned about in a joint advisory dated July 22, 2025. It was first seen in late September 2024, is financially motivated, and copies data before encrypting systems so it can threaten to publish it.
What is worth doing right now?
Freeze your credit at Equifax, Experian and TransUnion — per the FTC it is free and does not affect your score. An initial fraud alert, placed with one bureau, lasts one year. Families should also check a resident’s Medicare or insurance statements for services never received.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Center for Kidney Care BreachAnother healthcare breach report with no lawsuit filed yet
- Data Breach Settlement CalculatorEstimate what comparable breach settlements have paid
- Open Class Action SettlementsSettlements accepting claims right now, with deadlines
- Settlement Payout CalculatorHow a settlement fund is split among claimants