Behavioral Health Resources of Washington state updates its data breach disclosure
Briefly

Behavioral Health Resources (BHR) notified HHS of a data breach in January, indicating a placeholder number of 501. Investigations revealed suspicious activity in their network starting around November 20, 2024. By mid-January, no confirmed data exfiltration was reported, but BHR disclosed the potential nature of compromised information, including personal and health-related data. In April, BHR informed Maine's Attorney General that 50,083 individuals would be notified about the incident, but HHS's public breach tool still reflects the earlier placeholder, suggesting a lack of updates on the fully affected count.
On January 17, Behavioral Health Resources notified the U.S. Department of Health and Human Services of a reportable breach, using '501' as a placeholder.
By mid-January, the investigation had not confirmed that any information was actually viewed or exfiltrated, but BHR reported the types of information at risk.
On April 17, BHR reported to the Maine Attorney General's Office that 50,083 people were being notified, but their investigation is ongoing.
At present, HHS's public breach tool still shows the '501' placeholder, indicating that BHR has not updated its report with the confirmed figures.
Read at Databreaches
[
|
]