Richmond Behavioral Health Authority
bd_202c1c93b75f1b8c · schema v1 · pii pii-v2
Full breach record for Richmond Behavioral Health Authority →Richmond Behavioral Health Authority (RBHA) notified Nebraska residents of a ransomware incident discovered on September 30, 2025. Malicious actors gained access on September 29, 2025, and encrypted portions of the network. RBHA terminated access and engaged forensic experts. While no definitive evidence of data misuse exists, affected individuals may have had names, SSNs, passport numbers, financial accounts, or health information exposed. RBHA provided Kroll identity monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 29, 2025
Begins
Sep 30, 2025
Discovered
Dec 4, 2025
Filed
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteqilinbd_625880881e1f603a2025-10-15 · +50dVerified
Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_e98cc50507d663142025-12-04Verified
- Montana State AGbd_3fce0541fd942e3c2025-12-09 · +5dVerified
- HHS OCRbd_eb9b4c55106ef3362025-11-28 · +6dVerified
- New Hampshire State AGbd_38e8c8a165ef20122025-12-16 · +12dVerified
Show 1 more filing ↓Show fewer ↑up to 13d gap
- Massachusetts State AGbd_3f57bc47435431fe2025-12-17 · +13dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Nov 28 (VA), last Dec 17 (MA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.