HackingIdentity (basic)Government IDHealth (basic)MediumContained

North Texas Behavioral Health Authority

bd_61658f5ae053906a · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Mar 6, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

67%

Full breach record for North Texas Behavioral Health Authority →

North Texas Behavioral Health Authority notified Nebraska AG of a data breach involving unauthorized access to patient records. The incident compromised personal information (names, SSNs) and medical data. The Authority engaged Cyberscout (TransUnion) to provide 90 days of complimentary credit monitoring and fraud assistance via a dedicated call center.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 6, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

HHS OCRbd_c7f83294242c804d2026-03-06Verified
Texas State AGbd_d1edc5f315c8215c2026-03-09 · +3dVerified
Illinois State AGbd_49ab47063f9d6c6f2026-03-01 · +5dCandidate
Massachusetts State AGbd_15ba1966e162d5342026-03-13 · +7dVerified

Name: North Texas Behavioral Health Authority
norm: north texas behavioral health authority

Name: North Texas Behavioral Health Authority
norm: north texas behavioral health authority

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Providing proactive fraud assistance through Cyberscout, a TransUnion company
Offering complimentary credit monitoring services
Establishing a dedicated and confidential call center ([REDACTED-PHONE]) available for 90 days
Changes made: Taking significant measures to protect the personal information in our possession
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Illinois State AGMar 1 · first

HHS OCR+5d

Nebraska State AG+5d · this page

Texas State AG+8d

Massachusetts State AG+12d

Pattern: first filing Mar 1 (IL), last Mar 13 (MA) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/d0012ead-07f2-4dea-b065-c3f7d6779445.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 6, 2026
Raw hash: bd96df77a3540aa9aae58e934114d51e5bc3687df14bab4cd7906f5ccbc13e4f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityNorth Texas Behavioral Health Authority

Victim entityNorth Texas Behavioral Health Authority

IncidentUnauthorized Access

Stated responseProviding proactive fraud assistance through Cyberscout, a TransUnion company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov