DisclosureLens
HackingHealthcareHealthcareCapture App DataCustomer Data InvolvedDelayed DiscoveryPHIPIILowResolved

Summit Behavioral Healthcare, Inc.

bd_7c71a2b22d0e2df3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Feb 26, 2021

To disclose

Affected

Not disclosed

Linked

5 filings

Confidence

78%
Full breach record for Summit Behavioral Healthcare, Inc.2 incidents on file

Summit Behavioral Healthcare (SBHC) experienced unauthorized access to two employee email accounts between approximately May 12–20, 2020. Suspicious activity was detected in late May 2020, but the investigation did not confirm that protected health information (PHI) was affected until January 21, 2021. A third-party forensics firm conducted the investigation. Affected individuals were notified in February 2021 and offered 12 months of free credit and identity monitoring through IDX.

Incident timeline

May 12, 2020

Begins

Feb 26, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGFeb 26 · first
HHS OCRFeb 26 · first
Maine State AGFeb 26 · first
California State AGFeb 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.