Summit Behavioral Healthcare, Inc.
ent_019e0cde75bf62dcfa004425aaf4fe93
Disclosures
6
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
70,822
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Summit Behavioral Healthcare, Inc.
- Normalized
- summit behavioral healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 2549000RZEF6CEH4QD94
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Massachusetts State AGas victim2021-03-02
Summit Behavioral Healthcare, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-02. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2021-02-26
Summit Behavioral Healthcare, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-05-12 and was reported on 2021-02-26. 35 Indiana residents were affected. 70,822 individuals affected in total.
- TENNESSEEHHS OCRas victim2021-02-26
Summit Behavioral Healthcare reported to HHS on 2021-02-26 a Unauthorized Access/Disclosure affecting 70,822 individuals. Breached information located on Email. An employee impermissibly emailed ePHI to a personal account. The entity implemented additional administrative, technical, and security safeguards.
- California State AGas victim2021-02-26
Summit Behavioral Healthcare (SBHC) experienced unauthorized access to two employee email accounts between approximately May 12–20, 2020. Suspicious activity was detected in late May 2020, but the investigation did not confirm that protected health information (PHI) was affected until January 21, 2021. A third-party forensics firm conducted the investigation. Affected individuals were notified in February 2021 and offered 12 months of free credit and identity monitoring through IDX.
- Maine State AGas victim2021-02-26
Summit Behavioral Healthcare reported an unauthorized access to email systems occurring on May 12, 2020, discovered on January 21, 2021. The breach affected 70,822 individuals, exposing names and driver's license numbers. The company notified affected individuals in writing on February 26, 2021, and offered identity theft protection services. The incident was reported to the Maine Attorney General.
- Illinois State AGas victim2021-01-01
SUMMIT BEHAVIORAL HEALTHCARE, LLC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-095). The register records the breach as discovered on May 1, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.