The Devereux Foundation

The Devereux Foundation notified Massachusetts residents of a cybersecurity incident involving unauthorized access to personal information. The breach affected individuals' names, addresses, and government-issued IDs. The Foundation isolated systems, engaged law enforcement, and offered 24 months of credit monitoring via Experian. The investigation is ongoing.

The Devereux Foundation based in Villanova, Pennsylvania, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-23 and reported on 2026-07-23. 5,341 Texas residents were affected. 86,958 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Health Insurance Information. Consumers were notified via Posted at company website or special website;U.S. Mail.

Devereux Foundation reported that an unauthorized actor gained access to certain systems from November 6-9, 2025, and copied files. The incident was identified on November 9, 2025. Affected data includes names and other personal information of employees, beneficiaries, clients, donors, payors, and business partners. The organization engaged third-party specialists, notified regulators and law enforcement, and is offering credit monitoring.

The Devereux Foundation reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-23. The reporting organization type is Health Care. 43 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Health Records.

The Devereux Foundation notified individuals of an unauthorized access incident. An actor accessed systems from Nov 6-9, 2025, copying files. Discovery occurred on Nov 9, 2025. Affected data includes names and potentially other PII for employees, clients, and partners. The company engaged third-party specialists, notified regulators/law enforcement, and is offering credit monitoring.

The Devereux Foundation notified the NH Attorney General of an incident where an unauthorized actor accessed systems from Nov 6-9, 2025, copying files containing PII (SSN, driver's license, name) of 50 NH residents. Discovery occurred on Nov 9, 2025. The organization isolated systems, engaged third-party investigators, notified law enforcement and HHS, and is offering 12 months of credit monitoring.

The Devereux Foundation reported a cybersecurity incident in Nebraska where an unauthorized actor accessed systems between Nov 6-9, 2025, copying files containing names, SSNs, and driver's licenses. Devereux discovered the activity on Nov 9, 2025, and notified law enforcement. Direct notice was sent to 32 Nebraska residents on July 23, 2026. Remediation includes credit monitoring via Experian and enhanced employee training.

The Devereux Foundation reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-06 and was reported on 2026-07-23. 53 Indiana residents were affected. 86,958 individuals affected in total.

Devereux Foundation reported to HHS on 2026-01-08 a Hacking/IT Incident affecting 501 individuals. Breached information located on Network Server.

Devereux Foundation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-02-21. 25 Massachusetts residents were affected. The report records the breach type as paper.