Community Psychiatry Management LLC

Community Psychiatry Management, LLC d/b/a Mindpath Health, a healthcare organization based in Sacramento, CA, reported an external system breach (hacking) that occurred on November 25, 2024 and was discovered November 14, 2025. A total of 14,060 individuals were affected, including 2 Maine residents. Written notifications were sent March 9, 2026. Kroll was retained to provide 12 months of credit monitoring and identity protection services.

New Hampshire Attorney General received a notice from Community Psychiatry Management, LLC (dba Mindpath Health) regarding a security incident involving its vendor, Pinnacle Holdings, LTD. The incident involved unauthorized access to Pinnacle's systems between November 11 and November 25, 2024, affecting 4 New Hampshire residents. Data potentially exposed included patient names, SSNs, driver's licenses, financial account info, payment card info, online credentials, biometric data, and medical information. Pinnacle reported the incident to HHS OCR, and Mindpath filed this state-level notice. Remediation included offering 12 months of credit monitoring.

Community Psychiatry Management, LLC d/b/a Mindpath Health notified the California AG of a breach where an unauthorized actor copied limited information, including names and potentially PHI, from their network between November 11 and November 25, 2024. The incident was discovered on November 25, 2024. The company engaged third-party specialists, reported to law enforcement, and is offering credit monitoring.

Community Psychiatry Management LLC dba Mindpath Health reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-11 and was reported on 2026-03-09. 2 Indiana residents were affected. 14,060 individuals affected in total.

Mindpath Health (Community Psychiatry Management, LLC) notified California residents of a data breach involving unauthorized access to two employee email accounts. The incident occurred between February 19, 2022, and July 5, 2022, and was discovered on July 5, 2022. Protected health information, including names and other data elements, may have been accessed. The company secured the accounts, engaged forensic investigators, and offered credit monitoring.