Carolina Behavioral Health Alliance
ent_6d2c53d2fe5ac94a5e99b3ad
Disclosures
4
State AG · HHS OCR · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
130,922
nationwide · HHS OCR NC
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Carolina Behavioral Health Alliance
- Normalized
- carolina behavioral health alliance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- cbhallc.com
Disclosure history (4)newest first
- South Carolina State AGas victim2022-07-05
Carolina Behavioral Health Alliance, LLC notified South Carolina residents of a ransomware attack detected on March 20, 2022. Unauthorized access occurred March 19-20, 2022. Data potentially accessed included names, addresses, health plan IDs, gender, and minor child data. CBHA engaged forensic firms, notified law enforcement, rebuilt systems, and offered 24 months of cyber monitoring to affected families.
- Massachusetts State AGas victim2022-07-01
Carolina Behavioral Health Alliance, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-07-01. 52 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2022-07-01
Carolina Behavioral Health Alliance, LLC notified Montana residents of a ransomware attack detected on March 20, 2022. Unauthorized access occurred March 19-20, 2022, potentially exposing names, addresses, SSNs, and health plan IDs. CBHA engaged forensic investigators, notified law enforcement, rebuilt systems, and offered 24 months of credit monitoring.
- NORTH CAROLINAHHS OCRas victim2022-07-01
Carolina Behavioral Health Alliance, LLC reported to HHS on 2022-07-01 a Hacking/IT Incident affecting 130,922 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including names, addresses, DOB, SSN, and clinical data. The entity implemented additional safeguards and retrained staff.