North Texas Behavioral Health Authority

North Texas Behavioral Health Authority notified Massachusetts residents of a data breach involving potential unauthorized access to medical and personal information. The organization is offering complimentary credit monitoring and fraud assistance services through Cyberscout. The notice provides guidance on placing fraud alerts, security freezes, and protecting medical information. Specific dates of the incident, the number of affected individuals, and the method of unauthorized access are not disclosed in the provided text.

North Texas Behavioral Health Authority based in Dallas, Texas, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-03-04 and reported on 2026-03-09. 284,525 Texas residents were affected. 284,885 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.

North Texas Behavioral Health Authority notified Nebraska AG of a data breach involving unauthorized access to patient records. The incident compromised personal information (names, SSNs) and medical data. The Authority engaged Cyberscout (TransUnion) to provide 90 days of complimentary credit monitoring and fraud assistance via a dedicated call center.

North Texas Behavioral Health Authority reported to HHS on 2026-03-06 a Hacking/IT Incident affecting 285086 individuals. Breached information located on Network Server.

NORTH TEXAS BEHAVIORAL HEALTH AUTHORITY filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1058). The register records the breach as discovered on January 7, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.