Columbia River Mental Health Services

Columbia River Mental Health Services notified the NH AG of unauthorized access to business email accounts from May 2021 to April 2022. One NH resident affected. Data included name, medical info, health insurance, and DOB. Incident discovered March 2022. Forensic investigators engaged; credit monitoring offered.

Columbia River Mental Health Services notified Washington AG of a phishing incident affecting 17,020 residents. Unauthorized access to email accounts occurred from May 14, 2021 to April 8, 2022. Data exposed included names, SSNs, financial accounts, medical info, and credentials. Discovery was March 21, 2022; notification sent October 4, 2022.

Columbia River Mental Health Services reported a data breach to the Oregon Attorney General. The breach was reported on 2022-10-04. The breach occurred during 5/14/2021 - 4/8/2022. The breach was discovered on 8/26/2022. 17,842 individuals were affected. Notice was sent on 10/4/2022.

Columbia River Mental Health Services reported a data breach to the Indiana Attorney General. The breach occurred on 2021-05-14 and was reported on 2022-10-04. 3 Indiana residents were affected. 17,916 individuals affected in total.

Columbia River Mental Health Services notified individuals of unauthorized access to email accounts between May 14, 2021, and April 8, 2022. The breach involved suspicious activity likely stemming from phishing, leading to credential compromise. Affected data included names and other personal information. CRMHS engaged forensic specialists, implemented safeguards, and offered Equifax credit monitoring services.

Columbia River Mental Health Services reported to HHS on 2022-08-08 a Hacking/IT Incident affecting 17,842 individuals. Breached information located on Email. Employees were victims of an email phishing attack exposing PHI including names, SSNs, addresses, DOB, diagnoses, and medications. The entity provided credit monitoring and enhanced security safeguards.