Behavioral Health Partners of Metrowest, LLC.

Behavioral Health Partners of Metrowest, LLC. (MA) reported to HHS OCR on 2022-05-12 a Hacking/IT Incident affecting 10,920 individuals. The covered entity's business associate was the victim of a cyber-attack impacting PHI stored on a Network Server. PHI involved included names, addresses, Social Security numbers, driver's license numbers, and claims information. The CE notified HHS, affected individuals, and the media, and strengthened its administrative, technical, and security safeguards as remediation.

Behavioral Health Partners of Metro West (BHPMW) notified the New Hampshire Attorney General of a cybersecurity incident affecting its network. An unknown actor gained unauthorized access between September 14-18, 2021. BHPMW discovered the breach on October 1, 2021. Approximately 45 New Hampshire residents were affected, with data including names, SSNs, DOB, and medical/insurance info. BHPMW engaged forensic experts, notified the FBI, and offered 24 months of credit monitoring to affected individuals.

Behavioral Health Partners of Metrowest, a healthcare provider, reported a data breach affecting 11,288 individuals. The breach, an external system hack, occurred on September 18, 2021, and was discovered on April 5, 2022. The compromised information included names and Social Security numbers. Affected individuals were notified on May 11, 2022, and offered 24 months of credit monitoring and identity theft restoration services.