Mental Health Association
ent_b84d9a5aec9b0ce2e71c1341
Disclosures
4
State AG · HHS OCR · 4 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
12,633
nationwide · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Mental Health Association
- Normalized
- mental health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- ⛰️New Hampshire State AGas victim2025-06-02
Mental Health Association, Inc. (MHA), a healthcare provider, disclosed a cybersecurity incident discovered on December 2, 2024, involving unauthorized access to systems by an external actor. The breach compromised PII and PHI, including names, addresses, SSNs, medical diagnoses, and driver's license numbers, affecting 12,633 individuals total, including 51 New Hampshire residents. MHA engaged forensic investigators, secured systems via its MSP, and offered 12 months of credit monitoring. Notification letters were mailed on May 30, 2025.
- 🏎️Indiana State AGas victim2025-05-30
Mental Health Association Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-02 and was reported on 2025-05-30. 1 Indiana residents were affected. 12,633 individuals affected in total.
- 🦞Maine State AGas victim2025-05-30
The Mental Health Association reported a data breach affecting 11 Maine residents. The breach, which was discovered on December 22, 2025, and occurred on December 2, 2025, was described as an external system breach or hacking incident. The organization offered 12 months of identity theft protection services through HaystackID to those affected.
- MASSACHUSETTSHHS OCRas victim2025-01-31
Mental Health Association Inc. reported to HHS on 2025-01-31 a Unauthorized Access/Disclosure affecting 12633 individuals. Breached information located on Network Server.