Allwell Behavioral Health Services
ent_ba95d8eba8b6986cd3d0fd42
Disclosures
6
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
30,952
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Allwell Behavioral Health Services
- Normalized
- allwell behavioral health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- allwell.org
Disclosure history (6)newest first
- Massachusetts State AGas victim2022-05-24
Allwell Behavioral Health Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-24. 2 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2022-05-23
Allwell Behavioral Health Services (ABHS) notified the New Hampshire Attorney General of a ransomware incident discovered on March 5, 2022. An unknown third party gained access to ABHS servers, encrypted data, and potentially exfiltrated patient and employee information (including SSNs and PHI). Approximately 1 New Hampshire resident was affected. ABHS engaged forensic experts, notified the FBI and CISA, and sent notification letters offering credit monitoring and identity theft protection services.
- Maine State AGas victim2022-05-23
Allwell Behavioral Health Services, a healthcare entity based in Zanesville, Ohio, reported an external system breach (hacking) occurring on March 2, 2022, and discovered on March 5, 2022. The incident compromised the names and driver's license numbers of 30,952 individuals, including 2 Maine residents. Notification was sent on May 23, 2022, offering 12 months of credit monitoring and ID theft recovery services.
- Indiana State AGas victim2022-05-23
Allwell Behavioral Health Services reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-05 and was reported on 2022-05-23. 4 Indiana residents were affected. 30,952 individuals affected in total.
- Montana State AGas victim2022-05-23
Allwell Behavioral Health Services notified Montana residents of a data breach discovered on March 5, 2022. An outside party accessed a quality assurance system on or about March 2, 2022, potentially exposing client PII, PHI, SSNs, and payment info. No evidence of misuse was found. The company engaged forensic experts, upgraded security, notified HHS OCR and law enforcement, and offered credit monitoring.
- OHIOHHS OCRas victim2022-05-23
Allwell Behavioral Health Services reported to HHS on 2022-05-23 a Hacking/IT Incident affecting 29,972 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, DOB, SSN, driver's license numbers, and treatment information. The entity provided credit monitoring and implemented security safeguards.