Strauss Borrelli PLLC, a leading data breach law firm, is investigating Colonial Behavioral Health (“CBH”) regarding its recent data breach. The CBH data breach may have involved sensitive personal information and protected health information belonging to over 29,900 individuals.
ABOUT COLONIAL BEHAVIROAL HEALTH:
CBH is a mental health and community service organization. Founded in 1971, CBH is the local Community Services Board serving the citizens of James City County, the City of Poquoson, the City of Williamsburg and York County in Virginia.3 Its mission is to facilitate recovery and resiliency of individuals and families affected by mental illness, developmental disabilities, and substance use disorders.3 Today, CBH’s team is comprised of qualified psychiatrists, psychologists, social workers, counselors, nurses, case managers and other professionals.3 Headquartered in Williamsburg, Virginia, CBH has four additional locations and employs over 50 individuals.
WHAT HAPPENED?
Recently, CBH reported to the Attorney General of the Commonwealth of Massachusetts that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. According to the breach notice, on October 4, 2024, CBH became aware of issues with its computer systems that it determined to be the result of a ransomware attack. As a result, CBH launched an investigation to determine the nature of the incident.
Through its investigation, CBH confirmed that sensitive personal information in its systems may have been viewed and obtained by an unauthorized third party between May 17, 2024, and October 4, 2024. As a result, CBH began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Zip code
- Date of birth
- Driver’s license number
- Medical information (e.g., diagnosis/conditions, lab results, medications, other treatment information)
- Insurance or claims information
On November 27, 2024, CBH began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Massachusetts residents, CBH is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letters that CBH filed with the Attorney General of the Commonwealth of Massachusetts is below.
If you received a breach notification letter from Colonial Behavioral Health:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
