Strauss Borrelli PLLC, a leading data breach law firm, is investigating Behavioral Health Resources (“BHR”) regarding its recent data breach. The BHR data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT BEHAVIORAL HEALTH RESOURCES:
BHR is a mental health organization based in Washington. Founded in 1956, BHR offers programs and services to individuals, children, youth and families in the areas of behavioral health and substance use disorder recovery.2 Additionally, BHR serves over 530 students in 65 schools in Thurston, Mason and Grays Harbor counties.2 Headquartered in Olympia, Washington, BHR has two additional locations and employs over 200 individuals.
WHAT HAPPENED?
Recently, BHR announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on or around November 20, 2024, BHR became aware of suspicious activity in its computer environment.1 As a result, BHR launched an investigation to determine the nature of the incident.
Through its investigation, BHR confirmed that sensitive personal information in its systems may have been compromised by an unauthorized third party sometime on or before November 20, 2024. As a result, BHR began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Telephone and/or tax number
- Government issued ID
- Tribal ID
- Taxpayer identification number
- Birth and/or marriage certificate
- Financial institution name
- Electronic/digital signature
- Medical information (e.g., medical record number, medical billing information, diagnosis and/or condition information, treatment information, lab results, provider name, physician, patient ID, medication information, admission date, discharge date, treatment cost information, and date of death)
- Health insurance information
- Health plan beneficiary number
- Account number
- Certificate/license number
- Biometric and/or genetic data
- Full face photographic image
On January 17, 2025, BHR posted a notice of the incident on its website. Additionally, BHR plans to send breach notification letters to impacted individuals. Based on the website breach notice, BHR is providing affected individuals with a list of the specific types of sensitive information impacted. A link to the form breach notification that BHR posted to its website is below.
If you received a breach notification letter from Behavioral Health Resources:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
