CODAC Data Breach Affects 6,110 in Rhode Island Alone

On July 24, 2024, CODAC, Inc., a non-profit mental health care provider based in Rhode Island, detected suspicious activity within its network environment. This discovery prompted an immediate response to secure the network and engage both legal counsel and cybersecurity specialists to investigate the nature and scope of the incident.

The investigation revealed that unauthorized individuals accessed and copied certain sensitive information from CODAC's servers. Following this, CODAC undertook a comprehensive review of the affected data to identify the individuals whose information was compromised. By December 5, 2024, CODAC had determined the specific types of information involved and the individuals affected.

The data breach impacted 6,110 individuals in Rhode Island alone, and the compromised information includes:

• Name
• Date of birth
• Medical diagnosis and treatment information
• Health insurance information
• Medical record number
• Date of service
• Social Security number

What is CODAC doing in response?

CODAC, Inc. has taken steps to address the data breach and mitigate its impact on affected individuals. Upon discovering the breach, CODAC quickly secured its network and initiated a thorough investigation. The organization is committed to enhancing its existing data privacy policies and procedures to prevent future incidents.

For those potentially affected by the breach, CODAC is offering credit monitoring and identity protection services. Impacted individuals are being notified via U.S. mail, provided CODAC has a valid mailing address for them. If you believe you may be affected and have not received a notification letter, you are encouraged to contact CODAC's dedicated assistance line at 1-833-799-4296, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding major U.S. holidays.

Given the severity of the breach, it is advisable for individuals to remain vigilant against identity theft and fraud. Regularly review account statements and credit reports for any suspicious activity. You are entitled to one free credit report annually from each of the three major credit reporting bureaus, which can be accessed at Annual Credit Report.

For further details on the breach, you can view the official disclosure on the Massachusetts Attorney General's website.